Exploits

日期	标题	类型	平台	作者
2010-01-28	Rising AntiVirus 2008/2009/2010 – Local Privilege Escalation	local	windows	Dlrow
2010-01-28	Joomla! Component jVideoDirect – Blind SQL Injection	webapps	php	B-HUNT3|2
2010-01-28	Battery Life Toolkit 1.0.9 – ‘bltk_sudo’ Local Privilege Escalation	local	linux	Matthew Garrett
2010-01-28	Joomla! Component com_kunena – Blind SQL Injection	webapps	php	B-HUNT3|2
2010-01-28	CommonSpot Server – ‘/utilities/longproc.cfm’ Cross-Site Scripting	webapps	cfm	Richard Brain
2010-01-28	Novaboard 1.1.2 – SQL Injection	webapps	php	Delibey
2010-01-28	Joomla! Component CCNewsLetter – Directory Traversal	webapps	php	B-HUNT3|2
2010-01-27	PostgreSQL – ‘bitsubstr’ Buffer Overflow	dos	linux	Intevydis
2010-01-27	iOS Serversman 3.1.5 – HTTP Remote Denial of Service	dos	ios	mr_me
2010-01-27	SAP BusinessObjects 12 – URI redirection / Cross-Site Scripting	remote	multiple	Richard Brain
2010-01-27	CamShot 1.2 – Overwrite (SEH)	remote	windows	tecnik
2010-01-27	HP System Management Homepage 3.0.2 – ‘servercert’ Cross-Site Scripting	remote	multiple	Richard Brain
2010-01-27	Joomla! Component com_virtuemart – order_status_id SQL Injection	webapps	php	B-HUNT3|2
2010-01-27	Joomla! Component VirtueMart Module Customers_who_bought – SQL Injection	webapps	php	B-HUNT3|2
2010-01-27	Geo++ GNCASTER 1.4.0.7 NMEA-data – Denial of Service	dos	linux	RedTeam Pentesting GmbH
2010-01-27	Geo++ GNCASTER 1.4.0.7 – GET Denial of Service	dos	linux	RedTeam Pentesting GmbH
2010-01-27	Discuz! 6.0 – ‘tid’ Cross-Site Scripting	webapps	php	s4r4d0
2010-01-27	IBM DB2 – ‘REPEAT()’ Local Heap Buffer Overflow	local	unix	Evgeny Legerov
2010-01-26	Cisco Secure Desktop 3.x – ‘translation’ Cross-Site Scripting	remote	hardware	Matias Pablo Brutti
2010-01-26	Winamp 5.572 – Local Overflow (SEH)	local	windows	TecR0c
2010-01-26	Joomla! Component 3D Cloud – ‘tagcloud.swf’ Cross-Site Scripting	webapps	php	MustLive
2010-01-26	KOL Wave Player 1.0 – ‘.wav’ Local Buffer Overflow (PoC)	dos	windows	cr4wl3r
2010-01-26	KOL WaveIOX 1.04 – ‘.wav’ Local Buffer Overflow (PoC)	dos	windows	cr4wl3r
2010-01-26	South River Technologies WebDrive Service 9.02 build 2232 – Bad Security Descriptor Privilege Escalation	local	windows	Trancer
2010-01-26	Joomla! 1.5.12 – read/exec Remote files	webapps	php	Nikoal Petrov
2010-01-26	Joomla! 1.5.12 – Connect Back	webapps	php	Nikola Petrov
2010-01-26	UGiA PHP UPLOADER 0.2 – Arbitrary File Upload	webapps	php	indoushka
2010-01-26	AIC Audio Player 1.4.1.587 – Local Crash (PoC)	dos	windows	b0telh0
2010-01-25	Winamp 5.572 – ‘whatsnew.txt’ Local Stack Overflow	local	windows	Dz_attacker
2010-01-25	Status2k – Remote Add Admin	webapps	php	alnjm33
2010-01-25	AOL 9.5 – Phobos.Playlist ‘Import()’ Remote Buffer Overflow (Metasploit)	remote	windows	Trancer
2010-01-25	Winamp 5.572 (Windows XP SP3 DE) – ‘whatsnew.txt’ Local Buffer Overflow	local	windows	NeoCortex
2010-01-24	P2GChinchilla HTTP Server 1.1.1 – Denial of Service	dos	windows	Zer0 Thunder
2010-01-24	BoastMachine 3.1 – Arbitrary File Upload	webapps	php	alnjm33
2010-01-24	Winamp 5.572 – ‘whatsnew.txt’ Stack Overflow (PoC)	dos	windows	Debug
2010-01-24	Opera 10.10 – XML Parser Denial of Service (PoC)	dos	windows	d3b4g
2010-01-24	Mozilla Firefox 3.6 – XML Parser Memory Corruption (PoC) / Denial of Service	dos	windows	d3b4g
2010-01-24	SilverStripe CMS 2.3.5 – Cross-Site Request Forgery / Open Redirection	webapps	php	cp77fk4r
2010-01-24	Joomla! Component com_mochigames – SQL Injection	webapps	windows	B-HUNT3|2
2010-01-23	OpenDb 1.5.0.4 – Multiple Local File Inclusions	webapps	php	ViRuSMaN
2010-01-23	Joomla! Component JBDiary – Blind SQL Injection	webapps	php	B-HUNT3|2
2010-01-23	Joomla! Component com_jbpublishdownfp – SQL Injection	webapps	php	B-HUNT3|2
2010-01-23	Joomla! Component com_casino – SQL Injection	webapps	php	B-HUNT3|2
2010-01-23	Joomla! Component com_ContentBlogList – SQL Injection	webapps	php	B-HUNT3|2
2010-01-23	magic-portal 2.1 – SQL Injection	webapps	php	alnjm33
2010-01-23	Sonique2 2.0 Beta Build 103 – Local Crash (PoC)	dos	windows	b0telh0
2010-01-22	Authentium SafeCentral 2.6 – ‘shdrv.sys’ Local Kernel Ring0 SYSTEM	local	windows	mu-b
2010-01-22	Microsoft Internet Explorer – ‘wshom.ocx’ (Run) ActiveX Code Execution (Add Admin)	local	windows	Stack
2010-01-22	Pico MP3 Player 1.0 – ‘.mp3’ / ‘.pls’ Local Crash (PoC)	dos	windows	cr4wl3r
2010-01-22	yPlay 1.0.76 – ‘.mp3’ Local Crash (PoC)	dos	windows	cr4wl3r