Exploit 2009

Exploit 2009 - Úvod 2020 2019 2018 2017 2016 2015 2014 2013 2012 2011 2010 2009 2008 2007 2006 2005 2004 2003 2002 2001 2000

Úvod Remote Web App Local&Privilege Escalation DoS & PoC ShellCode Exploit Exploit prog. Ex. Techniky Exp. kit Typy Exploitů Exploit Articles

2009-12-31	Joomla! Component Core 1.5.x com_ - Denial of Service	dos	PHP
2009-12-31	WordPress 2.9 - Denial of Service	dos	PHP
2009-12-31	Drupal 5.21/6.16 - Denial of Service	dos	PHP
2009-12-31	Quick Poll - 'code.php?id' SQL Injection	webapps	PHP
2009-12-31	list Web - 'addlink.php?id' SQL Injection	webapps	PHP
2009-12-31	Classified Ads Scrip - 'store_info.php?id' SQL Injection	webapps	PHP
2009-12-31	VideoLAN VLC Media Player 1.0.3 - '.asx' Denial of Service (PoC)	dos	Windows
2009-12-31	pL-PHP Beta 0.9 - Local File Inclusion	webapps	PHP
2009-12-31	SimplePlayer 0.2 - '.wav' Overflow Denial of Service	dos	Windows
2009-12-31	Joomla! Component com_portfol - SQL Injection	webapps	PHP
2009-12-31	fileNice PHP file browser - Local/Remote File Inclusion	webapps	PHP
2009-12-31	Weatimages - Directory Traversal / Local File Inclusion	webapps	PHP
2009-12-31	Joomla! Component com_mdigg - SQL Injection	webapps	PHP
2009-12-31	HLstatsX 1.65 - SQL Injection	webapps	PHP
2009-12-31	Discuz 1.03 - SQL Injection	webapps	PHP
2009-12-31	PhotoDiary 1.3 - 'lng' Local File Inclusion	webapps	PHP
2009-12-31	Opera 10.10 - Status Bar Obfuscation	dos	Multiple
2009-12-31	Freewebscript'z Games - Authentication Bypass	webapps	PHP
2009-12-31	Pre ADS Portal - 'cid' SQL Injection	webapps	PHP
2009-12-31	EasyGallery - 'catid' Blind SQL Injection	webapps	PHP
2009-12-31	Pre News Manager - 'nid' SQL Injection	webapps	PHP
2009-12-31	PHP-MySQL-Quiz - SQL Injection	webapps	PHP
2009-12-31	PHP-AddressBook 3.1.5 - 'edit.php' SQL Injection	webapps	PHP
2009-12-31	Invision Power Board (Trial) 2.0.4 - Backup	webapps	PHP
2009-12-31	Google Chrome 3.0195.38 - Status Bar Obfuscation	dos	Windows
2009-12-31	bbScript 1.1.2.1 - 'id' Blind SQL Injection	webapps	PHP
2009-12-31	Apollo Player 37.0.0.0 - '.aap' Buffer Overflow (Denial of Service) (PoC)	dos	Windows
2009-12-31	Kayako eSupport 3.04.10 - Cross-Site Scripting / Cross-Site Request Forgery	webapps	PHP
2009-12-31	Linux/x86 - Add Root User (toor) To /etc/passwd + No password + exit() Shellcode (107 bytes)	shellcode	Linux_x86
2009-12-31	PHPMyCart 1.3 - Cross-Site Scripting / Authentication Bypass	webapps	PHP
2009-12-31	SendStudio 4.0.1 - Cross-Site Scripting / Security Bypass	webapps	PHP
2009-12-31	BosClassifieds 1.20 - 'recent.php' Cross-Site Scripting	webapps	PHP
2009-12-31	Imagevue r16 - 'amount' Cross-Site Scripting	webapps	PHP
2009-12-31	StarDevelop Live Help 2.6 - 'SERVER' Multiple Cross-Site Scripting Vulnerabilities	webapps	PHP
2009-12-31	PhotoKorn 1.542 - Cross-Site Scripting / Remote File Inclusion	webapps	PHP
2009-12-31	Discuz! 1.0 - 'referer' Cross-Site Scripting	webapps	PHP
2009-12-31	DieselPay 1.6 - Cross-Site Scripting / Directory Traversal	webapps	PHP
2009-12-31	Xerox WorkCentre - PJL Daemon Buffer Overflow (PoC)	dos	Hardware
2009-12-31	Joomla! Component MS Comment 0.8.0b - Security Bypass / Cross-Site Scripting	webapps	PHP
2009-12-31	Freewebscriptz Online Games Login - Multiple SQL Injections	remote	Windows
2009-12-30	Microsoft IIS - ASP Multiple Extensions Security Bypass 5.x/6.x Vulnerabilities	remote	Windows
2009-12-30	My Book World Edition NAS - Multiple Vulnerabilities	webapps	Hardware
2009-12-30	RoseOnlineCMS 3 B1 - 'admin' Local File Inclusion	webapps	PHP
2009-12-30	Web Calendar - Remote Database Disclosure	webapps	ASP
2009-12-30	ezguestbook - Remote Database Disclosure	webapps	ASP
2009-12-30	ezscheduler - Remote Database Disclosure	webapps	ASP
2009-12-30	Quick Player 1.2 - Unicode Buffer Overflow (1)	local	Windows
2009-12-30	iDevAffiliate 4.0 - Backup	webapps	PHP
2009-12-30	I-RATER Basic - Arbitrary File Upload	webapps	PHP
2009-12-30	PicMe 2.1.0 - Arbitrary File Upload	webapps	PHP
2009-12-30	UBBCentral UBB.Threads 6.0 - Remote File Inclusion	webapps	PHP
2009-12-30	Diesel Job Site 1.4 - Multiple Vulnerabilities	webapps	PHP
2009-12-30	LiveZilla 3.1.8.3 - Cross-Site Scripting	webapps	PHP
2009-12-30	XOOPS Module dictionary 2.0.18 - 'detail.php' SQL Injection	webapps	PHP
2009-12-30	PHP-Fusion Mod avatar_studio - Local File Inclusion	webapps	PHP
2009-12-30	I-Escorts Directory - 'country_escorts.php?country_id' SQL Injection	webapps	PHP
2009-12-30	FlashChat 3.9.3.1 - PHP info	webapps	PHP
2009-12-30	Joomla! Component com_intuit - Apache Directory listing Download	webapps	PHP
2009-12-30	WHOISCART - Scripting	webapps	PHP
2009-12-30	ArticleLive PHP 2005.0.0 - Cross-Site Scripting	webapps	PHP
2009-12-30	Aptgp.1.3.0c - Cross-Site Scripting	webapps	PHP
2009-12-30	Joomla! Component com_airmonoblock - Blind SQL Injection	webapps	PHP
2009-12-30	gallery_show.asp - GID Blind SQL Injection	webapps	ASP

2009-12-30	Wing FTP Server 3.2.4 - Cross-Site Request Forgery	webapps	Multiple
2009-12-30	Joomla! Component com_rd_download - Local File Disclosure	webapps	PHP
2009-12-30	UranyumSoft Ýlan Servisi - Database Disclosure	webapps	ASP
2009-12-30	K-Rate - SQL Injection	webapps	PHP
2009-12-30	DJ Studio Pro 5.1.6.5.2 - Local Overflow (SEH)	local	Windows
2009-12-30	vBulletin ads_saed 1.5 - 'bnnr.php' SQL Injection	webapps	PHP
2009-12-30	vBulletin - Denial of Service	dos	PHP
2009-12-30	Azadi Network - 'page' SQL Injection	webapps	PHP
2009-12-30	e-topbiz banner exchange PHP - Authentication Bypass	webapps	PHP
2009-12-30	e-topbiz Slide Popups 1 PHP - Authentication Bypass	webapps	PHP
2009-12-30	Classifieds Script - 'type' SQL Injection	webapps	PHP
2009-12-30	Jax Calendar 1.34 - Remote Admin Access	webapps	PHP
2009-12-30	Elkagroup - 'pid' SQL Injection	webapps	PHP
2009-12-30	Linux/x86 - setuid() + Break chroot (mkdir/chdir/chroot '...') + execve(/bin/sh) Shellcode (79 bytes)	shellcode	Linux_x86
2009-12-30	Linux/x86 - Fork Bomb Shellcode (6 bytes) (1)	shellcode	Linux_x86
2009-12-30	Western Digital My Book World Edition 1.1.16 - 'lang' Cross-Site Scripting	webapps	PHP
2009-12-30	LiveZilla 3.1.8.3 - Multiple Cross-Site Scripting Vulnerabilities	webapps	PHP
2009-12-29	BigAnt Server 2.52 - Remote Overflow (SEH)	remote	Windows
2009-12-29	jgbbs-3.0beta1 - Database Disclosure	webapps	ASP
2009-12-29	PSnews - Database Disclosure	webapps	ASP
2009-12-29	QuickEStore 7.9 - SQL Injection / Full Path Disclosure Download	webapps	ASP
2009-12-29	AspBB - Active Server Page Bulletin Board Database Disclosure	webapps	ASP
2009-12-29	Futility Forum 1.0 Revamp - Database Disclosure	webapps	ASP
2009-12-29	htmlArea 2.03 - Database Disclosure	webapps	ASP
2009-12-29	Uguestbook - Database Disclosure	webapps	ASP
2009-12-29	BaalASP 2.0 - Database Disclosure	webapps	ASP
2009-12-29	Fully Functional ASP Forum 1.0 - Database Disclosure	webapps	ASP
2009-12-29	makit news/blog poster 3.1 - Database Disclosure	webapps	ASP
2009-12-29	DirectAdmin 1.34.0 - Cross-Site Request Forgery (Add Admin)	webapps	PHP
2009-12-29	ASP Battle Blog - Database Disclosure	webapps	ASP
2009-12-29	ActiveKB - Remote File Inclusion	webapps	PHP
2009-12-29	Mini-stream Ripper 3.0.1.1 - '.pls' Universal Buffer Overflow (Perl)	local	Windows
2009-12-29	eStore 1.0.2 - SQL Injection	webapps	PHP
2009-12-29	Soritong 1.0 - Universal Buffer Overflow (Python)	local	Windows
2009-12-29	Mini-stream Ripper 3.0.1.1 - '.pls' Universal Buffer Overflow (Python)	local	Windows
2009-12-29	Helpdesk Pilot Knowledge Base 4.4.0 - SQL Injection	webapps	PHP
2009-12-29	Joomla! Component com_noticia - Cross-Site Scripting	webapps	PHP
2009-12-29	Joomla! Component com_kkcontent - Blind SQL Injection	webapps	PHP
2009-12-29	Joomla! Component iF Portfolio Nexus - 'Controller' Remote File Inclusion	webapps	PHP
2009-12-29	FreeWebShop 2.2.9 R2 - Multiple Remote Vulnerabilities	webapps	PHP
2009-12-29	AzDGDatingMedium 1.9.3 - 'l' Multiple Cross-Site Scripting Vulnerabilities	webapps	PHP
2009-12-28	Yonja - Arbitrary File Upload	webapps	Multiple
2009-12-28	ASP Simple Blog 3.0 - Arbitrary File Upload	webapps	Multiple
2009-12-28	Joomla! Component com_if_nexus - Remote File Inclusion	webapps	Multiple
2009-12-28	egegen turkish script - SQL Injection	webapps	Linux
2009-12-28	MySimpleFileUploader 1.6 - Arbitrary File Upload	webapps	Linux
2009-12-28	PHP Forum ohne My SQL - Arbitrary File Upload	webapps	Linux
2009-12-28	Calendar Express 2.0 - SQL Injection	webapps	PHP
2009-12-28	M.J.M. Quick Player 1.2 - Local Stack Buffer Overflow	local	Windows
2009-12-28	Joomla! Component com_calendario - Blind SQL Injection	webapps	PHP
2009-12-28	Sunbyte e-Flower - SQL Injection	webapps	PHP
2009-12-28	Dren's PHP Uploader - Arbitrary File Upload	webapps	PHP
2009-12-28	Windows/x86 (XP SP2) (English / Arabic) - cmd.exe Shellcode (23 bytes)	shellcode	Windows_x86
2009-12-28	Local File Download Theory	papers	Multiple
2009-12-28	Joomla! Component Joomulus 2.0 - 'tagcloud.swf' Cross-Site Scripting	webapps	PHP
2009-12-28	FreePBX 2.5.2 - '/admin/config.php?tech' Cross-Site Scripting	webapps	PHP
2009-12-28	FreePBX 2.5.2 - Zap Channel Addition Description Parameter Cross-Site Scripting	webapps	PHP
2009-12-27	Nuke - SQL Injection	webapps	PHP
2009-12-27	Info Fisier 1.0 - SQL Injection	webapps	PHP
2009-12-27	Smart PHP Uploader 1.0 - Arbitrary File Upload	webapps	PHP
2009-12-27	info fisier 1.0 - Multiple Vulnerabilities	webapps	PHP
2009-12-27	Joomla! Component com_adagency - Local File Inclusion	webapps	PHP
2009-12-27	Joomla! Component com_intuit - Local File Inclusion	webapps	PHP
2009-12-27	Joomla! Component memorybook 1.2 - Multiple Vulnerabilities	webapps	PHP
2009-12-27	PHP upload - 'unijimpe' Arbitrary File Upload	webapps	PHP
2009-12-27	com_webcamxp - Cross-Site Scripting	webapps	PHP
2009-12-27	Joomla! Component com_beeheard - Blind SQL Injection	webapps	PHP
2009-12-27	com_jm-recommend - Cross-Site Scripting	webapps	PHP
2009-12-27	lineaCMS - Cross-Site Scripting	webapps	PHP
2009-12-27	Joomla! Component FacileForms - Cross-Site Scripting	webapps	PHP
2009-12-27	Joomla! Component com_qpersonel - Cross-Site Scripting	webapps	PHP
2009-12-27	Joomla! Component com_oprykningspoint_mc - Cross-Site Scripting	webapps	PHP
2009-12-27	Joomla! Component com_trabalhe_conosco - Cross-Site Scripting	webapps	PHP
2009-12-27	Cybershade CMS 0.2 - Remote File Inclusion	webapps	PHP
2009-12-27	Joomla! Component com_dhforum - SQL Injection	webapps	PHP
2009-12-27	Media Jukebox 8.0.400 - Local Buffer Overflow (SEH) (Metasploit)	local	Windows
2009-12-27	Mini-stream Ripper 3.0.1.1 - '.pls' Universal Local Buffer Overflow	local	Windows
2009-12-27	Mini-stream Ripper (Windows XP SP2/SP3) - Local Overflow	local	Windows
2009-12-27	Mini-stream 3.0.1.1 - Local Buffer Overflow (Metasploit)	local	Windows
2009-12-27	Mambo Component Material Suche 1.0 - SQL Injection	webapps	PHP
2009-12-27	Dream4 Koobi Pro 6.1 Gallery - 'img_id' SQL Injection	webapps	PHP
2009-12-27	[Moroccan] Social Enginnering	papers	Multiple
2009-12-26	paFileDB 3.1 - Cross-Site Scripting	webapps	PHP
2009-12-26	phpPowerCards 2.0 - Cross-Site Scripting	webapps	PHP
2009-12-26	Squito Gallery 1.0 - Cross-Site Scripting	webapps	PHP
2009-12-26	vCard PRO 3.1 - Cross-Site Scripting	webapps	PHP
2009-12-26	Info Fisier 1.0 - Arbitrary File Upload	webapps	PHP
2009-12-26	kandalf upper 0.1 - Arbitrary File Upload	webapps	PHP
2009-12-26	DieselScripts jokes - Cross-Site Scripting	webapps	PHP
2009-12-26	DieselScripts jokes - Backup	webapps	PHP
2009-12-26	Webring - Cross-Site Scripting	webapps	PHP
2009-12-26	PHPShop 0.6 - Bypass	webapps	PHP
2009-12-26	Quiz - Cross-Site Scripting	webapps	PHP
2009-12-26	E-Pay - Remote File Inclusion	webapps	PHP
2009-12-26	Saibal Download Area 2.0 - Arbitrary File Upload	webapps	PHP
2009-12-26	Dros - Remote File Inclusion	webapps	PHP
2009-12-26	TomatoCart - Backup	webapps	PHP
2009-12-26	Upload-Point 1.6 Beta - Arbitrary File Upload	webapps	PHP
2009-12-26	Best Top List 2.11 - Arbitrary File Upload	webapps	PHP
2009-12-26	CactuShop 6.0 - Database Disclosure	webapps	ASP
2009-12-26	SaphpLesson 4.0 food - Remote File Inclusion	webapps	PHP
2009-12-26	Flatpress - Cross-Site Scripting	webapps	PHP
2009-12-26	file upload Ar Version - Arbitrary File Upload	webapps	PHP
2009-12-26	IMG2ASCII - Cross-Site Scripting	webapps	PHP
2009-12-26	EZPX My Photoblog 1.2 - Arbitrary File Upload	webapps	PHP
2009-12-26	FreeForum 1.7 - Cross-Site Scripting	webapps	PHP
2009-12-26	FreeForum 1.7 - Remote File Inclusion	webapps	PHP
2009-12-26	ES Simple Uploader 1.1 - Arbitrary File Upload	webapps	PHP
2009-12-26	Lizard Cart - Arbitrary File Upload	webapps	PHP
2009-12-26	epay - Backup	webapps	PHP
2009-12-26	e-pay 1.55 - Remote File Inclusion	webapps	PHP
2009-12-26	e-cart 3.0 - Multiple Vulnerabilities	webapps	PHP
2009-12-26	dB Masters MultiMedia - Insecure Cookie Handling	webapps	PHP
2009-12-26	Image File Upload - Arbitrary File Upload	webapps	PHP
2009-12-26	HowMany 2.6 - Remote File Inclusion	webapps	PHP
2009-12-26	kooora 3.0 - AR Cross-Site Scripting	webapps	PHP
2009-12-26	Mega Upload 1.45 - Arbitrary File Upload	webapps	PHP
2009-12-26	Gallery 2.3 - Remote File Inclusion	webapps	PHP
2009-12-26	MyCart shopping cart - Arbitrary File Upload	webapps	PHP
2009-12-26	osCommerce 2.2rc2a - Bypass/Create and Download Backup	webapps	PHP

2009-12-26	MyShoutPro 1.2 Final - Cross-Site Scripting	webapps	PHP
2009-12-26	Green Desktiny Customer Support Helpdesk 2.3.1 - SQL Injection	webapps	PHP
2009-12-26	phpAuction - Cross-Site Scripting	webapps	PHP
2009-12-26	Nuked-klaN SP4 - Remote File Inclusion	webapps	PHP
2009-12-26	Esinti Web Design Gold Defter - Database Disclosure	webapps	ASP
2009-12-26	HP Application Recovery Manager - 'OmniInet.exe' Remote Buffer Overflow	remote	Windows
2009-12-26	Datenator 0.3.0 - 'event.php?id' SQL Injection	webapps	PHP
2009-12-26	DBHcms 1.1.4 - 'dbhcms_core_dir' Remote File Inclusion	webapps	PHP
2009-12-26	ta3arof [dating] Script (Arabic Version) - Arbitrary File Upload	webapps	PHP
2009-12-26	PHP Uploader Downloader 2.0 - Arbitrary File Upload	webapps	PHP
2009-12-26	PHP Football 1.0 - Cross-Site Scripting	webapps	PHP
2009-12-26	Nuked-klaN 1.7.7 - Remote File Inclusion	webapps	PHP
2009-12-26	PHP Uploader Downloader 2.0 - Cross-Site Scripting	webapps	PHP
2009-12-26	phPay 2.2a - Backup	webapps	PHP
2009-12-26	AWStats 6.1 < 6.2 - 'configdir' Remote Command Execution (Metasploit)	webapps	CGI
2009-12-26	PHPInstantGallery 1.1 - 'admin.php' Cross-Site Scripting	webapps	PHP
2009-12-25	cms -db 0.7.13 - Multiple Vulnerabilities	webapps	PHP
2009-12-25	SoftCab Sound Converter - 'sndConverter.ocx' ActiveX Insecure Method	webapps	Windows
2009-12-25	jetAudio 8.0.0.0 - '.asx' Basic Local Crash (PoC)	dos	Windows
2009-12-25	JetAudio Basic 7.5.5.25 - '.asx' Buffer Overflow (PoC)	dos	Windows
2009-12-25	asaher pro 1.0 - Remote File Inclusion	webapps	PHP
2009-12-25	Winn Guestbook 2.4 / Winn.ws - Cross-Site Scripting	webapps	PHP
2009-12-25	APHP ImgList 1.2.2 - Cross-Site Scripting	webapps	PHP
2009-12-25	Best Top List - Cross-Site Scripting	webapps	PHP
2009-12-25	SoftBiz B2B trading Marketplace Script - SQL Injection	webapps	PHP
2009-12-25	caricatier 2.5 - Cross-Site Scripting	webapps	PHP
2009-12-25	barbo91 uploads - Arbitrary File Upload	webapps	PHP
2009-12-25	Ads Electronic Al-System - Cross-Site Scripting	webapps	PHP
2009-12-25	ReGet Deluxe 5.2 (build 330) - Local Stack Overflow	local	Windows
2009-12-25	Jevonweb Guestbook - Remote Admin Access	webapps	PHP
2009-12-25	Simple PHP Guestbook - Remote Admin Access	webapps	PHP
2009-12-25	Barbo91 - 'upload.php' Cross-Site Scripting	webapps	PHP
2009-12-25	AL-Caricatier 2.5 - 'comment.php' Cross-Site Scripting	webapps	PHP
2009-12-24	Joomla! Component com_carman - Cross-Site Scripting	webapps	PHP
2009-12-24	Joomla! Component com_jeemaarticlecollection - SQL Injection	webapps	PHP
2009-12-24	Jax Guestbook 3.50 - Admin Login	webapps	PHP
2009-12-24	CastRipper 2.50.70 (Windows XP SP3) - '.pls' Local Stack Buffer Overflow	local	Windows
2009-12-24	Traidnt Gallery - Arbitrary Add Admin	webapps	PHP
2009-12-24	ImageVue 2.0 - Remote Admin Login	webapps	Multiple
2009-12-24	Wbb3 - Blind SQL Injection	webapps	PHP
2009-12-24	Pragyan CMS 2.6.4 - 'search.php' Remote File Inclusion	webapps	PHP
2009-12-24	Picpuz 2.1.1 - Buffer Overflow (Denial of Service) (PoC)	dos	Linux
2009-12-24	Web Wiz NewsPad - Database Disclosure	webapps	ASP
2009-12-24	Web Wiz Forums 9.64 - Database Disclosure	webapps	ASP
2009-12-24	Snitz Forums 2000 - Database Disclosure	webapps	ASP
2009-12-24	Joomla! Component com_schools - SQL Injection	webapps	PHP
2009-12-24	Easy RM to MP3 2.7.3.700 - Local Overflow	local	Windows
2009-12-24	PBX Phone System 2.x - Multiple Vulnerabilities	webapps	PHP
2009-12-24	CastRipper (Windows XP SP2) - '.m3u' Local Stack Buffer Overflow	local	Windows
2009-12-24	VideoIsland - Arbitrary File Upload	webapps	PHP
2009-12-24	Windows/x86 (XP SP3) - Add Firewall Rule (Allow 445/TCP) Shellcode	shellcode	Windows_x86
2009-12-24	FreeBSD/x86 - Bind (1337/TCP) Shell (/bin/sh) Shellcode (167 bytes)	shellcode	FreeBSD_x86
2009-12-24	Windows/x86 (XP SP2) - calc.exe Shellcode (45 bytes)	shellcode	Windows_x86
2009-12-24	Linux/x86 - unlink(/etc/passwd) + exit() Shellcode (35 bytes)	shellcode	Linux_x86
2009-12-24	MyBB 1.4.10 - 'myps.php' Cross-Site Scripting	webapps	PHP
2009-12-23	CoreHTTP 0.5.3.1 - 'CGI' Arbitrary Command Execution	remote	Linux
2009-12-23	35mm Slide Gallery - Cross-Site Scripting	webapps	PHP
2009-12-23	Add An Ad Script - Arbitrary File Upload	webapps	PHP
2009-12-23	Linux Kernel 2.6.18 < 2.6.18-20 - Local Privilege Escalation	local	Linux
2009-12-23	35mm Slide Gallery - Directory Traversal	webapps	PHP
2009-12-23	PHP-Nuke Module Emporium 2.3.0 - 'id_catg' SQL Injection	webapps	PHP
2009-12-23	Printoxx - Local Buffer Overflow (PoC)	dos	Linux
2009-12-23	Adobe Reader / Acrobat - '.PDF' File Overflow	local	Windows
2009-12-23	Easy RM to MP3 27.3.700 (Windows XP SP2) - Local Buffer Overflow	local	Windows
2009-12-23	Easy RM to MP3 2.7.3.700 - Local Buffer Overflow	local	Windows
2009-12-23	XP Book 3.0 - login Admin	webapps	PHP
2009-12-23	webMathematica 3 - 'MSP' Script Cross-Site Scripting	webapps	Multiple
2009-12-22	Winamp 5.57 - Stack Overflow	dos	Windows
2009-12-22	The Uploader 2.0 - Arbitrary File Upload	webapps	PHP
2009-12-22	CoolPlayer 2.18 - M3U Playlist Buffer Overflow	local	Windows
2009-12-22	PlayMeNow - '.m3u' Universal XP Buffer Overflow (SEH)	local	Windows
2009-12-22	Active PHP BookMarks 1.3 - SQL Injection	webapps	PHP
2009-12-22	DeluxeBB 1.3 - Multiple Vulnerabilities	webapps	PHP
2009-12-22	The Uploader 2.0 - File Disclosure	webapps	PHP
2009-12-22	mypage 0.4 - Local File Inclusion	webapps	PHP
2009-12-22	Mini File Host 1.5 - Arbitrary File Upload	webapps	PHP
2009-12-22	Easy RM to MP3 27.3.700 (Windows XP SP3) - Local Overflow	local	Windows
2009-12-22	Allied Telesyn TFTP (AT-TFTP) Server/Daemon 1.9 - Denial of Service	dos	Windows
2009-12-22	Simple PHP Blog 0.5.1 - Local File Inclusion	webapps	PHP
2009-12-22	weenCompany - SQL Injection	webapps	PHP
2009-12-22	Aurora CMS - SQL Injection	webapps	PHP
2009-12-22	[Portuguese] Winsockets In C	papers	Multiple
2009-12-22	[Portuguese] Exploiting Integer Array Overflows	papers	Multiple
2009-12-22	ClarkConnect Linux 5.0 - 'proxy.php' Cross-Site Scripting	webapps	PHP
2009-12-22	pragmaMX 0.1.11 - 'modules.php' Multiple SQL Injections	webapps	PHP
2009-12-22	Active Business Directory 2 - 'searchadvance.asp' Cross-Site Scripting	webapps	ASP
2009-12-21	Drumbeat CMS 1.0 - SQL Injection	webapps	PHP
2009-12-21	Angelo-emlak 1.0 - Database Disclosure	webapps	ASP
2009-12-21	PlayMeNow - '.M3U' Playlist Buffer Overflow (SEH)	local	Windows
2009-12-21	Ultimate Uploader 1.3 - Arbitrary File Upload	webapps	PHP
2009-12-21	TLS - Renegotiation	remote	Multiple
2009-12-21	3Com OfficeConnect Routers - 'Content-Type' Denial of Service	dos	Hardware
2009-12-21	Absolute Shopping Cart - SQL Injection	webapps	ASP
2009-12-21	social Web CMS Beta 2 - Multiple Vulnerabilities	webapps	PHP
2009-12-21	PHPhotoalbum - Arbitrary File Upload	webapps	PHP
2009-12-21	webCocoon's simpleCMS - SQL Injection	webapps	PHP
2009-12-21	VideoCMS 3.1 - SQL Injection	webapps	PHP
2009-12-21	PDQ Script 1.0 - 'listingid' SQL Injection	webapps	PHP
2009-12-21	PHPhotoalbum 0.5 - SQL Injection	webapps	PHP
2009-12-21	Joomla! Component com_mediaslide - Directory Traversal	webapps	PHP
2009-12-21	PHPOPENCHAT 3.0.2 - Cross-Site Scripting AND/OR FPD	webapps	PHP
2009-12-21	Woltlab Burningboard Addon Kleinanzeigenmarkt - SQL Injection	webapps	PHP
2009-12-21	Kasseler CMS 1.3.4 Lite - Multiple Cross-Site Scripting Vulnerabilities	webapps	PHP
2009-12-21	PHP-Calendar 1.1 - 'update08.php?configfile' Traversal Local File Inclusion	webapps	PHP
2009-12-21	PHP-Calendar 1.1 - 'update10.php?configfile' Traversal Local File Inclusion	webapps	PHP
2009-12-21	Web Cocoon simpleCMS - 'show.php' SQL Injection	webapps	PHP
2009-12-20	Explorer 7.20 - Cross-Site Scripting	webapps	PHP
2009-12-20	Advance Biz Limited 1.0 - Authentication Bypass	webapps	PHP
2009-12-20	Simplicity oF Upload 1.3.2 - Arbitrary File Upload	webapps	PHP
2009-12-20	Ignition 1.2 - Multiple Local File Inclusions	webapps	PHP
2009-12-20	Pandora FMS Monitoring Application 2.1.x /3.x - SQL Injection	webapps	PHP
2009-12-20	PacketFence Network Access Controller - Cross-Site Scripting	webapps	PHP
2009-12-20	4Images 1.7.1 - SQL Injection	webapps	PHP
2009-12-20	8Pixel.net 2009. - Database Disclosure	webapps	ASP
2009-12-20	phUploader 2 - Arbitrary File Upload	webapps	PHP
2009-12-20	JBC Explorer 7.20 - 'arbre.php' Cross-Site Scripting	webapps	PHP
2009-12-19	FestOs 2.2.1 - Multiple Remote File Inclusions	webapps	PHP
2009-12-19	3Com OfficeConnect Routers - Remote Denial of Service	dos	Hardware
2009-12-19	Barracuda Web Firewall 660 Firmware 7.3.1.007 - Multiple Vulnerabilities	webapps	PHP
2009-12-19	PlayMeNow 7.3/7.4 - '.M3U' Playlist File Buffer	local	Windows

2009-12-19	PHP 5.2.12/5.3.1 - 'symlink()' open_basedir Bypass	local	PHP
2009-12-19	Toast Forums 1.8 - Database Disclosure	webapps	ASP
2009-12-19	Lizard Cart - Multiple SQL Injections	webapps	PHP
2009-12-19	CFAGCMS - SQL Injection	webapps	PHP
2009-12-19	Ptag 4.0.0 - Multiple Remote File Inclusions	webapps	PHP
2009-12-19	PlayMeNow (Windows XP Universal) - '.M3U' Playlist Buffer Overflow	local	Windows
2009-12-19	Saurus CMS 4.6.4 - Multiple Remote File Inclusions	webapps	PHP
2009-12-19	Windows/x86 (XP SP3) - ShellExecuteA() Shellcode	shellcode	Windows_x86
2009-12-19	Linux/x86 - setreuid(0,0) + execve(/bin/rm /etc/shadow) Shellcode	shellcode	Linux_x86
2009-12-19	Barracuda Web Application Firewall 660 - '/cgi-mod/index.cgi' Multiple HTML Injection Vulnerabilities	remote	Hardware
2009-12-18	WordPress Plugin Pyrmont 2.x - SQL Injection	webapps	PHP
2009-12-18	gpEasy 1.5RC3 - Remote File Inclusion	webapps	PHP
2009-12-18	E-Smart Cart - SQL Injection	webapps	ASP
2009-12-18	TFTP Server 1.4 - Remote Buffer Overflow (2)	remote	Windows
2009-12-18	Schweizer NISADA Communication CMS - SQL Injection	webapps	PHP
2009-12-18	Mozilla Firefox - Location Bar Spoofing	local	Multiple
2009-12-18	Joomla! Component com_jbook - Blind SQL Injection	webapps	PHP
2009-12-18	Joomla! Component com_digistore - SQL Injection	webapps	PHP
2009-12-18	Joomla! Component com_acmisc - SQL Injection	webapps	PHP
2009-12-18	Joomla! Component com_zcalendar - Blind SQL Injection	webapps	PHP
2009-12-18	Joomla! Component Event Manager - Blind SQL Injection	webapps	PHP
2009-12-18	Joomla! Component City Portal - Blind SQL Injection	webapps	PHP
2009-12-18	F3Site 2009 - '/mod/poll.php?GLOBALS[nlang]' Traversal Local File Inclusion	webapps	PHP
2009-12-18	F3Site 2009 - '/mod/new.php?GLOBALS[nlang]' Traversal Local File Inclusion	webapps	PHP
2009-12-18	Ampache 3.4.3 - 'login.php' Multiple SQL Injections	webapps	PHP
2009-12-17	Multi-Lingual Application - Blind SQL Injection	webapps	ASP
2009-12-17	Charon Cart 3.0 - 'ContentID' Blind SQL Injection	webapps	ASP
2009-12-17	Cisco ASA 8.x - VPN SSL Module Clientless URL-list control Bypass	remote	Hardware
2009-12-17	PHP F1 Upload - Arbitrary File Upload	webapps	PHP
2009-12-17	Horde 3.3.5 - 'PHP_SELF' Cross-Site Scripting	webapps	PHP
2009-12-17	Sitecore Staging Module 5.4.0 - Authentication Bypass / File Manipulation	webapps	Windows
2009-12-17	dblog - 'dblog.mdb' Remote Database Disclosure	webapps	Windows
2009-12-17	Basic PHP Events Lister 2 - Arbitrary Add Admin	webapps	PHP
2009-12-17	Jobscript4Web 3.5 - Multiple Cross-Site Request Forgery Vulnerabilities	webapps	PHP
2009-12-17	Matrimony Script - Cross-Site Request Forgery	webapps	PHP
2009-12-17	Active Auction House 3.6 - Blind SQL Injection	webapps	ASP
2009-12-17	Pre Job Board 1.0 - Authentication Bypass	webapps	PHP
2009-12-17	Uploader by CeleronDude 5.3.0 - Arbitrary File Upload (1)	webapps	PHP
2009-12-17	Pre Jobo .NET - Authentication Bypass	webapps	ASP
2009-12-17	ActiveBuyandSell 6.2 - 'buyersend.asp?catid' Blind SQL Injection	webapps	ASP
2009-12-17	ReVou Software - SQL Injection	webapps	PHP
2009-12-17	V.H.S. Booking - 'hotel_habitaciones.php?HotelID' SQL Injection	webapps	PHP
2009-12-17	eWebquiz 8 - Blind SQL Injection	webapps	ASP
2009-12-17	jCore CMS - Cross-Site Scripting	webapps	PHP
2009-12-17	Piwik Open Flash Chart - Remote Code Execution	webapps	PHP
2009-12-17	VirtueMart - 'Product_ID' SQL Injection	webapps	PHP
2009-12-17	Rumba XM - Cross-Site Scripting	webapps	PHP
2009-12-17	[Moroccan] Web Vulnerabilities Exploiting	papers	AIX
2009-12-17	Pluxml-Blog 4.2 - '/core/admin/auth.php' Cross-Site Scripting	webapps	PHP
2009-12-17	PHP 5.2.11 - 'htmlspecialCharacters()' Malformed Multibyte Character Cross-Site Scripting (1)	remote	PHP
2009-12-17	PHP 5.2.11 - 'htmlspecialCharacters()' Malformed Multibyte Character Cross-Site Scripting (2)	remote	PHP
2009-12-17	QuiXplorer 2.x - 'lang' Local File Inclusion	webapps	PHP
2009-12-17	cPanel 11.x - 'fileop' Multiple Cross-Site Scripting Vulnerabilities	webapps	PHP
2009-12-17	Joomla! Component com_joomportfolio - 'secid' SQL Injection	webapps	PHP
2009-12-17	Pre Jobo.NET - Multiple SQL Injections	webapps	ASP
2009-12-17	jCore - 'search' Cross-Site Scripting	webapps	Java
2009-12-16	family connections 2.1.3 - Multiple Vulnerabilities	webapps	PHP
2009-12-16	Monkey HTTP Daemon < 0.9.3 - Denial of Service	dos	Linux
2009-12-16	JM CMS 1.0 - Authentication Bypass	webapps	ASP
2009-12-16	Recipe Script 5.0 - Arbitrary File Upload / Cross-Site Request Forgery / Cross-Site Scripting	webapps	PHP
2009-12-16	V-SpacePal - SQL Injection	webapps	ASP
2009-12-16	Article Directory - SQL Injection	webapps	PHP
2009-12-16	QuickHeal AntiVirus 2010 - Local Privilege Escalation	local	Windows
2009-12-16	RecipePal 1.0 - SQL Injection	webapps	ASP
2009-12-16	iSupport 1.8 - Cross-Site Scripting / Local File Inclusion	webapps	PHP
2009-12-16	OSSIM 2.1.5 - SQL Injection	webapps	PHP
2009-12-16	OSSIM 2.1.5 - Remote Command Execution	webapps	PHP
2009-12-16	OSSIM 2.1.5 - Arbitrary File Upload	webapps	PHP
2009-12-16	Codefixer Membership - Remote Database Disclosure	webapps	ASP
2009-12-16	GuestBookPro Script - Remote Database Disclosure	webapps	ASP
2009-12-16	Kaspersky Lab (Multiple Products) - Local Privilege Escalation	local	Windows
2009-12-16	Drupal Module Sections - Cross-Site Scripting	webapps	PHP
2009-12-16	VideoCache 1.9.2 - 'vccleaner' Local Privilege Escalation	local	Linux
2009-12-16	WordPress Plugin WP-Forum 2.3 - SQL Injection / Blind SQL Injection	webapps	PHP
2009-12-16	Google Picasa 3.5 - Local Buffer Overflow (Denial of Service) (PoC)	dos	Windows
2009-12-16	Pre Hospital Management System - Authentication Bypass	webapps	PHP
2009-12-16	WHMCompleteSolution CMS - SQL Injection	webapps	PHP
2009-12-16	D-Tendencia Bt 2008 - SQL Injection	webapps	PHP
2009-12-16	PhpLinkExchange 1.02 - Cross-Site Scripting / Upload	webapps	PHP
2009-12-16	Digiappz Freekot - Authentication Bypass	webapps	ASP
2009-12-16	File Share 1.0 - SQL Injection	webapps	PHP
2009-12-16	Pre Hospital Management System - 'department.php?id' SQL Injection	webapps	PHP
2009-12-16	eUploader PRO 3.1.1 - Cross-Site Request Forgery / Cross-Site Scripting	webapps	PHP
2009-12-16	Omnistar Affiliate - Authentication Bypass	webapps	PHP
2009-12-16	Texas Rankem - 'player_id' SQL Injection	webapps	ASP
2009-12-16	Pre Hotels&Resorts Management System - Authentication Bypass	webapps	ASP
2009-12-16	ASPGuest - 'edit.asp?ID' Blind SQL Injection	webapps	ASP
2009-12-16	Smart ASPad - 'campaignEdit.asp?CCam' Blind SQL Injection	webapps	ASP
2009-12-16	[Persian] Common Attacks Against Wireless Networks - Part I	papers	Multiple
2009-12-16	Drupal Module Sections 5.x-1.2/6.x-1.2 - HTML Injection	webapps	PHP
2009-12-16	iSupport 1.8 - 'ticket_function.php' Multiple Cross-Site Scripting Vulnerabilities	webapps	PHP
2009-12-16	iSupport 1.8 - 'index.php?which' Cross-Site Scripting	webapps	PHP
2009-12-16	Article Directory - 'login.php' SQL Injection	webapps	PHP
2009-12-16	Linux Kernel < 2.6.28 - 'fasync_helper()' Local Privilege Escalation	local	Linux
2009-12-16	BOLDfx eUploader 3.1.1 - 'admin.php' Multiple Remote Vulnerabilities	webapps	PHP
2009-12-16	BOLDfx Recipe Script 5.0 - Multiple Remote Vulnerabilities	webapps	PHP
2009-12-15	EEGshop 1.2 - SQL Injection	webapps	ASP
2009-12-15	Linkster - PHP/MySQL SQL Injection	webapps	PHP
2009-12-15	Ez News Manager / Pro - Cross-Site Request Forgery (Change Admin Password)	webapps	PHP
2009-12-15	SitioOnline - SQL Injection	webapps	PHP
2009-12-15	Ez Faq Maker - Multiple Vulnerabilities	webapps	PHP
2009-12-15	DesigNsbyjm CMS 1.0 - 'PageId' SQL Injection	webapps	ASP
2009-12-15	ClickTrackerASP - 'sitedetails.asp?siteid' SQL Injection	webapps	ASP
2009-12-15	LinkPal 1.0 - SQL Injection	webapps	ASP
2009-12-15	Ez Blog 1.0 - Cross-Site Scripting / Cross-Site Request Forgery	webapps	PHP
2009-12-15	Ez Cart 1.0 - Multiple Cross-Site Request Forgery Vulnerabilities	webapps	PHP
2009-12-15	DubSite CMS 1.0 - Cross-Site Request Forgery	webapps	PHP
2009-12-15	iGaming CMS 1.5 - Cross-Site Request Forgery	webapps	PHP
2009-12-15	GalleryPal FE 1.5 - Authentication Bypass	webapps	ASP
2009-12-15	SitePal 1.1 - Authentication Bypass	webapps	ASP
2009-12-15	Horde 3.3.5 - Cross-Site Scripting	webapps	PHP
2009-12-15	Horde 3.3.5 - '/Administration Interface admin/cmdshell.php?PATH_INFO' Cross-Site Scripting	webapps	PHP
2009-12-15	Horde 3.3.5 - '/Administration Interface admin/sqlshell.php?PATH_INFO' Cross-Site Scripting	webapps	PHP
2009-12-15	APC Network Management Card - Cross-Site Request Forgery / Cross-Site Scripting	remote	Multiple
2009-12-15	Scriptsez Ez FAQ Maker 1.0 - Cross-Site Scripting / Cross-Site Request Forgery	webapps	PHP
2009-12-14	Ez Guestbook 1.0 - Multiple Vulnerabilities	webapps	PHP
2009-12-14	Automne.ws CMS 4.0.0rc2 - Multiple Remote File Inclusions	webapps	PHP
2009-12-14	eoCMS 0.9.03 - Remote File Inclusion	webapps	PHP
2009-12-14	RM Downloader 3.0.2.1 - '.m3u' Local Stack Overflow	local	Windows
2009-12-14	Redmine 0.8.6 - Cross-Site Request Forgery (Add Admin)	webapps	Multiple

