Exploits

日期	标题	类型	平台	作者
2010-02-03	TVUPlayer 2.4.4.9beta1 – ‘PlayerOcx.ocx’ ActiveX Control Arbitrary File Overwrite	remote	windows	Evdokimov Dmitriy
2010-02-02	MobPartner Chat – Multiple SQL Injections	webapps	php	AtT4CKxT3rR0r1ST
2010-02-02	Digital Amp MP3 3.1 – ‘.mp3’ Local Crash (PoC)	dos	windows	SkuLL-HackeR
2010-02-02	MYRE Classified – ‘cat’ SQL Injection	webapps	php	kaMtiEz
2010-02-02	Dlili Script – SQL Injection	webapps	php	Dr.DaShEr
2010-02-02	Qihoo 360 Security Guard 6.1.5.1009 – breg device drivers Privilege Escalation	local	windows	anonymous
2010-02-02	GCP 2.0 datasets provided as BioCASE Web services – Local File Inclusion	webapps	php	R3VAN_BASTARD
2010-02-02	DeepBurner pro 1.9.0.228 – ‘.dbr’ file Buffer Overflow (Universal)	local	windows	fl0 fl0w
2010-02-02	Linux Kernel 2.6.x – KVM ‘pit_ioport_read()’ Local Denial of Service	dos	linux	Marcelo Tosatti
2010-02-02	CoreFTP 2.1 b1637 – Password field Universal Buffer Overflow	local	windows	mr_me
2010-02-02	lighttpd 1.4/1.5 – Slow Request Handling Remote Denial of Service	dos	linux	Li Ming
2010-02-01	RaakCMS – Multiple Vulnerabilities	webapps	asp	Pouya Daneshmand
2010-02-01	Snif 1.5.2 – Any Filetype Download	webapps	php	Aodrulez
2010-02-01	Joomla! Component Yelp – SQL Injection	webapps	php	B-HUNT3|2
2010-02-01	Joomla! Component Job – SQL Injection	webapps	php	B-HUNT3|2
2010-02-01	Joomla! Component com_gambling – ‘gamblingEvent’ SQL Injection	webapps	php	md.r00t
2010-02-01	Evernew Free Joke Script – ‘viewjokes.php’ SQL Injection	webapps	php	Hamza 'MizoZ' N.
2010-02-01	Linux Kernel 2.6.x (x64) – Personality Handling Local Denial of Service	dos	linux_x86-64	Mathias Krause
2010-02-01	ShoutCMS – ‘content.php’ Blind SQL Injection	webapps	php	Zero Cold
2010-02-01	EmiratesHost – Insecure Cookie Authentication Bypass	webapps	php	jago-dz
2010-02-01	Home Of AlegroCart 1.1 – Cross-Site Request Forgery (Change Administrator Password)	webapps	php	The.Morpheus
2010-02-01	Joomla! Component AutartiTarot – Directory Traversal	webapps	php	B-HUNT3|2
2010-01-31	IBM DB2 – ‘kuddb2’ Remote Denial of Service	dos	multiple	Evgeny Legerov
2010-01-31	HAWHAW – ‘newsread.php’ SQL Injection	webapps	php	s4r4d0
2010-01-31	Saman Portal – SQL Injection	webapps	php	Pouya Daneshmand
2010-01-31	Joomla! Component com_rsgallery2 2.0 – ‘catid’ SQL Injection	webapps	php	snakespc
2010-01-31	Maian Greetings 2.1 – Arbitrary File Upload	webapps	php	indoushka
2010-01-31	Site Manager 3.0 – ‘id’ SQL Injection	webapps	cfm	Sec Attack Team
2010-01-31	Creative SplashWorks-SplashSite – ‘page.php’ Blind SQL Injection	webapps	php	AtT4CKxT3rR0r1ST
2010-01-31	Last Wizardz – ‘id’ SQL Injection	webapps	php	Sec Attack Team
2010-01-31	crownweb – ‘page.cfm’ SQL Injection	webapps	php	AtT4CKxT3rR0r1ST
2010-01-30	Joomla! Component JE Event Calendar – SQL Injection	webapps	php	B-HUNT3|2
2010-01-30	Xerox Workcenter 4150 – Remote Buffer Overflow (PoC)	dos	hardware	Francis Provencher
2010-01-30	phpunity.newsmanager – Local File Inclusion	webapps	php	kaMtiEz
2010-01-30	Joomla! Component com_dms 2.5.1 – SQL Injection	webapps	php	kaMtiEz
2010-01-30	dotProject 2.1.3 – Cross-Site Scripting / Improper Permissions	webapps	php	h00die
2010-01-30	IPB (nv2) Awards < 1.1.0 - SQL Injection	webapps	php	fred777
2010-01-30	ThinkAdmin – ‘page.php’ SQL Injection	webapps	php	AtT4CKxT3rR0r1ST
2010-01-30	Joomla! Component com_simplefaq – ‘catid’ Blind SQL Injection	webapps	php	AtT4CKxT3rR0r1ST
2010-01-30	Vermillion FTP Deamon 1.31 – Remote Buffer Overflow	remote	windows	Dz_attacker
2010-01-29	Wireshark 1.2.5 – ‘LWRES getaddrbyname’ Stack Buffer Overflow (PoC)	dos	multiple	babi
2010-01-29	Joomla! Component JE Quiz – ‘eid’ Blind SQL Injection	webapps	php	B-HUNT3|2
2010-01-29	Joomla! Component Jreservation – Blind SQL Injection	webapps	php	B-HUNT3|2
2010-01-29	PHP Product Catalog – Cross-Site Request Forgery (Change Administrator Password)	webapps	php	bi0
2010-01-29	Hybserv2 – ‘:help’ Denial of Service	dos	linux	Julien Cristau
2010-01-29	COMTREND CT-507 IT ADSL Router – ‘scvrtsrv.cmd’ Cross-Site Scripting	remote	hardware	Yoyahack
2010-01-29	Ingres Database 9.3 – Heap Buffer Overflow	dos	multiple	Evgeny Legerov
2010-01-29	eWebeditor ASP Version – Multiple Vulnerabilities	webapps	asp	anonymous
2010-01-28	Audiotran 1.4.1 – ‘.pls’ Local Stack Buffer Overflow (Metasploit)	local	windows	Metasploit
2010-01-28	Joomla! Component CCNewsLetter – Local File Inclusion	webapps	php	AtT4CKxT3rR0r1ST