Exploits

日期	标题	类型	平台	作者
2010-02-07	Mozilla Firefox 3.5.x and SeaMonkey 2.0.1 – Remote Denial of Service	dos	multiple	599eme Man
2010-02-07	Apple Safari 4.0.4 / Firefox 3.5.7 / SeaMonkey 2.0.1 – Remote Denial of Service	dos	windows	599eme Man
2010-02-07	Baal Systems 3.8 – Authentication Bypass	webapps	php	cr4wl3r
2010-02-07	Zen Tracking 2.2 – Authentication Bypass	webapps	php	cr4wl3r
2010-02-07	WSN Guest – Database Disclosure	webapps	php	HackXBack
2010-02-07	httpdx 1.5.2 – Remote Denial of Service (PoC)	dos	windows	loneferret
2010-02-07	TinyMCE WYSIWYG Editor – Multiple Vulnerabilities	webapps	php	mc2_s3lector
2010-02-07	Uiga Business Portal – SQL Injection / Cross-Site Scripting	webapps	php	Sioma Labs
2010-02-07	Rostermain 1.1 – Authentication Bypass	webapps	php	cr4wl3r
2010-02-07	EncapsCMS 0.3.6 – ‘config[path]’ Remote File Inclusion	webapps	php	cr4wl3r
2010-02-07	Killmonster 2.1 – Authentication Bypass	webapps	php	cr4wl3r
2010-02-07	Croogo 1.2.1 – Multiple Cross-Site Request Forgery Vulnerabilities	webapps	php	Milos Zivanovic
2010-02-07	Joomla! Component com_productbook – SQL Injection	webapps	php	snakespc
2010-02-07	Solaris/Open Solaris UCODE_GET_VERSION IOCTL – Denial of Service	dos	solaris	Patroklos Argyroudis
2010-02-07	Belkatalog CMS – SQL Injection	webapps	php	anonymous
2010-02-06	ShopEx Single 4.5.1 – ‘errinfo’ Cross-Site Scripting	webapps	java	cp77fk4r
2010-02-06	SQLite Browser 2.0b1 – Local Denial of Service	dos	windows	Nishant Das Patnaik
2010-02-06	ShopEx Single 4.5.1 – Multiple Vulnerabilities	webapps	php	cp77fk4r
2010-02-06	odlican.net CMS 1.5 – Arbitrary File Upload	webapps	php	anonymous
2010-02-06	Arab Network Tech. (ANT) CMS – SQL Injection	webapps	php	Tr0y-x
2010-02-06	X-lite SIP 3.0 – ‘wav’ memory Corruption Heap Buffer Overflow	dos	windows	TecR0c
2010-02-06	Joomla! Component com_photoblog – Blind SQL Injection	webapps	php	ALTBTA
2010-02-06	Open Bulletin Board – Multiple Blind SQL Injections	webapps	php	AtT4CKxT3rR0r1ST
2010-02-05	Opera 10.10 – Remote Code Execution Denial of Service	dos	windows	cr4wl3r
2010-02-05	ASCET Interactive Huski Retail – Multiple SQL Injections	webapps	php	Wireghoul
2010-02-05	ASCET Interactive Huski CMS – ‘i’ Local File Inclusion	webapps	php	Wireghoul
2010-02-05	SystemTap 1.0/1.1 – ‘__get_argv()’ / ‘__get_compat_argv()’ Local Memory Corruption	local	linux	Josh Stone
2010-02-05	LANDesk Management Gateway 4.x – Multiple Vulnerabilities	webapps	php	Aureliano Calvo
2010-02-05	evalSMSI 2.1.3 – Multiple Input Validation Vulnerabilities	webapps	php	ekse
2010-02-05	Oracle 11g – Multiple Privilege Escalation Vulnerabilities	remote	multiple	David Litchfield
2010-02-05	Oracle 10g – Multiple Privilege Escalation Vulnerabilities	remote	multiple	David Litchfield
2010-02-05	Audistats 1.3 – SQL Injection	webapps	php	kaMtiEz
2010-02-05	FoxPlayer 1.7.0 – ‘.m3u’ Local Buffer Overflow	local	windows	cr4wl3r
2010-02-04	Ipswitch IMAIL 11.01 – Reversible Encryption + weak ACL	local	windows	sinn3r
2010-02-04	ManageEngine OpUtils 5 – ‘Login.DO’ SQL Injection	webapps	windows	Asheesh Anaconda
2010-02-04	MASA2EL Music City 1.0 – SQL Injection	webapps	php	alnjm33
2010-02-04	UplusFTP Server 1.7.0.12 – Remote Buffer Overflow	remote	windows	b0telh0
2010-02-04	Sterlite SAM300 AX Router – ‘Stat_Radio’ Cross-Site Scripting	remote	hardware	Karn Ganeshen
2010-02-04	Samba 3.4.5 – Symlink Directory Traversal	remote	linux	kingcope
2010-02-04	Samba 3.4.5 – Symlink Directory Traversal (Metasploit)	remote	linux	kingcope
2010-02-04	Data 1 Systems UltraBB 1.17 – ‘view_post.php’ Cross-Site Scripting	webapps	php	s4r4d0
2010-02-04	KnowGate hipergate 4.0.12 – Multiple Cross-Site Scripting Vulnerabilities	webapps	jsp	Nahuel Grisolia
2010-02-04	Interspire Knowledge Manager < 5.1.3 - Multiple Remote Vulnerabilities	webapps	php	Cory Marsh
2010-02-03	TVUPlayer 2.4.4.9beta1 – ‘PlayerOcx.ocx’ ActiveX Control Arbitrary File Overwrite	remote	windows	Evdokimov Dmitriy
2010-02-03	myBusinessAdmin – ‘content.php’ Blind SQL Injection	webapps	php	AtT4CKxT3rR0r1ST
2010-02-03	cityadmin – ‘links.php’ Blind SQL Injection	webapps	php	AtT4CKxT3rR0r1ST
2010-02-03	RealAdmin – ‘detail.php’ Blind SQL Injection	webapps	php	AtT4CKxT3rR0r1ST
2010-02-03	Hipergate 4.0.12 – Multiple Vulnerabilities	webapps	jsp	Nahuel Grisolia
2010-02-03	Interspire Knowledge Manager 5 – ‘callback.snipshot.php’ Arbitrary File Creation	webapps	php	Cory Marsh
2010-02-03	PHP Car Rental-Script – Authentication Bypass	webapps	php	Hamza 'MizoZ' N.