2009-12-14	Quartz Concept Content Manager 3.00 - Authentication Bypass	webapps	ASP
2009-12-14	[WS] upload - Arbitrary File Upload	webapps	Linux
2009-12-14	Digital Hive - Multiple Vulnerabilities	webapps	Linux
2009-12-14	Maxs AJAX File Uploader - Arbitrary File Upload	webapps	Windows
2009-12-14	myPHPupload 0.5.1 - Arbitrary File Upload	webapps	Linux
2009-12-14	NAS Uploader 1.0/1.5 - Arbitrary File Upload	webapps	Linux
2009-12-14	Zabbix Agent < 1.6.7 - Remote Bypass	webapps	Multiple
2009-12-14	Zabbix Server - Multiple Vulnerabilities	webapps	Multiple
2009-12-14	Mail Manager Pro - Cross-Site Request Forgery (Change Admin Password)	webapps	Linux
2009-12-14	Savant Web Server 3.1 - Remote Buffer Overflow (3)	remote	Windows
2009-12-14	Link Up Gold - Cross-Site Request Forgery (Add Admin)	webapps	PHP
2009-12-14	Smart PHP Subscriber - Multiple Disclosure Vulnerabilities	webapps	PHP
2009-12-14	AdManagerPro - Cross-Site Request Forgery (Add Admin)	webapps	PHP
2009-12-14	Ez Poll Hoster - Multiple Cross-Site Scripting / Cross-Site Request Forgery Vulnerabilities	webapps	PHP
2009-12-14	Easy Banner Pro - Cross-Site Request Forgery (Add Admin)	webapps	PHP
2009-12-14	Text Exchange Pro - Cross-Site Request Forgery (Add Admin)	webapps	PHP
2009-12-14	mini Hosting Panel - Cross-Site Request Forgery (Change Admin Settings)	webapps	PHP
2009-12-14	Tender System 0.9.5b - Local File Inclusion	webapps	PHP
2009-12-14	WSCreator 1.1 - Blind SQL Injection	webapps	PHP
2009-12-14	Traidnt Discovery - Cross-Site Request Forgery (Create Staff Account)	webapps	PHP
2009-12-14	Oracle E-Business Suite - Multiple Vulnerabilities	webapps	Multiple
2009-12-14	HMS HICP Protocol + Intellicom - 'NetBiterConfig.exe' Remote Buffer Overflow	remote	Hardware
2009-12-14	Windows (XP SP2) - PEB ISbeingdebugged Beep Shellcode (56 bytes)	shellcode	Windows
2009-12-14	Intellicom 1.3 - 'NetBiterConfig.exe Hostname' Data Remote Stack Buffer Overflow (PoC)	dos	Windows
2009-12-14	Million Pixel Script 3 - 'pa' Cross-Site Scripting	webapps	PHP
2009-12-14	Ruby on Rails 2.3.5 - 'protect_from_forgery' Cross-Site Request Forgery	remote	Linux
2009-12-14	phpFaber CMS 1.3.36 - 'module.php' Cross-Site Scripting	webapps	PHP
2009-12-14	Oracle E-Business Suite 11i - Multiple Remote Vulnerabilities	remote	Multiple
2009-12-14	Ez Cart - 'sid' Cross-Site Scripting	webapps	PHP
2009-12-14	Ez Poll Hoster - Multiple Cross-Site Scripting Vulnerabilities	webapps	PHP
2009-12-14	The Next Generation of Genealogy Sitebuilding - 'searchform.php' Cross-Site Scripting	webapps	PHP
2009-12-14	Ez Cart - 'index.php' Cross-Site Scripting	webapps	PHP
2009-12-14	TenderSystem 0.9.5 - 'main.php' Multiple Local File Inclusions	webapps	PHP
2009-12-13	Acc Auto Dealer Script 5.0 - Persistent Cross-Site Scripting / SQL Backup	webapps	PHP
2009-12-13	Uploadscript 1.0 - Multiple Vulnerabilities	webapps	PHP
2009-12-13	Interspire Shopping Cart - Full Path Disclosure	webapps	PHP
2009-12-13	AccStatistics 1.1 - Cross-Site Request Forgery (Change Admin Settings)	webapps	PHP
2009-12-13	Joomla! Component com_virtuemart 1.0 - 'Product_ID' SQL Injection	webapps	PHP
2009-12-13	SpireCMS 2.0 - SQL Injection	webapps	PHP
2009-12-13	Acc PHP eMail 1.1 - Cross-Site Request Forgery	webapps	PHP
2009-12-13	Frog CMS 0.9.5 - Cross-Site Request Forgery	webapps	PHP
2009-12-13	Piwigo 2.0.6 - Multiple Vulnerabilities	webapps	PHP
2009-12-13	Ele Medios CMS - SQL Injection	webapps	PHP
2009-12-13	Chipmunk Board Script 1.x - Multiple Cross-Site Request Forgery Vulnerabilities	webapps	PHP
2009-12-13	Joomla! Component com_jcalpro 1.5.3.6 - Remote File Inclusion	webapps	PHP
2009-12-13	[Arabic] Overflow Exploitation	papers	AIX
2009-12-13	Model Agency Manager - 'search_process.php' Cross-Site Scripting	webapps	PHP
2009-12-13	WS Interactive Automne 4.0 - '228-recherche.php' Cross-Site Scripting	webapps	PHP
2009-12-13	Zeecareers 2.0 - Cross-Site Scripting / Authentication Bypass	webapps	PHP
2009-12-12	HP OpenView Network Node Manager (OV NNM) 7.53 - 'ovalarm.exe' CGI Remote Buffer Overflow	remote	Windows
2009-12-12	Miniweb 2.0 - Full Path Disclosure	webapps	PHP
2009-12-12	Mozilla Codesighs - Memory Corruption	local	Linux
2009-12-12	ZeeCareers 2.x - PHP HR Manager Website (Cross-Site Scripting / Authentication Bypass)	webapps	PHP
2009-12-12	[Albanian] Shell Over LFI	papers	Multiple
2009-12-12	gif2png 2.5.2 - Remote Buffer Overflow	dos	Linux
2009-12-11	Billwerx RC 3.1 - Multiple Vulnerabilities	webapps	Windows
2009-12-11	oBlog - Persistent Cross-Site Scripting / Cross-Site Request Forgery / Admin Brute Force	webapps	PHP
2009-12-11	Sunbird 0.9 - Array Overrun Code Execution	remote	Windows
2009-12-11	Digital Scribe 1.4.1 - Multiple SQL Injections	webapps	PHP
2009-12-11	E-Store - SQL Injection	webapps	PHP
2009-12-11	Chipmunk NewsLetter - Cross-Site Request Forgery	webapps	PHP
2009-12-11	Illogator Shop - SQL Injection Bypass	webapps	PHP
2009-12-11	phpCollegeExchange 0.1.5c - Multiple SQL Injections	webapps	PHP
2009-12-11	XAMPP 1.7.2 - Change Administrative Password	webapps	PHP
2009-12-11	Millenium MP3 Studio 2.0 - '.pls' Universal Stack Overflow (Metasploit)	local	Windows
2009-12-11	B2C Booking Centre Systems - SQL Injection	webapps	PHP
2009-12-10	Joomla! Component com_jsjobs 1.0.5.6 - SQL Injection	webapps	PHP
2009-12-10	Joomla! Component com_jphoto - 'id' SQL Injection	webapps	PHP
2009-12-10	Free ASP Upload - Arbitrary File Upload	webapps	ASP
2009-12-10	Joomla! Component Mamboleto 2.0 RC3 - Remote File Inclusion	webapps	PHP
2009-12-10	PHP Inventory 1.2 - Authentication Bypass	webapps	PHP
2009-12-10	Xenorate 2.50 - '.xpl' Universal Local Buffer Overflow (SEH) (1)	local	Windows
2009-12-10	OPMANAGER - Blind SQL Injection / XPath Injection	webapps	AIX
2009-12-10	Xenorate 2.50 - '.xpl' Universal Local Buffer Overflow (SEH) (Metasploit)	local	Windows
2009-12-10	Easy RM to MP3 Converter 2.7.3.700 - Local Buffer Overflow	local	Windows
2009-12-10	SAP GUI for Windows - 'sapirrfc.dll' ActiveX Overflow	remote	Windows
2009-12-10	Nuggetz CMS 1.0 - Remote Code Execution	webapps	PHP
2009-12-10	phpLDAPadmin - Local File Inclusion	webapps	PHP
2009-12-10	Zeeways ZeeJobsite - 'basic_search_result.php' Cross-Site Scripting	webapps	PHP
2009-12-09	Audio Workstation 6.4.2.4.0 - '.pls' Universal Local Buffer Overflow	local	Windows
2009-12-09	Real Estate Portal X.0 - Authentication Bypass	webapps	PHP
2009-12-09	THOMSON TG585n 7.4.3.2 - 'user.ini' Arbitrary Disclosure	remote	Hardware
2009-12-09	Audio Workstation 6.4.2.4.3 - '.pls' Local Buffer Overflow (Metasploit)	local	Windows
2009-12-09	TestLink Test Management and Execution System - Multiple Cross-Site Scripting / Injection Vulnerabilities	webapps	PHP
2009-12-09	Eureka Email 2.2q - ERR Remote Buffer Overflow (Metasploit) (1)	remote	Windows
2009-12-09	Invision Power Board (IP.Board) 3.0.3 - '.txt' MIME-Type Cross-Site Scripting	webapps	PHP
2009-12-08	IRAN N.E.T E-Commerce Group - SQL Injection	webapps	PHP
2009-12-08	Viscacha 0.8 Gold - Persistent Cross-Site Scripting	webapps	PHP
2009-12-08	Joomla! Component com_job - 'showMoreUse' SQL Injection	webapps	PHP
2009-12-08	Alqatari group 1.0 < 5.0 - 'id' SQL Injection	webapps	PHP
2009-12-08	AlefMentor 2.0 < 5.0 - 'id' SQL Injection	webapps	PHP
2009-12-07	HTML Help Workshop 4.74 - '.hhp' Local Buffer Overflow (Metasploit)	local	Windows
2009-12-07	Chipmunk NewsLetter - Persistent Cross-Site Scripting	webapps	PHP
2009-12-07	Polipo 1.0.4 - Remote Memory Corruption (PoC)	dos	Linux
2009-12-07	gAlan 0.2.1 - Local Buffer Overflow (1)	local	Windows
2009-12-07	SiSplet CMS 2008-01-24 - Multiple Remote File Inclusions	webapps	PHP
2009-12-07	Adobe Illustrator CS4 14.0.0 - eps Universal Buffer Overflow (Metasploit)	local	Windows
2009-12-07	gAlan - '.galan' Universal Buffer Overflow	local	Windows
2009-12-07	gAlan 0.2.1 - Universal Buffer Overflow (Metasploit)	local	Windows
2009-12-07	Barracuda IMFirewall 620 - Multiple Vulnerabilities	webapps	Hardware
2009-12-07	MarieCMS 0.9 - Local File Inclusion / Remote File Inclusion / Cross-Site Scripting	webapps	PHP
2009-12-07	[German] Computer Virus Methods	papers	Multiple
2009-12-07	[German] Cross Site Scripting	papers	AIX
2009-12-07	Advanced Image Hosting Script 2.x - 'search.php' Cross-Site Scripting	webapps	PHP
2009-12-06	AROUNDMe 1.1 - 'language_path' Remote File Inclusion	webapps	PHP
2009-12-06	Elkagroup - SQL Injection	webapps	PHP
2009-12-06	iWeb HTTP Server - Directory Traversal	webapps	Windows
2009-12-06	PointDev IDEAL Administration 2009 9.7 - Local Buffer Overflow (Metasploit)	local	Windows
2009-12-06	VideoLAN VLC Media Player 1.0.3 - 'smb://' URI Handling Remote Stack Overflow (PoC)	dos	Windows
2009-12-06	VideoLAN VLC Media Player 1.0.3 (OSX/Linux) - RTSP Buffer Overflow (PoC)	dos	Multiple
2009-12-06	TANDBERG F8.2 / F8.0 / F7.2 / F6.3 - Remote Denial of Service	dos	Hardware
2009-12-06	WinVNC Web Server 3.3.3r7 - GET Overflow (Metasploit)	remote	Windows
2009-12-05	PointDev IDEAL Administration 2009 9.7 - Local Buffer Overflow	local	Windows
2009-12-05	M3U To ASX-WPL 1.1 - '.m3u' Local Buffer Overflow	local	Windows
2009-12-05	Microsoft HTML Help Workshop 4.74 - '.hhp' Local Buffer Overflow (1)	local	Windows
2009-12-05	Audacity 1.2.6 - '.gro' Local Buffer Overflow	local	Windows
2009-12-05	HTML Help Workshop 4.74 - hhp Universal Buffer Overflow	local	Windows
2009-12-05	phpShop 0.8.1 - Multiple Vulnerabilities	webapps	PHP
2009-12-05	WordPress Plugin Image Manager - Arbitrary File Upload	webapps	PHP
2009-12-05	Remote Exploitation	papers	AIX

2009-12-04	Jasc Paint Shop Pro 8 - Local Universal Buffer Overflow	local	Windows
2009-12-04	GeN3 forum 1.3 - SQL Injection	webapps	PHP
2009-12-04	427BB 2.3.2 - SQL Injection	webapps	PHP
2009-12-04	Core FTP Server 1.0 Build 319 - Denial of Service	dos	Windows
2009-12-04	Invision Power Board 2.3.6/3.0.4 - Local File Inclusion / SQL Injection	webapps	PHP
2009-12-04	UBBCentral UBB.Threads 7.5.4 2 - Multiple File Inclusions	webapps	PHP
2009-12-04	Achievo 1.4.2 - Arbitrary File Upload	webapps	PHP
2009-12-04	Achievo 1.4.2 - Persistent Cross-Site Scripting	webapps	PHP
2009-12-04	Joomla! Component com_joomgallery 1.5.x - &func Incorrect Flood Filter	webapps	PHP
2009-12-04	BM Classifieds Ads - SQL Injection	webapps	PHP
2009-12-04	Joomla! Component yt_color YOOOtheme - Cross-Site Scripting / Cookie Stealing	webapps	PHP
2009-12-04	Linux/x86 - setuid(0) + execve(/sbin/poweroff -f) Shellcode (47 bytes)	shellcode	Linux_x86
2009-12-04	Linux/x86 - setuid(0) + /bin/cat /etc/shadow Shellcode (49 bytes)	shellcode	Linux_x86
2009-12-04	Linux/x86 - chmod 0666 /etc/shadow + exit() Shellcode (33 bytes)	shellcode	Linux_x86
2009-12-04	[Spanish] Importance of img Tags on Web Security	papers	Multiple
2009-12-04	Linux/x86 - execve() Shellcode (51 bytes)	shellcode	Linux_x86
2009-12-04	WordPress Plugin Yoast Google Analytics 3.2.4 - 404 Error Page Cross-Site Scripting	webapps	PHP
2009-12-04	Joomla! Component YOOtheme Warp5 - 'yt_color' Cross-Site Scripting	webapps	PHP
2009-12-04	Joomla! Component You!Hostit! 1.0.1 Template - Cross-Site Scripting	webapps	PHP
2009-12-04	Clixint Technologies DPI - Cross-Site Scripting	webapps	PHP
2009-12-03	Huawei MT882 Modem/Router - Multiple Vulnerabilities	webapps	Hardware
2009-12-03	Thatware 0.5.3 - Multiple Remote File Inclusions	webapps	PHP
2009-12-03	Adobe Illustrator CS4 14.0.0 - Encapsulated Postscript '.eps' Local Buffer Overflow	local	Windows
2009-12-03	OrzHTTPd - Format String	remote	Linux
2009-12-03	SAPID SHOP 1.3 - Remote File Inclusion	webapps	PHP
2009-12-03	Theeta CMS - Multiple Vulnerabilities	webapps	PHP
2009-12-03	DAZ Studio - Arbitrary Command Execution	local	Windows
2009-12-03	PHP 5.2.10/5.3.0 - 'ini_restore()' Memory Information Disclosure	local	PHP
2009-12-03	Vivid Ads Shopping Cart - 'prodid' SQL Injection	webapps	PHP
2009-12-03	Discovering and Exploiting a remote buffer overflow in an FTP server - PART 1	papers	Multiple
2009-12-03	Xfig and Transfig 3.2.5 - '.fig' Remote Buffer Overflow	remote	Linux
2009-12-02	Simple Machines Forum (SMF) 1.1.10/2.0 RC2 - Multiple Vulnerabilities	webapps	PHP
2009-12-02	Kide Shoutbox 0.4.6 - Cross-Site Scripting / AXFR	webapps	PHP
2009-12-02	CoreHTTP Web server 0.5.3.1 - Off-by-One Buffer Overflow	dos	Linux
2009-12-01	Golden FTP Server 4.30 - File Deletion	remote	Windows
2009-12-01	Ciamos CMS 0.9.5 - 'module_path' Remote File Inclusion	webapps	PHP
2009-12-01	Robert Zimmerman PHP / MySQL Scripts - Authentication Bypass	webapps	PHP
2009-12-01	dotDefender 3.8-5 - Remote Command Execution	webapps	Linux
2009-12-01	ISPworker 1.23 - Remote File Disclosure	webapps	Linux
2009-12-01	Quate CMS 0.3.5 - Local/Remote File Inclusion	webapps	Linux
2009-12-01	Oracle - SYS.LT.MERGEWORKSPACE Evil Cursor	local	Multiple
2009-12-01	Oracle - SYS.LT.COMPRESSWORKSPACETREE Evil Cursor	local	Multiple
2009-12-01	Oracle - ctxsys.drvxtabc.create_tables Evil Cursor	local	Multiple
2009-12-01	Oracle - ctxsys.drvxtabc.create_tables	local	Multiple
2009-12-01	Oracle - SYS.LT.REMOVEWORKSPACE Evil Cursor	local	Multiple
2009-12-01	Haihaisoft Universal Player 1.4.8.0 - 'URL' Property ActiveX Buffer Overflow	remote	Windows
2009-12-01	Joomla! Component Joaktree 1.0 - SQL Injection	webapps	PHP
2009-12-01	Joomla! Component MojoBlog 0.15 - Multiple Remote File Inclusions	webapps	PHP
2009-12-01	Public Media Manager - Remote File Inclusion	webapps	PHP
2009-12-01	Joomla! Component ProofReader 1.0 RC6 - Cross-Site Scripting	webapps	PHP
2009-12-01	Apache Tomcat 3.2.1 - 404 Error Page Cross-Site Scripting	webapps	Multiple
2009-12-01	HackThisZine (HTZ) #8 - Beautiful Technolust	papers	eZine
2009-12-01	phpMyFAQ < 2.5.4 - Multiple Cross-Site Scripting Vulnerabilities	webapps	PHP
2009-11-30	Joomla! Component MusicGallery - SQL Injection	webapps	PHP
2009-11-30	Joomla! Component Quick News - SQL Injection	webapps	PHP
2009-11-30	Eshopbuilde CMS - SQL Injection	webapps	ASP
2009-11-30	Xxasp 3.3.2 - SQL Injection	webapps	ASP
2009-11-30	FreeBSD 8.0 Run-Time Link-Editor (RTLD) - Local Privilege Escalation	local	BSD
2009-11-30	WordPress Plugin WP-Polls 2.x - Incorrect Flood Filter	webapps	PHP
2009-11-30	XM Easy Professional FTP Server 5.8.0 - Denial of Service	dos	Windows
2009-11-30	ita-forum 5.1.32 - SQL Injection	webapps	PHP
2009-11-30	[Portuguese] Smashing the Stack for Fun and Profit	papers	Multiple
2009-11-30	[Portuguese] Linux Security Banners	papers	Multiple
2009-11-30	Content Module 0.5 for XOOPS - 'id' SQL Injection	webapps	PHP
2009-11-30	SmartMedia Module 0.85 Beta for XOOPS - 'categoryId' Cross-Site Scripting	webapps	PHP
2009-11-30	Elxis - 'Filename' Directory Traversal	webapps	PHP
2009-11-29	SweetRice 0.5.3 - Remote File Inclusion	webapps	PHP
2009-11-29	Sugar CRM 5.5.0.rc2/5.2.0j - Multiple Vulnerabilities	webapps	PHP
2009-11-29	AdaptCMS Lite 1.5 - Remote File Inclusion	webapps	PHP
2009-11-29	WordPress Plugin WP-phpList 2.10.2 - 'unsubscribeemail' Cross-Site Scripting	webapps	PHP
2009-11-28	Joomla! Component com_lyftenbloggie 1.04 - SQL Injection	webapps	PHP
2009-11-28	Millenium MP3 Studio 2.0 - 'pls' Local Buffer Overflow	local	Windows
2009-11-28	Uploaderr 1.0 File Hosting Script - Arbitrary File Upload	webapps	PHP
2009-11-28	MuPDF < 20091125231942 - 'pdf_shade4.c' Multiple Stack Buffer Overflows	local	Windows
2009-11-28	phpBazar 2.1.1fix - 'cid' SQL Injection	webapps	PHP
2009-11-28	Reverse Honey Trap - Striking Deep inside Online Web Antivirus Engines and Analyzers	papers	Multiple
2009-11-27	PHP < 5.3.1 - 'MultiPart/form-data' Denial of Service (Python)	dos	PHP
2009-11-27	Micronet SP1910 Data Access Controller UI - Cross-Site Scripting / HTML Code Injection	webapps	Hardware
2009-11-27	PHP-Nuke 8.0 - News Module Cross-Site Scripting / HTML Code Injection	webapps	PHP
2009-11-26	Cacti 0.8.7e - Multiple Vulnerabilities	webapps	PHP
2009-11-26	Eureka Email Client - Remote Buffer Overflow	remote	Windows
2009-11-26	Flashden - Multiple Arbitrary File Uploads	webapps	PHP
2009-11-26	CyberCMS - 'faq.php' SQL Injection	webapps	PHP
2009-11-25	Serenity Audio Player Playlist - '.m3u' Local Buffer Overflow	local	Windows
2009-11-25	Joomla! Component com_mygallery - 'cid' SQL Injection	webapps	PHP
2009-11-25	WordPress Plugin WP-Cumulus 1.20 - Full Path Disclosure / Cross-Site Scripting	webapps	PHP
2009-11-25	Fake Hit Generator 2.2 - Arbitrary File Upload	webapps	PHP
2009-11-25	Radio istek scripti 2.5 - Remote Configuration Disclosure	webapps	PHP
2009-11-25	Joomla! Component com_gcalendar 1.1.2 - 'gcid' SQL Injection	webapps	PHP
2009-11-25	phpBazar-2.1.1fix - Remote Administration-Panel	webapps	PHP
2009-11-25	OpenCSP - Multiple Remote File Inclusions	webapps	PHP
2009-11-25	Power BB 1.8.3 - Remote File Inclusions	webapps	PHP
2009-11-24	kr-web 1.1b2 - Remote File Inclusion	webapps	PHP
2009-11-24	NukeHall 0.3 - Multiple Remote File Inclusions	webapps	PHP
2009-11-24	outreach project tool 1.2.6 - Remote File Inclusion	webapps	PHP
2009-11-24	phptraverse 0.8.0 - Remote File Inclusion	webapps	PHP
2009-11-24	pointcomma 3.8b2 - Remote File Inclusion	webapps	PHP
2009-11-24	XM Easy Personal FTP Server 5.8.0 - Remote Denial of Service	dos	Windows
2009-11-24	W3infotech - Authentication Bypass	webapps	PHP
2009-11-24	TYPSoft FTP Server 1.10 - APPE DELE Denial of Service	dos	Windows
2009-11-24	Quick.Cart 3.4 / Quick.CMS 2.4 - Cross-Site Request Forgery	webapps	PHP
2009-11-24	Python < 2.5.2 Imageop Module - 'imageop.crop()' Buffer Overflow	dos	Multiple
2009-11-24	OSI Codes PHP Live! Support 3.1 - Remote File Inclusion	webapps	PHP
2009-11-24	WordPress Plugin Firestats 1.0.2 - Multiple Cross-Site Scripting / Authentication Bypass Vulnerabilities (1)	webapps	PHP
2009-11-24	WordPress Plugin Firestats 1.0.2 - Multiple Cross-Site Scripting / Authentication Bypass Vulnerabilities (2)	webapps	PHP
2009-11-24	Quick.Cart 3.4 / Quick.CMS 2.4 - Delete Function Cross-Site Request Forgery	webapps	PHP
2009-11-24	klinza Professional CMS 5.0.1 - 'menulast.php' Local File Inclusion	webapps	PHP
2009-11-23	Autodesk SoftImage Scene TOC - Arbitrary Command Execution	local	Windows
2009-11-23	Autodesk Maya Script - Nodes Arbitrary Command Execution	local	Windows
2009-11-23	Joomla! Component mygallery - 'farbinform_krell' SQL Injection	webapps	PHP
2009-11-23	[Spanish] Remote Code Execution V1	papers	Multiple
2009-11-23	Autodesk SoftImage 7.0 Scene - '.TOC' File Remote Code Execution	remote	Windows
2009-11-23	Joomla! 1.5.x - 404 Error Page Cross-Site Scripting	webapps	PHP
2009-11-23	MySQL 6.0.9 - SELECT Statement WHERE Clause Sub-query Denial of Service	dos	Linux
2009-11-23	MySQL 6.0.9 - 'GeomFromWKB()' Function First Argument Geometry Value Handling Denial of Service	dos	Linux
2009-11-22	PHP - MultiPart Form-Data Denial of Service (PoC)	dos	PHP
2009-11-21	Betsy CMS versions 3.5 - Local File Inclusion	webapps	PHP
2009-11-21	Cisco VPN Client - Integer Overflow Denial of Service	dos	Windows
2009-11-21	Joomla! Component Com_Joomclip - 'cat' SQL Injection	webapps	PHP
2009-11-21	TEKUVA - Password Reminder Authentication Bypass	local	Windows

2009-11-21	AIMP2 Audio Converter 2.53 build 330 - Playlist '.pls' Unicode Buffer Overflow	local	Windows
2009-11-21	Exploit Writing Tutorial Part 1 - Stack Based Overflows	papers	Multiple
2009-11-21	Exploit Writing Tutorial Part 2 - Jump to Shellcode	papers	Multiple
2009-11-21	Exploit Writing Tutorial Part 3 - SEH	papers	Multiple
2009-11-21	Exploit Writing Tutorial Part 3b - SEH Based Exploits	papers	Multiple
2009-11-21	Exploit Writing Tutorial Part 4 - From Exploit to Metasploit the Basics	papers	Multiple
2009-11-21	Exploit Writing Tutorial Part 5 - Debugger Modules in Exploit Development	papers	Multiple
2009-11-21	Exploit Writing Tutorial Part 6 - Bypassing Stack Cookies, SAFESEH, Hardware DEP and ASLR	papers	Multiple
2009-11-21	Exploit Writing Tutorial Part 7 - Unicode, from 0x00410041 to Calc	papers	Multiple
2009-11-21	Cacti 0.8.x - 'graph.php' Multiple Cross-Site Scripting Vulnerabilities	webapps	PHP
2009-11-20	Microsoft Internet Explorer 6/7 - CSS Handling Denial of Service	dos	Windows
2009-11-20	Using XSS to bypass CSRF protection	papers	Multiple
2009-11-20	Opera Web Browser 10.01 - 'dtoa()' Remote Code Execution	remote	Multiple
2009-11-20	KDE 4.3.3 - KDELibs 'dtoa()' Remote Code Execution	remote	Linux
2009-11-19	Joomla! 1.5.12 TinyMCE - Remote Code Execution (via Arbitrary File Upload)	webapps	PHP
2009-11-19	KDE KDELibs 4.3.3 - Remote Array Overrun	dos	Linux
2009-11-19	SeaMonkey 1.1.8 - Remote Array Overrun	dos	BSD
2009-11-19	K-Meleon 1.5.3 - Remote Array Overrun	dos	BSD
2009-11-19	Opera 10.01 - Remote Array Overrun	dos	BSD
2009-11-19	Foxit Reader - COM Objects Memory Corruption Remote Code Execution	dos	Windows
2009-11-19	CubeCart 3.0.4/4.3.6 - 'ProductID' SQL Injection	webapps	PHP
2009-11-18	Shoutbox 1.0 - HTML / Cross-Site Scripting Injection	webapps	PHP
2009-11-18	Xerver 4.31/4.32 - HTTP Response Splitting	webapps	Multiple
2009-11-18	Baby Web Server 2.7.2 - found Denial of Service	dos	Windows
2009-11-18	Joomla! Extension iF Portfolio Nexus - SQL Injection	webapps	PHP
2009-11-18	IBM SolidDB - Invalid Error Code	dos	Windows
2009-11-17	Avast! 4.8.1351.0 AntiVirus - 'aswMon2.sys' Kernel Memory Corruption	dos	Windows
2009-11-17	FtpXQ 3.0 - (Authenticated) Remote Denial of Service	dos	Windows
2009-11-17	JBS 2.0 / JBSX - Administration Panel Bypass / Arbitrary File Upload	webapps	ASP
2009-11-17	Home FTP Server - 'MKD' Directory Traversal	remote	Windows
2009-11-17	Novell eDirectory - HTTPSTK Login Stack Overflow	dos	Windows
2009-11-17	TelebidAuctionScript - 'aid' Blind SQL Injection	webapps	PHP
2009-11-17	ActiveTrade 2.0 - 'default.asp' Blind SQL Injection	webapps	ASP
2009-11-17	ActiveBids - 'default.asp' Blind SQL Injection	webapps	ASP
2009-11-17	HP OpenView Network Node Manager (OV NNM) 7.53 - Invalid DB Error Code	dos	Windows
2009-11-17	JiRo's (Multiple Products) - '/files/login.asp' Multiple SQL Injections	webapps	ASP
2009-11-16	Dow Group - 'new.php' SQL Injection	webapps	PHP
2009-11-16	Home FTP Server 1.10.1.139 - 'SITE INDEX' Remote Denial of Service	dos	Windows
2009-11-16	AIMP2 Audio Converter - Playlist Overflow (SEH)	local	Windows
2009-11-16	Alteon OS BBI (Nortell) - Cross-Site Scripting / Cross-Site Request Forgery	webapps	Hardware
2009-11-16	Novell eDirectory 883ftf3 - nldap module Denial of Service	dos	Windows
2009-11-16	Novell eDirectory 8.8 SP5 - iConsole Buffer Overflow	remote	Windows
2009-11-16	Hewlett-Packard (HP) Power Manager Administration Power Manager Administration - Universal Buffer Overflow	remote	Windows
2009-11-16	telepark wiki 2.4.23 - Multiple Vulnerabilities	webapps	PHP
2009-11-16	Apple Safari 4.0.3 (Windows x86) - 'CSS' Remote Denial of Service (1)	dos	Windows_x86
2009-11-16	Mozilla Thunderbird 2.0.0.23 Mozilla SeaMonkey 2.0 - 'jar50.dll' Null Pointer Dereference	dos	Windows
2009-11-16	Cifshanghai - 'chanpin_info.php' CMS SQL Injection	webapps	PHP
2009-11-16	phpMyBackupPro - Arbitrary File Download	webapps	PHP
2009-11-16	Simplog 0.9.3.2 - Multiple Vulnerabilities	webapps	PHP
2009-11-16	kalimat new system 1.0 - 'index.php' SQL Injection	webapps	PHP
2009-11-16	PHD Help Desk 1.43 - 'area.php' Multiple Cross-Site Scripting Vulnerabilities	webapps	PHP
2009-11-16	PHD Help Desk 1.43 - 'solic_display.php?q_registros' Cross-Site Scripting	webapps	PHP
2009-11-16	PHD Help Desk 1.43 - 'area_list.php' Multiple Cross-Site Scripting Vulnerabilities	webapps	PHP
2009-11-16	PHD Help Desk 1.43 - 'atributo.php?URL' Cross-Site Scripting	webapps	PHP
2009-11-16	PHD Help Desk 1.43 - 'atributo_list.php' Multiple Cross-Site Scripting Vulnerabilities	webapps	PHP
2009-11-16	PHD Help Desk 1.43 - 'caso_insert.php?URL' Cross-Site Scripting	webapps	PHP
2009-11-16	Avast! AntiVirus 4.8.1356 - 'aswRdr.sys' Driver Privilege Escalation	local	Windows
2009-11-16	WordPress Plugin Subscribe to Comments 2.0 - Multiple Cross-Site Scripting Vulnerabilities	webapps	PHP
2009-11-16	Joomla! Component ProofReader 1.0 RC9 - Cross-Site Scripting	webapps	PHP
2009-11-15	WordPress Plugin Trashbin 0.1 - 'mtb_undelete' Cross-Site Scripting	webapps	PHP
2009-11-15	Joomla! Component Webee Comments 1.1/1.2 - 'index2.php' articleId SQL Injection	webapps	PHP
2009-11-15	Joomla! Component Webee Comments 1.1/1.2 - Multiple BBCode Tags Cross-Site Scripting Vulnerabilities	webapps	PHP
2009-11-13	Samba 3.0.10 < 3.3.5 - Format String / Security Bypass	remote	Multiple
2009-11-13	OS Commerce 2.2r2 - Authentication Bypass	webapps	PHP
2009-11-13	PHP 5.2.11/5.3.0 - Multiple Vulnerabilities	remote	PHP
2009-11-13	XM Easy Personal FTP Server - 'APPE' / 'DELE' Denial of Service	dos	Windows
2009-11-13	BibTeX - '.bib' File Handling Memory Corruption	dos	Linux
2009-11-13	WordPress Plugin Fuctweb CapCC 1.0 CAPTCHA - Security Bypass	webapps	PHP
2009-11-12	EasyMail Objects 'EMSMTP.DLL 6.0.1' - ActiveX Control Remote Buffer Overflow	remote	Windows
2009-11-12	Linux Kernel 2.6.32 - 'pipe.c' Local Privilege Escalation (4)	local	Linux
2009-11-12	McAfee Network Security Manager < 5.1.11.8.1 - Information Disclosure	webapps	JSP
2009-11-12	McAfee Network Security Manager < 5.1.11.8.1 - Multiple Cross-Site Scripting Vulnerabilities	webapps	JSP
2009-11-12	Microsoft Windows Server 2000 < 2008 - Embedded OpenType Font Engine Remote Code Execution (MS09-065) (Metasploit)	dos	Windows
2009-11-12	Multiple Vendor - TLS Protocol Session Renegotiation Security	local	Multiple
2009-11-12	WebKit - 'Document()' Remote Information Disclosure	remote	Multiple
2009-11-12	Yahoo! Messenger 9.0.0.2162 - 'YahooBridgeLib.dll' ActiveX Control Remote Denial of Service	dos	Windows
2009-11-12	LibTIFF - 'LZWDecodeCompat()' Remote Buffer Underflow	dos	Multiple
2009-11-12	Expat 2.0.1 - UTF-8 Character XML Parsing Remote Denial of Service	dos	Linux
2009-11-12	Yahoo! Messenger 9 - 'YahooBridgeLib.dll' ActiveX Control Remote Denial of Service	dos	Windows
2009-11-12	Novell eDirectory 8.8 - '/dhost/modules?I:' Remote Buffer Overflow	remote	Novell
2009-11-11	CUPS - 'kerberos' Cross-Site Scripting	remote	Multiple
2009-11-11	Microsoft Windows 7/2008 R2 - Remote Kernel Crash	dos	Windows
2009-11-11	Free Download Manager - '.Torrent' File Parsing Multiple Buffer Overflow Vulnerabilities (Metasploit)	local	Windows
2009-11-11	WordPress < 2.8.5 - Unrestricted Arbitrary File Upload / Arbitrary PHP Code Execution	webapps	PHP
2009-11-10	XM Easy Personal FTP Server 5.8.0 - Denial of Service (Metasploit)	dos	Windows
2009-11-10	CuteNews and UTF-8 CuteNews - Multiple Vulnerabilities	webapps	PHP
2009-11-10	Joomla! Component JForJoomla! Jreservation 1.5 - 'pid' SQL Injection	webapps	PHP
2009-11-10	Linux Kernel 2.6.31.4 - 'unix_stream_connect()' Local Denial of Service	dos	Linux
2009-11-10	Mozilla NSS - NULL Character CA SSL Certificate Validation Security Bypass	remote	Multiple
2009-11-10	WordPress 2.0 < 2.7.1 - 'admin.php' Module Configuration Security Bypass	webapps	PHP
2009-11-10	WordPress MU 1.2.2 < 1.3.1 - '/wp-includes/wpmu-functions.php' Cross-Site Scripting	webapps	PHP
2009-11-10	CuteNews 1.4.6 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities	webapps	PHP
2009-11-10	CuteNews 1.4.6 editnews Module - doeditnews Action Admin Moderation Bypass	webapps	PHP
2009-11-10	CuteNews 1.4.6 - 'result' Cross-Site Scripting	webapps	PHP
2009-11-10	CuteNews 1.4.6 - 'index.php' Cross-Site Request Forgery (New User Creation)	webapps	PHP
2009-11-10	CuteNews 1.4.6 - 'search.php' Multiple Cross-Site Scripting Vulnerabilities	webapps	PHP
2009-11-10	CuteNews 1.4.6 - 'from_date_day' Full Path Disclosure	webapps	PHP
2009-11-09	Adobe Reader / Acrobat - '.U3D' File Invalid Array Index Overflow	local	Multiple
2009-11-09	Apache mod_perl - 'Apache::Status' / 'Apache2::Status' Cross-Site Scripting	remote	Multiple
2009-11-09	Apache Tomcat - Cookie Quote Handling Remote Information Disclosure	remote	Multiple
2009-11-09	Apache Tomcat - Form Authentication 'Username' Enumeration	remote	Multiple
2009-11-09	Blender 2.49b - '.blend' Remote Command Execution	remote	Multiple
2009-11-09	Linux Kernel 2.6.x - 'fput()' Null Pointer Dereference Local Denial of Service	dos	Linux
2009-11-09	OpenLDAP 2.3.39 - MODRDN Remote Denial of Service	dos	Multiple
2009-11-09	WordPress Plugin WP-Cumulus 1.x - 'tagcloud.swf' Cross-Site Scripting	webapps	PHP
2009-11-09	Linux Kernel 2.6.x - Ext4 'move extents' ioctl Privilege Escalation	local	Linux
2009-11-07	toutvirtual virtualiq pro 3.2 - Multiple Vulnerabilities	webapps	JSP
2009-11-06	PHP 5.3.0 - 'pdflib' Arbitrary File Write	local	PHP
2009-11-06	McAfee Network Security Manager 5.1.7 - Information Disclosure	webapps	JSP
2009-11-06	McAfee Network Security Manager 5.1.7 - Multiple Cross-Site Scripting Vulnerabilities	webapps	JSP
2009-11-06	Phrack #66	papers	Magazine
2009-11-05	Serv-U Web Client 9.0.0.5 - Remote Buffer Overflow (2)	remote	Windows
2009-11-05	Blender 2.34/2.35a/2.4/2.49b - '.blend' Command Injection	remote	Multiple
2009-11-05	Linux Kernel 2.4.1 < 2.4.37 / 2.6.1 < 2.6.32-rc5 - 'pipe.c' Local Privilege Escalation (3)	local	Linux
2009-11-05	Apple Mac OSX 10.5.6/10.5.7 - ptrace mutex Denial of Service	dos	OSX
2009-11-05	Kingsoft Internet Security 9 - Denial of Service	dos	Windows
2009-11-04	Portili Personal and Team Wiki 1.14 - Multiple Vulnerabilities (1)	webapps	PHP
2009-11-04	eNdonesia CMS 8.4 - Local File Inclusion	webapps	PHP
2009-11-04	Adobe Shockwave Player 11.5.1.601 - Multiple Code Executions	remote	Multiple
2009-11-04	Apple Mac OSX 10.5.x - 'ptrace' Mutex Handling Local Denial of Service	dos	OSX

