Exploits

日期	标题	类型	平台	作者
2010-01-15	SystemTap 1.0 – ‘stat-server’ Arbitrary Command Injection	remote	linux	Frank Ch. Eigler
2010-01-15	Zeus Web Server 4.x – ‘SSL2_CLIENT_HELLO’ Remote Buffer Overflow (PoC)	dos	multiple	Intevydis
2010-01-15	LetoDms 1.4.x – ‘lang’ Local File Inclusion	webapps	php	D. Fabian
2010-01-15	Triburom – ‘forum.php’ Cross-Site Scripting	webapps	php	ViRuSMaN
2010-01-15	Aqua Real 1.0/2.0 – Local Crash (PoC)	dos	windows	R3d-D3V!L
2010-01-15	Sub Station Alpha 4.08 – ‘.rt’ Local Buffer Overflow (PoC)	dos	windows	fl0 fl0w
2010-01-15	PonVFTP – Bypass / Arbitrary File Upload	webapps	php	S2K9
2010-01-15	Max’s File Uploader – Arbitrary File Upload	webapps	php	S2K9
2010-01-15	PonVFTP – ‘login.php’ SQL Injection	webapps	php	S2K9
2010-01-15	BS.Player 2.51 – Overwrite (SEH)	local	windows	Mert SARICA
2010-01-15	Aqua Real Screensaver – ‘.ar’ Buffer Overflow	dos	windows	R3d-D3V!L
2010-01-15	OtsTurntables Free 1.00.047 – Overwrite (SEH) (PoC)	dos	windows	Darkb0x
2010-01-15	Multiple Media Players ((iTunes / QuickTime) – HTTP DataHandler Overflow	dos	multiple	Dr_IDE
2010-01-14	Winamp 5.05 < 5.13 - '.ini' Local Stack Buffer Overflow	local	windows	fl0 fl0w
2010-01-14	Apple iTunes 8.1.x – ‘daap’ Remote Buffer Overflow	remote	windows	Simo36
2010-01-14	Zenoss 2.3.3 – Multiple SQL Injections	webapps	multiple	nGenuity Information Services
2010-01-14	Joomla! Component com_marketplace 1.2 – ‘catid’ Cross-Site Scripting	webapps	php	ViRuSMaN
2010-01-14	Xforum 1.4 – ‘nbpageliste’ Cross-Site Scripting	webapps	php	ViRuSMaN
2010-01-14	Technology for Solutions 1.0 – ‘id’ Cross-Site Scripting	webapps	php	PaL-D3v1L
2010-01-14	Zend Framework 1.9.6 – Multiple Input Validation Vulnerabilities / Security Bypass	remote	php	draic Brady
2010-01-14	OpenOffice 3.1 – ‘.csv’ Remote Denial of Service	dos	linux	Hellcode Research
2010-01-14	dokuwiki 2009-12-25 – Multiple Vulnerabilities	webapps	php	IHTeam
2010-01-14	Joomla! Component com_articlemanager – SQL Injection	webapps	php	FL0RiX
2010-01-13	Public Media Manager – SQL Injection	webapps	php	learn3r hacker
2010-01-13	Tribisur – ‘cat’ Cross-Site Scripting	webapps	php	ViRuSMaN
2010-01-13	PSI CMS 0.3.1 – SQL Injection	webapps	php	learn3r hacker
2010-01-13	Joomla! Component com_tienda – ‘categoria’ Cross-Site Scripting	webapps	php	FL0RiX
2010-01-13	Asp VevoCart Control System 3.0.4 – Database Disclosure	webapps	asp	indoushka
2010-01-13	GNU Bash 4.0 – ‘ls’ Control Character Command Injection	local	linux	Eric Piel
2010-01-13	NPlayer – ‘.dat Skin’ Local Heap Overflow (PoC)	dos	windows	Rehan Ahmed
2010-01-13	Nemesis Player (NSP) – Local Denial of Service	dos	windows	Rehan Ahmed
2010-01-13	TurboFTP Server 1.00.712 – Remote Denial of Service	dos	windows	corelanc0d3r
2010-01-13	Ofilter Player – ‘skin.ini’ Local Crash (PoC)	dos	windows	Rehan Ahmed
2010-01-13	StivaSoft Stiva SHOPPING CART 1.0 – ‘demo.php’ Cross-Site Scripting	webapps	php	PaL-D3v1L
2010-01-13	Hesk Help Desk 2.1 – Cross-Site Request Forgery	webapps	php	The.Morpheus
2010-01-13	Populum 2.3 – SQL Injection	webapps	php	SiLeNtp0is0n
2010-01-13	SwiFTP 1.11 – Overflow (Denial of Service) (PoC)	dos	hardware	Julien Bedard
2010-01-13	CiviCRM 3.1 < Beta 5 - Multiple Cross-Site Scripting Vulnerabilities	webapps	php	h00die
2010-01-12	Simple PHP Blog 0.5.x – ‘search.php’ Cross-Site Scripting	webapps	php	Sora
2010-01-12	Oracle Database – Remote Listener Memory Corruption	dos	multiple	Dennis Yurichev
2010-01-12	PHPepperShop 2.5 – ‘USER_ARTIKEL_HANDLING_AUFRUF.php’ Cross-Site Scripting	webapps	php	Crux
2010-01-12	Docmint 1.0/2.1 – ‘id’ Cross-Site Scripting	webapps	php	Red-D3v1L
2010-01-12	Layout CMS 1.0 – SQL Injection / Cross-Site Scripting	webapps	php	Red-D3v1L
2010-01-12	iOS Udisk FTP Basic Edition – Remote Denial of Service	dos	ios	mr_me
2010-01-11	tincan ltd – ‘section’ SQL Injection	webapps	php	ALTBTA
2010-01-11	HTMLDOC 1.9.x-r1629 (Windows x86) – ‘.html’ Local Buffer Overflow	local	windows_x86	fl0 fl0w
2010-01-11	2^6 TCP Control Bit – Fuzzer (No ECN or CWR)	remote	multiple	ShadowHatesYou
2010-01-11	FAQEngine 4.24.00 – Remote File Inclusion	webapps	php	kaMtiEz
2010-01-11	Image Hosting Script – Arbitrary File Upload	webapps	php	R3d-D3V!L
2010-01-11	Nginx 0.7.64 – Terminal Escape Sequence in Logs Command Injection	remote	multiple	evilaliv3