Exploits

日期	标题	类型	平台	作者
2010-01-22	Google Chrome 3.0 – Style Sheet redirection Information Disclosure	remote	multiple	Cesar Cerrudo
2010-01-22	Joomla! Component com_gameserver – SQL Injection	webapps	php	B-HUNT3|2
2010-01-22	OpenX 2.6.1 – SQL Injection	webapps	php	AndySoon
2010-01-22	IntelliTamper 2.07/2.08 – Remote Buffer Overflow (SEH)	remote	windows	loneferret
2010-01-22	Sun Java System Web Server 6.1/7.0 – WebDAV Format String	dos	multiple	Intevydis
2010-01-22	SOMPL Player 1.0 – Local Buffer Overflow	local	windows	Rick2600
2010-01-22	Sun Java System Web Server 7.0 Update 6 – ‘admin’ Server Denial of Service	dos	multiple	Intevydis
2010-01-22	QtWeb 3.0 – Remote Crash (Denial of Service)	dos	windows	Zer0 Thunder
2010-01-22	Authentium SafeCentral 2.6 – ‘shdrv.sys’ Local Kernel Ring0 SYSTEM	local	windows	mu-b
2010-01-22	Microsoft Internet Explorer – ‘wshom.ocx’ (Run) ActiveX Code Execution (Add Admin)	local	windows	Stack
2010-01-22	Pico MP3 Player 1.0 – ‘.mp3’ / ‘.pls’ Local Crash (PoC)	dos	windows	cr4wl3r
2010-01-22	yPlay 1.0.76 – ‘.mp3’ Local Crash (PoC)	dos	windows	cr4wl3r
2010-01-21	jetAudio 8.0.0.2 Basic – ‘.asx’ Local Crash	dos	windows	cr4wl3r
2010-01-21	jetAudio 8.0.0.2 Basic – ‘.m3u’ Local Stack Overflow	local	windows	cr4wl3r
2010-01-21	jQuery Uploadify 2.1.0 – Arbitrary File Upload	webapps	multiple	k4cp3r/Ablus
2010-01-21	cPanel and WHM 11.25 – ‘failurl’ HTTP Response Splitting	webapps	php	Trancer
2010-01-21	IntelliTamper 2.07/2.08 – Defer Remote Buffer Overflow (PoC)	dos	windows	SkuLL-HackeR
2010-01-21	Blog System 1.x – ‘note’ SQL Injection	webapps	php	h4ck3r
2010-01-21	SHOUTcast Server 1.9.8/Win32 – Cross-Site Request Forgery	webapps	windows	cp77fk4r
2010-01-21	Microsoft Windows Live Messenger 2009 – ActiveX Heap Overflow (PoC)	dos	windows	SarBoT511
2010-01-21	Joomla! Component com_book – SQL Injection	webapps	php	Evil-Cod3r
2010-01-21	Sun Java System Web Server 6.1/7.0 – Digest Authentication Remote Buffer Overflow	remote	multiple	Intevydis
2010-01-21	eWebeditor – Directory Traversal	webapps	asp	anonymous
2010-01-21	Microsoft Internet Explorer 8 – URI Validation Remote Code Execution	remote	windows	Lostmon Lords
2010-01-21	cPanel – HTTP Response Splitting	webapps	multiple	Trancer
2010-01-21	EFS Easy Chat Server – Universal Buffer Overflow (SEH) (Metasploit)	remote	windows	fb1h2s
2010-01-20	kloNews 2.0 – ‘cat.php’ Cross-Site Scripting	webapps	php	cr4wl3r
2010-01-20	MP3 Studio 1.x – ‘.m3u’ Local Stack Overflow (Universal)	local	windows	D3V!L FUCKER
2010-01-20	AOL 9.5 – ActiveX Heap Spray	remote	windows	Dz_attacker
2010-01-20	Chipmunk NewsLetter 2.0 – Multiple Cross-Site Scripting Vulnerabilities	webapps	php	b0telh0
2010-01-20	Microsoft Internet Explorer 6.0/7.0 – Null Pointer crashes	dos	windows	Skylined
2010-01-20	PHPMySpace Gold 8.0 – ‘gid’ SQL Injection	webapps	php	Ctacok
2010-01-19	OpenOffice 3.1 – ‘.slk’ Null Pointer Dereference Remote Denial of Service	dos	linux	Hellcode Research
2010-01-19	Pidgin MSN 2.6.4 – File Download	remote	multiple	Mathieu GASPARD
2010-01-19	DataLife Engine 8.3 – ‘/engine/ajax/addcomments.php?_REQUEST[skin]’ Remote File Inclusion	webapps	php	indoushka
2010-01-19	AdvertisementManager 3.1 – ‘req’ Local/Remote File Inclusion	webapps	php	indoushka
2010-01-19	RM Downloader – ‘.m3u’ Local Buffer Overflow (SEH)	local	windows	jacky
2010-01-19	DataLife Engine 8.3 – ‘/engine/ajax/pm.php?config[lang]’ Remote File Inclusion	webapps	php	indoushka
2010-01-19	Microsoft Windows NT/2000/2003/2008/XP/Vista/7 – ‘KiTrap0D’ User Mode to Ring Escalation (MS10-015)	local	windows	Tavis Ormandy
2010-01-19	DataLife Engine 8.3 – ‘/engine/inc/help.php?config[langs]’ Remote File Inclusion	webapps	php	indoushka
2010-01-19	al3jeb script – Remote Authentication Bypass	webapps	php	cr4wl3r
2010-01-19	DataLife Engine 8.3 – ‘/engine/inc/include/init.php?selected_language’ Remote File Inclusion	webapps	php	indoushka
2010-01-19	Mini-stream Ripper 3.0.1.1 – ‘.smi’ Local Buffer Overflow (PoC)	dos	windows	d3b4g
2010-01-19	Foxit Reader 3.1.4.1125 – ActiveX Heap Overflow (PoC)	dos	windows	SarBoT511 & D3V!L FUCKER
2010-01-19	Microsoft Windows Defender – ActiveX Heap Overflow (PoC)	dos	windows	SarBoT511
2010-01-19	Blaze Apps 1.x – SQL Injection / HTML Injection	webapps	multiple	AmnPardaz Security Research Team
2010-01-19	OpenOffice – ‘.slk’ Parsing Null Pointer	dos	windows	Hellcode Research
2010-01-19	Millenium MP3 Studio 1.x – ‘.m3u’ Local Stack Overflow	local	windows	NeoCortex
2010-01-19	AOL 9.5 – ActiveX Heap Overflow	dos	windows	Hellcode Research
2010-01-19	VisualShapers EZContents 2.0.3 – Authentication Bypass / Multiple SQL Injections	webapps	php	AmnPardaz Security Research Team