2009-11-03	PunBB Extension Attachment 1.0.2 - SQL Injection	webapps	PHP
2009-11-03	Xerox Fiery Webtools - SQL Injection	webapps	PHP
2009-11-03	Xion Audio Player 1.0 121 - '.m3u' Remote Buffer Overflow (1)	remote	Windows
2009-11-03	Linux Kernel 2.6.0 < 2.6.31 - 'pipe.c' Local Privilege Escalation (1)	local	Linux
2009-11-03	Linux Kernel 2.6.x - 'pipe.c' Local Privilege Escalation (2)	local	Linux
2009-11-02	Symantec ConsoleUtilities - ActiveX Buffer Overflow (Metasploit)	remote	Windows
2009-11-02	TFTgallery .13 - Directory Traversal	webapps	PHP
2009-11-02	Serv-U Web Client 9.0.0.5 - Remote Buffer Overflow (1)	remote	Windows
2009-11-02	TFTgallery 0.13 - 'sample' Cross-Site Scripting	webapps	PHP
2009-11-02	Stratek Web Design Twilight CMS 4.0 - 'calendar' Cross-Site Scripting	webapps	PHP
2009-11-01	PacketVideo Twonky Server 4.4.17/5.0.65 - Cross-Site Scripting / HTML Injection	remote	Multiple
2009-10-31	Mthree Development MP3 to WAV Decoder - '.mp3' Remote Buffer Overflow	dos	Windows
2009-10-30	Nagios3 - 'statuswml.cgi' Command Injection (Metasploit)	webapps	Unix
2009-10-30	CubeCart 4 - Session Management Bypass	webapps	PHP
2009-10-30	PSArt 1.2 - SQL Injection	webapps	ASP
2009-10-30	Oracle Database 10.1.0.5 < 10.2.0.4 - AUTH_SESSKEY Length Validation Remote Buffer Overflow	remote	Windows
2009-10-30	OpenBSD 4.6 / NetBSD 5.0.1 - 'printf(1)' Format String Parsing Denial of Service	dos	BSD
2009-10-30	BSD (Multiple Distributions) - 'printf(3)' Memory Corruption	dos	BSD
2009-10-29	Alleycode HTML Editor 2.2.1 - Local Buffer Overflow	local	Windows
2009-10-29	Mura CMS 5.1 - Root Path Disclosure	webapps	Multiple
2009-10-29	Adobe Photoshop Elements - Active File Monitor Service Privilege Escalation	local	Windows
2009-10-29	2WIRE Router 5.29.52 - Remote Denial of Service	dos	Hardware
2009-10-29	Sun Java SE November 2009 - Multiple Vulnerabilities (1)	remote	Linux
2009-10-29	Sun Java SE November 2009 - Multiple Vulnerabilities (2)	remote	Multiple
2009-10-29	Wowd - 'index.html' Multiple Cross-Site Scripting Vulnerabilities	webapps	PHP
2009-10-28	Cherokee 0.5.4 - Directory Traversal	webapps	Windows
2009-10-28	Mozilla Firefox 3.5.3 - Local Download Manager Temp File Creation	local	Windows
2009-10-28	Oscailt CMS 3.3 - Local File Inclusion	webapps	PHP
2009-10-28	Apple QuickTime RTSP 10.4.0 < 10.5.0 (OSX) - Content-Type Overflow (Metasploit)	remote	OSX
2009-10-28	mDNSResponder 10.4.0/10.4.8 (OSX) - UPnP Location Overflow (Metasploit)	remote	OSX
2009-10-28	PHP168 6.0 - Command Execution	webapps	PHP
2009-10-28	Piwigo 2.0 - 'comments.php' Multiple Cross-Site Scripting Vulnerabilities	webapps	PHP
2009-10-27	Adobe Acrobat Reader 7 < 9 - U3D Buffer Overflow	local	Windows
2009-10-27	Boloto Media Player 1.0.0.9 - '.pls' File Denial of Service	dos	Windows
2009-10-27	VMware Virtual 8086 - Linux Local Ring0	local	Multiple
2009-10-27	Sahana 0.6.2 - 'mod' Local File Disclosure	webapps	PHP
2009-10-27	VMware Server 2.0.1 / ESXi Server 3.5 - Directory Traversal	remote	Multiple
2009-10-27	KDE 4.3.2 - Multiple Input Validation Vulnerabilities	remote	Linux
2009-10-27	Mozilla Firefox 3.5.3 - Floating Point Conversion Heap Overflow	dos	Linux
2009-10-27	Mozilla Firefox 3.5.3 / SeaMonkey 1.1.17 - 'libpr0n' .GIF Parser Heap Buffer Overflow	remote	Linux
2009-10-27	Mozilla Firefox 3.0.14 - Remote Memory Corruption	dos	Linux
2009-10-26	Cherokee Web server 0.5.4 - Denial of Service	dos	Windows
2009-10-26	jetty 6.x < 7.x - Cross-Site Scripting / Information Disclosure / Injection	webapps	JSP
2009-10-26	Novell eDirectory 8.8sp5 - Remote Buffer Overflow	remote	Windows
2009-10-26	RunCMS 2m1 - 'store()' SQL Injection	webapps	PHP
2009-10-26	RunCMS 2ma - 'post.php' SQL Injection	webapps	PHP
2009-10-26	SharePoint 2007 - Team Services Source Code Disclosure	webapps	ASP
2009-10-26	xp-AntiSpy 3.9.7-4 - '.xpas' File Buffer Overflow	local	Windows
2009-10-26	RunCMS - 'forum' SQL Injection	webapps	PHP
2009-10-26	TFTgallery 0.13 - 'album' Cross-Site Scripting	webapps	PHP
2009-10-24	Jetty 6.1.x - JSP Snoop Page Multiple Cross-Site Scripting Vulnerabilities	webapps	JSP
2009-10-23	Eureka Email Client 2.2q - Buffer Overflow (PoC)	dos	Windows
2009-10-23	Joomla! Component Jshop - SQL Injection	webapps	PHP
2009-10-23	Joomla! Component Photo Blog alpha 3 < alpha 3a - SQL Injection	webapps	PHP
2009-10-23	Mongoose Web Server 2.8 - Source Disclosure	webapps	PHP
2009-10-23	Nginx 0.7.0 < 0.7.61 / 0.6.0 < 0.6.38 / 0.5.0 < 0.5.37 / 0.4.0 < 0.4.14 - Denial of Service (PoC)	dos	Linux
2009-10-23	Pegasus Mail Client 4.51 - Remote Buffer Overflow	remote	Windows
2009-10-23	Snort 2.8.5 - IPv6 Denial of Service	dos	Multiple
2009-10-23	TwonkyMedia Server 4.4.17/5.0.65 - Cross-Site Scripting	webapps	PHP
2009-10-23	proc File - Descriptors Directory Permissions Bypass	local	Linux
2009-10-23	GPG4Win GNU - Privacy Assistant	local	Windows
2009-10-23	Autodesk 3ds - Max Application Callbacks Arbitrary Command Execution	remote	Windows
2009-10-22	Vivvo CMS 4.1.5.1 - file Disclosure	webapps	PHP
2009-10-22	Snort 2.8.5 - Multiple Denial of Service Vulnerabilities	dos	Linux
2009-10-21	GPG2/Kleopatra 2.0.11 - Malformed Certificate	local	Windows
2009-10-21	httpdx 1.4.6b - Source Disclosure	webapps	Windows
2009-10-21	OpenDocMan 1.2.5 - 'add.php?last_message' Cross-Site Scripting	webapps	PHP
2009-10-21	OpenDocMan 1.2.5 - 'toBePublished.php' Multiple Cross-Site Scripting Vulnerabilities	webapps	PHP
2009-10-21	OpenDocMan 1.2.5 - 'index.php?last_message' Cross-Site Scripting	webapps	PHP
2009-10-21	OpenDocMan 1.2.5 - 'admin.php?last_message' Cross-Site Scripting	webapps	PHP
2009-10-21	OpenDocMan 1.2.5 - 'category.php' Cross-Site Scripting	webapps	PHP
2009-10-21	OpenDocMan 1.2.5 - 'department.php' Cross-Site Scripting	webapps	PHP
2009-10-21	OpenDocMan 1.2.5 - 'profile.php' Cross-Site Scripting	webapps	PHP
2009-10-21	OpenDocMan 1.2.5 - 'rejects.php' Cross-Site Scripting	webapps	PHP
2009-10-21	OpenDocMan 1.2.5 - 'search.php' Cross-Site Scripting	webapps	PHP
2009-10-21	OpenDocMan 1.2.5 - 'user.php' Cross-Site Scripting	webapps	PHP
2009-10-21	OpenDocMan 1.2.5 - 'view_file.php' Cross-Site Scripting	webapps	PHP
2009-10-20	boxalino 09.05.25-0421 - Directory Traversal	webapps	Multiple
2009-10-20	EMC RepliStor Server 6.3.1.3 - Denial of Service	dos	Windows
2009-10-20	OpenDocMan 1.2.5 - Cross-Site Scripting / SQL Injection	webapps	PHP
2009-10-20	Overland Guardian OS 5.1.041 - Local Privilege Escalation	local	Hardware
2009-10-20	South River Technologies WebDrive 9.02 build 2232 - Local Privilege Escalation	local	Windows
2009-10-20	Websense Email Security - Denial of Service	dos	Hardware
2009-10-20	Websense Email Security - Cross-Site Scripting	webapps	Hardware
2009-10-20	Joomla! / Mambo Component D4J eZine 2.1 - Remote File Inclusion	webapps	PHP
2009-10-19	3Com OfficeConnect - Code Execution	remote	Hardware
2009-10-19	Amiro.CMS 5.4.0.0 - Path Disclosure	webapps	PHP
2009-10-19	Joomla! Component Ajax Chat 1.0 - Remote File Inclusion	webapps	PHP
2009-10-19	Joomla! Component Book Library 1.0 - Remote File Inclusion	webapps	PHP
2009-10-19	Joomla! Plugin JD-WordPress 2.0 RC2 - Remote File Inclusion	webapps	PHP
2009-10-19	MiniShare 1.5.5 - Remote Buffer Overflow	remote	Windows
2009-10-19	phpCMS 2008 - File Disclosure	webapps	PHP
2009-10-19	Piwik 1357 2009-08-02 - Arbitrary File Upload / Code Execution	webapps	PHP
2009-10-19	TBmnetCMS 1.0 - Cross-Site Scripting	webapps	PHP
2009-10-19	Amiro.CMS 5.4 - Multiple Input Validation Vulnerabilities	webapps	PHP
2009-10-19	phpCMS 2008 - 'download.php' Information Disclosure	webapps	PHP
2009-10-19	Linux Kernel 2.6.26 - Auerswald USB Device Driver Buffer Overflow (PoC)	dos	Linux
2009-10-18	Mambo Component com_koesubmit 1.0.0 - Remote File Inclusion	webapps	Multiple
2009-10-17	DWebPro - Command Injection	webapps	ASP
2009-10-17	Sun VirtualBox 3.0.6 - Local Privilege Escalation	local	Multiple
2009-10-17	Xpdf 3.01 - Local Heap Overflow / Null Pointer Dereference	local	Multiple
2009-10-16	httpdx 1.4 - h_handlepeer Buffer Overflow (Metasploit)	remote	Windows
2009-10-16	Xion Audio Player 1.0 121 - '.m3u' Local Buffer Overflow (2)	local	Windows
2009-10-15	Snitz Forums 2000 - Multiple Cross-Site Scripting Vulnerabilities	webapps	ASP
2009-10-15	Microsoft Internet Explorer 5/6/7 - Memory Corruption (MS09-054)	remote	Windows
2009-10-15	Millenium MP3 Studio 2.0 - '.m3u' Local Buffer Overflow	local	Windows
2009-10-15	Pentaho 1.7.0.1062 - Cross-Site Scripting / Information Disclosure	webapps	JSP
2009-10-15	Spider Solitaire - Denial of Service (PoC)	dos	Windows
2009-10-15	IBM Rational RequisitePro 7.10 / ReqWebHelp - Multiple Cross-Site Scripting Vulnerabilities	webapps	JSP
2009-10-15	Linux Kernel < 2.6.31-rc4 - 'nfs4_proc_lock()' Denial of Service	dos	Linux
2009-10-15	Dopewars Server 1.5.12 - 'REQUESTJET' Message Remote Denial of Service	dos	Linux
2009-10-15	BloofoxCMS 0.3.5 - 'search' Cross-Site Scripting	webapps	PHP
2009-10-15	Snitz Forums 2000 3.4.7 - 'pop_send_to_friend.asp?url' Cross-Site Scripting	webapps	PHP
2009-10-15	Snitz Forums 2000 3.4.7 - Sound Tag Onload Attribute Cross-Site Scripting	webapps	PHP
2009-10-15	IBM Rational RequisitePro 7.10 - 'ReqWeb Help Feature ReqWebHelp/advanced/workingSet.jsp?Operation' Cross-Site Scripting	webapps	JSP
2009-10-15	IBM Rational RequisitePro 7.10 - ReqWeb Help Feature 'ReqWebHelp/basic/searchView.jsp' Multiple Cross-Site Scripting Vulnerabilities	webapps	JSP
2009-10-15	Skybluecanvas 1.1 r237 - 'admin.php' Multiple Cross-Site Scripting Vulnerabilities	webapps	PHP
2009-10-14	Achievo 1.3.4 - Cross-Site Scripting	webapps	PHP
2009-10-14	DeDeCMS 5.1 - SQL Injection	webapps	PHP
2009-10-14	Millenium MP3 Studio 2.0 - 'mpf' Local Buffer Overflow	local	Windows

2009-10-14	NaviCOPA 3.0.1.2 - Source Disclosure	remote	Windows
2009-10-14	Palm Pre WebOS 1.1 - Denial of Service	dos	Hardware
2009-10-14	QuickTeam 2.2 - SQL Injection	webapps	ASP
2009-10-14	ZoIPer 2.22 - Call-Info Remote Denial of Service	dos	Multiple
2009-10-14	Achievo 1.3.4 - SQL Injection	webapps	PHP
2009-10-14	Mozilla Firefox + Adobe - Memory Corruption (PoC)	dos	Windows
2009-10-14	Everfocus 1.4 - EDSR Remote Authentication Bypass	webapps	Multiple
2009-10-14	Pentaho BI 1.x - Multiple Cross-Site Scripting / Information Disclosure Vulnerabilities	webapps	Multiple
2009-10-14	Eclipse BIRT 2.2.1 - 'run?__report' Cross-Site Scripting	webapps	Java
2009-10-14	Zainu 1.0 - 'searchSongKeyword' Cross-Site Scripting	webapps	PHP
2009-10-14	FreeSchool - 'key_words' Cross-Site Scripting	webapps	PHP
2009-10-14	AdaptBB 1.0 - 'q' Cross-Site Scripting	webapps	PHP
2009-10-13	Quick Heal 10.00 SP1 - Local Privilege Escalation	local	Windows
2009-10-13	Microsoft Internet Explorer 5.0.1 - 'deflate' HTTP Content Encoding Remote Code Execution	remote	Windows
2009-10-13	Palm WebOS 1.0/1.1 - 'LunaSysMgr' Service Denial of Service	dos	Hardware
2009-10-13	Achievo 1.x - Multiple Cross-Site Scripting / HTML Injection Vulnerabilities	webapps	PHP
2009-10-13	Dream Poll 3.1 - '/index.php' Cross-Site Scripting / SQL Injection	webapps	PHP
2009-10-13	Adobe Reader 9.1.3 / Acrobat - COM Objects Memory Corruption Remote Code Execution	dos	Linux
2009-10-12	ProFTPd 1.3.0 (OpenSUSE) - 'mod_ctrls' Local Stack Overflow	local	Unix
2009-10-12	Community Translate - Remote File Inclusion	webapps	PHP
2009-10-12	Dazzle Blast - Remote File Inclusion	webapps	PHP
2009-10-12	Femitter HTTP Server 1.03 - Remote Source Disclosure	remote	Windows
2009-10-12	EZsneezyCal CMS 95.1-95.2 - Remote File Inclusion	webapps	PHP
2009-10-12	EZRecipeZee CMS 91 - Remote File Inclusion	webapps	PHP
2009-10-12	Best Way GEM Engine - Multiple Vulnerabilities	remote	Windows
2009-10-09	Docebo 3.6.0.3 - Multiple SQL Injections	webapps	PHP
2009-10-09	Free WMA MP3 Converter 1.1 - '.wav' Local Buffer Overflow	local	Windows
2009-10-09	httpdx 1.4.5 - dot Character Remote File Disclosure	remote	Windows
2009-10-08	Riorey RIOS 4.7.0 - Hard-Coded Password	remote	Hardware
2009-10-08	FreeBSD 6.4 - 'pipeclose()'/'knlist_cleardel()' Race Condition	local	FreeBSD
2009-10-08	FreeBSD 7.2 - VFS/devfs Race Condition	local	FreeBSD
2009-10-08	DreamPoll 3.1 - SQL Injection	webapps	PHP
2009-10-08	QuickCart 3.x - Cross-Site Scripting / Cross-Site Request Forgery / Local File Inclusion / Directory Traversal	webapps	PHP
2009-10-08	The BMW - 'inventory.php' SQL Injection	webapps	PHP
2009-10-08	httpdx 1.4 - GET Buffer Overflow	remote	Windows
2009-10-08	OpenSolution Quick.Cart - Local File Inclusion / Cross-Site Scripting	webapps	PHP
2009-10-07	BulletProof FTP Client 2.63 b56 - '.bps' File Stack Buffer Overflow	remote	Windows
2009-10-07	HP LaserJet Printers - Multiple Persistent Cross-Site Scripting Vulnerabilities	remote	Hardware
2009-10-07	Ada Image Server 0.6.7 - 'imgsrv.exe' Remote Buffer Overflow	remote	Windows
2009-10-07	AIOCP 1.4.001 - Remote File Inclusion	webapps	PHP
2009-10-07	Joomla! Component Recerca - SQL Injection	webapps	PHP
2009-10-07	VMware Player / VMware Workstation 6.5.3 - 'VMware-authd' Remote Denial of Service	dos	Windows
2009-10-06	Dopewars Server 1.5.12 - Denial of Service	dos	Multiple
2009-10-06	Geany .18 - Local File Overwrite	local	Linux
2009-10-06	PBBoard 2.0.2 - Full Path Disclosure	webapps	PHP
2009-10-06	XLPD 3.0 - Remote Denial of Service	dos	Windows
2009-10-06	X-Cart Email Subscription - 'email' Cross-Site Scripting	webapps	PHP
2009-10-06	AfterLogic WebMail Pro 4.7.10 - Multiple Cross-Site Scripting Vulnerabilities	webapps	ASP
2009-10-06	e-Courier CMS - 'UserGUID' Multiple Cross-Site Scripting Vulnerabilities	webapps	ASP
2009-10-05	AfterLogic WebMail Pro 4.7.10 - Cross-Site Scripting	webapps	ASP
2009-10-05	Alleycode 2.21 - Local Overflow (SEH)	local	Windows
2009-10-05	Joomla! Component CB Resume Builder - SQL Injection	webapps	PHP
2009-10-05	Joomla! Component Soundset 1.0 - SQL Injection	webapps	PHP
2009-10-05	Empire CMS 47 - SQL Injection	webapps	PHP
2009-10-05	IBM Informix Client SDK 3.0 - '.nfx' File Integer Overflow	remote	Windows
2009-10-05	Palm Pre WebOS 1.1 - Remote File Access	remote	Hardware
2009-10-05	Palm WebOS 1.0/1.1 - Email Arbitrary Script Injection	remote	Hardware
2009-10-05	Joomla! Component CB Resume Builder - 'group_id' SQL Injection	webapps	PHP
2009-10-04	PHP168 Template Editor - 'Filename' Directory Traversal	webapps	PHP
2009-10-04	Linux Kernel 2.6.32-rc1 (x86-64) - Register Leak	local	Linux_x86-64
2009-10-03	Geeklog 1.6.0sr2 - Arbitrary File Upload	webapps	PHP
2009-10-02	Hyperic HQ 3.2 < 4.2-beta1 - Multiple Cross-Site Scripting Vulnerabilities	webapps	JSP
2009-10-02	redcat media - SQL Injection	webapps	PHP
2009-10-02	XM Easy Personal FTP 5.8 - Denial of Service	dos	Windows
2009-10-02	VMware Fusion 2.0.5 - vmx86 kext Kernel Privilege Escalation	local	OSX
2009-10-02	VMware Fusion 2.0.5 - vmx86 kext Local Buffer Overflow (PoC)	dos	OSX
2009-10-01	AOL 9.1 SuperBuddy - ActiveX Control Remote code Execution	remote	Windows
2009-10-01	Novell eDirectory 8.8 SP5 - 'dconserv.dlm' Cross-Site Scripting	webapps	Novell
2009-10-01	Google Apps - mailto URI handler cross-browser Remote command Execution	remote	Windows
2009-10-01	EMC Captiva PixTools 2.2 Distributed Imaging - ActiveX Control Multiple Insecure Method Vulnerabilities	remote	Windows
2009-09-30	Cerberus FTP server 3.0.6 - Denial of Service	dos	Windows
2009-09-29	Flatpress 0.804 < 0.812.1 - Local File Inclusion	webapps	PHP
2009-09-29	IBM Installation Manager 1.3.0 - 'iim://' URI handler	remote	Windows
2009-09-29	EMC Captiva QuickScan Pro 4.6 SP1 and EMC Documentum ApllicationXtender Desktop 5.4 (keyhelp.ocx 1.2.312) - Remote Overflow	remote	Windows
2009-09-29	Oracle - Document Capture BlackIce DEVMODE	remote	Windows
2009-09-29	HP LoadRunner 9.5 - Remote file creation (PoC)	dos	Windows
2009-09-29	Adobe Photoshop Elements 8.0 - Active File Monitor Privilege Escalation	local	Windows
2009-09-29	Kaspersky AV 2010 9.0.0.463 - Local Denial of Service	dos	Windows
2009-09-29	Interspire Knowledge Manager 5 - 'p' Directory Traversal	webapps	PHP
2009-09-28	HEAT Call Logging 8.01 - SQL Injection	webapps	ASP
2009-09-28	EnjoySAP 6.4/7.1 - File Overwrite	remote	Windows
2009-09-28	Core FTP Server 1.0 build 304 - Denial of Service	dos	Windows
2009-09-28	Joomla! Component IRCm Basic - SQL Injection	webapps	PHP
2009-09-28	e107 0.7.x - CAPTCHA Security Bypass / Cross-Site Scripting	webapps	PHP
2009-09-27	PHP 5.3 - 'preg_match()' Full Path Disclosure	remote	PHP
2009-09-25	Mereo Web Server 1.8 - Source Code Disclosure	remote	Windows
2009-09-25	CDBurnerXP 4.2.4.1351 - Local Crash (Denial of Service)	dos	Windows
2009-09-25	Core FTP LE 2.1 build 1612 - Local Buffer Overflow (PoC)	dos	Windows
2009-09-25	VideoLAN VLC Media Player 1.0.2 - 'smb://' URI Stack Overflow	remote	Windows
2009-09-25	CuteFTP 8.3.3 - 'create new site' Local Buffer Overflow (PoC)	dos	Windows
2009-09-25	Klonet E-Commerce - 'products.php' SQL Injection	webapps	PHP
2009-09-25	Engeman 6.x - SQL Injection	webapps	Multiple
2009-09-25	Cisco ACE XML Gateway 6.0 - Internal IP Disclosure	remote	Hardware
2009-09-25	html2ps - 'include file' Server-Side Include Directive Directory Traversal	webapps	Multiple
2009-09-25	Xen 3.x - pygrub Local Authentication Bypass	local	Linux
2009-09-25	Activedition - '/activedition/aelogin.asp' Multiple Cross-Site Scripting Vulnerabilities	webapps	ASP
2009-09-24	Regental Medien - Blind SQL Injection	webapps	PHP
2009-09-24	FSphp 0.2.1 - Remote File Inclusion	webapps	PHP
2009-09-24	Joomla! Component Fastball 1.1.0 < 1.2 - 'league' SQL Injection	webapps	PHP
2009-09-24	Sun Solaris 10 RPC dmispd - Denial of Service	dos	Solaris
2009-09-24	Swiss Mango CMS - SQL Injection	webapps	PHP
2009-09-24	e107 0.7.16 - Referer header Cross-Site Scripting	webapps	PHP
2009-09-24	MindSculpt CMS - SQL Injection	webapps	PHP
2009-09-24	Audio Workstation - '.pls' Local Buffer Overflow (SEH)	local	Windows
2009-09-23	OSSIM 2.1 - SQL Injection / Cross-Site Scripting	webapps	PHP
2009-09-23	Nginx 0.7.61 - WebDAV Directory Traversal	remote	Multiple
2009-09-23	Cour Supreme - SQL Injection	webapps	PHP
2009-09-23	Avast! AntiVirus 4.8.1351.0 - Denial of Service / Privilege Escalation	local	Windows
2009-09-23	Novell Edirectory 8.8 SP5 - Cross-Site Scripting	webapps	Novell
2009-09-23	IBM Lotus Connections 2.0.1 - 'simpleSearch.do' Cross-Site Scripting	webapps	Java
2009-09-23	Vastal I-Tech Agent Zone - 'view_listing.php' SQL Injection	webapps	PHP
2009-09-22	Joomla! / Mambo Component Tupinambis - SQL Injection	webapps	PHP
2009-09-22	Joomla! Component com_facebook - SQL Injection	webapps	PHP
2009-09-22	BPLawyerCaseDocuments - SQL Injection	webapps	ASP
2009-09-22	HB CMS 1.7 - SQL Injection	webapps	PHP
2009-09-22	BPMusic 1.0 - Blind SQL Injection	webapps	PHP
2009-09-22	BPStudent 1.0 - Blind SQL Injection	webapps	PHP
2009-09-22	BPGames 1.0 - Blind SQL Injection	webapps	PHP
2009-09-22	Achievo 1.3.4 - Remote File Inclusion	webapps	PHP
2009-09-22	Joomla! Component GroupJive 1.8 B4 - Remote File Inclusion	webapps	PHP

2009-09-22	BPHolidayLettings 1.0 - Blind SQL Injection	webapps	ASP
2009-09-22	Apple iTunes 9.0 - '.pls' Buffer Overflow	dos	OSX
2009-09-22	Maxwebportal 1.365 - 'forum.asp' SQL Injection	webapps	ASP
2009-09-22	Joomla! Component SportFusion 0.2.x - SQL Injection	webapps	PHP
2009-09-22	Joomla! Component JoomlaFacebook - SQL Injection	webapps	PHP
2009-09-22	Vastal I-Tech Cosmetics Zone - 'view_products.php' SQL Injection	webapps	PHP
2009-09-22	Vastal I-Tech DVD Zone - 'view_mag.php' SQL Injection	webapps	PHP
2009-09-22	Vastal I-Tech DVD Zone - 'view_mag.php' Cross-Site Scripting	webapps	PHP
2009-09-22	Juniper Junos 8.5/9.0 J - Web Interface 'PATH_INFO' Cross-Site Scripting	remote	Hardware
2009-09-22	Juniper Junos 8.5/9.0 J-Web Interface - '/diagnose' Multiple Cross-Site Scripting Vulnerabilities	remote	Hardware
2009-09-22	Juniper Junos 8.5/9.0 J-Web Interface - '/configuration' Multiple Cross-Site Scripting Vulnerabilities	remote	Hardware
2009-09-22	Juniper Junos 8.5/9.0 J-Web Interface - 'scripter.php' Multiple Cross-Site Scripting Vulnerabilities	remote	Hardware
2009-09-22	Juniper Junos 8.5/9.0 J - Web Interface (Multiple Script) 'm[]' Cross-Site Scripting	remote	Hardware
2009-09-21	Joomla! Component com_surveymanager 1.5.0 - 'stype' SQL Injection	webapps	Multiple
2009-09-21	DDL CMS 1.0 - Multiple Remote File Inclusions	webapps	Multiple
2009-09-21	Joomla! Component com_jbudgetsmagic 0.3.2 < 0.4.0 - 'bid' SQL Injection	webapps	Multiple
2009-09-21	BAnner ROtation System mini - Multiple Remote File Inclusions	webapps	Multiple
2009-09-21	cP Creator 2.7.1 - SQL Injection	webapps	Multiple
2009-09-21	CMScontrol (Content Management Portal Solutions) - SQL Injection	webapps	Multiple
2009-09-21	ProdLer 2.0 - Remote File Inclusion	webapps	Multiple
2009-09-21	Loggix Project 9.4.5 - Multiple Remote File Inclusions	webapps	Multiple
2009-09-21	WX Guestbook 1.1.208 - SQL Injection / Persistent Cross-Site Scripting	webapps	Multiple
2009-09-21	Snort unified 1 IDS Logging - Alert Evasion & Logfile Corruption/Alert Falsify	dos	Multiple
2009-09-21	Joomla! Component com_jinc 0.2 - 'newsid' Blind SQL Injection	webapps	Multiple
2009-09-21	Joomla! Component com_mytube (user_id) 1.0 Beta - Blind SQL Injection	webapps	Multiple
2009-09-21	BigAnt Server 2.50 SP6 - '.zip' Local Buffer Overflow (PoC) (2)	dos	Windows
2009-09-21	FFmpeg 0.5 - Multiple Remote Vulnerabilities	dos	Linux
2009-09-21	Check Point Connectra R62 - '/Login/Login' Arbitrary Script Injection	remote	Hardware
2009-09-21	WX-Guestbook 1.1.208 - SQL Injection / HTML Injection	webapps	PHP
2009-09-19	MyBB 1.4.8 - 'search.php' SQL Injection	webapps	PHP
2009-09-19	Kylinsoft InstantGet 2.08 - ActiveX Control 'ShowBar' Method Buffer Overflow	dos	Windows
2009-09-18	Zainu 1.0 - SQL Injection	webapps	Multiple
2009-09-18	Network Management/Inventory System - 'header.php' Remote File Inclusion	webapps	Multiple
2009-09-18	Xerver HTTP Server 4.32 - Remote Denial of Service	dos	Windows
2009-09-18	Xerver HTTP Server 4.32 - Cross-Site Scripting / Directory Traversal	remote	Multiple
2009-09-18	FanUpdate 2.2.1 - 'show-cat.php' SQL Injection	webapps	Multiple
2009-09-18	FSphp 0.2.1 - Multiple Remote File Inclusions	webapps	Multiple
2009-09-18	Avaya Intuity Audix LX R1.1 - Multiple Remote Vulnerabilities	webapps	CGI
2009-09-17	Quiksoft EasyMail 6.0.3.0 - IMAP 'connect()' ActiveX Buffer Overflow	remote	Windows
2009-09-17	Quiksoft EasyMail 6 - 'AddAttachment' Remote Buffer Overflow	remote	Windows
2009-09-17	Joomla! Component com_album 1.14 - Directory Traversal	webapps	PHP
2009-09-17	Ease Audio Cutter 1.20 - '.wav' Local Crash (PoC)	dos	Windows
2009-09-17	OpenSiteAdmin 0.9.7b - 'pageHeader.php?path' Remote File Inclusion	webapps	PHP
2009-09-17	Changetrack 4.3-3 - Local Privilege Escalation	local	Linux
2009-09-17	CF Shopkart 5.3x - 'itemID' SQL Injection	webapps	PHP
2009-09-17	FMyClone 2.3 - Multiple SQL Injections	webapps	PHP
2009-09-17	Nephp Publisher Enterprise 4.5 - Authentication Bypass	webapps	PHP
2009-09-17	Joomla! Component com_jreservation 1.5 - 'pid' Blind SQL Injection	webapps	PHP
2009-09-17	GNU glibc 2.x - 'strfmon()' Integer Overflow	dos	Linux
2009-09-17	Joomla! Component EasyBook 2.0.0rc4 - Multiple HTML Injection Vulnerabilities	webapps	PHP
2009-09-17	Joomla! Component F!BB 1.5.96 RC - SQL Injection / HTML Injection	webapps	PHP
2009-09-16	NaviCOPA Web Server 3.01 - Source Code Disclosure	remote	Windows
2009-09-16	BigAnt Server 2.50 SP1 - '.zip' Local Buffer Overflow (PoC)	dos	Windows
2009-09-16	AdsDX 3.05 - Authentication Bypass	webapps	PHP
2009-09-16	Joomla! Component com_foobla_suggestions (idea_id) 1.5.11 - SQL Injection	webapps	PHP
2009-09-16	Joomla! Component com_jlord_rss - 'id' Blind SQL Injection	webapps	PHP
2009-09-16	Micro CMS 3.5 - SQL Injection / Local File Inclusion	webapps	PHP
2009-09-16	SaphpLesson 4.3 - Blind SQL Injection	webapps	PHP
2009-09-16	Notepad++ 5.4.5 - '.C' / '.CPP' Local Stack Buffer Overflow (PoC)	dos	Windows
2009-09-16	Elite Gaming Ladders 3.2 - 'platform' SQL Injection	webapps	PHP
2009-09-16	phpPollScript 1.3 - 'include_class' Remote File Inclusion	webapps	PHP
2009-09-16	Mega File Hosting Script 1.2 - 'emaillinks.php' Cross-Site Scripting	webapps	PHP
2009-09-16	TuttoPHP Morris Guestbook - 'view.php' Cross-Site Scripting	webapps	PHP
2009-09-16	Linux Kernel 2.6.31 - 'perf_counter_open()' Local Buffer Overflow	dos	Linux
2009-09-16	NetBSD 5.0.1 - 'IRET' General Protection Fault Handling Privilege Escalation	local	BSD
2009-09-16	PaoLink 1.0 - 'scrivi.php' Cross-Site Scripting	webapps	PHP
2009-09-16	RSSMediaScript - 'index.php' Cross-Site Scripting	webapps	PHP
2009-09-16	PaoBacheca 2.1 - 'index.php' URI Cross-Site Scripting	webapps	PHP
2009-09-16	PaoBacheca 2.1 - 'scrivi.php' URI Cross-Site Scripting	webapps	PHP
2009-09-15	BigAnt Server 2.50 - GET Remote Buffer Overflow (SEH)	remote	Windows
2009-09-15	Three Pillars Help Desk 3.0 - Authentication Bypass	webapps	PHP
2009-09-15	HotWeb Rentals - 'details.asp?PropId' Blind SQL Injection	webapps	ASP
2009-09-15	BRS Webweaver 1.33 - '/Scripts' Access Restriction Bypass	remote	Windows
2009-09-15	HERO SUPER PLAYER 3000 - '.m3u' Buffer Overflow (PoC)	dos	Windows
2009-09-15	Protector Plus AntiVirus 8/9 - Local Privilege Escalation	local	Windows
2009-09-15	efront 3.5.4 - 'database.php?path' Remote File Inclusion	webapps	PHP
2009-09-15	Adobe Shockwave Player 11.5.1.601 - ActiveX Buffer Overflow (PoC)	dos	Windows
2009-09-15	Novell Groupwise Client 7.0.3.1294 - ActiveX Denial of Service (PoC)	dos	Windows
2009-09-15	EasyMail Quicksoft 6.0.2.0 - ActiveX Remote Code Execution (PoC)	dos	Windows
2009-09-15	EasyMail Quicksoft 6.0.2.0 - CreateStore ActiveX Code Execution (PoC)	dos	Windows
2009-09-15	VideoLAN VLC Media Player < 0.9.6 - 'CUE' Local Buffer Overflow (PoC)	dos	Windows
2009-09-15	SAP Player 0.9 - '.pla' Universal Local Buffer Overflow (SEH)	local	Windows
2009-09-15	NetAccess IP3 - (Authenticated) Ping Option Command Injection	local	Hardware
2009-09-15	MP3 Collector 2.3 - '.m3u' Local Crash (PoC)	dos	Windows
2009-09-15	BigAnt Server 2.50 - GET Universal Remote Buffer Overflow (SEH)	remote	Windows
2009-09-15	DJ Studio Pro 4.2 - '.pls' Local Crash	dos	Windows
2009-09-15	iBoutique.MALL 1.2 - 'cat' Blind SQL Injection	webapps	PHP
2009-09-15	Joomla! Component com_djcatalog - SQL Injection / Blind SQL Injection	webapps	PHP
2009-09-15	Linux/x86 - /bin/sh + Self-Modifying Anti-IDS Shellcode (35/64 bytes)	shellcode	Linux_x86
2009-09-15	Linux/x86 - HTTP Server (8800/TCP) + fork() Shellcode (166 bytes)	shellcode	Linux_x86
2009-09-15	FileCOPA FTP Server 5.01 - 'NOOP' Denial of Service	dos	Windows
2009-09-15	Novell Groupwise Client 7.0.3.1294 - 'gxmim1.dll' ActiveX Control Buffer Overflow (PoC)	dos	Windows
2009-09-15	Wireshark 1.2.1 - OpcUa Dissector Resource Exhaustion (Denial of Service)	dos	Linux
2009-09-15	Wireshark 1.2.1 - TLS Dissector 1.2 Conversation Handling Remote Denial of Service	dos	Linux
2009-09-15	Wireshark 1.2.1 - GSM A RR Dissector packet.c Remote Denial of Service	dos	Linux
2009-09-15	EasyMail Objects 6.0.2.0 - 'emimap4.dll' ActiveX Control Remote Code Execution	dos	Windows
2009-09-15	Installshield 2009 15.0.0.53 Premier - 'ISWiAutomation15.dll' ActiveX Arbitrary File Overwrite	remote	Windows
2009-09-14	Oracle Secure Backup Server 10.3.0.1.0 - Authentication Bypass / Remote Code Injection	remote	Windows
2009-09-14	Joomla! Component Turtushout 0.11 - 'Name' SQL Injection	webapps	PHP
2009-09-14	Joomla! Component AlphaUserPoints - SQL Injection	webapps	PHP
2009-09-14	Invisible Browsing 5.0.52 - '.ibkey' Local Buffer Overflow	local	Windows
2009-09-14	Aurora CMS 1.0.2 - 'install.plugin.php' Remote File Inclusion	webapps	PHP
2009-09-14	httpdx 1.4 - HTTP Server Host Header Remote Format String Denial of Service	dos	Windows
2009-09-14	Neufbox NB4-R1.5.10-MAIN - Persistent Cross-Site Scripting	remote	Hardware
2009-09-14	Portable E.M Magic Morph 1.95b - '.MOR' File Stack Buffer Overflow	local	Windows
2009-09-14	Techlogica HTTP Server 1.03 - Arbitrary File Disclosure	remote	Windows
2009-09-14	MP3 Studio 1.0 - '.m3u' Local Buffer Overflow	local	Windows
2009-09-14	IPSwitch IMAP Server 9.20 - Remote Buffer Overflow	remote	Windows
2009-09-14	Mozilla Firefox 2.0.0.16 - UTF-8 URL Remote Buffer Overflow	remote	Windows
2009-09-14	FtpXQ FTP Server 3.0 - (Authenticated) Remote Denial of Service	dos	Windows
2009-09-14	PHP Pro Bid - Blind SQL Injection	webapps	PHP
2009-09-14	Apple Safari IPhone - using tel: Remote Crash	dos	Hardware
2009-09-14	Cerberus FTP Server 3.0.3 - Remote Denial of Service	dos	Windows
2009-09-14	Batch Picture Watemark 1.0 - '.jpg' Local Crash (PoC)	dos	Windows
2009-09-14	Bs Counter 2.5.3 - 'page' SQL Injection	webapps	PHP
2009-09-14	FotoTagger 2.12.0.0 - '.XML' Buffer Overflow (PoC)	dos	Windows
2009-09-14	Tuniac 090517c - '.pls' Local Crash (PoC)	dos	Windows
2009-09-14	PowerISO 4.0 - Local Buffer Overflow (PoC)	dos	Windows
2009-09-12	paul smith computer services vcap Calendar server 1.9 - Directory Traversal	remote	Windows
2009-09-11	Kolibri+ Web Server 2 - Source Code Disclosure	remote	Windows

2009-09-11	Image voting 1.0 - 'index.php?show' SQL Injection	webapps	PHP
2009-09-11	gyro 5.0 - SQL Injection / Cross-Site Scripting	webapps	PHP
2009-09-11	Linux Kernel 2.4/2.6 - 'sock_sendpage()' Local Privilege Escalation (3)	local	Linux
2009-09-11	FreeRadius < 1.1.8 - Zero-Length Tunnel-Password Denial of Service	dos	Multiple
2009-09-11	kolibri+ Web Server 2 - Directory Traversal	remote	Windows
2009-09-11	Kolibri+ Web Server 2 - GET Remote Overwrite (SEH)	remote	Windows
2009-09-11	IBM AIX 5.6/6.1 - '_LIB_INIT_DBG' Arbitrary File Overwrite via Libc Debug	local	AIX
2009-09-11	Siemens Gigaset SE361 WLAN - Remote Reboot (Denial of Service)	dos	Hardware
2009-09-11	PHP-IPNMonitor - 'maincat_id' SQL Injection	webapps	PHP
2009-09-11	Joomla! Component Hotel Booking System - Cross-Site Scripting / SQL Injection	webapps	PHP
2009-09-11	Xerver HTTP Server 4.32 - Arbitrary Source Code Disclosure	remote	Windows
2009-09-11	Kolibri+ Web Server 2 - Arbitrary Source Code Disclosure (2)	remote	Windows
2009-09-11	Mozilla Firefox < 3.0.14 - Multiplatform Remote Code Execution via pkcs11.addmodule	remote	Multiple
2009-09-11	Joomla! Component com_mediaalert - 'id' SQL Injection	webapps	PHP
2009-09-11	Planet 2.0 - HTML Injection	webapps	PHP
2009-09-11	SZNews 2.7 - 'printnews.php3' Remote File Inclusion	webapps	PHP
2009-09-11	Match Agency BiZ - 'edit_profile.php?important' Cross-Site Scripting	webapps	PHP
2009-09-11	Match Agency BiZ - 'report.php?pid' Cross-Site Scripting	webapps	PHP
2009-09-10	jetAudio 7.5.5 plus vx - '.M3U'/'.ASX'/'.WAX'/'.WVX' Local Crash (PoC)	dos	Windows
2009-09-10	Kolibri+ Web Server 2 - GET Denial of Service	dos	Windows
2009-09-10	WarFTPd 1.82.00-RC12 - 'LIST' Format String Denial of Service	dos	Windows
2009-09-10	Advanced Comment System 1.0 - Multiple Remote File Inclusions	webapps	PHP
2009-09-10	KSP 2009R2 - '.m3u' Universal Local Buffer Overflow (SEH)	local	Windows
2009-09-10	nullam blog 0.1.2 - Local File Inclusion / File Disclosure / SQL Injection / Cross-Site Scripting	webapps	PHP
2009-09-10	INMATRIX Zoom Player Pro 6.0.0 - '.mid' Integer Overflow (PoC)	dos	Windows
2009-09-10	Enlightenment - Linux Null PTR Dereference Framework	local	Linux
2009-09-10	Icarus 2.0 - '.pgn' Universal Local Buffer Overflow (SEH)	local	Windows
2009-09-10	Graffiti CMS 1.x - Arbitrary File Upload	webapps	PHP
2009-09-10	MYRE Holiday Rental Manager - 'action' SQL Injection	webapps	PHP
2009-09-10	iDesk - 'download.php?cat_id' SQL Injection	webapps	PHP
2009-09-10	Accommodation Hotel Booking Portal - 'hotel_id' SQL Injection	webapps	PHP
2009-09-10	Bus Script - 'sitetext_id' SQL Injection	webapps	PHP
2009-09-10	Adult Portal escort listing - 'user_id' SQL Injection	webapps	PHP
2009-09-10	Drunken:Golem Gaming Portal - 'admin_news_bot.php' Remote File Inclusion	webapps	PHP
2009-09-10	An image Gallery 1.0 - 'navigation.php' Local Directory Traversal	webapps	PHP
2009-09-10	T-HTB Manager 0.5 - Multiple Blind SQL Injections	webapps	PHP
2009-09-10	[French] Faille Glob() & Curl()	papers	Multiple
2009-09-10	[Arabic] Simple SQL Injection	papers	Multiple
2009-09-10	Joomla! Component com_pressrelease - 'id' SQL Injection	webapps	PHP
2009-09-10	Datemill - 'photo_view.php?return' Cross-Site Scripting	webapps	PHP
2009-09-10	Datemill - 'photo_search.php?st' Cross-Site Scripting	webapps	PHP
2009-09-10	Datemill - 'search.php?st' Cross-Site Scripting	webapps	PHP
2009-09-10	tourismscripts HotelBook - 'hotel_id' Multiple SQL Injections	webapps	PHP
2009-09-09	Microsoft Windows Vista/7 - SMB2.0 Negotiate Protocol Request Remote Blue Screen of Death (MS07-063)	dos	Windows
2009-09-09	HTMLDOC 1.8.27 - '.html' File Handling Stack Buffer Overflow	local	Linux
2009-09-09	SIDVault 2.0e - Windows Universal Buffer Overflow (SEH)	remote	Windows
2009-09-09	Novell eDirectory 8.8 SP5 - Remote Denial of Service	dos	Windows
2009-09-09	Linux Kernel 2.4/2.6 (Fedora 11) - 'sock_sendpage()' Local Privilege Escalation (2)	local	Linux
2009-09-09	The Rat CMS Alpha 2 - Arbitrary File Upload	webapps	PHP
2009-09-09	OBOphiX 2.7.0 - 'fonctions_racine.php' Remote File Inclusion	webapps	PHP
2009-09-09	Joomla! Component BF Survey Pro Free - SQL Injection	webapps	PHP
2009-09-09	Joomla! Component TPDugg 1.1 - Blind SQL Injection	webapps	PHP
2009-09-09	Model Agency Manager Pro - 'user_id' SQL Injection	webapps	PHP
2009-09-09	Joomla! Component Joomloc 1.0 - 'id' SQL Injection	webapps	PHP
2009-09-09	Agoko CMS 0.4 - Remote Command Execution	webapps	PHP
2009-09-09	Apple Safari 3.2.3 (Windows x86) - JavaScript 'eval' Remote Denial of Service	dos	Windows_x86
2009-09-09	Ipswitch WS_FTP 12 Professional - Remote Format String (PoC)	dos	Windows
2009-09-09	GemStone/S 6.3.1 - 'stoned' Local Buffer Overflow	local	Linux
2009-09-09	Mambo Component Hestar - SQL Injection	webapps	PHP
2009-09-09	Audio Lib Player - '.m3u' Local Buffer Overflow (SEH)	local	Windows
2009-09-09	PHPNagios 1.2.0 - 'menu.php' Local File Inclusion	webapps	PHP
2009-09-09	ChartDirector 5.0.1 - 'cacheId' Arbitrary File Disclosure	webapps	ASP
2009-09-09	FTPShell Client 4.1 RC2 - Remote Buffer Overflow (Universal)	remote	Windows
2009-09-09	Pidgin MSN 2.5.8 - Remote Code Execution	remote	Windows
2009-09-09	Dnsmasq < 2.50 - Heap Overflow / Null Pointer Dereference	dos	Windows
2009-09-09	Millenium MP3 Studio - '.pls' / '.mpf' / '.m3u' Universal Local Buffer Overflow (SEH)	local	Windows
2009-09-09	jetAudio 7.1.9.4030 plus - vx(asx/wax/wvx) Universal Local Buffer Overflow (SEH)	local	Windows
2009-09-09	Media Player Classic 6.4.9 - '.mid' Integer Overflow (PoC)	dos	Windows
2009-09-09	Finding vulnerabilities in PHP scripts (FULL)	papers	Multiple
2009-09-09	Linux/x86 - Bind (/TCP) Listener (5555/TCP) + Receive Shellcode + Payload Loader Shellcode (83 bytes)	shellcode	Linux_x86
2009-09-09	phpAuction 3.2 - 'lan' Remote File Inclusion	webapps	PHP
2009-09-09	Check Point Endpoint Security - Full Disk Encryption RDP Connection Denial of Service	dos	Hardware
2009-09-07	MundiMail 0.8.2 - Remote Code Execution	webapps	PHP
2009-09-07	KingCMS 0.6 - 'CONFIG[AdminPath]' Remote File Inclusion	webapps	PHP
2009-09-06	Omnistar Recruiting - 'resume_register.php' Cross-Site Scripting	webapps	PHP
2009-09-04	Microsoft IIS 5.0/6.0 FTP Server - Stack Exhaustion Denial of Service	dos	Windows
2009-09-04	Mambo Component com_zoom - 'catid' Blind SQL Injection	webapps	PHP
2009-09-04	OtsTurntables 1.00.027 - '.m3u' / '.ofl' Universal Local Buffer Overflow (SEH)	local	Windows
2009-09-04	ZeroBoard 4.1 pl7 - 'now_connect()' Remote Code Execution	webapps	PHP
2009-09-04	Ticket Support Script - 'ticket.php' Arbitrary File Upload	webapps	PHP
2009-09-04	SIDVault 2.0e - Windows Remote Buffer Overflow (Metasploit)	remote	Windows
2009-09-04	Joomla! Component com_Joomlaub - 'aid' SQL Injection	webapps	PHP
2009-09-04	DvBBS 2.0 - 'boardrule.php' SQL Injection	webapps	PHP
2009-09-03	Adobe Acrobat/Reader < 7.1.1/8.1.3/9.1 - Collab getIcon Universal	local	Windows
2009-09-03	Hamster Audio Player 0.3a - 'Associations.cfg' Local Buffer (SEH) (2)	local	Windows
2009-09-03	SAP Player 0.9 - '.m3u' Universal Local Buffer Overflow (SEH)	local	Windows
2009-09-03	FreeSchool 1.1.0 - Multiple Remote File Inclusions	webapps	PHP
2009-09-03	PHPope 1.0.0 - Multiple Remote File Inclusions	webapps	PHP
2009-09-03	PPstream 2.6.86.8900 - PPSMediaList ActiveX Remote Buffer Overflow (PoC) (1)	dos	Windows
2009-09-03	PPstream 2.6.86.8900 - PPSMediaList ActiveX Remote Buffer Overflow (PoC) (2)	dos	Windows
2009-09-03	SIDVault 2.0e - Windows Remote Buffer Overflow	remote	Windows
2009-09-03	LFI/RFI testing and Exploiting with fimap	papers	Multiple
2009-09-03	[French] Protection contre le SQL Injection	papers	Multiple
2009-09-03	[French] ReadFile() Local File Disclosure	papers	Multiple
2009-09-03	SAP security: attacking sap clients	papers	Multiple
2009-09-03	Adobe RoboHelp Server 8 - Authentication Bypass	webapps	JSP
2009-09-03	HP Operations Manager - Default Manager 8.1 Account Remote Security	remote	Multiple
2009-09-03	HP Operations Dashboard 2.1 - Portal Default Manager Account Remote Security	remote	Multiple
2009-09-02	Linux Kernel < 2.6.19 (x86/x64) - 'udp_sendmsg' Local Privilege Escalation (2)	local	Linux
2009-09-02	Linux Kernel < 2.6.19 (Debian 4) - 'udp_sendmsg' Local Privilege Escalation (3)	local	Linux
2009-09-02	Discuz! Plugin JiangHu 1.1 - 'id' SQL Injection	webapps	PHP
2009-09-02	Ve-EDIT 0.1.4 - 'highlighter' Remote File Inclusion	webapps	PHP
2009-09-02	PHP Live! 3.3 - 'deptid' SQL Injection	webapps	PHP
2009-09-02	GreenSQL Firewall 0.9.x - WHERE Clause Security Bypass	remote	Multiple
2009-09-02	Apache Tomcat 3.2 - 404 Error Page Cross-Site Scripting	remote	Multiple
2009-09-02	Webformatique Reservation Manager 2.4 - 'index.php' Cross-Site Scripting	webapps	PHP
2009-09-01	Microsoft IIS 5.0 FTP Server (Windows 2000 SP4) - Remote Stack Overflow	remote	Windows
2009-09-01	Soritong MP3 Player 1.0 - '.m3u' / UI.txt Universal Local Buffer Overflow	local	Windows
2009-09-01	AIMP2 Audio Converter 2.53b330 - '.pls' / '.m3u' Unicode Crash (PoC)	dos	Windows
2009-09-01	JSFTemplating / Mojarra Scales / GlassFish - File Disclosure	webapps	ASP
2009-09-01	Joomla! Component com_artportal 1.0 - 'portalid' SQL Injection	webapps	PHP
2009-09-01	Joomla! Component Agora 3.0.0b (com_agora) - Local File Inclusion	webapps	PHP
2009-09-01	Xstate Real Estate 1.0 - Blind SQL Injection / Cross-Site Scripting	webapps	PHP
2009-09-01	KingCMS 0.6.0 - 'menu.php' Remote File Inclusion	webapps	PHP
2009-09-01	Hamster Audio Player 0.3a - 'Associations.cfg' Local Buffer (SEH) (1)	local	Windows
2009-09-01	akPlayer 1.9.0 - '.plt' Universal Buffer Overflow (SEH)	local	Windows
2009-09-01	phpBB3 - addon prime_quick_style GetAdmin	webapps	PHP
2009-09-01	Ve-EDIT 0.1.4 - 'debug_PHP.php' Local File Inclusion	webapps	PHP
2009-09-01	Joomla! Component com_gameserver 1.0 - 'id' SQL Injection	webapps	PHP
2009-09-01	DataLife Engine 8.2 - dle_config_api Remote File Inclusion	webapps	PHP

