Exploits

日期	标题	类型	平台	作者
2010-01-11	Yaws 1.55 – ‘Logs’ Terminal Escape Sequence Command Injection	remote	windows	evilaliv3
2010-01-11	Cherokee 0.99.30 – Terminal Escape Sequence in Logs Command Injection	remote	windows	evilaliv3
2010-01-11	mini_httpd 1.18 – HTTP Request Escape Sequence Terminal Command Injection	remote	multiple	evilaliv3
2010-01-11	thttpd 2.24 – HTTP Request Escape Sequence Terminal Command Injection	remote	multiple	evilaliv3
2010-01-11	Varnish 2.0.6 – ‘Terminal Escape Sequence in Logs’ Command Injection	remote	multiple	evilaliv3
2010-01-11	Alwjeez Script – Database Backup	webapps	php	alnjm33
2010-01-11	AOLServer Terminal 4.5.1 – Escape Sequence in Logs Command Injection	remote	multiple	evilaliv3
2010-01-11	tincan ltd – ‘section’ SQL Injection	webapps	php	ALTBTA
2010-01-11	2^6 TCP Control Bit – Fuzzer (No ECN or CWR)	remote	multiple	ShadowHatesYou
2010-01-11	HTMLDOC 1.9.x-r1629 (Windows x86) – ‘.html’ Local Buffer Overflow	local	windows_x86	fl0 fl0w
2010-01-11	FAQEngine 4.24.00 – Remote File Inclusion	webapps	php	kaMtiEz
2010-01-11	Image Hosting Script – Arbitrary File Upload	webapps	php	R3d-D3V!L
2010-01-11	Nginx 0.7.64 – Terminal Escape Sequence in Logs Command Injection	remote	multiple	evilaliv3
2010-01-11	Audiotran 1.4.1 – ‘.pls’ Local Stack Overflow (Metasploit)	local	windows	dookie
2010-01-11	Ruby 1.9.1 – WEBrick ‘Terminal Escape Sequence in Logs’ Command Injection	remote	multiple	evilaliv3
2010-01-11	gridcc script 1.0 – SQL Injection / Cross-Site Scripting	webapps	php	Red-D3v1L
2010-01-11	Alex Guestbook – Multiple Vulnerabilities	webapps	php	LionTurk
2010-01-11	Active Calendar 1.2 – ‘$_SERVER[‘PHP_SELF’]’ Multiple Cross-Site Scripting Vulnerabilities	webapps	php	Martin Barbella
2010-01-11	Nuked KLan 1.7.7 & SP4 – Denial of Service	dos	multiple	Hamza 'MIzoZ' N
2010-01-10	phpMDJ 1.0.3 – SQL Injection	webapps	php	k4cp3r & Ablus
2010-01-10	VideoLAN VLC Media Player 0.8.6i – ActiveX Denial of Service (PoC)	dos	windows	D3V!L FUCKER & germaya_x
2010-01-10	PHPCalendars – Multiple Vulnerabilities	webapps	php	LionTurk
2010-01-10	D-Link Routers – Authentication Bypass (2)	webapps	hardware	SourceSec DevTeam
2010-01-10	TermiSBloG 1.0 – SQL Injections	webapps	php	Cyber_945
2010-01-10	E-membres 1.0 – Remote Database Disclosure	webapps	asp	ViRuSMaN
2010-01-10	ProArcadeScript to Game – SQL Injection	webapps	php	Err0R
2010-01-10	Sun Java System Directory Server 7.0 – ‘core_get_proxyauth_dn’ Denial of Service	dos	multiple	Intevydis
2010-01-10	Egreetings 1.0b – Remote Database Disclosure	webapps	asp	ViRuSMaN
2010-01-10	Audiotran 1.4.1 (Windows XP SP2/SP3 English) – Local Buffer Overflow	local	windows	Sébastien Duquette
2010-01-10	DigitalHive – ‘mt’ Cross-Site Scripting	webapps	php	ViRuSMaN
2010-01-10	ABB 1.1 – Forum Remote Database Disclosure	webapps	asp	ViRuSMaN
2010-01-10	YPOPS! 0.9.7.3 – Buffer Overflow (SEH)	dos	windows	blake
2010-01-10	Simply Classified 0.2 – Cross-Site Scripting / Cross-Site Request Forgery	webapps	php	mr_me
2010-01-10	Soritong 1.0 – Universal Buffer Overflow (SEH) (Metasploit)	local	windows	fb1h2s
2010-01-10	Joomla! Component com_jashowcase – Directory Traversal	webapps	php	FL0RiX
2010-01-10	Joomla! Component com_jvideodirect – Directory Traversal	webapps	php	FL0RiX
2010-01-10	Joomla! Component com_jcollection – Directory Traversal	webapps	php	FL0RiX
2010-01-10	Smart Statistics 1.0 – ‘smart_Statistics_admin.php’ Cross-Site Scripting	webapps	php	R3d-D3V!L
2010-01-10	ZeeWays Script – SQL Injection	webapps	php	SyRiAn_34G13
2010-01-10	Joomla! Component com_dashboard – Directory Traversal	webapps	php	FL0RiX
2010-01-10	Real Player – Local Crash (PoC)	dos	windows	D3V!L FUCKER
2010-01-09	Apple Safari 4.0.4 – Style Sheet redirection Information Disclosure	remote	windows	Cesar Cerrudo
2010-01-09	PPVChat – Multiple Vulnerabilities	webapps	php	andresg888
2010-01-09	ProfitCode Shopping Cart – Multiple Local/Remote File Inclusion Vulnerabilities	webapps	php	Zer0 Thunder
2010-01-09	Mozilla Firefox 3.5.8 – Style Sheet redirection Information Disclosure	remote	multiple	Cesar Cerrudo
2010-01-08	MATLAB R2009b – ‘dtoa’ Implementation Memory Corruption	dos	linux	Maksymilian Arciemowicz
2010-01-08	Apple Mac OSX 10.x – ‘libc/strtod(3)’ Memory Corruption	dos	osx	Maksymilian Arciemowicz
2010-01-08	DELTAScripts PHPClassifieds – ‘rate.php’ Blind SQL Injection	webapps	php	Hamza 'MizoZ' N.
2010-01-08	Joomla! Component Jobads – ‘type’ SQL Injection	webapps	php	N0KT4
2010-01-08	Microsoft Windows Live Messenger 2009 – ActiveX Denial of Service	dos	windows	HACKATTACK IT SECURITY GmbH