2009-09-01	dTunes 2.72 - Filename Processing Local Format String (PoC)	dos	Windows
2009-09-01	[Spanish] Asegurando nuestra red wireless	papers	Multiple
2009-09-01	[Persian] ASP and JSP security	papers	Multiple
2009-09-01	Nokia MultiMedia Player 1.1 - Remote Denial of Service	dos	Windows
2009-09-01	SmartVMD 1.3 - ActiveX Control 'VideoMovementDetection.dll' Remote Buffer Overflow	remote	Windows
2009-09-01	Beex - 'news.php?navaction' Cross-Site Scripting	webapps	PHP
2009-09-01	Beex - 'partneralle.php?navaction' Cross-Site Scripting	webapps	PHP
2009-09-01	PHPMass Real Estate - 'view_map.php' Cross-Site Scripting	webapps	PHP
2009-09-01	Property Watch - 'email.php?videoid' Cross-Site Scripting	webapps	PHP
2009-09-01	Property Watch - 'login.php?redirect' Cross-Site Scripting	webapps	PHP
2009-08-31	Microsoft IIS 5.0/6.0 FTP Server (Windows 2000) - Remote Stack Overflow	remote	Windows
2009-08-31	Linux Kernel 2.6 < 2.6.19 (White Box 4 / CentOS 4.4/4.5 / Fedora Core 4/5/6 x86) - 'ip_append_data()' Ring0 Privilege Escalation (1)	local	Linux_x86
2009-08-31	Linux Kernel < 2.6.31-rc7 - 'AF_IRDA' 29-Byte Stack Disclosure (2)	local	Linux
2009-08-31	Modern Script 5.0 - 'index.php?s' SQL Injection	webapps	PHP
2009-08-31	Linux Kernel 2.4.x/2.6.x (CentOS 4.8/5.3 / RHEL 4.8/5.3 / SuSE 10 SP2/11 / Ubuntu 8.10) (PPC) - 'sock_sendpage()' Local Privilege Escalation	local	Linux
2009-08-31	Swift Ultralite 1.032 - '.m3u' Local Buffer Overflow (PoC)	dos	Windows
2009-08-31	SolarWinds TFTP Server 9.2.0.111 - Remote Denial of Service	dos	Windows
2009-08-31	Ultimate Player 1.56b - '.m3u' / '.upl' Universal Local Buffer Overflow (SEH)	local	Windows
2009-08-31	MailEnable 1.52 - HTTP Mail Service Stack Buffer Overflow (PoC)	dos	Windows
2009-08-31	Hex Workshop 4.23/5.1/6.0 - '.hex' Universal Local Buffer Overflow (SEH)	local	Windows
2009-08-31	Media Jukebox 8 - '.pls' Universal Local Buffer (SEH)	local	Windows
2009-08-31	Re-Script 0.99 Beta - 'listings.php?op' SQL Injection	webapps	PHP
2009-08-31	Rock Band CMS 0.10 - 'news.php' Multiple SQL Injections (1)	webapps	PHP
2009-08-31	Apple iPhone 2.2.1/3.x - MobileSafari Crash + Reboot (Denial of Service)	dos	Windows
2009-08-31	Mybuxscript PTC-BUX - 'spnews.php' SQL Injection	webapps	PHP
2009-08-31	osCommerce Online Merchant 2.2 RC2a - Code Execution	webapps	PHP
2009-08-31	Google Chrome 6.0.472 - 'Math.Random()' Random Number Generation	remote	Multiple
2009-08-31	MKPortal 1.x (Multiple Modules) - Cross-Site Scripting	webapps	PHP
2009-08-31	MKPortal 1.x - Multiple BBCode HTML Injection Vulnerabilities	webapps	PHP
2009-08-31	JBoard - Multiple Cross-Site Scripting / SQL Injections	webapps	PHP
2009-08-31	LiveStreet 0.2 - Comment Topic Header Cross-Site Scripting	webapps	PHP
2009-08-31	LiveStreet 0.2 - '/include/ajax/blogInfo.php?asd' Cross-Site Scripting	webapps	PHP
2009-08-30	e-soft24 Article Directory Script - 'q' Cross-Site Scripting	webapps	PHP
2009-08-30	e-Soft24 Flash Games Script 1.0 - Cross-Site Scripting	webapps	PHP
2009-08-30	e-Soft24 Jokes Portal Script Seo 1.0 - Multiple Cross-Site Scripting Vulnerabilities	webapps	PHP
2009-08-30	e-Soft24 PTC Script 1.2 - 'login.php' Multiple Cross-Site Scripting Vulnerabilities	webapps	PHP
2009-08-29	x10 MP3 Automatic Search Engine 1.6.5 - '/includes/video_ad.php?pic_id' Cross-Site Scripting	webapps	PHP
2009-08-29	x10 MP3 Automatic Search Engine 1.6.5 - 'linkvideos_listing.php?category' Cross-Site Scripting	webapps	PHP
2009-08-29	x10 MP3 Automatic Search Engine 1.6.5b - '/templates/header1.php?id' Cross-Site Scripting	webapps	PHP
2009-08-29	x10 MP3 Automatic Search Engine 1.6.5b - 'video_listing.php?key' Cross-Site Scripting	webapps	PHP
2009-08-29	x10 MP3 Automatic Search Engine 1.6.5b - 'embed.php?name' Cross-Site Scripting	webapps	PHP
2009-08-29	x10 MP3 Automatic Search Engine 1.6.5b - 'info.php?name' Cross-Site Scripting	webapps	PHP
2009-08-29	x10 MP3 Automatic Search Engine 1.6.5b - 'lyrics.php?id' Cross-Site Scripting	webapps	PHP
2009-08-29	x10 MP3 Automatic Search Engine 1.6.5b - '/adult/video_listing.php?key' Cross-Site Scripting	webapps	PHP
2009-08-29	WebStatCaffe - '/stat/mostvisitpage.php?nodayshow' Cross-Site Scripting	webapps	PHP
2009-08-29	WebStatCaffe - '/stat/visitorduration.php?nodayshow' Cross-Site Scripting	webapps	PHP
2009-08-29	WebStatCaffe - '/stat/mostvisitpagechart.php?nopagesmost' Cross-Site Scripting	webapps	PHP
2009-08-29	WebStatCaffe - '/stat/pageviewers.php?date' Cross-Site Scripting	webapps	PHP
2009-08-29	WebStatCaffe - '/stat/pageviewerschart.php?date' Cross-Site Scripting	webapps	PHP
2009-08-29	WebStatCaffe - '/stat/referer.php?date' Cross-Site Scripting	webapps	PHP
2009-08-28	PIPL 2.5.0 - '.m3u' Universal Buffer Overflow (SEH)	local	Windows
2009-08-28	Kaspersky 2010 - Remote Memory Corruption / Denial of Service (PoC)	dos	Windows
2009-08-28	Silurus Classifieds System - 'category.php' SQL Injection	webapps	PHP
2009-08-28	μTorrent (uTorrent) 1.8.3 Build 15772 - Create New Torrent Buffer Overflow (PoC)	dos	Windows
2009-08-28	HTML Creator & Sender 2.3 build 697 - Local Buffer Overflow (SEH)	local	Windows
2009-08-28	FlexCMS 2.5 - 'CookieUsername' Cookie SQL Injection	webapps	PHP
2009-08-28	Linux Kernel 2.6.x - '/drivers/net/r8169.c' Out-of-IOMMU Error Local Denial of Service	dos	Linux
2009-08-28	Open Classifieds - Multiple Cross-Site Scripting Vulnerabilities	webapps	PHP
2009-08-28	Tukanas Classifieds 1.0 - 'index.php' SQL Injection	webapps	PHP
2009-08-28	QuarkMail - 'tf' Directory Traversal	webapps	PHP
2009-08-27	WordPress Plugin WP-Syntax 0.9.1 - Remote Command Execution	webapps	PHP
2009-08-27	Joomla! Component com_digifolio 1.52 - 'id' SQL Injection	webapps	PHP
2009-08-27	Uiga Church Portal - 'year' SQL Injection	webapps	PHP
2009-08-27	Hardening & messing with win32 Apache Tomcat	papers	Multiple
2009-08-27	Smart ASP Survey - 'catid' SQL Injection	webapps	ASP
2009-08-27	Smart Magician Blog 1.0 - Multiple SQL Injections	webapps	PHP
2009-08-27	Free Arcade Script 1.0 - 'search' Cross-Site Scripting	webapps	PHP
2009-08-27	Wap-motor - 'image' Directory Traversal	webapps	PHP
2009-08-27	E-Gold Game Series: Pirates of The Caribbean - Multiple SQL Injections	webapps	PHP
2009-08-27	StandAloneArcade 1.1 - 'gamelist.php' Cross-Site Scripting	webapps	PHP
2009-08-26	Linux Kernel 2.6.30 - 'atalk_getname()' 8-bytes Stack Disclosure (1)	local	Linux
2009-08-26	Moa Gallery 1.2.0 - Multiple Remote File Inclusions	webapps	PHP
2009-08-26	Moa Gallery 1.2.0 - 'index.php?action' SQL Injection	webapps	PHP
2009-08-26	totalcalendar 2.4 - Blind SQL Injection / Local File Inclusion	webapps	PHP
2009-08-26	Moa Gallery 1.2.0 - 'p_filename' Remote File Disclosure	webapps	PHP
2009-08-26	Simple CMS Framework 1.0 - 'page' SQL Injection	webapps	PHP
2009-08-26	TFTPUtil GUI 1.3.0 - Remote Denial of Service	dos	Windows
2009-08-26	Discuz! Plugin Crazy Star 2.0 - 'fmid' SQL Injection	webapps	PHP
2009-08-26	Open Auto Classifieds 1.5.9 - Multiple Vulnerabilities	webapps	PHP
2009-08-26	PAD Site Scripts 3.6 - 'list.php?string' SQL Injection	webapps	PHP
2009-08-26	allomani 2007 - 'cat' SQL Injection	webapps	PHP
2009-08-26	PHPSANE 0.5.0 - 'save.php' Remote File Inclusion	webapps	PHP
2009-08-26	Linux/x86 - Disable Network Card + Polymorphic Shellcode (75 bytes)	shellcode	Linux_x86
2009-08-26	VideoGirls - 'forum.php?t' Cross-Site Scripting	webapps	PHP
2009-08-26	VideoGirls - 'profile.php?profile_name' Cross-Site Scripting	webapps	PHP
2009-08-26	VideoGirls - 'view.php?p' Cross-Site Scripting	webapps	PHP
2009-08-26	PHP-Fusion 6.1.18 - Multiple Information Disclosure Vulnerabilities	webapps	PHP
2009-08-26	IBM Tivoli Identity Manager 5.0.5 - User Profile HTML Injection	remote	Multiple
2009-08-26	DigiOz Guestbook 1.7.2 - 'search.php' Cross-Site Scripting	webapps	PHP
2009-08-26	JCE-Tech SearchFeed Script - 'index.php' Cross-Site Scripting	webapps	PHP
2009-08-26	Auction RSS Content Script - 'rss.php?id' Cross-Site Scripting	webapps	PHP
2009-08-26	Auction RSS Content Script - 'search.php?id' Cross-Site Scripting	webapps	PHP
2009-08-26	JCE-Tech PHP Video Script - 'index.php' Cross-Site Scripting	webapps	PHP
2009-08-25	ProFTP 2.9 - Welcome Message Remote Buffer Overflow (Metasploit)	remote	Windows
2009-08-25	Media Jukebox 8 - '.m3u' Universal Local Buffer (SEH)	local	Windows
2009-08-25	Joomla! Component com_siirler 1.2 - 'sid' SQL Injection	webapps	PHP
2009-08-25	Turnkey Arcade Script - SQL Injection (2)	webapps	PHP
2009-08-25	TCPDB 3.8 - Remote Content Change Bypass	webapps	PHP
2009-08-25	Linux Kernel 2.6.31-rc7 - 'AF_LLC getsockname' 5-Byte Stack Disclosure	local	Linux
2009-08-25	Xerox WorkCentre (Multiple Models) - Denial of Service	dos	Hardware
2009-08-25	Cerberus FTP 3.0.1 - 'ALLO' Remote Overflow Denial of Service (Metasploit)	dos	Windows
2009-08-25	Novell Client for Windows 2000/XP - ActiveX Remote Denial of Service	dos	Windows
2009-08-25	Lotus note connector for BlackBerry Manager 5.0.0.11 - ActiveX Denial of Service	dos	Windows
2009-08-25	EMO Breader Manager - 'video.php?movie' SQL Injection	webapps	PHP
2009-08-25	ProShow Producer / Gold 4.0.2549 - '.psh' Universal Buffer Overflow (SEH)	local	Windows
2009-08-25	HyperVM - File Permissions Credential Disclosure	local	Multiple
2009-08-25	Novell Client 4.91.5 - ActiveX Control 'nwsetup.dll' Remote Denial of Service (1)	dos	Novell
2009-08-25	Novell Client 4.91.5 - ActiveX Control 'nwsetup.dll' Remote Denial of Service (2)	dos	Novell
2009-08-25	Nokia Lotus Notes Connector - 'lnresobject.dll' Remote Denial of Service	dos	Windows
2009-08-25	OpenAutoClassifieds 1.5.9 - SQL Injection	webapps	PHP
2009-08-24	Linux Kernel 2.4/2.6 (RedHat Linux 9 / Fedora Core 4 < 11 / Whitebox 4 / CentOS 4) - 'sock_sendpage()' Ring0 Privilege Escalation (5)	local	Linux
2009-08-24	Moa Gallery 1.1.0 - 'gallery_id' SQL Injection	webapps	PHP
2009-08-24	Arcade Trade Script 1.0b - (Authentication Bypass) Insecure Cookie Handling	webapps	PHP
2009-08-24	Photodex ProShow Gold 4 (Windows XP SP3) - '.psh' Universal Buffer Overflow (SEH)	local	Windows
2009-08-24	PHP Dir Submit - 'aid' SQL Injection	webapps	PHP
2009-08-24	Cuteflow 2.10.3 - 'edituser.php' Security Bypass	webapps	PHP
2009-08-24	KSP 2006 FINAL - '.m3u' Universal Local Buffer (SEH)	local	Windows
2009-08-24	Faslo Player 7.0 - '.m3u' Local Buffer Overflow (PoC)	dos	Windows
2009-08-24	FreeBSD 6.1 - 'kqueue()' Null Pointer Dereference Privilege Escalation	local	FreeBSD
2009-08-24	BSD (Multiple Distributions) - 'setusercontext()' Multiple Vulnerabilities	local	Multiple

2009-08-24	Lanai Core 0.6 - Remote File Disclosure / Info Disclosure	webapps	PHP
2009-08-24	Avast! 4.8.1335 Professional - Kernel Local Buffer Overflow	local	Windows
2009-08-24	Uebimiau Webmail 3.2.0-2.0 - Arbitrary Database Disclosure	webapps	PHP
2009-08-24	humanCMS - Authentication Bypass	webapps	PHP
2009-08-24	Fat Player 0.6b - '.wav' Universal Local Buffer	local	Windows
2009-08-24	War-FTPD 1.65 - MKD/CD Requests Denial of Service	dos	Windows
2009-08-24	ITechBids 8.0 - 'ProductID' Blind SQL Injection	webapps	PHP
2009-08-24	NETGEAR WNR2000 FW 1.2.0.8 - Information Disclosure	remote	Hardware
2009-08-24	New5starRating 1.0 - 'rating.php' SQL Injection	webapps	PHP
2009-08-24	NaviCOPA Web Server 3.01 - Remote Buffer Overflow	remote	Windows
2009-08-24	Audacity 1.2 - '.gro' Universal Buffer Overflow (Egghunter)	local	Windows
2009-08-24	Joomla! Component com_ninjamonial 1.1 - 'testimID' SQL Injection	webapps	PHP
2009-08-24	Huawei SmartAX MT880 - Multiple Cross-Site Request Forgery Vulnerabilities	remote	Hardware
2009-08-24	Joomla! Component com_jtips 1.0.x - 'season' Blind SQL Injection	webapps	PHP
2009-08-24	Geeklog 1.6.0sr1 - Arbitrary File Upload	webapps	PHP
2009-08-24	FLIP Flash Album Deluxe 1.8.407.1 - '.fft' Crash (PoC)	dos	Windows
2009-08-24	AiO (All into One) Flash Mixer 3 - '.afp' Crash (PoC)	dos	Windows
2009-08-24	Thin Clients: Slim Security	papers	Multiple
2009-08-24	Radvision Scopia - '/entry/index.jsp' Cross-Site Scripting	webapps	PHP
2009-08-23	Live For Speed S2 - Duplicate Join Packet Remote Denial of Service	dos	Multiple
2009-08-21	Paypal Shopping Cart Script - 'index.php' Multiple Cross-Site Scripting Vulnerabilities	webapps	PHP
2009-08-21	Paypal Shopping Cart Script - 'index.php?cid' SQL Injection	webapps	PHP
2009-08-21	HotScripts Type PHP Clone Script - 'feedback.php?msg' Cross-Site Scripting	webapps	PHP
2009-08-21	HotScripts Type PHP Clone Script - 'index.php?msg' Cross-Site Scripting	webapps	PHP
2009-08-21	HotScripts Type PHP Clone Script - 'lostpassword.php?msg' Cross-Site Scripting	webapps	PHP
2009-08-20	EZArticles - 'articles.php' Cross-Site Scripting	webapps	PHP
2009-08-20	PHP Scripts Now Riddles - '/riddles/results.php?searchQuery' Cross-Site Scripting	webapps	PHP
2009-08-20	PHP Scripts Now Riddles - '/riddles/list.php?catid' SQL Injection	webapps	PHP
2009-08-19	Adobe Flex SDK 3.x - 'index.template.html' Cross-Site Scripting	webapps	Multiple
2009-08-19	Linux Kernel 2.6.x - 'drivers/char/tty_ldisc.c' Null Pointer Dereference Denial of Service	dos	Linux
2009-08-19	UloKI PHP Forum 2.1 - 'search.php' Cross-Site Scripting	webapps	PHP
2009-08-18	Linux Kernel < 2.6.30.5 - 'cfg80211' Remote Denial of Service	dos	Linux
2009-08-18	Adobe JRun 4 - 'logfile' (Authenticated) Directory Traversal	remote	Windows
2009-08-18	PHP-Lance 1.52 - Multiple Local File Inclusions	webapps	PHP
2009-08-18	BaBB 2.8 - Remote Code Injection	webapps	PHP
2009-08-18	HTML Email Creator & Sender 2.3 - Local Buffer Overflow (PoC) (SEH)	dos	Windows
2009-08-18	AJ Auction Pro OOPD 2.x - 'id' SQL Injection	webapps	PHP
2009-08-18	SPIP < 2.0.9 - Arbitrary Copy All Passwords to '.XML' File	webapps	PHP
2009-08-18	TheGreenBow VPN Client - 'tgbvpn.sys' Local Denial of Service	dos	Windows
2009-08-18	vTiger CRM 5.0.4 - Remote Code Execution / Cross-Site Request Forgery / Local File Inclusion / Cross-Site Scripting	webapps	PHP
2009-08-18	DreamPics Builder - 'exhibition_id' SQL Injection	webapps	PHP
2009-08-18	Arcadem Pro 2.8 - 'article' Blind SQL Injection	webapps	PHP
2009-08-18	Videos Broadcast Yourself 2 - 'UploadID' SQL Injection	webapps	PHP
2009-08-18	Apple Safari 4.0.2 - WebKit Parsing of Floating Point Numbers Buffer Overflow (PoC)	dos	Multiple
2009-08-18	Microsoft Internet Explorer - JavaScript SetAttribute Remote Crash	dos	Windows
2009-08-18	ZTE ZXDSL 831 II Modem - Arbitrary Add Admin	remote	Hardware
2009-08-18	broid 1.0 Beta 3a - '.mp3' Local Buffer Overflow (PoC)	dos	Windows
2009-08-18	Xenorate Media Player 2.6.0.0 - '.xpl' Universal Local Buffer (SEH)	local	Windows
2009-08-18	2WIRE Gateway - Authentication Bypass / Password Reset (2)	webapps	PHP
2009-08-18	autonomous lan party 0.98.3 - Remote File Inclusion	webapps	PHP
2009-08-18	E CMS 1.0 - 'index.php?s' SQL Injection	webapps	PHP
2009-08-18	Infinity 2.x - 'options[style_dir]' Local File Disclosure	webapps	PHP
2009-08-18	Joomla! Component MisterEstate - Blind SQL Injection	webapps	PHP
2009-08-18	Fotoshow PRO - 'category' SQL Injection	webapps	PHP
2009-08-18	phpfreeBB 1.0 - Blind SQL Injection	webapps	PHP
2009-08-18	Playlistmaker 1.51 - '.m3u' Local Buffer Overflow (SEH)	local	Windows
2009-08-18	KOL Player 1.0 - '.mp3' Local Buffer Overflow (PoC)	dos	Windows
2009-08-18	ProSysInfo TFTP Server TFTPDWIN 0.4.2 - Remote Buffer Overflow (2)	remote	Windows
2009-08-18	Ultimate Fade-in Slideshow 1.51 - Arbitrary File Upload	webapps	PHP
2009-08-18	PHP Email Manager - 'remove.php?ID' SQL Injection	webapps	PHP
2009-08-18	CBAuthority - ClickBank Affiliate Management SQL Injection	webapps	PHP
2009-08-18	Best Dating Script - Arbitrary File Upload	webapps	PHP
2009-08-18	ZTE ZXDSL 831 II Modem - Arbitrary Configuration Access	remote	Hardware
2009-08-18	Traidnt UP 2.0 - SQL Injection	webapps	PHP
2009-08-18	asaher pro 1.0.4 - Remote Database Backup	webapps	PHP
2009-08-18	VUPlayer 2.49 - '.m3u' Universal Buffer Overflow	local	Windows
2009-08-18	Linux Kernel 2.x (Android) - 'sock_sendpage()' Local Privilege Escalation	local	Android
2009-08-18	ntop 3.3.10 - HTTP Basic Authentication Null Pointer Dereference Denial of Service	dos	Linux
2009-08-18	NETGEAR WNR2000 - Multiple Information Disclosure Vulnerabilities	remote	Hardware
2009-08-17	Adobe ColdFusion Server 8.0.1 - '/wizards/common/_authenticatewizarduser.cfm' Query String Cross-Site Scripting	webapps	CFM
2009-08-17	Adobe ColdFusion Server 8.0.1 - 'administrator/logviewer/searchlog.cfm?startRow' Cross-Site Scripting	webapps	CFM
2009-08-17	Adobe ColdFusion Server 8.0.1 - '/wizards/common/_logintowizard.cfm' Query String Cross-Site Scripting	webapps	CFM
2009-08-17	Adobe ColdFusion Server 8.0.1 - '/administrator/enter.cfm' Query String Cross-Site Scripting	webapps	CFM
2009-08-17	DUWare DUgallery 3.0 - '/admin/edit.asp' Authentication Bypass	webapps	ASP
2009-08-17	Valve Software Source Engine - Format String	remote	Windows
2009-08-17	RadAFFILIATE Links - 'index.php' Cross-Site Scripting	webapps	PHP
2009-08-17	Freelancers - 'placebid.php?id' Cross-Site Scripting	webapps	PHP
2009-08-17	Freelancers - 'post_resume.php?jobid' Cross-Site Scripting	webapps	PHP
2009-08-15	Discuz! 6.0 - '2fly_gift.php' SQL Injection	webapps	PHP
2009-08-14	Linux Kernel 2.x (RedHat) - 'sock_sendpage()' Ring0 Privilege Escalation (1)	local	Linux
2009-08-14	Linux Kernel 2.x - 'sock_sendpage()' Local Privilege Escalation (4)	local	Linux
2009-08-14	Ignition 1.2 - 'comment' Remote Code Injection	webapps	PHP
2009-08-14	PHP Competition System 0.84 - 'competition' SQL Injection	webapps	PHP
2009-08-14	DS CMS 1.0 - 'nFileId' SQL Injection	webapps	PHP
2009-08-14	MyWeight 1.0 - Arbitrary File Upload	webapps	PHP
2009-08-14	Sniper Elite 1.0 - Null Pointer Dereference Denial of Service	dos	Multiple
2009-08-13	FTPShell Client 4.1 RC2 - Name Session Stack Overflow	local	Windows
2009-08-13	VideoLAN VLC Media Player 1.0.0/1.0.1 - 'smb://' URI Handling Buffer Overflow (PoC)	dos	Windows
2009-08-13	pIPL 2.5.0 - '.PLS' / '.PL' Universal Local Buffer (SEH)	local	Windows
2009-08-13	EmbedThis Appweb 3.0B.2-4 - Multiple Remote Buffer Overflows (PoC)	dos	Windows
2009-08-13	JBLOG 1.5.1 - SQL Table Backup	webapps	PHP
2009-08-13	THOMSON ST585 - 'user.ini' Arbitrary Disclosure	remote	Hardware
2009-08-13	Gazelle CMS 1.0 - Arbitrary File Upload	webapps	PHP
2009-08-13	tgs CMS 0.x - Cross-Site Scripting / SQL Injection / File Disclosure	webapps	PHP
2009-08-13	[Arabic] Buffer Overflow Exploitation for Beginners	papers	Multiple
2009-08-13	[Persian] Remote Win32 Kernel Exploitation	papers	Multiple
2009-08-13	INTO OUTFILE (Mysql) paper	papers	Multiple
2009-08-13	Elkagroup Elkapax - 'q' Cross-Site Scripting	webapps	PHP
2009-08-12	Shorty 0.7.1b - (Authentication Bypass) Insecure Cookie Handling	webapps	PHP
2009-08-12	Easy Music Player 1.0.0.2 - 'wav' Universal Local Buffer (SEH) (3)	local	Windows
2009-08-12	Gallarific 1.1 - '/gallery.php' Arbitrary Delete/Edit Category	webapps	PHP
2009-08-12	2WIRE Gateway - Authentication Bypass / Password Reset (1)	remote	Hardware
2009-08-12	Microsoft Wordpad on winXP SP3 - Local Crash	dos	Windows
2009-08-12	Plume CMS 1.2.3 - Multiple SQL Injections	webapps	PHP
2009-08-12	Gazelle CMS 1.0 - Multiple Vulnerabilities / Remote Code Execution	webapps	PHP
2009-08-12	2WIRE Routers - 'CD35_SETUP_01' Access Validation	remote	Hardware
2009-08-11	WordPress 2.8.3 - Remote Admin Reset Password	webapps	PHP
2009-08-11	Embedthis Appweb 3.0b.2-4 - Remote Buffer Overflow (PoC)	dos	Windows
2009-08-11	Easy Music Player 1.0.0.2 - 'wav' Universal Local Buffer (SEH) (1)	local	Windows
2009-08-11	Joomla! Component idoblog 1.1b30 (com_idoblog) - SQL Injection	webapps	PHP
2009-08-11	OCS Inventory NG 1.2.1 - 'systemid' SQL Injection	webapps	PHP
2009-08-11	Microsoft Windows Server 2003 - '.EOT' Blue Screen of Death Crash	dos	Windows
2009-08-11	Easy Music Player 1.0.0.2 - 'wav' Universal Local Buffer (SEH) (2)	local	Windows
2009-08-11	Linux/x86 - killall5 + Polymorphic Shellcode (61 bytes)	shellcode	Linux_x86
2009-08-11	Linux/x86 - execve(/bin/sh) + Polymorphic Shellcode (48 bytes)	shellcode	Linux_x86
2009-08-11	WebKit - Floating Point Number Remote Buffer Overflow	remote	Multiple
2009-08-10	SmilieScript 1.0 - Authentication Bypass	webapps	PHP
2009-08-10	Papoo CMS 3.7.3 - (Authenticated) Arbitrary Code Execution	webapps	PHP
2009-08-10	Mini-CMS 1.0.1 - 'page.php' SQL Injection	webapps	PHP
2009-08-10	CMS Made Simple 1.6.2 - Local File Disclosure	webapps	PHP

2009-08-10	Joomla! Component Kunena Forums (com_kunena) - Blind SQL Injection	webapps	PHP
2009-08-10	Mediacoder 0.7.1.4490 - '.lst' / '.m3u' Universal Buffer Overflow (SEH)	local	Windows
2009-08-10	SupportPRO SupportDesk 3.0 - 'shownews.php' Cross-Site Scripting	webapps	PHP
2009-08-10	SQLiteManager 1.2 - 'main.php' Cross-Site Scripting	webapps	PHP
2009-08-10	ViArt CMS - 'forums.php?category_id' Cross-Site Scripting	webapps	PHP
2009-08-10	ViArt CMS - 'forum.php?forum_id' Cross-Site Scripting	webapps	PHP
2009-08-10	ViArt CMS - 'forum_topic_new.php?forum_id' Cross-Site Scripting	webapps	PHP
2009-08-10	Papoo 3.x - Upload Images Arbitrary File Upload	webapps	PHP
2009-08-10	PHP 5.3 - 'mail.log' Configuration Option 'open_basedir' Restriction Bypass	local	PHP
2009-08-10	PHP 5.2.10/5.3 - 'ini_restore()' Memory Information Disclosure (1)	remote	PHP
2009-08-10	PHP 5.2.10/5.3 - 'ini_restore()' Memory Information Disclosure (2)	remote	PHP
2009-08-10	ViArt Helpdesk - 'products_search.php?search_category_id' Cross-Site Scripting	webapps	PHP
2009-08-10	ViArt Helpdesk - 'reviews.php?category_id' Cross-Site Scripting	webapps	PHP
2009-08-10	ViArt Helpdesk - 'forum.php?forum_id' Cross-Site Scripting	webapps	PHP
2009-08-10	TurnkeyForms Yahoo Answers Clone - 'questiondetail.php' Cross-Site Scripting	webapps	PHP
2009-08-10	Online Work Order Suite Lite Edition - Multiple Cross-Site Scripting Vulnerabilities	webapps	ASP
2009-08-10	ViArt Helpdesk - 'products.php?category_id' Cross-Site Scripting	webapps	PHP
2009-08-10	ViArt Helpdesk - 'article.php?category_id' Cross-Site Scripting	webapps	PHP
2009-08-10	ViArt Helpdesk - 'product_details.php?category_id' Cross-Site Scripting	webapps	PHP
2009-08-10	Hitron Soft Answer Me - 'answers.php' Cross-Site Scripting	webapps	PHP
2009-08-09	Serveez 0.1.7 - 'If-Modified-Since' Header Stack Buffer Overflow	dos	Windows
2009-08-08	SpiceWorks - 'query' Cross-Site Scripting	webapps	PHP
2009-08-07	Alwasel 1.5 - Multiple SQL Injections	webapps	PHP
2009-08-07	PHotoLa Gallery 1.0 - Authentication Bypass	webapps	PHP
2009-08-07	Steam 54/894 - Local Privilege Escalation	local	Windows
2009-08-07	Banner Exchange Script 1.0 - 'targetid' Blind SQL Injection	webapps	PHP
2009-08-07	Logoshows BBS 2.0 - 'forumid' SQL Injection	webapps	PHP
2009-08-07	Typing Pal 1.0 - 'idTableProduit' SQL Injection	webapps	PHP
2009-08-07	iRehearse - '.m3u' Local Buffer Overflow (PoC)	dos	Windows
2009-08-07	FoxPlayer 1.1.0 - '.m3u' Local Buffer Overflow (PoC)	dos	Windows
2009-08-07	Arab Portal 2.2 - Blind Cookie Authentication Bypass	webapps	PHP
2009-08-07	PHPCityPortal - Authentication Bypass	webapps	PHP
2009-08-07	Facil Helpdesk - Local File Inclusion / Remote File Inclusion / Cross-Site Scripting	webapps	PHP
2009-08-07	IsolSoft Support Center 2.5 - Local File Inclusion / Remote File Inclusion / Cross-Site Scripting	webapps	PHP
2009-08-07	Joomla! Component com_pms 2.0.4 - 'Ignore-List' SQL Injection	webapps	PHP
2009-08-07	Logoshows BBS 2.0 - Authentication Bypass	webapps	PHP
2009-08-07	logoshows bbs 2.0 - File Disclosure / Insecure Cookie Handling	webapps	PHP
2009-08-07	SpiceWorks 3.6 - 'Accept' Overflow Crash	dos	Windows
2009-08-07	Readfile() Local File Disclosure	papers	Multiple
2009-08-07	[Italian] XSS:Cross Site Scripting	papers	Multiple
2009-08-07	How to find RCE in scripts (with examples)	papers	Multiple
2009-08-07	PhotoPost PHP 3.3.1 - 'cat' Cross-Site Scripting / SQL Injection	webapps	PHP
2009-08-07	Facil Helpdesk - 'kbase/kbase.php' URI Cross-Site Scripting	webapps	PHP
2009-08-07	PHP Photo Vote 1.3F - 'page' Cross-Site Scripting	webapps	PHP
2009-08-07	PHP Easy Shopping Cart 3.1R - 'subitems.php' Cross-Site Scripting	webapps	PHP
2009-08-06	FreeBSD 7.2-RELEASE - SCTP Local Kernel Denial of Service	dos	FreeBSD
2009-08-06	JetAudio 7.1.9.4030 - '.m3u' Universal Stack Overflow (SEH)	local	Windows
2009-08-06	A2 Media Player Pro 2.51 - '.m3u' / '.m3l' Universal Local Buffer Overflow (SEH)	local	Windows
2009-08-06	PHP Script Forum Hoster - Topic Delete / Cross-Site Scripting	webapps	PHP
2009-08-06	Playlistmaker 1.5 - '.m3u' / '.M3L' Local Stack Overflow (SEH)	local	Windows
2009-08-06	TYPO3 CMS 4.0 - 'showUid' SQL Injection	webapps	PHP
2009-08-06	Groovy Media Player 1.2.0 - '.m3u' Local Buffer Overflow (PoC)	dos	Windows
2009-08-06	ImTOO MPEG Encoder 3.1.53 - '.cue' / '.m3u' Local Buffer Overflow (PoC)	dos	Windows
2009-08-06	LM Starmail 2.0 - SQL Injection / File Inclusion	webapps	PHP
2009-08-06	Linux Kernel 2.6.x - 'posix-timers.c' Null Pointer Dereference Denial of Service	dos	Linux
2009-08-06	Alkacon OpenCMS 7.x - Multiple Input Validation Vulnerabilities	webapps	PHP
2009-08-06	Waverider Systems Perlshop - Multiple Input Validation Vulnerabilities	webapps	PHP
2009-08-06	Multi Website 1.5 - 'search' HTML Injection	webapps	PHP
2009-08-06	Willscript Auction Website Script - 'category.php' SQL Injection	webapps	PHP
2009-08-06	AJ Auction Pro OOPD 3.0 - 'txtkeyword' Cross-Site Scripting	webapps	PHP
2009-08-06	Silurus Classifieds - 'category.php?ID' Cross-Site Scripting	webapps	PHP
2009-08-06	Silurus Classifieds - 'wcategory.php?ID' Cross-Site Scripting	webapps	PHP
2009-08-06	Silurus Classifieds - 'search.php?keywords' Cross-Site Scripting	webapps	PHP
2009-08-05	Microsoft Internet Explorer 8.0.7100.0 - Simple HTML Remote Crash (PoC)	dos	Windows
2009-08-05	Linux Kernel < 2.6.14.6 - 'procfs' Kernel Memory Disclosure	local	Linux
2009-08-05	Tuniac 090517c - '.m3u' Local File Crash (PoC)	dos	Windows
2009-08-05	mybackup 1.4.0 - File Download / Remote File Inclusion	webapps	PHP
2009-08-05	jetAudio 7.1.9.4030 plus vx - '.m3u' Local Stack Overflow (SEH)	local	Windows
2009-08-05	tenrok 1.1.0 - File Disclosure / Remote Code Execution	webapps	PHP
2009-08-05	UltraPlayer Media Player 2.112 - Local Buffer Overflow (PoC)	dos	Windows
2009-08-05	Irokez CMS 0.7.1 - SQL Injection	webapps	PHP
2009-08-05	AccessoriesMe PHP Affiliate Script 1.4 - Blind SQL Injection / Cross-Site Scripting	webapps	PHP
2009-08-05	opennews 1.0 - SQL Injection / Remote Code Execution	webapps	PHP
2009-08-05	Portel 2008 - 'decide.php?patron' Blind SQL Injection	webapps	PHP
2009-08-05	AJ Auction Pro 3.0 - 'txtkeyword' Cross-Site Scripting	webapps	PHP
2009-08-05	Microsoft Internet Explorer 8 - X.509 Certificate Common Name Encoding Multiple Security Bypass Vulnerabilities	remote	Windows
2009-08-04	Linux Kernel 2.6.31-rc5 - sigaltstack 4-Byte Stack Disclosure	local	Linux
2009-08-04	MOC Designs PHP News 1.1 - Authentication Bypass	webapps	PHP
2009-08-04	Mediacoder 0.7.1.4486 - '.lst' Universal Buffer Overflow (SEH)	local	Windows
2009-08-04	elgg 1.5 - '/_css/js.php' Local File Inclusion	webapps	PHP
2009-08-04	ShopMaker CMS 2.0 - Blind SQL Injection / Local File Inclusion	webapps	PHP
2009-08-04	Perl$hop E-Commerce Script - Trust Boundary Input Parameter Injection	webapps	CGI
2009-08-04	In-portal 4.3.1 - 'index.php?env' Local File Inclusion	webapps	PHP
2009-08-04	jetAudio 7.1.9.4030 plus vx - '.m3u' Local Buffer Overflow (PoC)	dos	Windows
2009-08-04	BlazeDVD 5.1/HDTV Player 6.0 - '.plf' Universal Buffer Overflow (SEH)	local	Windows
2009-08-04	RadASM 2.2.1.6 Menu Editor - '.mnu' Stack Overflow (PoC)	dos	Windows
2009-08-04	shell via LFI - proc/self/environ method	papers	Multiple
2009-08-04	[Turkish] TCP/IP Fragmented Packets	papers	Multiple
2009-08-04	XFS - XSS From SQL	papers	Multiple
2009-08-04	[German] Remote/Local File Inclusion Basic Tutorial	papers	Multiple
2009-08-04	[French] blind SQL Injection	papers	Multiple
2009-08-04	[Spanish] OptimizaciÃ³n de SQL Union Injection en MYSQL	papers	Multiple
2009-08-04	CS-Cart 2.0.5 - 'reward_points.post.php' SQL Injection	webapps	PHP
2009-08-03	AW BannerAd - Authentication Bypass	webapps	ASP
2009-08-03	BlazeDVD 5.1 Professional - '.plf' Local Buffer Overflow (SEH)	local	Windows
2009-08-03	Amaya 11.2 - W3C Editor/Browser (defer) Remote Buffer Overflow (SEH)	remote	Windows
2009-08-03	ProjectButler 1.5.0 - 'pda_projects.php?offset' Remote File Inclusion	webapps	PHP
2009-08-03	Ajax Short URL Script - Authentication Bypass	webapps	PHP
2009-08-03	Netpet CMS 1.9 - 'confirm.php?language' Local File Inclusion	webapps	PHP
2009-08-03	QuickDev 4 - 'download.php' File Disclosure	webapps	PHP
2009-08-03	TT Web Site Manager 0.5 - Authentication Bypass	webapps	PHP
2009-08-03	SimpleLoginSys 0.5 - Authentication Bypass	webapps	PHP
2009-08-03	simplePHPWeb 0.2 - 'files.php' Authentication Bypass	webapps	PHP
2009-08-03	Miniweb 2.0 Module Publisher - Blind SQL Injection / Cross-Site Scripting	webapps	PHP
2009-08-03	Miniweb 2.0 Module Survey Pro - Blind SQL Injection / Cross-Site Scripting	webapps	PHP
2009-08-03	x10 media adult script 1.7 - Multiple Vulnerabilities	webapps	PHP
2009-08-03	Questions Answered 1.3 - Authentication Bypass	webapps	PHP
2009-08-03	elvin bts 1.2.2 - SQL Injection / Cross-Site Scripting	webapps	PHP
2009-08-03	Mediacoder 0.6.2.4275 - '.lst' Local Stack Buffer Overflow	local	Windows
2009-08-03	Multi Website 1.5 - index PHP action SQL Injection	webapps	PHP
2009-08-03	RadASM 2.2.1.5 - '.mnu' Local Format String (PoC)	dos	Windows
2009-08-03	Blaze HDTV Player 6.0 - '.plf' Local Buffer Overflow (SEH)	local	Windows
2009-08-03	Arab Portal 2.2 - 'mod.php' Local File Inclusion	webapps	PHP
2009-08-03	Blink Blog System - Authentication Bypass	webapps	PHP
2009-08-03	Discloser 0.0.4-rc2 - 'index.php?more' SQL Injection	webapps	PHP
2009-08-03	MAXcms 3.11.20b - Remote File Inclusion / File Disclosure	webapps	PHP
2009-08-03	Payment Processor Script (PPScript) - 'shop.htm cid' SQL Injection	webapps	PHP
2009-08-03	PHP Fuzzer Framework - Default Location Insecure Temporary File Creation	local	Linux
2009-08-03	Payment Processor Script (PPScript) - 'shop.htm' SQL Injection	webapps	PHP
2009-08-03	Blog Ink (Blink) - Multiple SQL Injections	webapps	PHP

2009-08-01	Google SketchUp Pro 7.0 - '.skp' Remote Stack Overflow (PoC)	dos	Windows
2009-08-01	SAP Business One 2005-A License Manager - Remote Buffer Overflow	remote	Windows
2009-08-01	Arab Portal 2.x - 'forum.php' SQL Injection	webapps	PHP
2009-08-01	Destiny Media Player 1.61 - '.pls' Universal Buffer Overflow (SEH)	local	Windows
2009-08-01	MAXcms 3.11.20b - Multiple Remote File Inclusions	webapps	PHP
2009-08-01	Sun xVM VirtualBox 2.2 < 3.0.2 r49928 - Local Host Reboot (Denial of Service) (PoC)	dos	Multiple
2009-08-01	Joomla! Component com_jfusion - 'itemID' Blind SQL Injection	webapps	PHP
2009-08-01	PortalXP Teacher Edition 1.2 - Multiple SQL Injections	webapps	PHP
2009-08-01	aa33code 0.0.1 - Local File Inclusion / Authentication Bypass / File Disclosure	webapps	PHP
2009-08-01	Mobilelib Gold 3.0 - Authentication Bypass / SQL Injection	webapps	PHP
2009-07-31	VideoLAN VLC Media Player 0.8.6f - 'smb://' URI Handling Remote Universal Buffer Overflow	remote	Windows
2009-07-30	Millenium MP3 Studio 1.0 - '.mpf' Local Stack Overflow (2)	local	Windows
2009-07-30	ISC BIND 9 - Remote Dynamic Update Message Denial of Service (PoC)	dos	Multiple
2009-07-30	Microsoft Windows XP - 'win32k.sys' Local Privilege Escalation	local	Windows
2009-07-30	Compface 1.1.5 - '.xbm' Local Buffer Overflow	local	Linux
2009-07-30	VideoLAN VLC Media Player 0.8.6f - 'smb://' URI Handling Remote Buffer Overflow	remote	Windows
2009-07-30	Epiri Professional Web Browser 3.0 - Remote Crash	dos	Windows
2009-07-30	EPSON Status Monitor 3 - Local Privilege Escalation	local	Windows
2009-07-30	IBM AIX 5.3 - 'libc' MALLOCDEBUG File Overwrite	local	AIX
2009-07-30	Ultrize TimeSheet 1.2.2 - 'readfile()' Local File Disclosure	webapps	PHP
2009-07-30	justVisual 1.2 - 'fs_jVroot' Remote File Inclusion	webapps	PHP
2009-07-30	Orbis CMS 1.0 - File Delete / Download File / Arbitrary File Upload / SQL Injection	webapps	PHP
2009-07-30	dit.cms 1.3 - 'path/sitemap/relPath' Local File Inclusion	webapps	PHP
2009-07-30	cmsphp 0.21 - Local File Inclusion / Cross-Site Scripting	webapps	PHP
2009-07-30	d.net CMS - Local File Inclusion / SQL Injection	webapps	PHP
2009-07-30	Really Simple CMS 0.3a - 'PT' Local File Inclusion	webapps	PHP
2009-07-30	MUJE CMS 1.0.4.34 - Local File Inclusion	webapps	PHP
2009-07-30	PunBB Reputation.php Mod 2.0.4 - Local File Inclusion	webapps	PHP
2009-07-30	linkSpheric 0.74b6 - 'listID' SQL Injection	webapps	PHP
2009-07-30	[eZine] Zero For 0wned (ZFO) 5	papers	eZine
2009-07-30	Softbiz Dating Script 1.0 - 'cat_products.php' SQL Injection	webapps	PHP
2009-07-30	Adobe Flash Player 10.0.22 / AIR - URI Parsing Heap Buffer Overflow (PoC)	dos	Multiple
2009-07-30	Adobe Flash Player 10.0.22 / AIR - 'intf_count' Integer Overflow	dos	Linux
2009-07-28	MP3 Studio 1.0 - '.mpf' / '.m3u' Local Stack Overflow (SEH)	local	Windows
2009-07-28	PHP Paid 4 Mail Script - 'paidbanner.php?ID' SQL Injection	webapps	PHP
2009-07-28	phpArcadeScript 4.0 - 'id' SQL Injection	webapps	PHP
2009-07-28	PunBB Reputation.php Mod 2.0.4 - Blind SQL Injection	webapps	PHP
2009-07-28	In-portal 4.3.1 - Arbitrary File Upload	webapps	PHP
2009-07-28	MP3 Studio 1.0 - '.mpf' Local Buffer Overflow (SEH)	local	Windows
2009-07-28	PaoLink 1.0 - 'login_ok' Authentication Bypass	webapps	PHP
2009-07-28	PaoBacheca Guestbook 2.1 - 'login_ok' Authentication Bypass	webapps	PHP
2009-07-28	PaoLiber 1.1 - 'login_ok' Authentication Bypass	webapps	PHP
2009-07-28	Firebird SQL - op_connect_request main listener shutdown	dos	Windows
2009-07-28	TinyBrowser (TinyMCE Editor File browser) 1.41.6 - Multiple Vulnerabilities	webapps	PHP
2009-07-28	ultrize timesheet 1.2.2 - Remote File Inclusion	webapps	PHP
2009-07-28	WINMOD 1.4 - '.lst' File Local Stack Overflow XP SP3 (RET + SEH) (3)	local	Windows
2009-07-28	PHP filesystem attack vectors - Take Two	papers	Multiple
2009-07-27	Joomla! Component Almond Classifieds com_aclassf 7.5 - Multiple Vulnerabilities	webapps	PHP
2009-07-27	almond Classifieds ads - Blind SQL Injection / Cross-Site Scripting	webapps	PHP
2009-07-27	skadate dating - Local File Inclusion / Remote File Inclusion / Cross-Site Scripting	webapps	PHP
2009-07-27	XOOPS Celepar Module Qas - Blind SQL Injection / Cross-Site Scripting	webapps	PHP
2009-07-27	garagesalesjunkie - SQL Injection / Cross-Site Scripting	webapps	PHP
2009-07-27	URA 3.0 - 'cat' SQL Injection	webapps	PHP
2009-07-27	stftp 1.10 - PWD Response Remote Stack Overflow (PoC)	dos	Linux
2009-07-27	ISC DHCP dhclient < 3.1.2p1 - Remote Buffer Overflow (PoC)	dos	Linux
2009-07-27	iwiccle 1.01 - Local File Inclusion / SQL Injection	webapps	PHP
2009-07-27	VS PANEL 7.5.5 - 'Cat_ID' SQL Injection	webapps	PHP
2009-07-27	Cisco WLC 4402 - Basic Auth Remote Denial of Service (Metasploit)	dos	Hardware
2009-07-27	PHP Paid 4 Mail Script - 'home.php' Remote File Inclusion	webapps	PHP
2009-07-27	Super Mod System 3.0 - 's' SQL Injection	webapps	PHP
2009-07-27	Inout Adserver - 'id' SQL Injection	webapps	PHP
2009-07-27	Adobe Acrobat 9.1.2 NOS - Local Privilege Escalation (Python)	local	Windows
2009-07-27	Allomani Mobile 2.5 - Blind SQL Injection	webapps	PHP
2009-07-27	Allomani Songs & Clips 2.7.0 - Blind SQL Injection	webapps	PHP
2009-07-27	Allomani Movies & Clips 2.7.0 - Blind SQL Injection	webapps	PHP
2009-07-27	Joomla! Component IXXO Cart! Standalone and - SQL Injection	webapps	PHP
2009-07-27	MP3 Studio 1.0 - '.mpf' / '.m3u' Local Stack Overflow (PoC)	dos	Windows
2009-07-27	NcFTPd 2.8.5 - Remote Jail Breakout	remote	FreeBSD
2009-07-27	PunBB Automatic Image Upload 1.3.5 - SQL Injection	webapps	PHP
2009-07-27	PunBB Automatic Image Upload 1.3.5 - Arbitrary File Delete	webapps	PHP
2009-07-27	Limny 1.01 - Authentication Bypass	webapps	PHP
2009-07-27	Magician Blog 1.0 - 'ids' SQL Injection	webapps	PHP
2009-07-27	Magician Blog 1.0 - Authentication Bypass	webapps	PHP
2009-07-27	SerWeb 2.1.0-dev1 2009-07-02 - Multiple Remote File Inclusions	webapps	PHP
2009-07-27	Avoiding SQL Injection	papers	Multiple
2009-07-27	Windows/x86 (5.0 < 7.0) - Bind (28876/TCP) Shell + Null-Free Shellcode	shellcode	Windows_x86
2009-07-27	68 Classifieds 4.1 - 'login.php' Cross-Site Scripting	webapps	PHP
2009-07-27	68 Classifieds 4.1 - 'category.php' Cross-Site Scripting	webapps	PHP
2009-07-27	68 Classifieds 4.1 - 'searchresults.php' Cross-Site Scripting	webapps	PHP
2009-07-27	68 Classifieds 4.1 - 'toplistings.php' Cross-Site Scripting	webapps	PHP
2009-07-27	68 Classifieds 4.1 - 'viewlisting.php' Cross-Site Scripting	webapps	PHP
2009-07-27	68 Classifieds 4.1 - 'viewmember.php' Cross-Site Scripting	webapps	PHP
2009-07-27	Basilic 1.5.13 - 'index.php' Cross-Site Scripting	webapps	PHP
2009-07-27	WebAsyst Shop-Script PREMIUM - 'SearchString' Cross-Site Scripting	webapps	PHP
2009-07-24	OpenH323 Opal SIP Protocol - Remote Denial of Service	dos	Windows
2009-07-24	Ekiga 2.0.5 - 'GetHostAddress' Remote Denial of Service	dos	Windows
2009-07-24	WzdFTPD 8.0 - Remote Denial of Service	dos	Windows
2009-07-24	Million-Dollar Pixel Ads Platinum - SQL Injection / Cross-Site Scripting	webapps	PHP
2009-07-24	Joomla! Extension UIajaxIM 1.1 - JavaScript Execution	webapps	PHP
2009-07-24	Basilic 1.5.13 - 'index.php?idAuthor' SQL Injection	webapps	PHP
2009-07-24	Mozilla Firefox 3.5 (OSX) - Font Tags Remote Buffer Overflow	remote	OSX
2009-07-24	SaphpLesson 4.0 - Authentication Bypass	webapps	PHP
2009-07-24	XOOPS Celepar Module Qas - 'codigo' SQL Injection	webapps	PHP
2009-07-24	WordPress 2.8.1 - 'url' Cross-Site Scripting	webapps	PHP
2009-07-24	Deonixscripts Templates Management 1.3 - SQL Injection	webapps	PHP
2009-07-24	Scripteen Free Image Hosting Script 2.3 - SQL Injection	webapps	PHP
2009-07-24	Microsoft Internet Explorer 7/8 - findText Unicode Parsing Crash	dos	Windows
2009-07-24	PHP Live! 3.2.2 - 'questid' SQL Injection (2)	webapps	PHP
2009-07-24	Clip Bucket 1.7.1 - Insecure Cookie Handling	webapps	PHP
2009-07-24	Scripteen Free Image Hosting Script 2.3 - Insecure Cookie Handling	webapps	PHP
2009-07-24	Pixaria Gallery 2.3.5 - 'file' Remote File Disclosure	webapps	PHP
2009-07-24	Clipbucket 1.7.1 - Multiple SQL Injections	webapps	PHP
2009-07-24	WebShop Hun 1.062s - '/index.php' Local File Inclusion / Cross-Site Scripting	webapps	PHP
2009-07-24	SkaLinks 1.5 - 'cat' Multiple Cross-Site Scripting Vulnerabilities	webapps	PHP
2009-07-24	TurnkeySetup Net Marketing 6.0 - 'faqs.php' Cross-Site Scripting	webapps	PHP
2009-07-24	Million Dollar Pixel Ads - Cross-Site Scripting / SQL Injection	webapps	PHP
2009-07-23	WINMOD 1.4 - '.lst' Local Stack Overflow	local	Windows
2009-07-23	e107 Plugin my_gallery 2.4.1 - 'readfile()' Local File Disclosure	webapps	PHP
2009-07-23	Groone's GLink ORGanizer 2.1 - 'cat' Blind SQL Injection	webapps	PHP
2009-07-23	AWCM 2.1 - Local File Inclusion / Authentication Bypass	webapps	PHP
2009-07-23	Joomla! Component com_Joomlaoads - 'packageId' SQL Injection	webapps	PHP
2009-07-23	PHP Melody 1.5.3 - Arbitrary File Upload Injection	webapps	PHP
2009-07-22	otsAV 1.77.001 - '.ofl' Local Heap Overflow (PoC)	dos	Windows
2009-07-22	WINMOD 1.4 - '.lst' Universal Buffer Overflow (SEH) (2)	local	Windows
2009-07-22	Phorum 5.2.11 - Persistent Cross-Site Scripting	webapps	PHP
2009-07-22	Joomla! Plugin tinybrowser 1.5.12 - Arbitrary File Upload / Execution	webapps	PHP
2009-07-22	[Portuguese] Retornando para libc - Parte I	papers	Multiple
2009-07-21	WINMOD 1.4 - '.lst' Local Buffer Overflow (SEH)	local	Windows
2009-07-21	FlyHelp - '.CHM' Local Buffer Overflow (PoC)	dos	Windows
2009-07-21	Adobe Acrobat 9.1.2 NOS - Local Privilege Escalation	local	Windows

2009-07-21	Microsoft Office Web Components Spreadsheet - ActiveX 'OWC10/11' Remote Overflow	remote	Windows
2009-07-21	AnotherPHPBook (APB) 1.3.0 - Authentication Bypass	webapps	PHP
2009-07-21	phpDirectorySource 1.0 - Cross-Site Scripting / SQL Injection	webapps	PHP
2009-07-21	Meta Search Engine Script - 'url' Local File Disclosure	webapps	PHP
2009-07-21	MyDLstore Pixel Ad Script - 'payment.php' Cross-Site Scripting	webapps	PHP
2009-07-21	APBook 1.3 - Admin Login Multiple SQL Injections	webapps	PHP
2009-07-21	MyDLstore Meta Search Engine Script 1.0 - 'url' Remote File Inclusion	webapps	PHP
2009-07-21	Classified Linktrader Script - 'addlink.php' SQL Injection	webapps	PHP
2009-07-21	CJ Dynamic Poll Pro 2.0 - 'admin_index.php' Cross-Site Scripting	webapps	PHP
2009-07-21	PHP Scripts Now Hangman - 'index.php?n' SQL Injection	webapps	PHP
2009-07-21	PHP Scripts Now Hangman - 'index.php?letters' Cross-Site Scripting	webapps	PHP
2009-07-20	Adobe 9.x Related Service - 'getPlus_HelperSvc.exe' Local Privilege Escalation	local	Windows
2009-07-20	EpicVJ 1.2.8.0 - '.mpl' / '.m3u' Local Heap Overflow (PoC)	dos	Windows
2009-07-20	Silentum Guestbook 2.0.2 - 'silentum_Guestbook.php' SQL Injection	webapps	PHP
2009-07-20	Netrix CMS 1.0 - Authentication Bypass	webapps	PHP
2009-07-20	MiniCWB 2.3.0 - 'lang' Remote File Inclusion	webapps	PHP
2009-07-20	mcshoutbox 1.1 - SQL Injection / Cross-Site Scripting / shell	webapps	PHP
2009-07-20	FreeBSD 7.2 - 'pecoff' Local Denial of Service	dos	FreeBSD
2009-07-20	PulseAudio setuid - Local Privilege Escalation	local	Linux
2009-07-20	PulseAudio setuid (Ubuntu 9.04 / Slackware 12.2.0) - Local Privilege Escalation	local	Linux
2009-07-20	DD-WRT HTTPd Daemon/Service - Remote Command Execution	remote	Hardware
2009-07-20	Alibaba-clone CMS - SQL Injection / Blind SQL Injection	webapps	PHP
2009-07-20	Acoustica MP3 Audio Mixer 2.471 - '.sgp' Crash	dos	Windows
2009-07-20	Acoustica MP3 Audio Mixer 2.471 - '.m3u' Local Heap Overflow (PoC)	dos	Windows
2009-07-20	Mozilla Firefox 3.5 - 'Font tags' Remote HeapSpray (2)	remote	Windows
2009-07-20	Streaming Audio Player 0.9 - 'skin' Local Stack Overflow (SEH)	local	Windows
2009-07-20	Soritong MP3 Player 1.0 - 'SKIN' Local Stack Overflow (SEH)	local	Windows
2009-07-20	E-Xoopport 3.1 Module MyAnnonces - 'lid' SQL Injection	webapps	PHP
2009-07-20	powerUpload 2.4 - (Authentication Bypass) Insecure Cookie Handling	webapps	PHP
2009-07-20	KMplayer 2.9.4.1433 - '.srt' Local Buffer Overflow (PoC)	dos	Windows
2009-07-20	DD-WRT HTTP v24-SP1 - Command Injection	remote	Linux
2009-07-20	[Spanish] Busqueda Binaria Aplicada a las Blind SQL Injection	papers	Multiple
2009-07-20	Xss & Iframe Phishing	papers	Multiple
2009-07-20	Astrology - 'celebrities.php' Cross-Site Scripting	webapps	PHP
2009-07-20	Freewebscriptz HUBScript - 'single_winner1.php' Cross-Site Scripting	webapps	PHP
2009-07-20	AdQuick - 'account.php' Cross-Site Scripting	webapps	PHP
2009-07-20	DragDropCart - '/assets/js/ddcart.php?sid' Cross-Site Scripting	webapps	PHP
2009-07-20	DragDropCart - '/includes/ajax/getstate.php?prefix' Cross-Site Scripting	webapps	PHP
2009-07-20	DragDropCart - 'index.php?search' Cross-Site Scripting	webapps	PHP
2009-07-20	DragDropCart - 'search.php?search' Cross-Site Scripting	webapps	PHP
2009-07-20	DragDropCart - 'login.php?redirect' Cross-Site Scripting	webapps	PHP
2009-07-20	DragDropCart - 'productdetail.php?product' Cross-Site Scripting	webapps	PHP
2009-07-20	EZodiak - 'index.php' Cross-Site Scripting	webapps	PHP
2009-07-20	GejoSoft Image Hosting Community - Cross-Site Scripting	webapps	PHP
2009-07-20	MyWeight 1.0 - 'user_addfood.php?date' Cross-Site Scripting	webapps	PHP
2009-07-20	MyWeight 1.0 - 'user_forgot_pwd_form.php?info' Cross-Site Scripting	webapps	PHP
2009-07-20	MyWeight 1.0 - 'user_login.php' Multiple Cross-Site Scripting Vulnerabilities	webapps	PHP
2009-07-20	Proxy List Script - 'index.php' Cross-Site Scripting	webapps	PHP
2009-07-20	YourFreeWorld Ultra Classifieds - 'listads.php' Multiple Cross-Site Scripting Vulnerabilities	webapps	PHP
2009-07-20	YourFreeWorld Ultra Classifieds - 'subclass.php?cname' Cross-Site Scripting	webapps	PHP
2009-07-20	Web TV - 'chn' Cross-Site Scripting	webapps	PHP
2009-07-20	PHP Scripts Now (Multiple Products) - 'bios.php?rank' Cross-Site Scripting	webapps	PHP
2009-07-20	PHP Scripts Now (Multiple Products) - 'bios.php?rank' SQL Injection	webapps	PHP
2009-07-17	Sguil/PADS - Remote Server Crash	dos	Multiple
2009-07-17	Super Simple Blog Script 2.5.4 - Local File Inclusion	webapps	PHP
2009-07-17	Super Simple Blog Script 2.5.4 - 'entry' SQL Injection	webapps	PHP
2009-07-17	Mozilla Firefox 3.5 - 'Font tags' Remote HeapSpray (1)	remote	Windows
2009-07-17	AJOX Poll - 'managepoll.php' Authentication Bypass	webapps	PHP
2009-07-17	Battle Blog 1.25 - Authentication Bypass / SQL Injection / HTML Injection	webapps	PHP
2009-07-17	Ger Versluis 2000 5.5 24 - 'SITE_fiche.php' SQL Injection	webapps	PHP
2009-07-17	good/bad vote - Cross-Site Scripting / Local File Inclusion	webapps	PHP
2009-07-17	Easy RM to MP3 Converter - '.m3u' Universal Stack Overflow	local	Windows
2009-07-17	Joomla! Component Jobline 1.3.1 - Blind SQL Injection	webapps	PHP
2009-07-17	Streaming Audio Player 0.9 - 'skin' Local Stack Overflow (PoC) (SEH)	dos	Windows
2009-07-17	htmldoc 1.8.27.1 - '.html' Universal Stack Overflow	local	Windows
2009-07-17	Linux Kernel 2.6.30 < 2.6.30.1 / SELinux (RHEL 5) - Local Privilege Escalation	local	Linux
2009-07-17	Soritong MP3 Player 1.0 - 'SKIN' Local Stack Overflow (PoC) (SEH)	dos	Windows
2009-07-17	WebVision 2.1 - 'news.php?n' SQL Injection	webapps	PHP
2009-07-17	radbids gold 4.0 - Multiple Vulnerabilities	webapps	PHP
2009-07-17	radlance gold 7.5 - Multiple Vulnerabilities	webapps	PHP
2009-07-17	radnics gold 5.0 - Multiple Vulnerabilities	webapps	PHP
2009-07-17	Real Helix DNA - 'RTSP' / 'SETUP' Request Handler	dos	Multiple
2009-07-17	Image Authentication Injection Paper + PoC	papers	Multiple
2009-07-17	Windows/x86 (XP SP2) (English) - cmd.exe Shellcode (23 bytes)	shellcode	Windows_x86
2009-07-17	Honest Traffic - 'msg' Cross-Site Scripting	webapps	PHP
2009-07-16	Microsoft Office Web Components (OWC) Spreadsheet - ActiveX Buffer Overflow (PoC)	dos	Windows
2009-07-16	webLeague 2.2.0 - 'install.php' Remote Change Password	webapps	PHP
2009-07-16	webLeague 2.2.0 - Authentication Bypass	webapps	PHP
2009-07-16	ZenPhoto Gallery 1.2.5 - Admin Password Reset (Cross-Site Request Forgery)	webapps	PHP
2009-07-16	Music Tag Editor 1.61 build 212 - Remote Buffer Overflow (PoC)	dos	Windows
2009-07-16	Zortam MP3 Player 1.50 - '.m3u' Integer Division by Zero	dos	Windows
2009-07-16	Zortam MP3 Media Studio 9.40 - Multiple Memory Corruption Vulnerabilities	dos	Windows
2009-07-16	Audio Editor Pro 2.91 - Remote Memory Corruption (PoC)	dos	Windows
2009-07-16	VS PANEL 7.5.5 - 'results.php?Cat_ID' SQL Injection	webapps	PHP
2009-07-16	Hamster Audio Player 0.3a - Universal Buffer Overflow (SEH)	local	Windows
2009-07-16	MultiMedia Jukebox 4.0 Build 020124 - '.pst' / '.m3u' Heap Overflow (PoC)	dos	Windows
2009-07-16	PHP Live! 3.2.1/2 - 'x' Blind SQL Injection	webapps	PHP
2009-07-16	dB Masters MultiMedia's Content Manager 4.5 - SQL Injection	webapps	PHP
2009-07-16	Easy RM to MP3 Converter 2.7.3.700 - '.m3u' Universal Buffer Overflow	local	Windows
2009-07-16	MixSense 1.0.0.1 DJ Studio - '.mp3' Crash	dos	Windows
2009-07-16	[Albanian] SQL Injection	papers	Multiple
2009-07-16	XAMPP 1.6.x - 'showcode.php' Local File Inclusion	webapps	Multiple
2009-07-16	Scriptsez Ultimate Poll - 'demo_page.php' Cross-Site Scripting	webapps	PHP
2009-07-16	Skybluecanvas 1.1 r237 - 'admin.php' Directory Traversal	webapps	PHP
2009-07-15	Icarus 2.0 - '.icp' Local Buffer Overflow (SEH)	local	Windows
2009-07-15	WordPress Plugin My Category Order 2.8 - SQL Injection	webapps	PHP
2009-07-15	ILIAS Lms 3.9.9/3.10.7 - Arbitrary Edition / Information Disclosure	webapps	PHP
2009-07-15	AudioPLUS 2.00.215 - '.m3u' / '.lst' Universal Overwrite (SEH)	local	Windows
2009-07-15	Admin News Tools 2.5 - 'fichier' Remote File Disclosure	webapps	PHP
2009-07-15	ZenPhoto 1.2.5 - Completely Blind SQL Injection	webapps	PHP
2009-07-15	PHPGenealogy 2.0 - 'DataDirectory' Remote File Inclusion	webapps	PHP
2009-07-15	Greenwood Content Manager 0.3.2 - Local File Inclusion	webapps	PHP
2009-07-15	Hamster Audio Player 0.3a - Local Buffer Overflow (PoC)	dos	Windows
2009-07-15	Mozilla Firefox 3.5 - Unicode Remote Buffer Overflow (PoC)	dos	Windows
2009-07-15	Infinity 2.0.5 - Arbitrary Create Admin	webapps	PHP
2009-07-15	Multiple Browsers - Denial of Service	dos	Multiple
2009-07-15	Admin News Tools - Remote Contents Change	webapps	PHP
2009-07-15	WebLeague 2.2.0 - 'profile.php' SQL Injection	webapps	PHP
2009-07-15	eCardMAX FormXP - 'survey_result.php' Cross-Site Scripting	webapps	PHP
2009-07-14	JetAudio 7.5.3 COWON Media Center - '.wav' Crash	dos	Windows
2009-07-14	DJ Calendar - 'DJcalendar.cgi TEMPLATE' File Disclosure	webapps	CGI
2009-07-14	Icarus 2.0 - '.ICP' Local Stack Overflow (PoC)	dos	Windows
2009-07-14	Live For Speed 2 Version Z - '.Mpr' Local Buffer Overflow	local	Windows
2009-07-14	Virtualmin < 3.703 - Multiple Local/Remote Vulnerabilities	remote	Linux
2009-07-14	Mobilelib Gold 3.0 - Local File Disclosure	webapps	PHP
2009-07-14	Traidnt UP 2.0 - Blind SQL Injection	webapps	PHP
2009-07-14	Icarus 2.0 - '.ICP' Local Stack Overflow	local	Windows
2009-07-14	MixVibes Pro 7.043 - '.vib' Local Stack Overflow (PoC)	dos	Windows
2009-07-14	Live For Speed 2 Version Z - '.mpr' Local Buffer Overflow (SEH)	local	Windows
2009-07-14	[German] Sicherheit von Webservern	papers	Multiple

2009-07-14	One Click Ownage	papers	Multiple
2009-07-14	eCardMAX - Multiple Cross-Site Scripting Vulnerabilities	webapps	PHP
2009-07-13	Tandberg MXP F7.0 - 'USER' Remote Buffer Overflow (PoC)	dos	Windows
2009-07-13	RunCMS 1.6.3 - Remote Shell Injection	webapps	PHP
2009-07-13	ScITE Editor 1.72 - Local Crash	dos	Windows
2009-07-13	FreeBSD 6/8 - ata Device Local Denial of Service	dos	FreeBSD
2009-07-13	Openswan 2.4.12/2.6.16 - Insecure Temp File Creation Privilege Escalation	local	Linux
2009-07-13	Mp3-Nator 2.0 - 'ListData.dat' Universal Buffer Overflow (SEH)	local	Windows
2009-07-13	Mozilla Firefox 3.5 - Font tags Remote Buffer Overflow	remote	Windows
2009-07-13	onepound shop 1.x - 'products.php' SQL Injection	webapps	PHP
2009-07-13	Top Paidmailer - 'home.php' Remote File Inclusion	webapps	PHP
2009-07-12	Pirch IRC 98 Client - 'Response' Remote Buffer Overflow (SEH)	remote	Windows
2009-07-12	censura 1.16.04 - Blind SQL Injection / Cross-Site Scripting	webapps	PHP
2009-07-12	PHP AdminPanel Free 1.0.5 - Remote File Disclosure	webapps	PHP
2009-07-11	Opial 1.0 - Arbitrary File Upload / Cross-Site Scripting / SQL Injection	webapps	PHP
2009-07-11	M3U/M3L to ASX/WPL 1.1 - '.asx' / '.m3u' / '.m3l' Local Buffer Overflow (PoC)	dos	Windows
2009-07-11	Playlistmaker 1.5 - '.m3u' / '.M3L' / '.TXT' Local Stack Overflow (PoC)	dos	Windows
2009-07-11	Ebay Clone 2009 - Multiple SQL Injections	webapps	PHP
2009-07-11	Joomla! Component com_category - 'catid' SQL Injection	webapps	PHP
2009-07-11	d.net CMS - Arbitrary Reinstall/Blind SQL Injection	webapps	PHP
2009-07-11	Linux/x86 - execve(/sbin/shutdown,/sbin/shutdown 0) Shellcode (36 bytes)	shellcode	Linux_x86
2009-07-11	Linux/x86 - execve(/sbin/reboot,/sbin/reboot) Shellcode (28 bytes)	shellcode	Linux_x86
2009-07-11	Linux/x86 - execve(/sbin/halt,/sbin/halt) Shellcode (27 bytes)	shellcode	Linux_x86
2009-07-10	phpbms 0.96 - Multiple Vulnerabilities	webapps	PHP
2009-07-10	PatPlayer 3.9 - '.m3u' Local Heap Overflow (PoC)	dos	Windows
2009-07-10	gencms 2006 - Multiple Vulnerabilities	webapps	PHP
2009-07-10	Photo DVD Maker Pro 8.02 - '.pdm' Local Buffer Overflow (SEH)	local	Windows
2009-07-10	MyMsg 1.0.3 - 'uid' SQL Injection	webapps	PHP
2009-07-10	citrix xencenterweb - Cross-Site Scripting / SQL Injection / Remote Code Execution	remote	Windows
2009-07-10	Phenotype CMS 2.8 - 'login.php?user' Blind SQL Injection	webapps	PHP
2009-07-10	Microsoft Internet Explorer 7 Video - ActiveX Remote Buffer Overflow	remote	Windows
2009-07-10	ToyLog 0.1 - SQL Injection / Remote Code Execution	webapps	PHP
2009-07-10	WordPress Core / MU / Plugins - '/admin.php' Privileges Unchecked / Multiple Information Disclosures	webapps	PHP
2009-07-10	Jobbr 2.2.7 - Multiple SQL Injections	webapps	PHP
2009-07-10	Joomla! Component com_propertylab - 'auction_id' SQL Injection	webapps	PHP
2009-07-10	otsAV DJ/TV/Radio - Multiple Local Heap Overflows (PoC)	dos	Windows
2009-07-10	eEye Retina WiFi Security Scanner 1.0 - '.rws Parsing' Buffer Overflow (PoC)	dos	Windows
2009-07-10	Digitaldesign CMS 0.1 - Remote Database Disclosure	webapps	PHP
2009-07-10	AwingSoft Web3D Player - 'WindsPly.ocx' Remote Buffer Overflow (PoC)	dos	Windows
2009-07-10	HTC / Windows Mobile OBEX FTP Service - Directory Traversal	remote	Hardware
2009-07-10	ebay clone 2009 - Cross-Site Scripting / Blind SQL Injection	webapps	PHP
2009-07-10	LionWiki - 'index.php' Local File Inclusion	webapps	PHP
2009-07-10	Morcego CMS 1.7.6 - Blind SQL Injection	webapps	PHP
2009-07-10	Wyse Rapport Hagent Fake Hserver - Command Execution (Metasploit)	remote	Multiple
2009-07-10	The Art of Grey-Box Attack	papers	Multiple
2009-07-10	Linux/x86 - Bind (4444/TCP) Shell (/bin/sh) + XOR Encoded Shellcode (152 bytes)	shellcode	Linux_x86
2009-07-09	FreeBSD 7.0/7.1 - 'vfs.usermount' Local Privilege Escalation	local	FreeBSD
2009-07-09	Linux Kernel 2.6.24_16-23/2.6.27_7-10/2.6.28.3 (Ubuntu 8.04/8.10 / Fedora Core 10 x86-64) - 'set_selection()' UTF-8 Off-by-One Privilege Escalation	local	Linux_x86-64
2009-07-09	Soulseek 157 NS < 13e/156.x - Remote Peer Search Code Execution (PoC)	dos	Windows
2009-07-09	MySQL 5.0.45 - (Authenticated) COM_CREATE_DB Format String (PoC)	dos	Multiple
2009-07-09	MRCGIGUY Thumbnail Gallery Post 1b - Arbitrary File Upload	webapps	PHP
2009-07-09	Nwahy Dir 2.1 - Arbitrary Change Admin Password	webapps	PHP
2009-07-09	Glossword 1.8.11 - Arbitrary Uninstall / Install	webapps	PHP
2009-07-09	ClearContent - '/image.php?url' Local/Remote File Inclusion	webapps	PHP
2009-07-09	otsAV DJ 1.85.064 - '.ofl' Local Heap Overflow (PoC)	dos	Windows
2009-07-09	Mlffat 2.2 - Blind SQL Injection	webapps	PHP
2009-07-09	webasyst shop-script - Blind SQL Injection / Cross-Site Scripting	webapps	PHP
2009-07-09	Microsoft Windows Live Messenger Plus! Fileserver 1.0 - Directory Traversal	remote	Windows
2009-07-09	EasyVillaRentalSite - 'id' SQL Injection	webapps	PHP
2009-07-09	TalkBack 2.3.14 - Multiple Vulnerabilities	webapps	PHP
2009-07-09	Sun One WebServer 6.1 - .JSP Source Viewing	remote	Windows
2009-07-09	xscreensaver 5.01 - Arbitrary File Disclosure Symlink	local	Multiple
2009-07-09	Siteframe CMS 3.2.x - SQL Injection / phpinfo()	webapps	PHP
2009-07-09	Universe CMS 1.0.6 - 'vnews.php?id' SQL Injection	webapps	PHP
2009-07-09	Microsoft Internet Explorer - 'AddFavorite' Remote Crash (PoC)	dos	Windows
2009-07-09	StatsCode - Multiple Cross-Site Scripting Vulnerabilities	webapps	PHP
2009-07-09	JNM Guestbook 3.0 - 'index.php' Cross-Site Scripting	webapps	PHP
2009-07-09	Online Guestbook Pro 5.1 - 'ogp_show.php' Cross-Site Scripting	webapps	PHP
2009-07-09	WebAsyst Shop-Script - 'index.php' Cross-Site Scripting	webapps	PHP
2009-07-08	JNM Solutions DB Top Sites 1.0 - 'vote.php' Cross-Site Scripting	webapps	PHP
2009-07-08	Rapidsendit Clone Script - 'admin.php' Insecure Cookie Authentication Bypass	webapps	PHP
2009-07-08	Linea21 1.2.1 - 'search' Cross-Site Scripting	webapps	PHP
2009-07-07	Rentventory - 'index.php' Multiple Cross-Site Scripting Vulnerabilities	webapps	PHP
2009-07-07	Swinger Club Portal - 'start.php?id' SQL Injection	webapps	PHP
2009-07-07	Swinger Club Portal - 'start.php?go' Remote File Inclusion	webapps	PHP
2009-07-07	Tausch Ticket Script 3 - 'suchauftraege_user.php?userid' SQL Injection	webapps	PHP
2009-07-07	Tausch Ticket Script 3 - 'vote.php?descr' SQL Injection	webapps	PHP
2009-07-04	HP Multiple LaserJet Printer - Cross-Site Scripting	remote	Hardware
2009-07-04	Linux/x86 - Disable Shadowing Shellcode (42 bytes)	shellcode	Linux_x86
2009-07-04	Linux/x86 - setuid(0) + execve(/bin/sh) Shellcode (27 bytes)	shellcode	Linux_x86
2009-07-02	Apple Safari 4.x - JavaScript Reload Remote Crash	dos	Multiple
2009-07-02	Oracle 10g - 'SYS.LT.COMPRESSWORKSPACETREE' SQL Injection (2)	local	Multiple
2009-07-02	YourTube 2.0 - Arbitrary Database Disclosure	webapps	PHP
2009-07-02	Sourcefire 3D Sensor & Defense Center 4.8.x - Privilege Escalation	webapps	CGI
2009-07-02	AdminLog 0.5 - 'valid_login' Authentication Bypass	webapps	PHP
2009-07-02	Almnzm 2.0 - Blind SQL Injection	webapps	PHP
2009-07-02	ConPresso 3.4.8 - 'detail.php' Blind SQL Injection	webapps	PHP
2009-07-02	Opial 1.0 - Authentication Bypass	webapps	PHP
2009-07-02	Opial 1.0 - 'albumID' SQL Injection	webapps	PHP
2009-07-02	Rentventory - Multiple SQL Injections	webapps	PHP
2009-07-02	[French] Petite Explication Du SQL Injection	papers	Multiple
2009-07-01	MP3-Nator 2.0 - '.plf' Universal Buffer Overflow (SEH)	local	Windows
2009-07-01	PEamp 1.02b - '.m3u' Local Buffer Overflow (PoC)	dos	Windows
2009-07-01	Messages Library 2.0 - Arbitrary Delete Message	webapps	PHP
2009-07-01	Messages Library 2.0 - Insecure Cookie Handling	webapps	PHP
2009-07-01	AudioPLUS 2.00.215 - '.lst' / '.m3u' Local Buffer Overflow (SEH)	local	Windows
2009-07-01	Green Dam - Remote Change System Time	remote	Windows
2009-07-01	ARD-9808 DVR Card Security Camera - Arbitrary Configuration Disclosure	remote	Hardware
2009-07-01	ARD-9808 DVR Card Security Camera - GET Remote Denial of Service	dos	Hardware
2009-07-01	kervinet forum 1.1 - Multiple Vulnerabilities	webapps	PHP
2009-07-01	CMS chainuk 1.2 - Multiple Vulnerabilities	webapps	PHP
2009-07-01	AudioPLUS 2.00.215 - '.pls' Local Buffer Overflow (SEH)	local	Windows
2009-06-30	TFM MMPlayer 2.0 - '.m3u'/'.ppl' Universal Buffer Overflow (SEH)	local	Windows
2009-06-30	WordPress Plugin DM Albums 1.9.2 - Remote File Disclosure	webapps	PHP
2009-06-30	DM FileManager 3.9.4 - Remote File Disclosure	webapps	PHP
2009-06-30	SMF Mod Member Awards 1.0.2 - Blind SQL Injection	webapps	PHP
2009-06-30	jax formmailer 3.0.0 - Remote File Inclusion	webapps	PHP
2009-06-30	BigACE 2.6 - 'cmd' Local File Inclusion	webapps	PHP
2009-06-30	phpMyBlockchecker 1.0.0055 - Insecure Cookie Handling	webapps	PHP
2009-06-30	WordPress Plugin Related Sites 2.1 - Blind SQL Injection	webapps	PHP
2009-06-30	PunBB Affiliates Mod 1.1 - Blind SQL Injection	webapps	PHP
2009-06-30	MDPro Module CWGuestBook 2.1 - SQL Injection	webapps	PHP
2009-06-30	tsep 0.942.02 - Multiple Vulnerabilities	webapps	PHP
2009-06-30	PunBB Extension Vote For Us 1.0.1 - Blind SQL Injection	webapps	PHP
2009-06-30	Messages Library 2.0 - Arbitrary Administrator Account	webapps	PHP
2009-06-30	[Romanian] Vulnerabilitati Web si securizarea acestora v1.0	papers	Multiple
2009-06-30	Cracking The Air, The Other Way	papers	Multiple
2009-06-30	NTSOFT BBS E-Market Professional - Multiple Cross-Site Scripting Vulnerabilities (1)	webapps	PHP
2009-06-30	XOOPS 2.3.3 - 'op' Multiple Cross-Site Scripting Vulnerabilities	webapps	PHP
2009-06-29	WHOISCART - Authentication Bypass / Information Disclosure	webapps	PHP

2009-06-29	Messages Library 2.0 - 'cat.php?CatID' SQL Injection	webapps	PHP
2009-06-29	Joomla! Component com_php - 'id' Blind SQL Injection	webapps	PHP
2009-06-29	VideoLAN VLC Media Player 0.9.9 - 'smb://' URI Stack Buffer Overflow (PoC)	dos	Windows
2009-06-29	Joomla! Component com_K2 -q 1.0.1b - 'category' SQL Injection	webapps	PHP
2009-06-29	Bopup Communications Server 3.2.26.5460 - Remote Buffer Overflow (SEH)	remote	Windows
2009-06-29	osTicket 1.6 RC4 - Admin Login Blind SQL Injection	webapps	PHP
2009-06-29	SCMPX 1.5.1 - '.m3u' Local Heap Overflow (PoC)	dos	Windows
2009-06-29	HT-MP3Player 1.0 - '.ht3' Local Buffer Overflow (SEH)	local	Windows
2009-06-29	Almnzm - 'COOKIE: customer' SQL Injection	webapps	PHP
2009-06-29	PHP-Sugar 0.80 - 'index.php?t' Local File Inclusion	webapps	PHP
2009-06-29	Clicknet CMS 2.1 - 'side' Arbitrary File Disclosure	webapps	PHP
2009-06-29	HT-MP3Player 1.0 - '.ht3' Universal Buffer Overflow (SEH)	local	Windows
2009-06-29	cPanel - (Authenticated) 'lastvisit.html Domain' Arbitrary File Disclosure	remote	Multiple
2009-06-29	Joomla! Component com_bookflip - 'book_id' SQL Injection	webapps	PHP
2009-06-29	Audio Article Directory - 'file' Remote File Disclosure	webapps	PHP
2009-06-29	NEWSolved 1.1.6 - 'login grabber' Multiple SQL Injections	webapps	PHP
2009-06-29	WordPress Plugin DM Albums 1.9.2 - Remote File Inclusion	webapps	PHP
2009-06-29	dm FileManager 3.9.4 - Remote File Inclusion	webapps	PHP
2009-06-29	Linux Hardening & Security (cP/WHM + Apache)	papers	Multiple
2009-06-29	Linux/x86 - execve() + Null-Free Shellcode (Generator)	shellcode	Generator
2009-06-29	Linux/x86 - reboot() + Polymorphic Shellcode (57 bytes)	shellcode	Linux_x86
2009-06-29	Miniweb 2.0 Site Builder Module - Multiple Cross-Site Scripting Vulnerabilities	webapps	PHP
2009-06-29	Censura < 2.1.1 - Multiple Cross-Site Scripting Vulnerabilities	webapps	PHP
2009-06-28	Google Chrome 2.0.172 - 'About:blank' Address Bar URI Spoofing 'About:blank' Address Bar URI Spoofing	remote	Multiple
2009-06-28	Google Chrome 2.0.172 - 'chrome://history/' URI Cross-Site Scripting	remote	Multiple
2009-06-28	Joomla! Component Permis 1.0 (com_groups) - 'id' SQL Injection	webapps	PHP
2009-06-28	Matterdaddy Market 1.x - 'index.php' Cross-Site Scripting	webapps	PHP
2009-06-27	TrackMania 2.11.11 - Multiple Remote Vulnerabilities	dos	Multiple
2009-06-27	AIOCP 1.4 - 'cp_html2txt.php' Remote File Inclusion	webapps	PHP
2009-06-27	PG Roommate Finder Solution - 'quick_search.php?part' Cross-Site Scripting	webapps	PHP
2009-06-27	PG Roommate Finder Solution - 'viewprofile.php?part' Cross-Site Scripting	webapps	PHP
2009-06-27	Joomla! Component Almond Classifieds 7.5 - Cross-Site Scripting / SQL Injection	webapps	PHP
2009-06-27	AlmondSoft Multiple Classifieds Products - 'index.php?replid' SQL Injection	webapps	PHP
2009-06-27	AlmondSoft Multiple Classifieds Products - 'index.php' Multiple Cross-Site Scripting Vulnerabilities	webapps	PHP
2009-06-27	AlmondSoft Classifieds Pro - 'gmap.php?addr' Cross-Site Scripting	webapps	PHP
2009-06-27	Apple Safari 4.0.1 - Error Page Address Bar URI Spoofing	remote	Multiple
2009-06-27	Joomla! Component com_user - 'view' Open Redirection	webapps	PHP
2009-06-26	Virtue Online Test Generator - Authentication Bypass / SQL Injection / Cross-Site Scripting	webapps	PHP
2009-06-26	PHP-Address Book 4.0.x - Multiple SQL Injections	webapps	PHP
2009-06-26	ForumPal FE 1.1 - Authentication Bypass	webapps	PHP
2009-06-26	Mega File Manager 1.0 - 'index.php' Local File Inclusion	webapps	PHP
2009-06-25	Joomla! Component com_pinboard - 'task' SQL Injection	webapps	PHP
2009-06-25	MyFusion 6b - settings[locale] Local File Inclusion	webapps	PHP
2009-06-25	AlumniServer 1.0.1 - Authentication Bypass	webapps	PHP
2009-06-25	AlumniServer 1.0.1 - 'resetpwemail' Blind SQL Injection	webapps	PHP
2009-06-25	MD-Pro 1.083.x - Survey Module 'pollID' Blind SQL Injection	webapps	PHP
2009-06-24	BASE 1.2.4 - (Authentication Bypass) Insecure Cookie Handling	webapps	PHP
2009-06-24	Glossword 1.8.11 - 'index.php?x' Local File Inclusion	webapps	PHP
2009-06-24	Joomla! Component com_pinboard - Arbitrary File Upload	webapps	PHP
2009-06-24	Tribiq CMS 5.0.12c - Cross-Site Scripting / Local File Inclusion	webapps	PHP
2009-06-24	PHPEcho CMS 2.0-rc3 - 'forum' Cross-Site Scripting Cookie Stealing / Blind SQL Injection	webapps	PHP
2009-06-24	LightOpenCMS 0.1 - 'smarty.php?cwd' Local File Inclusion	webapps	PHP
2009-06-24	Joomla! Component com_amocourse - 'catid' SQL Injection	webapps	PHP
2009-06-24	Mozilla Firefox 3.5.1 - Error Page Address Bar URI Spoofing	remote	Linux
2009-06-24	Star Wars Battlefront II 1.1 - Remote Denial of Service	dos	Multiple
2009-06-24	PG Matchmaking - 'browse_ladies.php?show' Cross-Site Scripting	webapps	PHP
2009-06-24	PG Matchmaking - 'browse_men.php?show' Cross-Site Scripting	webapps	PHP
2009-06-24	PG Matchmaking - 'search.php?show' Cross-Site Scripting	webapps	PHP
2009-06-24	PG Matchmaking - 'services.php?show' Cross-Site Scripting	webapps	PHP
2009-06-24	XZeroScripts XZero Community Classifieds 4.97.8 - Multiple Cross-Site Scripting Vulnerabilities	webapps	PHP
2009-06-24	Pilot Group eTraining - 'courses_login.php' Cross-Site Scripting	webapps	PHP
2009-06-24	Pilot Group eTraining - 'news_read.php' Cross-Site Scripting	webapps	PHP
2009-06-24	Pilot Group eTraining - 'lessons_login.php' Cross-Site Scripting	webapps	PHP
2009-06-23	Zen Cart 1.3.8 - Remote Code Execution	webapps	PHP
2009-06-23	Zen Cart 1.3.8 - SQL Execution	webapps	PHP
2009-06-23	HP Data Protector 4.00-SP1b43064 - Remote Memory Leak/Denial of Service	dos	Windows
2009-06-23	HP Data Protector 4.00-SP1b43064 - Remote Memory Leak/Denial of Service (Metasploit)	dos	Windows
2009-06-23	phpCollegeExchange 0.1.5c - Local File Inclusion / Remote File Inclusion / Cross-Site Scripting	webapps	PHP
2009-06-23	CommuniGate Pro 5.2.14 - Web Mail URI Parsing HTML Injection	webapps	PHP
2009-06-23	Linux/x86 - setuid(0) + execve(/bin/sh,0) Shellcode (25 bytes)	shellcode	Linux_x86
2009-06-23	Linux/x86 - setuid(0) + setgid(0) + execve(/bin/sh,[/bin/sh,NULL])) Shellcode (25 bytes)	shellcode	Linux_x86
2009-06-22	MIDAS 1.43 - (Authentication Bypass) Insecure Cookie Handling	webapps	CGI
2009-06-22	pc4 Uploader 10.0 - Remote File Disclosure	webapps	PHP
2009-06-22	phpDatingClub 3.7 - SQL Injection / Cross-Site Scripting Injection	webapps	PHP
2009-06-22	Multiple HTTP Server - Low Bandwidth Denial of Service (2)	dos	Multiple
2009-06-22	phpMyAdmin - 'pmaPWN!' Code Injection / Remote Code Execution	webapps	PHP
2009-06-22	elgg - Cross-Site Scripting / Cross-Site Request Forgery / Change Password	webapps	PHP
2009-06-22	AWScripts Gallery Search Engine 1.x - Insecure Cookie	webapps	PHP
2009-06-22	Campsite 3.3.0 RC1 - Multiple Remote File Inclusions	webapps	PHP
2009-06-22	Gravy Media Photo Host 1.0.8 - Local File Disclosure	webapps	PHP
2009-06-22	Kasseler CMS - File Disclosure / Cross-Site Scripting	webapps	PHP
2009-06-22	SourceBans 1.4.2 - Arbitrary Change Admin Email	webapps	PHP
2009-06-22	Joomla! Component com_tickets 2.1 - 'id' SQL Injection	webapps	PHP
2009-06-22	RS-CMS 2.1 - 'key' SQL Injection	webapps	PHP
2009-06-22	MyBB 1.4.6 - Remote Code Execution	webapps	PHP
2009-06-22	Bopup Communications Server 3.2.26.5460 - Remote SYSTEM	remote	Windows
2009-06-22	PE Infection - How to Inject a dll	papers	AIX
2009-06-22	[French] Le Social Engineering : une attaque de persuasion	papers	Multiple
2009-06-22	Linux/x86 - chmod 666 /etc/shadow + Polymorphic Shellcode (54 bytes)	shellcode	Linux_x86
2009-06-22	S.T.A.L.K.E.R. Clear Sky 1.0010 - Remote Denial of Service	dos	Multiple
2009-06-22	Curverider Elgg 1.0 - Templates HTML Injection	webapps	PHP
2009-06-21	Mozilla Firefox 3.0.11 and Thunderbird 2.0.9 - RDF File Handling Remote Memory Corruption	dos	Linux
2009-06-21	HackThisZine (HTZ) #7	papers	eZine
2009-06-20	Crysis 1.21/1.5 - HTTP/XML-RPC Service Access Violation Remote Denial of Service	dos	Multiple
2009-06-20	Programs Rating - 'rate.php?id' Cross-Site Scripting	webapps	PHP
2009-06-20	Programs Rating - 'postcomments.php?id' Cross-Site Scripting	webapps	PHP
2009-06-18	DESlock+ 4.0.2 - 'dlpcrypt.sys' Local Kernel Ring0 Code Execution	local	Windows
2009-06-18	CMS buzz - Cross-Site Scripting / Password Change / HTML Injection	webapps	PHP
2009-06-18	Edraw PDF Viewer Component < 3.2.0.126 - ActiveX Insecure Method	remote	Windows
2009-06-18	NetBSD/x86 - Kill All Processes Shellcode (23 bytes)	shellcode	NetBSD_x86
2009-06-18	Linux/x86 - exit(0) / exit(1) Shellcode (3/4 bytes)	shellcode	Linux_x86
2009-06-17	PHPFK 7.03 - 'page_bottom.php' Local File Inclusion	webapps	PHP
2009-06-17	Multiple HTTP Server - 'slowloris.pl' Low Bandwidth Denial of Service	dos	Multiple
2009-06-17	TekBase All-in-One 3.1 - Multiple SQL Injections	webapps	PHP
2009-06-17	Fuzzylime CMS 3.03a - Local Inclusion / Arbitrary File Corruption	webapps	PHP
2009-06-17	FretsWeb 1.2 - Multiple Local File Inclusions	webapps	PHP
2009-06-17	FretsWeb 1.2 - 'name' Blind SQL Injection	webapps	PHP
2009-06-17	PHPortal 1.0 - Insecure Cookie Handling	webapps	PHP
2009-06-17	Compface 1.5.2 - '.xbm' Local Buffer Overflow (PoC)	dos	Linux
2009-06-17	Advanced PostgreSQL SQL Injection and Filter Bypass Techniques	papers	Multiple
2009-06-17	Linux Kernel 2.6.30 - 'tun_chr_pool()' Null Pointer Dereference	dos	Linux
2009-06-17	iDefense COMRaider - ActiveX Control Multiple Insecure Method Vulnerabilities	remote	Windows
2009-06-16	Green Dam 3.17 - URL Processing Buffer Overflow (Metasploit)	remote	Windows
2009-06-16	McAfee 3.6.0.608 - 'naPolicyManager.dll' ActiveX Arbitrary Data Write	remote	Windows
2009-06-16	Carom3D 5.06 - Unicode Buffer Overrun/Denial of Service	dos	Windows
2009-06-16	XOOPS 2.3.3 - '.htaccess' Remote File Disclosure	webapps	PHP
2009-06-16	Assault on PHP Applications	papers	Multiple
2009-06-16	Cyclic Redundancy Check (CRC)	papers	Multiple
2009-06-16	Linux/x86 - setreuid(geteuid(), geteuid()) + execve("/bin/sh",0,0) Shellcode (34 bytes)	shellcode	Linux_x86
2009-06-16	Solaris/x86 - Bind (/TCP) Shell Shellcode (Generator)	shellcode	Generator

2009-06-16	PHPLive! 3.2.2 - 'request.php' SQL Injection	webapps	PHP
2009-06-16	World in Conflict 1.0.1 - Typecheck Remote Denial of Service	dos	Multiple
2009-06-15	Joomla! Component com_Projectfork 2.0.10 - Local File Inclusion	webapps	PHP
2009-06-15	impleo music Collection 2.0 - SQL Injection / Cross-Site Scripting	webapps	PHP
2009-06-15	Mundi Mail 0.8.2 - 'top' Remote File Inclusion	webapps	PHP
2009-06-15	SugarCRM 5.2.0e - Remote Code Execution	webapps	PHP
2009-06-15	formmail 1.92 - Multiple Vulnerabilities	webapps	PHP
2009-06-15	DB Top Sites 1.0 - Remote Command Execution	webapps	PHP
2009-06-15	DB Top Sites 1.0 - 'index.php?u' Local File Inclusion	webapps	PHP
2009-06-15	elvin bts 1.2.0 - Multiple Vulnerabilities	webapps	PHP
2009-06-15	adaptweb 0.9.2 - Local File Inclusion / SQL Injection	webapps	PHP
2009-06-15	LinkLogger 2.4.10.15 - 'syslog' Denial of Service	dos	Linux
2009-06-15	Evernew Free Joke Script 1.2 - Remote Change Password	webapps	PHP
2009-06-15	Apple Safari / QuickTime - Denial of Service	dos	Multiple
2009-06-15	TorrentTrader Classic 1.09 - Multiple Vulnerabilities	webapps	PHP
2009-06-15	Joomla! Component com_iJoomla_rss - Blind SQL Injection	webapps	PHP
2009-06-15	Apple QuickTime - CRGN Atom Local Crash	dos	Linux
2009-06-15	WordPress Plugin Photoracer 1.0 - 'id' SQL Injection	webapps	PHP
2009-06-15	PHPCollegeExchange 0.1.5c - 'listing_view.php?itemnr' SQL Injection	webapps	PHP
2009-06-15	NETGEAR DG632 Router - Authentication Bypass	remote	Hardware
2009-06-15	NETGEAR DG632 Router - Remote Denial of Service	dos	Hardware
2009-06-15	vBulletin Radio and TV Player AddOn - HTML Injection	webapps	PHP
2009-06-15	PHPortal 1 - 'topicler.php?id' SQL Injection	webapps	PHP
2009-06-15	The Recipe Script 5 - Cross-Site Scripting	webapps	PHP
2009-06-15	Joomla! Component Jumi - 'fileid' Blind SQL Injection	webapps	PHP
2009-06-15	Recipe Script 5.0 - 'First Name' HTML Injection	webapps	PHP
2009-06-14	Oracle WebLogic Server 10.3 - 'console-help.portal' Cross-Site Scripting	remote	Multiple
2009-06-14	Oracle 11.1 - Database Network Foundation Heap Memory Corruption	dos	Multiple
2009-06-14	Oracle 9i/10g Database - Remote Network Authentication	remote	Multiple
2009-06-14	Oracle 10g Secure Enterprise Search - 'search_p_groups' Cross-Site Scripting	remote	Multiple
2009-06-14	Oracle 9i/10g Database - TNS Command Remote Denial of Service	dos	Multiple
2009-06-14	Oracle 9i/10g Database - Network Foundation Remote Overflow	remote	Multiple
2009-06-14	Scriptsez Easy Image Downloader - 'id' Cross-Site Scripting	webapps	PHP
2009-06-13	HP ProCurve Threat Management Services - zl ST.1.0.090213 Module CRL Security Bypass	remote	Multiple
2009-06-12	Apple iTunes 8.1.1.10 (Windows) - 'itms/itcp' Remote Buffer Overflow	remote	Windows
2009-06-12	Zip Store Chat 4.0/5.0 - Authentication Bypass	webapps	PHP
2009-06-12	4Images 1.7.7 - Filter Bypass HTML Injection / Cross-Site Scripting	webapps	PHP
2009-06-12	campus virtual-lms - Cross-Site Scripting / SQL Injection	webapps	PHP
2009-06-12	Green Dam 3.17 (Windows XP SP2) - 'URL' Remote Buffer Overflow	remote	Windows
2009-06-12	phpWebThings 1.5.2 - MD5 Hash Retrieve/File Disclosure	webapps	PHP
2009-06-12	Asterisk IAX2 - Attacked IAX Fuzzer Resource Exhaustion (Denial of Service)	dos	Multiple
2009-06-12	pivot 1.40.4-7 - Multiple Vulnerabilities	webapps	PHP
2009-06-12	tbdev 01-01-2008 - Multiple Vulnerabilities	webapps	PHP
2009-06-12	TransLucid 1.75 - Multiple Vulnerabilities	webapps	PHP
2009-06-12	Uebimiau Web-Mail 3.2.0-1.8 - Remote File / Overwrite	webapps	PHP
2009-06-11	PHPWebThings 1.5.2 - 'help.php?module' Local File Inclusion	webapps	PHP
2009-06-11	Splog 1.2 Beta - Multiple SQL Injections	webapps	PHP
2009-06-11	ModSecurity 2.5.9 (Core Rules 2.5-1.6.1) - Filter Bypass	remote	Windows
2009-06-11	TorrentVolve 1.4 - 'deleteTorrent' Delete Arbitrary File	webapps	PHP
2009-06-11	yogurt 0.3 - Cross-Site Scripting / SQL Injection	webapps	PHP
2009-06-11	Sniggabo CMS - 'article.php?id' SQL Injection	webapps	PHP
2009-06-11	Web Application Firewall Bypass using HTTP Parameter Pollution	papers	Multiple
2009-06-10	Worldweaver DX Studio Player < 3.0.29.1 Firefox plugin - Command Injection	remote	Windows
2009-06-10	LightNEasy sql/no-db 2.2.x - System Configuration Disclosure	webapps	PHP
2009-06-10	School Data Navigator - 'page' Local/Remote File Inclusion	webapps	PHP
2009-06-10	Desi Short URL Script - (Authentication Bypass) Insecure Cookie Handling	webapps	PHP
2009-06-10	mrcgiguy freeticket - Cookie Handling / SQL Injection	webapps	PHP
2009-06-10	Open Biller 0.1 - 'Username' Blind SQL Injection	webapps	PHP
2009-06-10	Bypassing Hardware Based (DEP) on Windows 2003 SP 2	papers	Multiple
2009-06-10	XAMPP 1.6.x - Multiple Cross-Site Scripting Vulnerabilities	remote	Multiple
2009-06-09	Apple Safari 3.2.x - XML External Entity Local File Theft	remote	Multiple
2009-06-09	Joomla! Component BookLibrary 1.5.2.4 - Remote File Inclusion	webapps	PHP
2009-06-09	Joomla! Component Akobook 2.3 - 'gbid' SQL Injection	webapps	PHP
2009-06-09	Joomla! Component com_media_library 1.5.3 - Remote File Inclusion	webapps	PHP
2009-06-09	S-CMS 2.0b3 - Multiple Local File Inclusions	webapps	PHP
2009-06-09	S-CMS 2.0b3 - Multiple SQL Injections	webapps	PHP
2009-06-09	S-CMS 2.0b3 - 'Username' Blind SQL Injection	webapps	PHP
2009-06-09	Free Download Manager 2.5/3.0 - Control Server Remote Buffer Overflow	remote	Windows
2009-06-09	mrcgiguy the ticket system 2.0 PHP - Multiple Vulnerabilities	webapps	PHP
2009-06-09	MRCGIGUY Hot Links - 'report.php?id' SQL Injection	webapps	PHP
2009-06-09	Joomla! Component com_realestatemanager 1.0 - Remote File Inclusion	webapps	PHP
2009-06-09	Joomla! Component com_vehiclemanager 1.0 - Remote File Inclusion	webapps	PHP
2009-06-09	phpMyAdmin - '/scripts/setup.php' PHP Code Injection	webapps	PHP
2009-06-09	Linux/x86 - Bind (/TCP) Shell Shellcode (Generator)	shellcode	Generator
2009-06-09	Windows (XP SP1) - Bind (/TCP) Shell Shellcode (Generator)	shellcode	Generator
2009-06-09	Microsoft Internet Explorer 5.0.1 - Cached Content Cross Domain Information Disclosure	remote	Windows
2009-06-08	MyCars Automotive - Authentication Bypass	webapps	PHP
2009-06-08	VT-Auth 1.0 - 'zHk8dEes3.txt' File Disclosure	webapps	ASP
2009-06-08	FipsCMS Light 2.1 - 'db.mdb' Remote Database Disclosure	webapps	ASP
2009-06-08	Joomla! Component com_school 1.4 - 'classid' SQL Injection	webapps	PHP
2009-06-08	Virtue Classifieds - 'category' SQL Injection	webapps	PHP
2009-06-08	Virtue Book Store - 'cid' SQL Injection	webapps	PHP
2009-06-08	Virtue Shopping Mall - 'cid' SQL Injection	webapps	PHP
2009-06-08	Interlogy Profile Manager Basic - Insecure Cookie Handling	webapps	CGI
2009-06-08	Apple Mac OSX xnu 1228.9.59 - Kernel Privilege Escalation	local	OSX
2009-06-08	httpdx 0.8 - FTP Server Delete/Get/Create Directories/Files	remote	Windows
2009-06-08	Joomla! Component MooFAQ (com_moofaq) - Local File Inclusion	webapps	PHP
2009-06-08	SAP GUI 6.4 - ActiveX (Accept) Remote Buffer Overflow (PoC)	dos	Windows
2009-06-08	Frontis 3.9.01.24 - 'source_class' SQL Injection	webapps	PHP
2009-06-08	virtue news - SQL Injection / Cross-Site Scripting	webapps	PHP
2009-06-08	Grestul 1.2 - Remote Add Administrator Account	webapps	PHP
2009-06-08	DM FileManager 3.9.2 - Insecure Cookie Handling	webapps	PHP
2009-06-08	Automated link exchange portal 1.3 - Multiple Vulnerabilities	webapps	PHP
2009-06-08	Joomla! Component com_portafolio - 'cid' SQL Injection	webapps	PHP
2009-06-08	Shop Script Pro 2.12 - SQL Injection	webapps	PHP
2009-06-08	MPI and Password Cracking	papers	Multiple
2009-06-08	[French] Shellcodes sous Linux dans les processeurs de 32 bits x86	papers	Multiple
2009-06-08	Linux/x86 - Bind (8000/TCP) Shell + Flush IPTables Rules (/sbin/iptables -F) Shellcode (176 bytes)	shellcode	Linux_x86
2009-06-08	Linux/x86 - Bind (8000/TCP) Shell + Add Root User Shellcode (225+ bytes)	shellcode	Linux_x86
2009-06-08	MySQL 5.0.75 - 'sql_parse.cc' Multiple Format String Vulnerabilities	dos	Linux
2009-06-08	Winds3D Viewer 3 - 'GetURL()' Arbitrary File Download	remote	Multiple
2009-06-08	Computer Associates SiteMinder - '%00' Cross-Site Scripting Protection Security Bypass	webapps	PHP
2009-06-08	Computer Associates SiteMinder - Unicode Cross-Site Scripting Protection Security Bypass	webapps	Java
2009-06-06	Avax Vector 1.3 - 'avPreview.ocx' ActiveX Control Buffer Overflow	remote	Windows
2009-06-06	ClanSphere 2009 - 'text' Cross-Site Scripting	webapps	PHP
2009-06-06	America's Army 3.0.4 - Invalid Query Remote Denial of Service	dos	Multiple
2009-06-05	PeaZIP 2.6.1 - Compressed Filename Command Injection	local	Windows
2009-06-05	Pixelactivo 3.0 - 'idx' SQL Injection	webapps	PHP
2009-06-05	Pixelactivo 3.0 - Authentication Bypass	webapps	PHP
2009-06-05	Kjtechforce mailman b1 - Delete Row 'code' SQL Injection	webapps	PHP
2009-06-05	Kjtechforce mailman b1 - 'dest' Blind SQL Injection	webapps	PHP
2009-06-05	LogMeIn 4.0.784 - 'cfgadvanced.html' HTTP Header Injection	remote	Windows
2009-06-05	Horde 3.1 - 'Passwd' Module Cross-Site Scripting	webapps	PHP
2009-06-04	OpenSSL < 0.9.8i - DTLS ChangeCipherSpec Remote Denial of Service	dos	Multiple
2009-06-04	SuperCali PHP Event Calendar - Arbitrary Change Admin Password	webapps	PHP
2009-06-04	Online Armor < 3.5.0.12 - 'OAmon.sys' Local Privilege Escalation	local	Windows
2009-06-04	Web Directory PRO - 'Admins.php' Change Admin Password	webapps	PHP
2009-06-04	Host Directory PRO 2.1.0 - Remote Database Backup	webapps	PHP
2009-06-04	Web Directory PRO - Remote Database Backup	webapps	PHP
2009-06-04	Host Directory PRO 2.1.0 - Remote Change Admin Password	webapps	PHP

2009-06-04	kloxo 5.75 - Multiple Vulnerabilities	remote	Linux
2009-06-03	Apple iTunes 8.1.1 - 'ITMS' Multiple Protocol Handler Buffer Overflow (Metasploit)	remote	OSX
2009-06-03	Apple QuickTime - Image Description Atom Sign Extension (PoC)	dos	Windows
2009-06-03	Atomix Virtual Dj Pro 6.0 - Local Stack Buffer Overflow (SEH)	local	Windows
2009-06-03	My Mini Bill - 'orderid' SQL Injection	webapps	PHP
2009-06-03	EgyPlus 7ml 1.0.1 - Authentication Bypass	webapps	PHP
2009-06-03	Podcast Generator 1.2 - Unauthorized Re-Installation	webapps	PHP
2009-06-03	Joomla! Component Seminar 1.28 - 'id' Blind SQL Injection	webapps	PHP
2009-06-03	OCS Inventory NG 1.02 - Remote File Disclosure	webapps	PHP
2009-06-03	Supernews 2.6 - 'index.php?noticia' SQL Injection	webapps	PHP
2009-06-03	Joomla! Component Omilen Photo Gallery 0.5b - Local File Inclusion	webapps	PHP
2009-06-03	Movie PHP Script 2.0 - 'init.php?anticode' Code Execution	webapps	PHP
2009-06-03	Joomla! Component com_mosres - Multiple SQL Injections	webapps	PHP
2009-06-03	Joomla! < 1.5.11 - Multiple Cross-Site Scripting / HTML Injection Vulnerabilities	webapps	PHP
2009-06-03	Apache Tomcat 6.0.18 - Form Authentication Existing/Non-Existing 'Username' Enumeration	remote	Multiple
2009-06-03	Microsoft Internet Explorer 6 - 'JavaScript:' URI in 'Refresh' Header Cross-Site Scripting	remote	Windows
2009-06-03	Google Chrome 0.3.154 - 'JavaScript:' URI in 'Refresh' Header Cross-Site Scripting	remote	Multiple
2009-06-03	Sitecore CMS 6.0.0 rev. 090120 - 'default.aspx' Cross-Site Scripting	webapps	PHP
2009-06-03	Flatnux 2009-03-27 - Multiple Cross-Site Scripting Vulnerabilities	webapps	PHP
2009-06-03	i-Gallery 3.4/4.1 - 'streamfile.asp' Multiple Directory Traversal Vulnerabilities	webapps	ASP
2009-06-02	Online Grades & Attendance 3.2.6 - Multiple Local File Inclusions	webapps	PHP
2009-06-02	Online Grades & Attendance 3.2.6 - Blind SQL Injection	webapps	PHP
2009-06-02	Alstrasoft Article Manager Pro - Arbitrary File Upload	webapps	PHP
2009-06-02	flashlight free edition - Local File Inclusion / SQL Injection	webapps	PHP
2009-06-02	WebCal - 'webCal3_detail.asp?event_id' SQL Injection	webapps	PHP
2009-06-02	propertymax pro free - SQL Injection / Cross-Site Scripting	webapps	PHP
2009-06-02	WebEyes Guest Book 3 - 'yorum.asp?mesajid' SQL Injection	webapps	ASP
2009-06-02	Podcast Generator 1.2 - 'GLOBALS[]' Multiple Vulnerabilities	webapps	PHP
2009-06-02	CUPS 1.3.9 - 'cups/ipp.c' Null Pointer Dereference Denial of Service	dos	Linux
2009-06-02	PHP-Nuke 8.0 Downloads Module - 'query' Cross-Site Scripting	webapps	PHP
2009-06-02	Apple Safari 4 - 'reload()' Denial of Service	dos	Windows
2009-06-01	ICQ 6.5 - URL Search Hook (Windows Explorer) Remote Buffer Overflow (PoC)	dos	Windows
2009-06-01	Linksys WAG54G2 - Web Management Console Arbitrary Command Execution	local	Hardware
2009-06-01	RadCLASSIFIEDS Gold 2 - 'seller' SQL Injection	webapps	PHP
2009-06-01	Roxio CinePlayer 3.2 - 'IAManager.dll' Remote Buffer Overflow HeapSpray	remote	Windows
2009-06-01	OCS Inventory NG 1.02 - Multiple SQL Injections	webapps	PHP
2009-06-01	AIMP 2.51 build 330 - ID3v1/ID3v2 Tag Remote Stack Buffer Overflow (PoC) (SEH)	dos	Windows
2009-06-01	elitecms 1.01 - SQL Injection / Cross-Site Scripting	webapps	PHP
2009-06-01	Open-school 1.0 - 'id' SQL Injection	webapps	PHP
2009-06-01	Escon SupportPortal Pro 3.0 - 'tid' Blind SQL Injection	webapps	PHP
2009-06-01	unclassified NewsBoard 1.6.4 - Multiple Vulnerabilities	webapps	PHP
2009-06-01	Apache mod_dav / svn - Remote Denial of Service	dos	Multiple
2009-06-01	Online Grades & Attendance 3.2.6 - Credentials Changer SQL	webapps	PHP
2009-06-01	Online Grades & Attendance 3.2.6 - Multiple SQL Injections	webapps	PHP
2009-06-01	ASMAX AR 804 gu Web Management Console - Arbitrary Command Execution	remote	Hardware
2009-06-01	Joomla! Component Joomlaequipment (com_juser) 2.0.4 - SQL Injection	webapps	PHP
2009-06-01	ecsportal rel 6.5 - 'article_view_photo.php?id' SQL Injection	webapps	PHP
2009-06-01	R2 NewsLetter Lite/Pro/Stats - 'admin.mdb' Database Disclosure	webapps	ASP
2009-06-01	PAD Site Scripts 3.6 - Arbitrary Database Backup	webapps	PHP
2009-06-01	AdaptBB 1.0 - 'forumspath' Remote File Inclusion	webapps	PHP
2009-06-01	ASP Football Pool 2.3 - Remote Database Disclosure	webapps	PHP
2009-06-01	[Italian] Don't trust in Technology	papers	Multiple
2009-06-01	Microsoft WPAD Technology Weakness	papers	Multiple
2009-06-01	HTTP Parameter Pollution - Yahoo! Mail classic attack	papers	Multiple
2009-06-01	Linux/x86 - Bind (8000/TCP) Shell (/bin/sh) Shellcode (179 bytes)	shellcode	Linux_x86
2009-06-01	Joomla! 1.5.x - Cross-Site Scripting / Information Disclosure	webapps	PHP
2009-06-01	GNU glibc - Timezone Parsing Remote Integer Overflow	dos	Linux
2009-05-31	Linux/x86 - sethostname(PwNeD !!, 8) Shellcode (32 bytes)	shellcode	Linux_x86
2009-05-30	phpMyAdmin 3.3.0 - 'db' Cross-Site Scripting	webapps	PHP
2009-05-29	small pirate 2.1 - Cross-Site Scripting / SQL Injection	webapps	PHP
2009-05-29	amember 3.1.7 - Cross-Site Scripting / SQL Injection / HTML Injection	webapps	PHP
2009-05-29	Joomla! Component JVideo 0.3.x - SQL Injection	webapps	PHP
2009-05-29	Mozilla Firefox 3.0.10 - 'KEYGEN' Remote Denial of Service	dos	Multiple
2009-05-29	212Cafe WebBoard 2.90 Beta - Remote File Disclosure	webapps	PHP
2009-05-29	Roxio CinePlayer 3.2 - 'SonicMediaPlayer.dll' Remote Buffer Overflow	remote	Windows
2009-05-29	Zen Help Desk 2.1 - Authentication Bypass	webapps	PHP
2009-05-29	Adobe Acrobat 9.1.1 (OSX/Windows) - Stack Overflow Crash (PoC)	dos	Multiple
2009-05-29	ecshop 2.6.2 - Multiple Remote Command Execution Vulnerabilities	webapps	PHP
2009-05-29	Arab Portal 2.2 - Authentication Bypass	webapps	PHP
2009-05-29	ZeusCart 2.3 - 'maincatid' SQL Injection	webapps	PHP
2009-05-29	Million Dollar Text Links 1.0 - 'id' SQL Injection	webapps	PHP
2009-05-29	Traidnt Up 2.0 - Cookie Authentication Bypass	webapps	PHP
2009-05-29	Linux Kernel 2.6.x - 'splice(2)' Double Lock Local Denial of Service	dos	Linux
2009-05-29	SonicWALL SSL-VPN - 'cgi-bin/welcome/VirtualOffice' Remote Format String	remote	Hardware
2009-05-29	Adobe Acrobat 9.1.3 - Stack Exhaustion Denial of Service	dos	Linux
2009-05-29	212Cafe WebBoard 2.90 Beta - 'view.php' Directory Traversal	webapps	PHP
2009-05-28	Achievo 1.3.4 - Multiple Cross-Site Scripting Vulnerabilities	webapps	PHP
2009-05-28	BaoFeng Storm 3.9.62 - '.Playlist' File Buffer Overflow (PoC)	dos	Windows
2009-05-27	Million Dollar Text Links 1.x - Insecure Cookie Handling	webapps	PHP
2009-05-27	Joomla! Component AgoraGroup 0.3.5.3 - Blind SQL Injection	webapps	PHP
2009-05-27	Easy Px 41 CMS 09.00.00B1 - 'fiche' Local File Inclusion	webapps	PHP
2009-05-27	SiteX 0.7.4.418 - 'THEME_FOLDER' Local File Inclusion	webapps	PHP
2009-05-27	Evernew Free Joke Script 1.2 - 'cat_id' SQL Injection	webapps	PHP
2009-05-27	Impact Software AdPeeps 8.5d1 - Cross-Site Scripting / HTML Injection	webapps	PHP
2009-05-27	[Portuguese] Entendendo InjeÃ§Ã£o de SQL	papers	Multiple
2009-05-27	[Arabic] Seh Buffer Overflows Explained	papers	Multiple
2009-05-27	Sendmail 8.12.x - 'X-header' Remote Heap Buffer Overflow (PoC)	dos	Linux
2009-05-27	PHP-Nuke 8.0 - '/main/tracking/userLog.php' SQL Injection	webapps	PHP
2009-05-26	Soulseek 157 NS x/156.x - Remote Distributed Search Code Execution	dos	Windows
2009-05-26	minitwitter 0.3-beta - SQL Injection / Cross-Site Scripting	webapps	PHP
2009-05-26	Joomla! Component Boy Scout Advancement 0.3 - 'id' SQL Injection	webapps	PHP
2009-05-26	COWON America jetCast 2.0.4.1109 - '.mp3' Local Overflow	local	Windows
2009-05-26	Dokuwiki 2009-02-14 - Local File Inclusion	webapps	PHP
2009-05-26	ArcaVir 2009 < 9.4.320X.9 - 'ps_drv.sys' Local Privilege Escalation	local	Windows
2009-05-26	Winamp 5.551 - MAKI Parsing Integer Overflow	local	Windows
2009-05-26	vBulletin vbBux/vbPlaza 2.x - 'vbplaza.php' Blind SQL Injection	webapps	PHP
2009-05-26	Cute Editor ASP.NET - Remote File Disclosure	webapps	ASP
2009-05-26	Lighttpd < 1.4.23 (BSD/Solaris) - Source Code Disclosure	remote	Multiple
2009-05-26	MyFirstCMS 1.0.2 - Arbitrary File Delete	webapps	PHP
2009-05-26	Mole Adult Portal Script - 'profile.php?user_id' SQL Injection	webapps	PHP
2009-05-26	Slayer 2.4 - 'skin' Universal Buffer Overflow (SEH)	local	Windows
2009-05-26	CPCommerce 1.2.x - 'GLOBALS[prefix]' Arbitrary File Inclusion	webapps	PHP
2009-05-26	WordPress Plugin Lytebox - 'wp-lytebox' Local File Inclusion	webapps	PHP
2009-05-26	Webradev Download Protect 1.0 - Remote File Inclusion	webapps	PHP
2009-05-26	eZoneScripts Hotornot2 Script - (Authentication Bypass) Multiple Remote Vulnerabilities	webapps	PHP
2009-05-26	Mozilla Firefox - unclamped loop Denial of Service	dos	Multiple
2009-05-26	Ultimate Media Script 2.0 - Remote Change Content	webapps	PHP
2009-05-26	Gallarific - 'user.php' Arbirary Change Admin Information	webapps	PHP
2009-05-26	roomphplanning 1.6 - Multiple Vulnerabilities	webapps	PHP
2009-05-26	Apple Safari - RSS 'feed://' Buffer Overflow via libxml2 (PoC)	dos	Windows
2009-05-26	PHP 5.2.9 (Windows x86) - Local Safemod Bypass	local	Windows_x86
2009-05-26	Joomla! Component com_rsgallery2 1.14.x/2.x - Remote Backdoor Access	webapps	PHP
2009-05-26	Kensei Board 2.0.0b - Multiple SQL Injections	webapps	PHP
2009-05-26	MyForum 1.3 - Authentication Bypass	webapps	PHP
2009-05-26	Soulseek 157 NS - Remote Buffer Overflow (SEH)	remote	Windows
2009-05-26	Flash Image Gallery 1.1 - Arbitrary Configuration File Disclosure	webapps	PHP
2009-05-26	Microsoft IIS 6.0 - WebDAV Remote Authentication Bypass (2)	remote	Windows
2009-05-26	ShaadiClone 2.0 - 'addAdminmembercode.php' Arbitrary Add Admin	webapps	PHP
2009-05-26	phpBugTracker 1.0.3 - Authentication Bypass	webapps	PHP
2009-05-26	ZeeCareers 2.0 - 'addAdminmembercode.php' Arbitrary Add Admin	webapps	PHP

2009-05-26	WebMember 1.0 - 'formID' SQL Injection	webapps	PHP
2009-05-26	Joomla! Component Com_Agora 3.0.0 RC1 - Arbitrary File Upload	webapps	PHP
2009-05-26	Dokuwiki 2009-02-14 - Temporary/Remote File Inclusion	webapps	PHP
2009-05-26	Aardvark Topsites PHP 5.2 - 'index.php' Cross-Site Scripting	webapps	PHP
2009-05-26	SonicWALL Global VPN Client 4.0 - Log File Remote Format String	remote	Hardware
2009-05-26	BSD (Multiple Distributions) - 'gdtoa/misc.c' Memory Corruption	dos	Multiple
2009-05-25	Intergo Arcade Trade Script 1.0 - 'q' Cross-Site Scripting	webapps	PHP
2009-05-24	Cisco Adaptive Security Appliance 8.x - Web VPN FTP or CIFS Authentication Form Phishing	remote	Hardware
2009-05-24	Cisco ASA Appliance 8.x - WebVPN DOM Wrapper Cross-Site Scripting	remote	Hardware
2009-05-23	Basic Analysis and Security Engine (BASE) 1.2.4 - 'readRoleCookie()' Authentication Bypass	webapps	PHP
2009-05-22	Microsoft IIS 6.0 - WebDAV Remote Authentication Bypass (PHP)	remote	Windows
2009-05-22	Tutorial Share 3.5.0 - Insecure Cookie Handling	webapps	PHP
2009-05-22	Winamp 5.551 - MAKI Parsing Integer Overflow (PoC)	dos	Windows
2009-05-22	ZaoCMS - 'user_id' SQL Injection	webapps	PHP
2009-05-22	Winamp 5.55 - MAKI Script Universal Overwrite (SEH)	local	Windows
2009-05-22	ZaoCMS - 'user_updated.php' Remote Change Password	webapps	PHP
2009-05-22	Winamp 5.55 - MAKI script Universal Integer Overflow	local	Windows
2009-05-22	ZaoCMS (PhpCommander) - Arbitrary File Upload	webapps	PHP
2009-05-22	Mole Group Sky Hunter/Bus Ticket Scripts - Change Admin Password	webapps	PHP
2009-05-22	Mole Group Restaurant Directory Script 3.0 - Change Admin Password	webapps	PHP
2009-05-22	photovideotube 1.11 - Multiple Vulnerabilities	webapps	PHP
2009-05-22	[Italian] How do I crack your WEP: The FMS attack explanation	papers	Multiple
2009-05-22	LxBlog - Multiple Cross-Site Scripting / SQL Injections	webapps	PHP
2009-05-22	DotNetNuke 4.9.3 - 'ErrorPage.aspx' Cross-Site Scripting	webapps	ASP
2009-05-22	Microsoft Internet Explorer 7/8 - HTML Attribute JavaScript URI SecURIty Bypass	remote	Windows
2009-05-22	Nagios 3.0.6 - 'statuswml.cgi' Arbitrary Shell Command Injection	remote	CGI
2009-05-21	Microsoft IIS 6.0 - WebDAV Remote Authentication Bypass (Patch)	remote	Windows
2009-05-21	VICIDIAL 2.0.5-173 - Authentication Bypass	webapps	PHP
2009-05-21	asp inline Corporate Calendar - SQL Injection / Cross-Site Scripting	webapps	ASP
2009-05-21	BaoFeng - 'config.dll' ActiveX Remote Code Execution	remote	Windows
2009-05-21	ChinaGames - 'CGAgent.dll' ActiveX Remote Code Execution	remote	Windows
2009-05-21	Flash Quiz Beta 2 - Multiple SQL Injections	webapps	PHP
2009-05-21	Article Directory - Authentication Bypass	webapps	PHP
2009-05-21	Article Directory - 'page.php' Blind SQL Injection	webapps	PHP
2009-05-21	ZaoCMS - Insecure Cookie Handling	webapps	PHP
2009-05-21	ZaoCMS - 'download.php' Remote File Disclosure	webapps	PHP
2009-05-21	Novell Groupwise 8.0 Webaccess - Multiple Vulnerabilities	remote	Multiple
2009-05-21	LibTIFF 3.8.2 - 'LZWDecodeCompat()' Remote Buffer Underflow	dos	Linux
2009-05-20	Joomla! Component Casino 0.3.1 - Multiple SQL Injections s	webapps	PHP
2009-05-20	Exjune Officer Message System 1 - Multiple Vulnerabilities	webapps	PHP
2009-05-20	Catviz 0.4.0 beta1 - Local File Inclusion / Cross-Site Scripting	webapps	PHP
2009-05-20	NC GBook 1.0 - Remote Command Injection	webapps	PHP
2009-05-20	NC LinkList 1.3.1 - Remote Command Injection	webapps	PHP
2009-05-20	Realty Web-Base 1.0 - 'list_list.php?id' SQL Injection	webapps	PHP
2009-05-20	DMXReady Registration Manager 1.1 - Arbitrary File Upload	webapps	ASP
2009-05-20	PHP Article Publisher - Arbitrary Authentication Bypass	webapps	PHP
2009-05-20	bSpeak 1.10 - 'forumid' Blind SQL Injection	webapps	PHP
2009-05-20	Jorp 1.3.05.09 - Arbitrary Remove Projects/Tasks	webapps	PHP
2009-05-20	Apple Mac OSX - Java applet Remote Deserialization Remote (2)	remote	OSX
2009-05-20	[French] Bypass authentication with reverse engineering in linux x86	papers	Multiple
2009-05-20	Sun Java System Communications Express 6.3 - 'search.xml' Cross-Site Scripting	webapps	Java
2009-05-20	Sun Java System Communications Express 6.3 - 'UWCMain' Cross-Site Scripting	webapps	Java
2009-05-20	Kingsoft Webshield 1.1.0.62 - Cross-Site Scripting / Remote Command Execution	webapps	PHP
2009-05-20	Profense 2.2.20/2.4.2 - Web Application Firewall Security Bypass	webapps	PHP
2009-05-19	VidShare Pro - Arbitrary File Upload	webapps	PHP
2009-05-19	Joomla! Component com_gsticketsystem - 'catid' Blind SQL Injection	webapps	PHP
2009-05-19	httpdx 0.5b - FTP Server (CWD) Remote Buffer Overflow (SEH)	remote	Windows
2009-05-19	AOL IWinAmpActiveX Class - 'ConvertFile()' Remote Buffer Overflow	remote	Windows
2009-05-19	Namad (IMenAfzar) 2.0.0.0 - Remote File Disclosure	webapps	ASP
2009-05-19	PAD Site Scripts 3.6 - Insecure Cookie Handling	webapps	PHP
2009-05-19	Coppermine Photo Gallery 1.4.22 - SQL Injection	webapps	PHP
2009-05-19	vidshare pro - SQL Injection / Cross-Site Scripting	webapps	PHP
2009-05-19	Dog Pedigree Online Database 1.0.1b - Multiple SQL Injections	webapps	PHP
2009-05-19	Dog Pedigree Online Database 1.0.1b - Insecure Cookie Handling	webapps	PHP
2009-05-19	Dog Pedigree Online Database 1.0.1b - Blind SQL Injection	webapps	PHP
2009-05-19	DM FileManager 3.9.2 - Authentication Bypass	webapps	PHP
2009-05-19	KingSoft Web Shield 1.1.0.62 - Cross-Site Scripting / Code Execution	remote	Windows
2009-05-19	WebKit - 'parent/top' Cross Domain Scripting	remote	Multiple
2009-05-19	DirectAdmin 1.33.6 - 'CMD_REDIRECT' Cross-Site Scripting	webapps	Java
2009-05-19	Samba 3.3.5 - Format String / Security Bypass	remote	Linux
2009-05-18	Pc4Uploader 9.0 - Blind SQL Injection	webapps	PHP
2009-05-18	PHP Dir Submit - Authentication Bypass	webapps	PHP
2009-05-18	Online Rental Property Script 5.0 - 'pid' SQL Injection	webapps	PHP
2009-05-18	httpdx 0.5b - Multiple Remote Denial of Service Vulnerabilities	dos	Windows
2009-05-18	coppermine photo Gallery 1.4.22 - Multiple Vulnerabilities	webapps	PHP
2009-05-18	Flyspeck CMS 6.8 - Local/Remote File Inclusion / Change Add Admin	webapps	PHP
2009-05-18	Pluck CMS 4.6.2 - 'langpref' Local File Inclusion	webapps	PHP
2009-05-18	httpdx 0.5b - FTP Server (USER) Remote Buffer Overflow (SEH)	remote	Windows
2009-05-18	ClanWeb 1.4.2 - Remote Change Password / Add Admin	webapps	PHP
2009-05-18	douran portal 3.9.0.23 - Multiple Vulnerabilities	webapps	PHP
2009-05-18	Dana Portal - Remote Change Admin Password	webapps	ASP
2009-05-18	OpenSSL 0.9.8k/1.0.0-beta2 - DTLS Remote Memory Exhaustion Denial of Service	dos	Multiple
2009-05-18	Zervit Web Server 0.04 - GET Remote Buffer Overflow (PoC)	dos	Windows
2009-05-18	Mereo 1.8.0 - GET Remote Denial of Service	dos	Windows
2009-05-18	LightOpenCMS 0.1 - 'id' SQL Injection	webapps	PHP
2009-05-18	Jieqi CMS 1.5 - Remote Code Execution	webapps	PHP
2009-05-18	MaxCMS 2.0 - '/inc/ajax.asp' SQL Injection	webapps	ASP
2009-05-18	DGNews 3.0 Beta - 'id' SQL Injection	webapps	PHP
2009-05-18	PHP Article Publisher - Remote Change Admin Password	webapps	PHP
2009-05-18	FreeBSD/x64 - exec /bin/sh Shellcode (31 bytes)	shellcode	FreeBSD_x86-64
2009-05-18	Linux/x64 - Bind (4444/TCP) Shell Shellcode (132 bytes)	shellcode	Linux_x86-64
2009-05-17	Apple iPhone 2.2.1 - Call Approval Dialog Security Bypass (1)	remote	Hardware
2009-05-17	Apple iPhone 2.2.1 - Call Approval Dialog Security Bypass (2)	remote	Hardware
2009-05-17	Apple iPhone 2.2.1 - Call Approval Dialog Security Bypass (3)	remote	Hardware
2009-05-15	Eggdrop/Windrop 1.6.19 - ctcpbuf Remote Crash	dos	Multiple
2009-05-15	D-Link - Captcha Bypass	remote	Hardware
2009-05-15	Joomla! Component ArtForms 2.1 b7 - Remote File Inclusion	webapps	PHP
2009-05-15	Audioactive Player 1.93b - '.m3u' Local Buffer Overflow	local	Windows
2009-05-15	Harland Scripts 11 - Products Remote Command Execution	webapps	PHP
2009-05-15	Rama CMS 0.9.8 - 'download.php' File Disclosure	webapps	PHP
2009-05-15	Audioactive Player 1.93b - '.m3u' Local Buffer Overflow (SEH)	local	Windows
2009-05-15	2DayBiz Custom T-shirt Design - SQL Injection / Cross-Site Scripting	webapps	PHP
2009-05-15	Microsoft IIS 6.0 - WebDAV Remote Authentication Bypass (1)	remote	Windows
2009-05-15	DMXReady Registration Manager 1.1 - Database Disclosure	webapps	ASP
2009-05-15	PHPenpals 1.1 - 'mail.php?ID' SQL Injection	webapps	PHP
2009-05-15	my-colex 1.4.2 - Authentication Bypass / SQL Injection / Cross-Site Scripting	webapps	PHP
2009-05-15	my-gesuad 0.9.14 - Authentication Bypass / SQL Injection / Cross-Site Scripting	webapps	PHP
2009-05-15	FreeBSD/x64 - execve(/bin/sh) Shellcode (34 bytes)	shellcode	FreeBSD_x86-64
2009-05-15	Cacti 0.8.7 - 'data_input.php' Cross-Site Scripting	webapps	PHP
2009-05-15	Lussumo Vanilla 1.1.5/1.1.7 - 'updatecheck.php' Cross-Site Scripting	webapps	PHP
2009-05-15	Webmedia Explorer 5.0.9/5.10 - Multiple Cross-Site Scripting Vulnerabilities	webapps	PHP
2009-05-15	Irssi 0.8.13 - 'WALLOPS' Message Off-by-One Heap Memory Corruption	dos	Linux
2009-05-14	Ascad Networks 5 - Products Insecure Cookie Handling	webapps	PHP
2009-05-14	My Game Script 2.0 - Authentication Bypass	webapps	PHP
2009-05-14	DigiMode Maya 1.0.2 - '.m3u' / '.m3l' Buffer Overflow (PoC)	dos	Windows
2009-05-14	Linux Kernel 2.6.29 - 'ptrace_attach()' Race Condition Privilege Escalation	local	Linux
2009-05-14	Shutter 0.1.1 - Multiple SQL Injections	webapps	PHP
2009-05-14	beLive 0.2.3 - 'arch.php?arch' Local File Inclusion	webapps	PHP
2009-05-14	StrawBerry 1.1.1 - Local File Inclusion / Remote Command Execution	webapps	PHP
2009-05-14	MRCGIGUY ClickBank Directory 1.0.1 - Insecure Cookie Handling	webapps	PHP

2009-05-14	Submitter Script - Authentication Bypass	webapps	PHP
2009-05-14	MRCGIGUY Hot Links SQL 3.2.0 - Insecure Cookie Handling	webapps	PHP
2009-05-14	MRCGIGUY Amazon Directory 1.0/2.0 - Insecure Cookie Handling	webapps	PHP
2009-05-14	MRCGIGUY Message Box 1.0 - Insecure Cookie Handling	webapps	PHP
2009-05-14	MRCGIGUY The Ticket System 2.0 - Insecure Cookie Handling	webapps	PHP
2009-05-14	MRCGIGUY Ultimate Profit Portal 1.0.1 - Insecure Cookie Handling	webapps	PHP
2009-05-14	2DayBiz Business Community Script - Multiple Vulnerabilities	webapps	PHP
2009-05-14	Easy Scripts Answer and Question Script - Multiple Vulnerabilities	webapps	PHP
2009-05-14	2DayBiz Template Monster Clone - 'edituser.php' Change Pass	webapps	PHP
2009-05-14	MRCGIGUY SimpLISTic SQL 2.0.0 - Insecure Cookie Handling	webapps	PHP
2009-05-14	MRCGIGUY Top Sites 1.0.0 - Insecure Cookie Handling	webapps	PHP
2009-05-14	[Arabic] How to crack serial numbers - reverse engineering	papers	AIX
2009-05-14	Linux/x64 - setuid(0) + execve(/bin/sh) Shellcode (49 bytes)	shellcode	Linux_x86-64
2009-05-14	Nortel Contact Center Manager - Administration Password Disclosure	remote	Multiple
2009-05-14	Apple QuickTime 7.4.1 - Null Pointer Dereference Denial of Service	dos	Multiple
2009-05-13	Java SE Runtime Environment JRE 6 Update 13 - Multiple Vulnerabilities	dos	Windows
2009-05-13	Zervit Web Server 0.4 - Directory Traversal / Memory Corruption	remote	Windows
2009-05-13	TinyButStrong 3.4.0 - 'script' Local File Disclosure	webapps	PHP
2009-05-13	Password Protector SD 1.3.1 - Insecure Cookie Handling	webapps	PHP
2009-05-13	IPsec-Tools < 0.7.2 (racoon frag-isakmp) - Multiple Remote Denial of Service Vulnerabilities (PoC)	dos	Multiple
2009-05-13	Pinnacle Studio 12 - '.hfz' Directory Traversal	local	Windows
2009-05-13	Family Connections CMS 1.9 - SQL Injection	webapps	PHP
2009-05-13	MaxCMS 2.0 - 'm_username' Arbitrary Create Admin	webapps	PHP
2009-05-13	Linux Kernel 2.6.x (Gentoo 2.6.29rc1) - 'ptrace_attach' Local Privilege Escalation	local	Linux
2009-05-13	Mlffat 2.1 - Cookie Authentication Bypass	webapps	PHP
2009-05-12	Bitweaver 2.6 - 'saveFeed()' Remote Code Execution	webapps	PHP
2009-05-12	CastRipper 2.50.70 - '.m3u' Local Buffer Overflow	local	Windows
2009-05-12	CastRipper 2.50.70 - '.m3u' Universal Stack Overflow	local	Windows
2009-05-12	CastRipper 2.50.70 - '.m3u' Universal Stack Overflow (Python)	local	Windows
2009-05-12	CastRipper 2.50.70 - '.pls' Universal Stack Overflow	local	Windows
2009-05-12	BigACE 2.5 - SQL Injection	webapps	PHP
2009-05-12	Apple Safari 3.2.2 - 'feed:' URI Multiple Input Validation Vulnerabilities	remote	Multiple
2009-05-12	Microsoft Windows Media Player 11 - ScriptCommand Multiple Information Disclosure Vulnerabilities	remote	Windows
2009-05-11	TYPSoft FTP Server 1.11 - 'ABORT' Remote Denial of Service	dos	Windows
2009-05-11	Mereo 1.8.0 - Arbitrary File Disclosure	remote	Windows
2009-05-11	EggBlog 4.1.1 - Local Directory Traversal	webapps	PHP
2009-05-11	Dacio's Image Gallery 1.6 - Directory Traversal / Authentication Bypass / Arbitrary File Upload	webapps	PHP
2009-05-11	openWYSIWYG 1.4.7 - Local Directory Traversal	webapps	PHP
2009-05-11	microTopic 1 - 'Rating' Blind SQL Injection	webapps	PHP
2009-05-11	MPLAB IDE 8.30 - '.mcp' Universal Overwrite (SEH)	local	Windows
2009-05-11	EasyPHP 3.0 - Arbitrary Modify Configuration File	local	Windows
2009-05-11	PHP recommend 1.3 - Authentication Bypass / Remote File Inclusion / Code Injection	webapps	PHP
2009-05-11	Dacio's Image Gallery 1.6 - Multiple Remote Vulnerabilities	webapps	PHP
2009-05-11	Compress::Raw::Zlib Perl Module - Remote Code Execution	remote	Linux
2009-05-11	Mozilla Firefox 3.0.10 / SeaMonkey 1.1.16 - Address Bar URI Spoofing	remote	Linux
2009-05-11	Mozilla Firefox 3.0.10 - 'nsViewManager.cpp' Denial of Service	dos	Linux
2009-05-11	PHP 5.3.2 - 'xml_utf8_decode()' UTF-8 Input Validation	remote	PHP
2009-05-10	Mozilla Firefox 3.0.x - Large '.GIF' File Background Denial of Service	dos	Linux
2009-05-08	The Recipe Script 5 - Authentication Bypass / Database Backup	webapps	PHP
2009-05-08	Realty Web-Base 1.0 - Authentication Bypass	webapps	PHP
2009-05-08	ViPlay3 < 3.00 - '.vpl' Local Stack Overflow (PoC)	dos	Windows
2009-05-08	Luxbum 0.5.5/stable - Authentication Bypass	webapps	PHP
2009-05-08	Mortbay Jetty 7.0.0-pre5 Dispatcher Servlet - Denial of Service	dos	Multiple
2009-05-08	Battle Blog 1.25 - 'uploadform.asp' Arbitrary File Upload	webapps	PHP
2009-05-08	RTWebalbum 1.0.462 - 'albumID' Blind SQL Injection	webapps	PHP
2009-05-08	TinyWebGallery 1.7.6 - Local File Inclusion / Remote Code Execution	webapps	PHP
2009-05-08	Reverse Code Engineering - mrinfo	papers	Multiple
2009-05-08	[Portuguese] Explorando Stack Overflow no Windows	papers	Multiple
2009-05-08	Claroline 1.8.11 - '/claroline/linker/notfound.php' Cross-Site Scripting	webapps	PHP
2009-05-08	MagpieRSS 0.72 - Cross-Site Scripting / HTML Injection	webapps	PHP
2009-05-08	WebKit - JavaScript 'onload()' Event Cross Domain Scripting	remote	Multiple
2009-05-08	WebKit - XML External Entity Information Disclosure	remote	Linux
2009-05-07	webSPELL 4.2.0e - 'page' Blind SQL Injection	webapps	PHP
2009-05-07	32bit FTP - 'PASV' Reply Client Remote Overflow (Metasploit)	remote	Windows_x86
2009-05-07	Soritong MP3 Player 1.0 - Local Buffer Overflow (SEH)	local	Windows
2009-05-07	Sorinara Streaming Audio Player 0.9 - '.pla' Local Stack Overflow (PoC)	dos	Windows
2009-05-07	TCPDB 3.8 - Arbitrary Add Admin Account	webapps	PHP
2009-05-07	T-Dreams Job Career Package 3.0 - Insecure Cookie Handling	webapps	ASP
2009-05-07	RM Downloader 3.0.0.9 - '.RAM' Local Buffer Overflow	local	Windows
2009-05-07	Mini-stream ASX to MP3 Converter 3.0.0.7 - '.RAM' Local Buffer Overflow	local	Windows
2009-05-07	Mini-stream ASX to MP3 Converter 3.0.0.7 - '.asx HREF' Local Buffer Overflow	local	Windows
2009-05-07	Mini-stream Ripper 3.0.1.1 - '.RAM' Local Buffer Overflow	local	Windows
2009-05-07	Mini-stream Ripper 3.0.1.1 - '.asx' 'HREF' Local Buffer Overflow	local	Windows
2009-05-07	Mini-stream RM-MP3 Converter 3.0.0.7 - '.RAM' Local Buffer Overflow	local	Windows
2009-05-07	Mini-stream RM-MP3 Converter 3.0.0.7 - '.asx' Local Buffer Overflow	local	Windows
2009-05-07	VIDEOSCRIPT.us - Authentication Bypass	webapps	PHP
2009-05-07	ST-Gallery 0.1a - Multiple SQL Injections	webapps	PHP
2009-05-07	GrabIt 1.7.2x - NZB DTD Reference Buffer Overflow	local	Windows
2009-05-07	Simple Customer 1.3 - Arbitrary Change Admin Password	webapps	PHP
2009-05-07	Job Script 2.0 - Arbitrary Change Admin Password	webapps	PHP
2009-05-07	Sorinara Streaming Audio Player 0.9 - '.pla' Local Stack Overflow	local	Windows
2009-05-07	PHP - 'mb_ereg(i)_replace()' Evaluate Replacement String	local	Multiple
2009-05-06	Verlihub Control Panel 1.7 - Multiple Cross-Site Scripting Vulnerabilities	webapps	PHP
2009-05-05	32bit FTP (09.04.24) - 'Banner' Remote Buffer Overflow (PoC)	dos	Windows_x86
2009-05-05	Grabit 1.7.2 Beta 3 - '.nzb' Local Buffer Overflow (SEH)	local	Windows
2009-05-05	32bit FTP (09.04.24) - 'CWD Response' Remote Buffer Overflow	remote	Windows_x86
2009-05-05	32bit FTP (09.04.24) - 'Banner' Remote Buffer Overflow	remote	Windows_x86
2009-05-05	TemaTres 1.0.3 - Authentication Bypass / SQL Injection / Cross-Site Scripting	webapps	PHP
2009-05-05	TemaTres 1.0.3 - Blind SQL Injection	webapps	PHP
2009-05-05	Sorinara Streaming Audio Player 0.9 - '.m3u' Local Stack Overflow (PoC)	dos	Windows
2009-05-05	LinkBase 2.0 - Remote Cookie Grabber	webapps	PHP
2009-05-05	Joomla! Component Almond Classifieds 5.6.2 - Blind SQL Injection	webapps	PHP
2009-05-05	Sorinara Streaming Audio Player 0.9 - '.m3u' Local Stack Overflow	local	Windows
2009-05-05	32bit FTP (09.04.24) - 'CWD Response' Universal Overwrite (SEH)	remote	Windows_x86
2009-05-05	Hijacking LKM's event handler - FreeBSD case study	papers	Multiple
2009-05-05	IceWarp Merak Mail Server 9.4.1 Groupware Component - Multiple SQL Injections	webapps	PHP
2009-05-05	IceWarp Merak Mail Server 9.4.1 - 'cleanHTML()' Cross-Site Scripting	webapps	PHP
2009-05-05	GlassFish Enterprise Server 2.1 - Admin Console /applications/applications.jsf URI Cross-Site Scripting	remote	Multiple
2009-05-05	GlassFish Enterprise Server 2.1 - Admin Console /sysnet/registration.jsf URI Cross-Site Scripting	remote	Multiple
2009-05-05	GlassFish Enterprise Server 2.1 - Admin Console /configuration/configuration.jsf URI Cross-Site Scripting	remote	Multiple
2009-05-05	GlassFish Enterprise Server 2.1 - Admin Console /customMBeans/customMBeans.jsf URI Cross-Site Scripting	remote	Multiple
2009-05-05	GlassFish Enterprise Server 2.1 - Admin Console /resourceNode/resources.jsf URI Cross-Site Scripting	remote	Multiple
2009-05-05	GlassFish Enterprise Server 2.1 - Admin Console /webService/webServicesGeneral.jsf URI Cross-Site Scripting	remote	Multiple
2009-05-05	GlassFish Enterprise Server 2.1 - Admin Console '/configuration/auditModuleEdit.jsf?name' Cross-Site Scripting	remote	Multiple
2009-05-05	GlassFish Enterprise Server 2.1 - Admin Console '/resourceNode/jdbcResourceEdit.jsf?name' Cross-Site Scripting	remote	Multiple
2009-05-05	IceWarp Merak Mail Server 9.4.1 - 'item.php' Cross-Site Scripting	webapps	PHP
2009-05-05	IceWarp Merak Mail Server 9.4.1 - 'Forgot Password' Input Validation	webapps	PHP
2009-05-05	Woodstock 4.2 404 - Error Page Cross-Site Scripting	remote	Multiple
2009-05-05	VerliAdmin 0.3 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities	webapps	PHP
2009-05-05	Git 1.6.3 - Parameter Processing Remote Denial of Service	dos	Linux
2009-05-04	Adobe Acrobat Reader 8.1.2 < 9.0 - 'getIcon()' Memory Corruption	local	Windows
2009-05-04	Winn ASP Guestbook 1.01b - Remote Database Disclosure	webapps	ASP
2009-05-04	Solaris 10 / OpenSolaris - 'dtrace' Local Kernel Denial of Service (PoC)	dos	Solaris
2009-05-04	Solaris 10 / OpenSolaris - 'fasttrap' Local Kernel Denial of Service (PoC)	dos	Solaris
2009-05-04	AGTC MyShop 3.2 - Insecure Cookie Handling	webapps	PHP
2009-05-04	BluSky CMS - 'news_id' SQL Injection	webapps	PHP
2009-05-04	EW-MusicPlayer 0.8 - '.m3u' Local Buffer Overflow (PoC)	dos	Windows
2009-05-04	Qt QuickTeam - Multiple Remote File Inclusions	webapps	PHP
2009-05-04	eLitius 1.0 - Remote Command Execution	webapps	PHP
2009-05-04	PHP Site Lock 2.0 - Insecure Cookie Handling	webapps	PHP

2009-05-04	Million Dollar Text Links 1.0 - Arbitrary Authentication Bypass	webapps	PHP
2009-05-04	Quick 'n Easy Mail Server 3.3 (Demo) - Remote Denial of Service (PoC)	dos	Windows
2009-05-04	Bmxplay 0.4.4b - '.bmx' Local Buffer Overflow (PoC)	dos	Windows
2009-05-04	projectCMS 1.1b - Multiple Vulnerabilities	webapps	PHP
2009-05-04	Uguestbook 1.0b - 'Guestbook.mdb' Arbitrary Database Disclosure	webapps	PHP
2009-05-04	Ublog access version - Arbitrary Database Disclosure	webapps	ASP
2009-05-04	Why certain SWF encryption techniques can backfire	papers	Multiple
2009-05-04	[French] Bypass authentication with buffer overflow	papers	Multiple
2009-05-04	Openfire 3.x - jabber:iq:auth 'passwd_change' Remote Password Change	remote	Multiple
2009-05-03	MyBB 1.4.5 - Multiple Vulnerabilities	webapps	PHP
2009-05-03	GUPnP 0.12.7 - Message Handling Denial of Service	dos	Linux
2009-05-03	Linux Kernel 2.6.x (Sparc64) - '/proc/iomem' Local Denial of Service	dos	Linux
2009-05-01	Mercury Audio Player 1.21 - '.m3u' Local Stack Overflow	local	Windows
2009-05-01	Addonics NAS Adapter FTP - Remote Denial of Service	dos	Hardware
2009-05-01	Golabi CMS 1.0.1 - Session Poisoning	webapps	PHP
2009-05-01	MiniTwitter 0.2b - Multiple SQL Injections	webapps	PHP
2009-05-01	MiniTwitter 0.2b - Remote User Options Changer	webapps	PHP
2009-05-01	Beatport Player 1.0.0.283 - '.m3u' Local Buffer Overflow (PoC)	dos	Windows
2009-05-01	RM Downloader - '.smi' Local Stack Overflow	local	Windows
2009-05-01	Beatport Player 1.0.0.283 - '.m3u' Local Overwrite (SEH)	local	Windows
2009-05-01	Beatport Player 1.0.0.283 - '.m3u' Local Stack Overflow (2)	local	Windows
2009-05-01	Beatport Player 1.0.0.283 - '.m3u' Local Stack Overflow (3)	local	Windows
2009-05-01	pecio CMS 1.1.5 - 'index.php?language' Local File Inclusion	webapps	PHP
2009-05-01	RM Downloader - '.smi' Universal Local Buffer Overflow	local	Windows
2009-04-30	Linux Kernel 2.6 (Gentoo / Ubuntu 8.10/9.04) UDEV < 1.4.1 - Local Privilege Escalation (2)	local	Linux
2009-04-30	Google Chrome 1.0.154.53 - Null Pointer Remote Crash	dos	Windows
2009-04-30	Leap CMS 0.1.4 - 'searchterm' Blind SQL Injection	webapps	PHP
2009-04-30	Leap CMS 0.1.4 - SQL Injection / Cross-Site Scripting / Arbitrary File Upload	webapps	PHP
2009-04-30	Mercury Audio Player 1.21 - '.m3u' Local Stack Overflow (PoC)	dos	Windows
2009-04-30	BaoFeng - ActiveX 'OnBeforeVideoDownload()' Remote Buffer Overflow	remote	Windows
2009-04-30	Mercury Audio Player 1.21 - '.b4s' Local Stack Overflow	local	Windows
2009-04-30	Multiple Vendor - PF Null Pointer Dereference	dos	BSD
2009-04-30	Mercury Audio Player 1.21 - '.pls' Overwrite (SEH)	local	Windows
2009-04-30	[Persian] Router Sniffing Network Traffic via GRE Tunneling Attack	papers	AIX
2009-04-30	Linux/x86 - Serial Port Shell Binding (/dev/ttyS0) + busybox Launching Null-Free Shellcode (82 bytes)	shellcode	Linux_x86
2009-04-30	GnuTLS 2.6.x - libgnutls lib/pk-libgcrypt.c Malformed DSA Key Handling Remote Denial of Service	dos	Linux
2009-04-30	GnuTLS 2.6.x - libgnutls lib/gnutls_pk.c DSA Key Storage Remote Spoofing	remote	Linux
2009-04-29	Symantec Fax Viewer Control 10 - 'DCCFAXVW.dll' Remote Buffer Overflow	remote	Windows
2009-04-29	eLitius 1.0 - 'banner-details.php?id' SQL Injection	webapps	PHP
2009-04-29	Baby Web Server 2.7.2.0 - Arbitrary File Disclosure	remote	Windows
2009-04-29	ProjectCMS 1.0b - 'index.php?sn' SQL Injection	webapps	PHP
2009-04-29	S-CMS 1.1 Stable - 'page' Local File Inclusion	webapps	PHP
2009-04-29	Zubrag Smart File Download 1.3 - Arbitrary File Download	webapps	PHP
2009-04-29	mpegable Player 2.12 - '.yuv' Local Stack Overflow (PoC)	dos	Windows
2009-04-29	Adobe Reader 8.1.4/9.1 - 'GetAnnots()' Remote Code Execution	remote	Linux
2009-04-29	Adobe 8.1.4/9.1 - 'customDictionaryOpen()' Code Execution	remote	Linux
2009-04-29	Tiger Dms - Authentication Bypass	webapps	PHP
2009-04-29	LevelOne AMG-2000 2.00.00 - Security Bypass	remote	CGI
2009-04-29	Coppermine Photo Gallery 1.4.21 - 'css' Cross-Site Scripting	webapps	PHP
2009-04-28	Linux Kernel 2.6.20/2.6.24/2.6.27_7-10 (Ubuntu 7.04/8.04/8.10 / Fedora Core 10 / OpenSuse 11.1) - SCTP FWD Memory Corruption Remote Overflow	remote	Linux
2009-04-28	VisionLms 1.0 - 'changePW.php' Remote Password Change	webapps	PHP
2009-04-28	MIM: InfiniX 1.2.003 - Multiple SQL Injections	webapps	PHP
2009-04-28	webSPELL 4.2.0d (Linux) - Local File Disclosure (C)	webapps	PHP
2009-04-28	Autodesk IDrop - ActiveX Remote Code Execution	remote	Windows
2009-04-28	Quick 'n Easy Web Server 3.3.5 - Arbitrary File Disclosure	remote	Windows
2009-04-28	Symantec (Multiple Products) - Intel Common Base Agent Remote Command Execution	remote	Windows
2009-04-27	libvirt_proxy 0.5.1 - Local Privilege Escalation	local	Linux
2009-04-27	Destiny Media Player 1.61 - '.rdl' Local Buffer Overflow	local	Windows
2009-04-27	SDP Downloader 2.3.0 - '.asx' Local Buffer Overflow (SEH) (1)	local	Windows
2009-04-27	dwebpro 6.8.26 - Directory Traversal / File Disclosure	remote	Windows
2009-04-27	Invision Power Board (IP.Board) 3.0.0b5 - Active Cross-Site Scripting / Full Path Disclosure	webapps	PHP
2009-04-27	Opencart 1.1.8 - 'route' Local File Inclusion	webapps	PHP
2009-04-27	SDP Downloader 2.3.0 - '.asx' Local Buffer Overflow (SEH) (2)	local	Windows
2009-04-27	Zoom Player Pro 3.30 - '.m3u' Local Buffer Overflow (SEH)	local	Windows
2009-04-27	Icewarp Merak Mail Server 9.4.1 - 'Base64FileEncode()' Buffer Overflow (PoC)	dos	Windows
2009-04-27	LightBlog 9.9.2 - 'register.php' Remote Code Execution	webapps	PHP
2009-04-27	iodined 0.4.2-2 - forged DNS packet Denial of Service	dos	Linux
2009-04-27	Dew-NewPHPLinks 2.0 - Local File Inclusion / Cross-Site Scripting	webapps	PHP
2009-04-27	Thickbox Gallery 2 - 'index.php' Local File Inclusion	webapps	PHP
2009-04-27	EZ-Blog Beta2 - 'category' SQL Injection	webapps	PHP
2009-04-27	ECShop 2.5.0 - 'order_sn' SQL Injection	webapps	PHP
2009-04-27	Flatchat 3.0 - 'pmscript.php' Local File Inclusion	webapps	PHP
2009-04-27	Teraway LinkTracker 1.0 - Insecure Cookie Handling	webapps	PHP
2009-04-27	Teraway FileStream 1.0 - Insecure Cookie Handling	webapps	PHP
2009-04-27	Teraway LiveHelp 2.0 - Insecure Cookie Handling	webapps	PHP
2009-04-27	Teraway LinkTracker 1.0 - Remote Password Change	webapps	PHP
2009-04-27	Belkin Bulldog Plus - HTTP Server Remote Buffer Overflow	remote	Windows
2009-04-27	ABC Advertise 1.0 - Admin Password Disclosure	webapps	PHP
2009-04-27	RealNetworks RealPlayer Gold 10.0 MP3 - File Handling Remote Denial of Service	dos	Windows
2009-04-27	DWebPro 6.8.26 - Directory Traversal / Arbitrary File Disclosure	remote	Windows
2009-04-27	MataChat - 'input.php' Multiple Cross-Site Scripting Vulnerabilities	webapps	PHP
2009-04-27	Invision Power Board (IP.Board) 3.0 - Multiple HTML Injection / Information Disclosure Vulnerabilities	webapps	PHP
2009-04-27	Mozilla Firefox 3.0.9 - 'nsTextFrame::ClearTextRun()' Remote Memory Corruption	dos	Linux
2009-04-25	Linksys WVC54GCA 1.00R22/1.00R24 (Wireless-G) - Multiple Cross-Site Scripting Vulnerabilities	remote	Hardware
2009-04-24	Absolute Form Processor XE-V 1.5 - Insecure Cookie Handling	webapps	ASP
2009-04-24	Absolute Form Processor XE-V 1.5 - Remote Change Password	webapps	ASP
2009-04-24	SDP Downloader 2.3.0 - '.asx' Local Heap Overflow (PoC)	dos	Windows
2009-04-24	photo-rigma.biz 30 - SQL Injection / Cross-Site Scripting	webapps	PHP
2009-04-24	Pragyan CMS 2.6.4 - Multiple SQL Injections	webapps	PHP
2009-04-24	PuterJam's Blog PJBlog3 3.0.6 - 'action.asp' SQL Injection	webapps	ASP
2009-04-23	fowlcms 1.1 - Authentication Bypass / Local File Inclusion / Arbitrary File Upload	webapps	PHP
2009-04-23	Norton Ghost Support module for EasySetup wizard - Remote Denial of Service (PoC)	dos	Windows
2009-04-23	Home Web Server r1.7.1 (build 147) - GUI Thread-Memory Corruption	dos	Windows
2009-04-23	BolinTech DreamFTP Server 1.02 - 'users.dat' Arbitrary File Disclosure	remote	Windows
2009-04-23	Popcorn 1.87 - Remote Heap Overflow (PoC)	dos	Windows
2009-04-23	CoolPlayer Portable 2.19.1 - 'Skin' Local Buffer Overflow	local	Windows
2009-04-23	[Italian] Analysis and Working of a Rootkit in the Operative System	papers	Multiple
2009-04-23	[Italian] Routers and Routing process explanation through the NAT	papers	Multiple
2009-04-23	Recover Data for Novell Netware 1.0 - '.sav' Remote Denial of Service	dos	Novell
2009-04-23	CS Whois Lookup - 'ip' Remote Command Execution	webapps	PHP
2009-04-23	Linksys WVC54GCA 1.00R22/1.00R24 (Wireless-G) - 'adm/file.cgi' Multiple Directory Traversal Vulnerabilities	remote	Hardware
2009-04-22	Xitami Web Server 5.0 - Remote Denial of Service	dos	Windows
2009-04-22	Counter Strike Source ManiAdminPlugin 2.0 - Remote Crash	dos	Windows
2009-04-22	Dokeos Lms 1.8.5 - 'Include' Remote Code Execution	webapps	PHP
2009-04-22	Elkagroup Image Gallery 1.0 - Arbitrary File Upload	webapps	PHP
2009-04-22	5 star Rating 1.2 - Authentication Bypass	webapps	PHP
2009-04-22	WebPortal CMS 0.8b - Multiple Local/Remote File Inclusions	webapps	PHP
2009-04-22	Joomla! Component rsmonials - Cross-Site Scripting	webapps	PHP
2009-04-22	Femitter FTP Server 1.03 - Arbitrary File Disclosure	remote	Windows
2009-04-22	CoolPlayer Portable 2.19.1 - '.m3u' Local Buffer Overflow (1)	local	Windows
2009-04-22	CoolPlayer Portable 2.19.1 - '.m3u' Local Buffer Overflow (2)	local	Windows
2009-04-22	Zervit Web Server 0.3 - sockets++ crash Remote Denial of Service	dos	Windows
2009-04-22	Mozilla (Multiple Products) - Server Refresh Header Cross-Site Scripting	remote	Linux
2009-04-22	DirectAdmin 1.33.3 - '/CMD_DB' Backup Action Insecure Temporary File Creation	local	Linux
2009-04-22	New5starRating 1.0 - '/admin/control_panel_sample.php' SQL Injection	webapps	PHP
2009-04-22	Mani's Admin Plugin - Remote Denial of Service	dos	Multiple
2009-04-22	Flat Calendar 1.1 - 'add.php' HTML Injection	webapps	PHP
2009-04-21	Dokeos Lms 1.8.5 - 'whoisonline.php' PHP Code Injection	webapps	PHP
2009-04-21	Zervit Web Server 0.3 - Remote Denial of Service	dos	Windows
2009-04-21	CRE Loaded 6.2 - 'products_id' SQL Injection	webapps	PHP

2009-04-21	pastelcms 0.8.0 - Local File Inclusion / SQL Injection	webapps	PHP
2009-04-21	TotalCalendar 2.4 - 'Include' Local File Inclusion	webapps	PHP
2009-04-21	NotFTP 1.3.1 - 'newlang' Local File Inclusion	webapps	PHP
2009-04-21	Quick.CMS.Lite 0.5 - 'id' SQL Injection	webapps	PHP
2009-04-21	VS PANEL 7.3.6 - 'Cat_ID' SQL Injection	webapps	PHP
2009-04-21	Oracle RDBms 10.2.0.3/11.1.0.6 - TNS Listener (PoC)	dos	Windows
2009-04-21	I-Rater Pro/Plantinum 4.0 - Authentication Bypass	webapps	PHP
2009-04-21	Studio Lounge Address Book 2.5 - Authentication Bypass	webapps	PHP
2009-04-21	mixedcms 1.0b - Local File Inclusion / Arbitrary File Upload / Authentication Bypass / File Disclosure	webapps	PHP
2009-04-21	Trend Micro OfficeScan 8.0 Client - Denial of Service	dos	Windows
2009-04-21	Sun Java System Delegated Administrator 6.x - HTTP Response Splitting	webapps	Java
2009-04-21	SAP cFolders - Cross-Site Scripting / HTML Injection	remote	Multiple
2009-04-21	010 Editor 3.0.4 - File Parsing Multiple Buffer Overflow Vulnerabilities	remote	Multiple
2009-04-20	Linux Kernel 2.6 (Debian 4.0 / Ubuntu / Gentoo) UDEV < 1.4.1 - Local Privilege Escalation (1)	local	Linux
2009-04-20	Microsoft Internet Explorer - EMBED Memory Corruption (PoC) (MS09-014)	dos	Windows
2009-04-20	multi-lingual E-Commerce system 0.2 - Multiple Vulnerabilities	webapps	PHP
2009-04-20	Studio Lounge Address Book 2.5 - 'profile' Arbitrary File Upload	webapps	PHP
2009-04-20	Seditio CMS Events Plugin - 'c' SQL Injection	webapps	PHP
2009-04-20	Flatnux 2009-03-27 - Arbitrary File Upload / Information Disclosure	webapps	PHP
2009-04-20	1by1 1.67 - '.m3u' Local Stack Overflow (PoC)	dos	Windows
2009-04-20	Groovy Media Player 1.1.0 - '.m3u' Local Stack Overflow (PoC)	dos	Windows
2009-04-20	webClassifieds 2005 - (Authentication Bypass) Insecure Cookie Handling	webapps	PHP
2009-04-20	EZ Webitor - Authentication Bypass	webapps	PHP
2009-04-20	Pligg CMS 9.9.0 - 'editlink.php' Blind SQL Injection	webapps	PHP
2009-04-20	CoolPlayer Portable 2.19.1 - '.m3u' Local Stack Overflow (PoC)	dos	Windows
2009-04-20	Addonics NAS Adapter - 'bts.cgi' (Authenticated) Remote Denial of Service	dos	Hardware
2009-04-20	WysGui CMS 1.2b - Insecure Cookie Handling Blind SQL Injection	webapps	PHP
2009-04-20	WB News 2.1.2 - Insecure Cookie Handling	webapps	PHP
2009-04-20	fungamez rc1 - Authentication Bypass / Local File Inclusion	webapps	PHP
2009-04-20	TotalCalendar 2.4 - 'inc_dir' Remote File Inclusion	webapps	PHP
2009-04-20	e107 < 0.7.15 - 'extended_user_fields' Blind SQL Injection	webapps	PHP
2009-04-20	TotalCalendar 2.4 - Remote Password Change	webapps	PHP
2009-04-20	Creasito E-Commerce 1.3.16 - Authentication Bypass	webapps	PHP
2009-04-20	eLitius 1.0 - Arbitrary Database Backup	webapps	PHP
2009-04-20	RedHat Stronghold Web Server 2.3 - Cross-Site Scripting	remote	Linux
2009-04-20	Linksys WRT54GC 1.5.7 Firmware - 'administration.cgi' Access Validation	remote	Hardware
2009-04-20	Online Photo Pro 2.0 - 'section' Cross-Site Scripting	webapps	PHP
2009-04-20	Online Contact Manager 3.0 - 'index.php?showGroup' Cross-Site Scripting	webapps	PHP
2009-04-20	Online Contact Manager 3.0 - 'view.php?id' Cross-Site Scripting	webapps	PHP
2009-04-20	Online Contact Manager 3.0 - 'email.php?id' Cross-Site Scripting	webapps	PHP
2009-04-20	Online Contact Manager 3.0 - 'edit.php?id' Cross-Site Scripting	webapps	PHP
2009-04-20	Online Contact Manager 3.0 - 'delete.php?id' Cross-Site Scripting	webapps	PHP
2009-04-19	AWStats 6.4 - 'AWStats.pl' Multiple Full Path Disclosures	webapps	CGI
2009-04-17	Tiny Blogr 1.0.0 rc4 - Authentication Bypass	webapps	PHP
2009-04-17	Microsoft Media Player - 'quartz.dll .mid' Denial of Service	dos	Windows
2009-04-17	Microsoft GDI Plugin - '.png' Infinite Loop Denial of Service (PoC)	dos	Windows
2009-04-17	Microsoft Media Player - 'quartz.dll .wav' Multiple Remote Denial of Service Vulnerabilities	dos	Windows
2009-04-17	Limbo CMS 1.0.4.2 - Cross-Site Request Forgery / Privilege Escalation	webapps	PHP
2009-04-17	XRDP 0.4.1 - Remote Buffer Overflow (PoC)	dos	Linux
2009-04-17	cTorrent/DTorrent - '.torrent' Local Buffer Overflow	local	Linux
2009-04-17	ClanTiger < 1.1.1 - Multiple Insecure Cookie Handling Vulnerabilities	webapps	PHP
2009-04-17	ClanTiger 1.1.1 - Authentication Bypass	webapps	PHP
2009-04-17	ClanTiger 1.1.1 - 'slug' Blind SQL Injection	webapps	PHP
2009-04-17	e-cart.biz Shopping Cart - Arbitrary File Upload	webapps	PHP
2009-04-17	Esoftpro Online Guestbook Pro - 'display' Blind SQL Injection	webapps	PHP
2009-04-17	Online Email Manager - Insecure Cookie Handling	webapps	PHP
2009-04-17	Hot Project 7.0 - Authentication Bypass	webapps	PHP
2009-04-17	Malleo 1.2.3 - 'admin.php' Local File Inclusion	webapps	PHP
2009-04-17	WebGlimpse 2.18.7 - 'DOC' Directory Traversal	webapps	CGI
2009-04-16	Geeklog 1.5.2 - 'savepreferences()/*blocks[]' SQL Injection	webapps	PHP
2009-04-16	NetHoteles 2.0/3.0 - Authentication Bypass	webapps	PHP
2009-04-16	Online Password Manager 4.1 - Insecure Cookie Handling	webapps	PHP
2009-04-16	Apollo 37zz - '.m3u' Local Heap Overflow (PoC)	dos	Windows
2009-04-16	Elecard AVC HD Player - '.XPL' Stack Buffer Overflow (SEH) (PoC)	dos	Windows
2009-04-16	webSPELL 4.2.0c - Bypass BBCode Cross-Site Scripting Cookie Stealing	webapps	PHP
2009-04-16	DNS Tools (PHP Digger) - Remote Command Execution	webapps	PHP
2009-04-16	CPCommerce 1.2.8 - 'id_document' Blind SQL Injection	webapps	PHP
2009-04-16	Oracle APEX 3.2 - Unprivileged DB users can see APEX Password hashes	local	Multiple
2009-04-16	NetHoteles 3.0 - 'ficha.php' SQL Injection	webapps	PHP
2009-04-16	Apache Geronimo 2.1.3 - Multiple Directory Traversal Vulnerabilities	remote	Multiple
2009-04-16	eLitius 1.0 - '/manage-admin.php' Arbitrary Add Admin/Change Password	webapps	PHP
2009-04-16	SMA-DB 0.3.13 - Multiple Remote File Inclusions	webapps	PHP
2009-04-16	chCounter 3.1.3 - Authentication Bypass	webapps	PHP
2009-04-16	MagicISO CCD/Cue - Local Heap Overflow (PoC)	dos	Windows
2009-04-16	Zervit Web Server 0.02 - Directory Traversal	remote	Windows
2009-04-16	Phorum 5.2 - '/admin/badwords.php?curr' Cross-Site Scripting	webapps	PHP
2009-04-16	Phorum 5.2 - '/admin/banlist.php?curr' Cross-Site Scripting	webapps	PHP
2009-04-16	Phorum 5.2 - '/admin/users.php' Multiple Cross-Site Scripting Vulnerabilities	webapps	PHP
2009-04-16	Phorum 5.2 - 'versioncheck.php?upgrade_available' Cross-Site Scripting	webapps	PHP
2009-04-16	Geeklog 1.5.2 - 'usersettings.php' SQL Injection	webapps	PHP
2009-04-16	Apache Geronimo 2.1.x - '/console/portal/Server/Monitoring' Multiple Cross-Site Scripting Vulnerabilities	remote	Multiple
2009-04-16	Apache Geronimo 2.1.x - '/console/portal/' URI Cross-Site Scripting	remote	Multiple
2009-04-16	Apache Geronimo 2.1.x - Cross-Site Request Forgery (Multiple Admin Function)	remote	Multiple
2009-04-16	MiniWeb 0.8.19 - Remote Buffer Overflow	remote	Windows
2009-04-16	RazorCMS 0.3RC2 - Multiple Vulnerabilities	webapps	PHP
2009-04-16	BlackBerry Enterprise Server 4.0/4.1 - MDS Connection Service Cross-Site Scripting	webapps	Java
2009-04-15	Job2C 4.2 - 'profile' Arbitrary File Upload	webapps	PHP
2009-04-15	phpAdBoard - 'conf.inc' Remote Configuration File Disclosure	webapps	PHP
2009-04-15	phpGreetCards - Config File Disclosure	webapps	PHP
2009-04-15	W2B Restaurant 1.2 - 'conf.inc' Configuration File Disclosure	webapps	PHP
2009-04-15	phpAdBoardPro - 'config.inc' Configuration File Disclosure	webapps	PHP
2009-04-15	phpDatingClub - 'conf.inc' File Disclosure	webapps	PHP
2009-04-15	Job2C - 'conf.inc' Configuration File Disclosure	webapps	PHP
2009-04-15	Job2C 4.2 - 'adtype' Local File Inclusion	webapps	PHP
2009-04-15	Star Downloader Free 1.45 - '.dat' Universal Overwrite (SEH)	local	Windows
2009-04-15	Microsoft Windows Media Player - '.mid' Integer Overflow (PoC)	dos	Windows
2009-04-15	FreeWebShop.org 2.2.9 RC2 - 'lang_file' Local File Inclusion	webapps	PHP
2009-04-15	Zervit Web Server 0.02 - Remote Buffer Overflow (PoC)	dos	Windows
2009-04-15	Novell Teaming 1.0 - User Enumeration / Multiple Cross-Site Scripting Vulnerabilities	webapps	Java
2009-04-14	Jamroom 4.0.2 - 't' Local File Inclusion	webapps	PHP
2009-04-14	ablespace 1.0 - Cross-Site Scripting / Blind SQL Injection	webapps	PHP
2009-04-14	PHP-revista 1.1.2 - Remote File Inclusion / SQL Injection / Authentication Bypass / Cross-Site Scripting	webapps	PHP
2009-04-14	Shadow Stream Recorder - '.m3u' Universal Stack Overflow	local	Windows
2009-04-14	Easy RM to MP3 Converter - Universal Stack Overflow	local	Windows
2009-04-14	MonGoose 2.4 (Windows) - WebServer Directory Traversal	remote	Windows
2009-04-14	Steamcast 0.9.75b - Remote Denial of Service	dos	Multiple
2009-04-14	OpenBSD 4.5 - IP datagram Null Pointer Deref Denial of Service	dos	OpenBSD
2009-04-14	GuestCal 2.1 - 'index.php?lang' Local File Inclusion	webapps	PHP
2009-04-14	Aqua CMS - 'Username' SQL Injection	webapps	PHP
2009-04-14	RQms (Rash) 1.2.2 - Multiple SQL Injections	webapps	PHP
2009-04-14	PowerCHM 5.7 - Long URL Local Stack Overflow (PoC)	dos	Windows
2009-04-14	phpEmployment - 'conf.inc' File Disclosure	webapps	PHP
2009-04-14	[Portugues] Writing ettercap plugins	papers	Multiple
2009-04-14	Controlling Malicious Software with the help of Shoutboxes	papers	Multiple
2009-04-14	How Conficker makes use of MS08-067	papers	Multiple
2009-04-14	Microsoft Windows XP/Vista/2003/2008 - WMI Service Isolation Privilege Escalation	local	Windows
2009-04-14	Microsoft Windows XP/2003 - RPCSS Service Isolation Privilege Escalation	local	Windows
2009-04-14	Microsoft Windows Vista/2008 - Thread Pool ACL Privilege Escalation	local	Windows
2009-04-14	IBM Tivoli Continuous Data Protection for Files 3.1.4.0 - Cross-Site Scripting	webapps	Multiple
2009-04-13	FTPDMIN 0.96 (Windows XP SP3) - 'RNFR' Remote Buffer Overflow	remote	Windows

2009-04-13	Flatnuke 2.7.1 - 'level' Privilege Escalation	webapps	PHP
2009-04-13	HTML Email Creator 2.1b668 - html Local Overwrite (SEH)	local	Windows
2009-04-13	Mini-stream Ripper - '.m3u' Local Stack Overflow (PoC)	dos	Windows
2009-04-13	WM Downloader - '.m3u' Local Stack Overflow (PoC)	dos	Windows
2009-04-13	RM Downloader - '.m3u' Local Stack Overflow (PoC)	dos	Windows
2009-04-13	Mini-stream RM-MP3 Converter 3.0.0.7 - '.m3u' Local Stack Overflow (PoC)	dos	Windows
2009-04-13	OpenBSD 4.5 - IP datagrams Remote Denial of Service	dos	OpenBSD
2009-04-13	ASX to MP3 Converter - '.m3u' Local Stack Overflow (PoC)	dos	Windows
2009-04-13	X10media Mp3 Search Engine < 1.6.2 - Admin Access	webapps	PHP
2009-04-13	Yellow Duck Weblog 2.1.0 - 'lang' Local File Inclusion	webapps	PHP
2009-04-13	RM Downloader 3.0.0.9 - '.m3u' Universal Stack Overflow	local	Windows
2009-04-13	WM Downloader 3.0.0.9 - '.m3u' Universal Stack Overflow	local	Windows
2009-04-13	ASX to MP3 Converter 3.0.0.7 - '.m3u' Universal Stack Overflow	local	Windows
2009-04-13	Mini-stream RM-MP3 Converter 3.0.0.7 - '.m3u' Local Stack Overflow	local	Windows
2009-04-13	XEngineSoft PMS/MGS/NM/Ams 1.0 - Authentication Bypass	webapps	PHP
2009-04-13	FreznoShop 1.3.0 - 'id' SQL Injection	webapps	PHP
2009-04-13	Mini-stream Ripper 3.0.1.1 - '.m3u' Universal Stack Overflow	local	Windows
2009-04-13	e107 Plugin userjournals_menu - 'blog.id' SQL Injection	webapps	PHP
2009-04-13	ASP Product Catalog 1.0 - Cross-Site Scripting / File Disclosure	webapps	PHP
2009-04-13	FTPDMIN 0.96 - Arbitrary File Disclosure	remote	Windows
2009-04-13	BulletProof FTP Client 2009 - '.bps' Local Buffer Overflow (SEH)	local	Windows
2009-04-13	Steamcast - HTTP Request Remote Buffer Overflow (SEH) (1)	remote	Windows
2009-04-13	Steamcast - HTTP Request Remote Buffer Overflow (SEH) (2)	remote	Windows
2009-04-13	FreeBSD x86 / x64 - execve(/bin/sh) Anti-Debugging Shellcode (140 bytes)	shellcode	FreeBSD
2009-04-13	People-Trak - Login SQL Injection	webapps	ASP
2009-04-13	Banshee 1.4.2 DAAP Extension - '/apps/web/vs_diag.cgi' Cross-Site Scripting	webapps	CGI
2009-04-11	Microsoft Internet Explorer 8 - File Download Denial of Service	dos	Windows
2009-04-10	PHP-Agenda 2.2.5 - Remote File Overwriting	webapps	PHP
2009-04-10	Loggix Project 9.4.5 - 'refer_id' Blind SQL Injection	webapps	PHP
2009-04-10	Xilisoft Video Converter Wizard 3 - '.cue' Stack Buffer Overflow (PoC)	dos	Windows
2009-04-10	Chance-i DiViS-Web DVR System - ActiveX Control Heap Overflow (PoC)	dos	Windows
2009-04-10	Chance-i DiViS DVR System Web-Server - Directory Traversal	remote	Windows
2009-04-10	Cisco ASA/PIX - Appliances Fail to Properly Check Fragmented TCP Packets	dos	Hardware
2009-04-10	moziloCMS 1.11 - Local File Inclusion / Full Path Disclosure / Cross-Site Scripting	webapps	PHP
2009-04-10	RedaxScript 0.2.0 - 'Language' Local File Inclusion	webapps	PHP
2009-04-10	w3bcms Gaestebuch 3.0.0 - Blind SQL Injection	webapps	PHP
2009-04-10	FunkyASP AD System 1.1 - Arbitrary File Upload	webapps	ASP
2009-04-10	Penetration: from application down to OS (IBM Websphere)	papers	Multiple
2009-04-10	Penetration: from application down to OS (Oracle)	papers	Multiple
2009-04-10	PHP 5.2.9 cURL - 'Safe_mode' / 'open_basedir' Restriction Bypass	local	PHP
2009-04-09	Geeklog 1.5.2 - 'SEC_authenticate()' SQL Injection	webapps	PHP
2009-04-09	Exjune Guestbook 2.0 - Remote Database Disclosure	webapps	ASP
2009-04-09	SWF Opener 1.3 - '.swf' Off-by-One Buffer Overflow (PoC)	dos	Windows
2009-04-09	Back-End CMS 5.0 - 'main.asp?id' SQL Injection	webapps	ASP
2009-04-09	Simbas CMS 2.0 - Authentication Bypass	webapps	PHP
2009-04-09	WebFileExplorer 3.1 - Authentication Bypass	webapps	PHP
2009-04-09	adaptbb 1.0b - Multiple Vulnerabilities	webapps	PHP
2009-04-09	net2ftp 0.97 - Cross-Site Scripting / Request Forgery	remote	Linux
2009-04-09	My Dealer CMS 2.0 - Authentication Bypass	webapps	PHP
2009-04-09	Absolute Form Processor XE-V 1.5 - Authentication Bypass	webapps	PHP
2009-04-09	dynamic flash forum 1.0 Beta - Multiple Vulnerabilities	webapps	PHP
2009-04-09	IBM Bladecenter Advanced Management Module 1.42 - Login 'Username' Cross-Site Scripting	webapps	Multiple
2009-04-09	IBM Bladecenter Advanced Management Module 1.42 - '/private/file_Management.ssi?PATH' Cross-Site Scripting	webapps	Multiple
2009-04-09	IBM Bladecenter Advanced Management Module 1.42 - Cross-Site Request Forgery	webapps	Multiple
2009-04-09	Cisco Subscriber Edge Services Manager - Cross-Site Scripting / HTML Injection	webapps	Java
2009-04-09	Absolute Form Processor XE 1.5 - 'login.asp' SQL Injection	webapps	ASP
2009-04-08	saspcms 0.9 - Multiple Vulnerabilities	webapps	PHP
2009-04-08	Joomla! Component Maian Music 1.2.1 - 'category' SQL Injection	webapps	PHP
2009-04-08	Joomla! Component MailTo - 'article' SQL Injection	webapps	PHP
2009-04-08	Joomla! Component Cmimarketplace - 'viewit' Directory Traversal	webapps	PHP
2009-04-08	peterConnects Web Server - Traversal Arbitrary File Access	remote	Windows
2009-04-08	Linux Kernel < 2.6.29 - 'exit_notify()' Local Privilege Escalation	local	Linux
2009-04-08	GOM Player 2.1.16.6134 - Subtitle Local Buffer Overflow (PoC)	dos	Windows
2009-04-08	OtsTurntables 1.00.027 - '.m3u' / '.ofl' Universal Buffer Overflow	local	Windows
2009-04-08	photo graffix 3.4 - Multiple Vulnerabilities	webapps	PHP
2009-04-08	Xplode CMS - 'wrap_script' SQL Injection	webapps	PHP
2009-04-08	WebFileExplorer 3.1 - 'db.mdb' Database Disclosure	webapps	PHP
2009-04-08	[French] Creation des shellcodes sous architecture Linux x86 32 bits	papers	AIX
2009-04-07	Family Connections CMS 1.8.2 - Blind SQL Injection	webapps	PHP
2009-04-07	Lanius CMS 0.5.2 - Arbitrary File Upload	webapps	PHP
2009-04-07	XBMC 8.10 - 'HEAD' Remote Buffer Overflow (SEH)	remote	Windows
2009-04-06	Amaya 11.1 - XHTML Parser Remote Buffer Overflow (PoC)	dos	Windows
2009-04-06	Joomla! Component com_bookJoomlas 0.1 - SQL Injection	webapps	PHP
2009-04-06	XBMC 8.10 - GET Remote Buffer Overflow (SEH) (Universal)	remote	Windows
2009-04-06	FlexCMS Calendar - 'itemID' Blind SQL Injection	webapps	PHP
2009-04-06	Mozilla Firefox XSL - Parsing Remote Memory Corruption (PoC) (2)	dos	Windows
2009-04-06	iDB 0.2.5pa SVN 243 - 'skin' Local File Inclusion	webapps	PHP
2009-04-06	UltraISO 9.3.3.2685 - '.ui' Off-by-One / Buffer Overflow (PoC)	dos	Windows
2009-04-06	Pirelli Discus DRG A225 wifi router - WPA2PSK Default Algorithm	remote	Hardware
2009-04-06	Unsniff Network Analyzer 1.0 - 'usnf' Local Heap Overflow (PoC)	dos	Windows
2009-04-06	Pirelli Discus DRG A225 wifi router WPA2PSK Default Algorithm Vuln	papers	Multiple
2009-04-06	Preventing the spread of USB malware	papers	Multiple
2009-04-03	UltraISO 9.3.3.2685 - CCD/IMG Universal Buffer Overflow	local	Windows
2009-04-03	IBM DB2 < 9.5 pack 3a - Connect Denial of Service	dos	Multiple
2009-04-03	IBM DB2 < 9.5 pack 3a - Data Stream Denial of Service	dos	Multiple
2009-04-03	ActiveKB KnowledgeBase - 'Panel' Local File Inclusion	webapps	PHP
2009-04-03	glFusion 1.1.2 - 'COM_applyFilter()/cookies' Blind SQL Injection	webapps	PHP
2009-04-03	form2list - 'page.php?id' SQL Injection	webapps	PHP
2009-04-03	Family Connections 1.8.2 - Arbitrary File Upload	webapps	PHP
2009-04-03	Gravity Board X 2.0 Beta - SQL Injection / (Authenticated) Code Execution	webapps	PHP
2009-04-03	AdaptBB 1.0 - 'topic_id' SQL Injection / Credentials Disclosure	webapps	PHP
2009-04-02	osCommerce 2.2/3.0 - 'oscid' Session Fixation	webapps	PHP
2009-04-02	SAP Business Objects Crystal Reports 7-10 - 'viewreport.asp' Cross-Site Scripting	webapps	ASP
2009-04-02	Asbru Web Content Management 6.5/6.6.9 - SQL Injection / Cross-Site Scripting	webapps	ASP
2009-04-02	4CMS - SQL Injection / Local File Inclusion	webapps	PHP
2009-04-01	Koschtit Image Gallery 1.82 - Multiple Local File Inclusions	webapps	PHP
2009-04-01	DeepBurner 1.9.0.228 - Stack Buffer Overflow (SEH) (PoC)	dos	Windows
2009-04-01	Oracle WebLogic IIS connector JSESSIONID - Remote Overflow	remote	Windows
2009-04-01	XBMC 8.10 - GET Multiple Remote Buffer Overflows (PoC)	dos	Multiple
2009-04-01	XBMC 8.10 (Windows) - GET Remote Buffer Overflow	remote	Windows
2009-04-01	XBMC 8.10 - 'takescreenshot' Remote Buffer Overflow	remote	Windows
2009-04-01	XBMC 8.10 - Get Tag From File Name Remote Buffer Overflow	remote	Windows
2009-04-01	MyioSoft Ajax Portal 3.0 - 'page' SQL Injection	webapps	PHP
2009-04-01	TinyPHPForum 3.61 - File Disclosure / Code Execution	webapps	PHP
2009-04-01	Ghostscript 'CCITTFax' Decoding Filter - Denial of Service	dos	Multiple
2009-04-01	BlogEngine.NET 1.4 - 'search.aspx' Cross-Site Scripting	webapps	ASP
2009-04-01	QtWeb Browser 2.0 - '.HTML' File Remote Denial of Service	dos	Windows
2009-03-31	Community CMS 0.5 - Multiple SQL Injections	webapps	PHP
2009-03-31	Podcast Generator 1.1 - Remote Code Execution	webapps	PHP
2009-03-31	Apple Safari 3.2.2/4b - nested elements XML Parsing Remote Crash	dos	Windows
2009-03-31	VirtueMart 1.1.2 - SQL Injection (Metasploit)	webapps	PHP
2009-03-31	virtuemart 1.1.2 - Multiple Vulnerabilities	webapps	PHP
2009-03-31	webEdition 6.0.0.4 - 'WE_LANGUAGE' Local File Inclusion	webapps	PHP
2009-03-31	JobHut 1.2 - Remote Password Change/Delete/Activate User	webapps	PHP
2009-03-31	PHPRecipeBook 2.39 - 'course_id' SQL Injection	webapps	PHP
2009-03-31	vsp stats processor 0.45 - 'gamestat.php?gameID' SQL Injection	webapps	PHP
2009-03-31	PrecisionID Datamatrix - ActiveX Arbitrary File Overwrite	remote	Windows
2009-03-31	Sun Calendar Express Web Server - Denial of Service / Cross-Site Scripting	dos	Multiple
2009-03-31	Sun Java System Calendar Server 6.3 - Duplicate URI Request Denial of Service	dos	Java
2009-03-31	Sun Java System Calendar Server 6 - 'command.shtml' Cross-Site Scripting	webapps	Java

2009-03-31	Cisco ASA Appliance 7.x/8.0 WebVPN - Cross-Site Scripting	remote	Hardware
2009-03-31	SAP MaxDB 7.4/7.6 - 'webdbm' Multiple Cross-Site Scripting Vulnerabilities	remote	Windows
2009-03-31	Turnkey eBook Store 1.1 - 'keywords' Cross-Site Scripting	webapps	PHP
2009-03-30	Mozilla Firefox 3.0.x - XML Parser Memory Corruption / Denial of Service (PoC)	dos	Windows
2009-03-30	Diskos CMS Manager - SQL Injection / File Disclosure / Authentication Bypass	webapps	ASP
2009-03-30	Wireshark 1.0.6 - PN-DCP Format String (PoC)	dos	Multiple
2009-03-30	BandSite CMS 1.1.4 - 'members.php' SQL Injection	webapps	PHP
2009-03-30	Sami HTTP Server 2.x - 'HEAD' Remote Denial of Service	dos	Windows
2009-03-30	Abee Chm eBook Creator 2.11 - 'Filename' Local Stack Overflow	local	Windows
2009-03-30	AtomixMP3 < 2.3 - 'Playlist' Universal Overwrite (SEH)	local	Windows
2009-03-30	Check Point Firewall-1 - PKI Web Service HTTP Header Remote Overflow	dos	Hardware
2009-03-30	Amaya 11.1 - W3C Editor/Browser (defer) Stack Overflow (PoC)	dos	Windows
2009-03-30	gravy media CMS 1.07 - Multiple Vulnerabilities	webapps	PHP
2009-03-30	NOKIA Siemens FlexiISN 3.1 - Multiple Authentication Bypass Vulnerabilities	remote	Hardware
2009-03-30	X-Forum 0.6.2 - Remote Command Execution	webapps	PHP
2009-03-30	JobHut 1.2 - 'pk' SQL Injection	webapps	PHP
2009-03-30	family connection 1.8.1 - Multiple Vulnerabilities	webapps	PHP
2009-03-30	Opera 9.64 - 7400 nested elements XML Parsing Remote Crash	dos	Multiple
2009-03-30	Amaya 11.1 - W3C Editor/Browser 'defer' Remote Stack Overflow	remote	Windows
2009-03-30	Trend Micro Internet Security Pro 2009 - Priviliege Escalation	local	Windows
2009-03-29	PowerCHM 5.7 - 'hhp' Local Buffer Overflow	local	Windows
2009-03-29	glFusion 1.1.2 - 'COM_applyFilter()/order' SQL Injection	webapps	PHP
2009-03-29	pam-krb5 < 3.13 - Local Privilege Escalation	local	Linux
2009-03-29	Arcadwy Arcade Script - (Authentication Bypass) Insecure Cookie Handling	webapps	PHP
2009-03-29	iWare CMS 5.0.4 - Multiple SQL Injections	webapps	PHP
2009-03-27	Simply Classified 0.2 - 'category_id' SQL Injection	webapps	PHP
2009-03-27	Free PHP Petition Signing Script - Authentication Bypass	webapps	PHP
2009-03-27	XM Easy Personal FTP Server 5.7.0 - 'NLST' Denial of Service	dos	Windows
2009-03-27	freeSSHd 1.2.1 - 'rename' Remote Buffer Overflow (SEH)	remote	Windows
2009-03-27	Arcadwy Arcade Script - 'Username' Static Cross-Site Scripting	webapps	PHP
2009-03-27	Moodle < 1.6.9/1.7.7/1.8.9/1.9.5 - File Disclosure	webapps	PHP
2009-03-27	My Simple Forum 7.1 - Remote Command Execution	webapps	PHP
2009-03-27	Abee Chm Maker 1.9.5 - '.CMP' Local Stack Overflow	local	Windows
2009-03-27	PowerCHM 5.7 - '.hhp' Stack Overflow (PoC)	dos	Windows
2009-03-26	PhotoStand 1.2.0 - Remote Command Execution	webapps	PHP
2009-03-26	blogplus 1.0 - Multiple Local File Inclusions	webapps	PHP
2009-03-26	acute control panel 1.0.0 - SQL Injection / Remote File Inclusion	webapps	PHP
2009-03-26	[German] Anonyme (und private) Kommunikation	papers	Multiple
2009-03-26	Novell NetStorage 2.0.1/3.1.5 - Multiple Remote Vulnerabilities	remote	Novell
2009-03-25	Mozilla Firefox XSL - Parsing Remote Memory Corruption (PoC) (1)	dos	Multiple
2009-03-25	PHPizabi 0.848b C1 HFP1-3 - Arbitrary File Upload	webapps	PHP
2009-03-25	WeBid 0.7.3 RC9 - 'upldgallery.php' Arbitrary File Upload	webapps	PHP
2009-03-25	Comparison Engine Power 1.0 - 'product.comparision.php' SQL Injection	webapps	PHP
2009-03-24	Jinzora Media Jukebox 2.8 - 'name' Local File Inclusion	webapps	PHP
2009-03-24	PHPizabi 0.848b C1 HFP1 - Privilege Escalation	webapps	PHP
2009-03-24	Adobe Acrobat Reader - JBIG2 Universal	local	Windows
2009-03-24	Microsoft GdiPlus - EMF GpFont.SetData Integer Overflow (PoC)	dos	Windows
2009-03-24	SurfMyTV Script 1.0 - 'view.php?id' SQL Injection	webapps	PHP
2009-03-24	Femitter FTP Server 1.x - (Authenticated) Multiple Vulnerabilities	remote	Windows
2009-03-24	IncrediMail 5.86 - Cross-Site Scripting Script Execution	remote	Windows
2009-03-24	PHPizabi 0.8 - 'notepad_body' SQL Injection	webapps	PHP
2009-03-23	WBB3 rGallery 1.2.3 - 'UserGallery' Blind SQL Injection	webapps	PHP
2009-03-23	Supernews 1.5 - 'valor.php?noticia' SQL Injection	webapps	PHP
2009-03-23	Sysax Multi Server 4.3 - Arbitrary Delete Files Expoit	remote	Windows
2009-03-23	Orbit Downloader 2.8.7 - Arbitrary File Deletion	remote	Windows
2009-03-23	X-BLC 0.2.0 - 'get_read.php?section' SQL Injection	webapps	PHP
2009-03-23	FreeBSD 7.x - Dumping Environment Local Kernel Panic (Denial of Service)	dos	FreeBSD
2009-03-23	Gigaset SE461 WiMAX Router - Remote Denial of Service	dos	Hardware
2009-03-23	FreeBSD 7.0/7.1 - 'ktimer' Local Privilege Escalation	local	FreeBSD
2009-03-23	Apple Mac OSX xnu 1228.3.13 - 'zip-notify' Remote Kernel Overflow (PoC)	dos	OSX
2009-03-23	Apple Mac OSX xnu 1228.3.13 - 'macfsstat' Local Kernel Memory Leak/Denial of Service	dos	OSX
2009-03-23	Apple Mac OSX xnu 1228.3.13 - 'Profil' Kernel Memory Leak/Denial of Service (PoC)	dos	OSX
2009-03-23	Apple Mac OSX xnu 1228.x - 'vfssysctl' Local Kernel Denial of Service (PoC)	dos	OSX
2009-03-23	Apple Mac OSX xnu 1228.x - 'hfs-fcntl' Kernel Privilege Escalation	local	OSX
2009-03-23	Zinf Audio Player 2.2.1 - '.pls' Universal Overwrite (SEH)	local	Windows
2009-03-23	PHPizabi 0.848b C1 HFP1-3 - Remote Command Execution	webapps	PHP
2009-03-23	Rittal CMC-TC Processing Unit II - Multiple Vulnerabilities	remote	Hardware
2009-03-23	eXeScope 6.50 - Local Buffer Overflow	local	Windows
2009-03-23	Pluck CMS 4.6.1 - 'module_pages_site.php' Local File Inclusion	webapps	PHP
2009-03-23	Codice CMS 2 - Command Execution (via SQL Injection)	webapps	PHP
2009-03-23	Telnet-Ftp Service Server 1.x - (Authenticated) Multiple Vulnerabilities	remote	Windows
2009-03-23	POP Peeper 3.4.0.0 - '.eml' Universal Overwrite (SEH)	local	Windows
2009-03-23	POP Peeper 3.4.0.0 - '.html' Universal Overwrite (SEH)	local	Windows
2009-03-23	Syzygy CMS 0.3 - Local File Inclusion / SQL Injection	webapps	PHP
2009-03-23	Free Arcade Script 1.0 - Authentication Bypass / Arbitrary File Upload	webapps	PHP
2009-03-22	ExpressionEngine 1.6 - Avtaar Name HTML Injection	webapps	PHP
2009-03-20	POP Peeper 3.4.0.0 - 'From' Remote Buffer Overflow (SEH)	remote	Windows
2009-03-20	BS.Player 2.34 Build 980 - '.bsl' Local Buffer Overflow (SEH)	local	Windows
2009-03-20	CloneCD/DVD 'ElbyCDIO.sys' < 6.0.3.2 - Local Privilege Escalation	local	Windows
2009-03-20	BS.Player 2.34 - '.bsl' Universal Overwrite (SEH)	local	Windows
2009-03-20	Pixie CMS - Cross-Site Scripting / SQL Injection	webapps	PHP
2009-03-20	Racer 0.5.3 Beta 5 - Remote Stack Buffer Overflow	remote	Windows
2009-03-19	ModSecurity < 2.5.9 - Remote Denial of Service	dos	Multiple
2009-03-19	Chasys Media Player 1.1 - '.cue' Local Stack Overflow	local	Windows
2009-03-19	Bloginator 1a - Cookie Bypass / SQL Injection	webapps	PHP
2009-03-19	Bloginator 1a - SQL Injection / Command Injection (via Cookie Bypass )	webapps	PHP
2009-03-19	SW-HTTPD Server 0.x - Remote Denial of Service	dos	Multiple
2009-03-19	Chasys Media Player - '.lst Playlist' Local Buffer Overflow	local	Windows
2009-03-19	Hannon Hill Cascade Server - (Authenticated) Command Execution	webapps	CGI
2009-03-19	Xlight FTP Server 3.2 - 'user' SQL Injection	remote	Multiple
2009-03-18	CDex 1.70b2 (Windows XP SP3) - '.ogg' Local Buffer Overflow	local	Windows
2009-03-18	Chasys Media Player 1.1 - '.pls' Local Buffer Overflow (PoC) (SEH)	dos	Windows
2009-03-18	Chasys Media Player 1.1 - '.pls' Local Stack Overflow	local	Windows
2009-03-18	Chasys Media Player 1.1 - '.pls' Local Stack Overflow (2)	local	Windows
2009-03-18	Chasys Media Player 1.1 - '.m3u' Local Stack Overflow	local	Windows
2009-03-18	Icarus 2.0 - '.pgn' Local Stack Overflow (SEH)	local	Windows
2009-03-18	Facil-CMS 0.1RC2 - Multiple Vulnerabilities	webapps	PHP
2009-03-18	Advanced Image Hosting (AIH) 2.3 - 'gal' Blind SQL Injection	webapps	PHP
2009-03-18	Pivot 1.40.6 - Arbitrary File Deletion	webapps	PHP
2009-03-18	DeluxeBB 1.3 - 'qorder' SQL Injection	webapps	PHP
2009-03-17	PHPRunner 4.2 - 'SearchOption' Blind SQL Injection	webapps	PHP
2009-03-17	Talkative IRC 0.4.4.16 - Remote Stack Overflow (SEH)	remote	Windows
2009-03-17	GDL 4.x - 'node' SQL Injection	webapps	PHP
2009-03-17	WordPress Plugin fMoblog 2.1 - 'id' SQL Injection	webapps	PHP
2009-03-17	Mega File Hosting Script 1.2 - 'url' Remote File Inclusion	webapps	PHP
2009-03-17	Sun Java System Messenger Express 6.3-0.15 - 'error' Cross-Site Scripting	webapps	Java
2009-03-17	phpCMS 2008 - 'search_ajax.php' SQL Injection	webapps	PHP
2009-03-16	UBBCentral UBB.Threads 5.5.1 - 'message' SQL Injection	webapps	PHP
2009-03-16	RhinoSoft Serv-U FTP Server 7.4.0.1 - 'MKD' Create Arbitrary Directories	remote	Windows
2009-03-16	RhinoSoft Serv-U FTP Server 7.4.0.1 - 'SMNT' (Authenticated) Denial of Service	dos	Windows
2009-03-16	VideoLAN VLC Media Player 0.9.8a - Web UI 'input' Remote Denial of Service	dos	Windows
2009-03-16	Rosoft Media Player 4.2.1 (Windows XP SP2/3 French) - Local Buffer Overflow	local	Windows
2009-03-16	PPLive 1.9.21 - '/LoadModule' URI Handlers Argument Injection	remote	Windows
2009-03-16	Beerwin's PHPLinkAdmin 1.0 - Remote File Inclusion / SQL Injection	webapps	PHP
2009-03-16	YAP 1.1.1 - Blind SQL Injection / SQL Injection	webapps	PHP
2009-03-16	Mozilla Firefox 3.0.7 - OnbeforeUnLoad DesignMode Dereference Crash	dos	Multiple
2009-03-16	phpComasy 0.9.1 - 'entry_id' SQL Injection	webapps	PHP
2009-03-16	WinAsm Studio 5.1.5.0 - Local Heap Overflow (PoC)	dos	Windows
2009-03-16	Gretech GOM Encoder 1.0.0.11 - '.Subtitle' Buffer Overflow (PoC)	dos	Windows
2009-03-16	Windows/x86 - Egg Omelet SEH Shellcode	shellcode	Windows_x86

2009-03-13	Foxit Reader 3.0 (Build 1301) - PDF Universal Buffer Overflow	local	Windows
2009-03-13	GeoVision LiveAudio - ActiveX Remote Freed-Memory Access	remote	Windows
2009-03-13	YAP 1.1.1 - 'index.php' Local File Inclusion	webapps	PHP
2009-03-13	Morovia Barcode ActiveX 3.6.2 - 'MrvBarCd.dll' Insecure Method	remote	Windows
2009-03-13	Kim Websites 1.0 - Authentication Bypass	webapps	PHP
2009-03-12	POP Peeper 3.4.0.0 - Date Remote Buffer Overflow	remote	Windows
2009-03-12	phpmysport 1.4 - Cross-Site Scripting / SQL Injection	webapps	PHP
2009-03-12	JDKChat 1.5 - Remote Integer Overflow (PoC)	dos	Linux
2009-03-12	SlySoft (Multiple Products) - Driver IOCTL Request Multiple Local Buffer Overflow Vulnerabilities	local	Windows
2009-03-12	TikiWiki 2.2/3.0 - 'tiki-galleries.php' Cross-Site Scripting	webapps	PHP
2009-03-12	TikiWiki 2.2/3.0 - 'tiki-list_file_gallery.php' Cross-Site Scripting	webapps	PHP
2009-03-12	TikiWiki 2.2/3.0 - 'tiki-listpages.php' Cross-Site Scripting	webapps	PHP
2009-03-11	Traidnt up 2.0 - 'cookie' Add Extension Bypass	webapps	PHP
2009-03-11	PostgreSQL 8.3.6 - Conversion Encoding Remote Denial of Service	dos	Linux
2009-03-10	CMS WEBjump! - Multiple SQL Injections	webapps	PHP
2009-03-10	VUPlayer 2.49 - '.cue' Universal Buffer Overflow	local	Windows
2009-03-10	IBM Director 5.20.3su2 CIM Server - Remote Denial of Service	dos	Windows
2009-03-10	NextApp Echo < 2.1.1 - XML Injection	remote	Multiple
2009-03-10	RainbowPlayer 0.91 - Playlist Universal Overwrite (SEH)	local	Windows
2009-03-10	PHP-Fusion Mod Book Panel - 'course_id' SQL Injection	webapps	PHP
2009-03-10	WeBid 0.7.3 RC9 - Multiple Remote File Inclusions	webapps	PHP
2009-03-10	WordPress MU < 2.7 - 'HOST' HTTP Header Cross-Site Scripting	webapps	PHP
2009-03-10	Joomla! Component Djice Shoutbox 1.0 - Persistent Cross-Site Scripting	webapps	PHP
2009-03-10	RoomPHPlanning 1.6 - 'userform.php' Create Admin User	webapps	PHP
2009-03-10	GuildFTPd FTP Server 0.999.14 - Remote Delete Files	remote	Windows
2009-03-10	[Arabic] MS Internet Explorer XML Parsing Overflow	papers	Multiple
2009-03-10	[Arabic] API Function Parametre Hijacking Vulnerability	papers	Multiple
2009-03-10	IBM System Director Agent 5.20 - CIM Server Privilege Escalation	local	Windows
2009-03-10	Nenriki CMS 0.5 - 'ID' Cookie SQL Injection	webapps	PHP
2009-03-10	PostgreSQL 8.3.6 - Low Cost Function Information Disclosure	local	Multiple
2009-03-10	Sun xVM VirtualBox 2.0/2.1 - Local Privilege Escalation	local	Linux
2009-03-09	nForum 1.5 - Multiple SQL Injections	webapps	PHP
2009-03-09	Nokia MultiMedia Player 1.0 - Playlist Universal Overwrite (SEH)	local	Windows
2009-03-09	cms s.builder 3.7 - Remote File Inclusion	webapps	PHP
2009-03-09	Belkin BullDog Plus - UPS-Service Buffer Overflow	remote	Windows
2009-03-09	Realtek Sound Manager 1.15.0.0 - Playlist Overwrite (SEH)	local	Windows
2009-03-09	mks_vir 9b < 1.2.0.0b297 - 'mksmonen.sys' Local Privilege Escalation	local	Windows
2009-03-09	EO Video 1.36 - Playlist Overwrite (SEH)	local	Windows
2009-03-09	RadASM 2.2.1.5 - '.rap' Local Stack Overflow	local	Windows
2009-03-09	Mediacoder 0.6.2.4275 - '.m3u' Universal Stack Overflow	local	Windows
2009-03-09	Mediacoder 0.6.2.4275 - Universal Buffer Overflow (SEH)	local	Windows
2009-03-09	eZip Wizard 3.0 - Local Stack Buffer Overflow (PoC) (SEH)	dos	Windows
2009-03-09	PHP Director 0.21 - SQL Into Outfile 'eval()' Injection	webapps	PHP
2009-03-09	PHPRecipeBook 2.24 - 'base_id' SQL Injection	webapps	PHP
2009-03-09	woltlab burning board 3.0.x - Multiple Vulnerabilities	webapps	PHP
2009-03-09	CS-Cart 2.0.0 Beta 3 - 'Product_ID' SQL Injection	webapps	PHP
2009-03-09	phpCommunity 2.1.8 - SQL Injection / Directory Traversal / Cross-Site Scripting	webapps	PHP
2009-03-09	PHP-Fusion Mod Book Panel - 'bookid' SQL Injection	webapps	PHP
2009-03-09	Addonics NAS Adapter - (Authenticated) Denial of Service	dos	Hardware
2009-03-09	PHP Fuzzing In Action (Real world source code auditing)	papers	Multiple
2009-03-09	[Spanish] Cracking WPA/WPA2-PSK with wordlist	papers	Multiple
2009-03-09	MySQL: Secure Web Apps - SQL Injection Techniques	papers	Multiple
2009-03-09	[arabic] Adur[ IT ] Magazine : IT security # 1 issue	papers	Multiple
2009-03-09	PHORTAIL 1.2.1 - 'poster.php' Multiple HTML Injection Vulnerabilities	webapps	PHP
2009-03-06	Blue Eye CMS 1.0.0 - Remote Cookie SQL Injection	webapps	PHP
2009-03-06	Wili-CMS 0.4.0 - Local File Inclusion / Remote File Inclusion / Authentication Bypass	webapps	PHP
2009-03-06	isiAJAX 1 - 'praises.php?id' SQL Injection	webapps	PHP
2009-03-06	OneOrZero Helpdesk 1.6.5.7 - Local File Inclusion	webapps	PHP
2009-03-06	[Portuguese] Amenizando Recusa de Servico Remota	papers	Multiple
2009-03-06	UMI CMS 2.7 - 'fields_filter' Cross-Site Scripting	webapps	PHP
2009-03-06	TinXCMS 3.5 - 'rss.php' SQL Injection	webapps	PHP
2009-03-05	Winamp 5.541 - Skin Universal Buffer Overflow	local	Windows
2009-03-05	Media Commands - '.m3l' File Local Buffer Overflow	local	Windows
2009-03-05	SupportSoft DNA Editor Module - 'dnaedit.dll' Code Execution	remote	Windows
2009-03-05	celerbb 0.0.2 - Multiple Vulnerabilities	webapps	PHP
2009-03-05	Media Commands - '.m3u' Universal Overwrite (SEH)	local	Windows
2009-03-05	Libc - 'libc:fts_*()' Local Denial of Service	dos	BSD
2009-03-05	Joomla! Component com_iJoomla_archive - Blind SQL Injection	webapps	PHP
2009-03-05	TippingPoint IPS Signature Evasion by Packet Fragmentation	papers	Multiple
2009-03-05	[Spanish] La seguridad en sistemas informaticos	papers	Multiple
2009-03-05	[Spanish] Compilacion e interpretacion de Exploits pl, php, py, c y c++	papers	Multiple
2009-03-05	Amoot Web Directory - Password Field SQL Injection	webapps	PHP
2009-03-04	Microsoft Internet Explorer 7 - Memory Corruption (MS09-002)	remote	Windows
2009-03-04	EFS Easy Chat Server 2.2 - Authentication Request Buffer Overflow (Perl)	remote	Windows
2009-03-04	Easy File Sharing Web Server 4.8 - File Disclosure	remote	Windows
2009-03-04	Easy Web Password 1.2 - Local Heap Memory Consumption (PoC)	dos	Windows
2009-03-03	Zabbix 1.6.2 Frontend - Multiple Vulnerabilities	webapps	PHP
2009-03-03	blindblog 1.3.1 - SQL Injection / Authentication Bypass / Local File Inclusion	webapps	PHP
2009-03-03	EFS Easy Chat Server 2.2 - Authentication Request Buffer Overflow (SEH)	remote	Windows
2009-03-03	Sopcast SopCore Control - 'sopocx.ocx' Command Execution	remote	Windows
2009-03-03	Imera ImeraIEPlugin - ActiveX Control Remote Code Execution	remote	Windows
2009-03-03	tghostscripter Amazon Shop - Cross-Site Scripting / Directory Traversal / Remote File Inclusion	webapps	PHP
2009-03-03	Yaws < 1.80 - Multiple Headers Remote Denial of Service Vulnerabilities	dos	Multiple
2009-03-03	EFS Easy Chat Server 2.2 - Cross-Site Request Forgery (Change Admin Password)	remote	Windows
2009-03-03	Novaboard 1.0.1 - Cross-Site Scripting	webapps	PHP
2009-03-03	Jogjacamp JProfile Gold - 'id_news' SQL Injection	webapps	PHP
2009-03-03	Defeating the iPhone Passcode	papers	Multiple
2009-03-03	Linux/x86 - File Unlinker Shellcode (18+ bytes)	shellcode	Linux_x86
2009-03-03	Linux/x86 - Perl Script Execution Shellcode (99+ bytes)	shellcode	Linux_x86
2009-03-03	cURL/libcURL 7.19.3 - HTTP 'Location:' Redirect Security Bypass	remote	Linux
2009-03-03	Novaboard 1.0 - HTML Injection / Cross-Site Scripting	webapps	PHP
2009-03-03	Mozilla Firefox 2.0.x - Nested 'window.print()' Denial of Service	dos	Multiple
2009-03-02	HTC Touch - vCard over IP Denial of Service	dos	Hardware
2009-03-02	Merak Media Player 3.2 - '.m3u' File Local Buffer Overflow (SEH)	local	Windows
2009-03-02	Blogman 0.45 - Multiple Vulnerabilities	webapps	PHP
2009-03-02	EZ-Blog beta1 - Delete All Posts / SQL Injection	webapps	PHP
2009-03-02	Novell eDirectory iMonitor - 'Accept-Language' Request Buffer Overflow (PoC)	dos	Windows
2009-03-02	Document Library 1.0.1 - Arbitrary Change Admin	webapps	ASP
2009-03-02	Digital Interchange Calendar 5.7.13 - Contents Change	webapps	ASP
2009-03-02	Access2asp - 'imageLibrar' Arbitrary File Upload	webapps	ASP
2009-03-02	Graugon PHP Article Publisher 1.0 - SQL Injection / Cookie Handling	webapps	PHP
2009-03-02	Joomla! Component com_digistore - 'pid' Blind SQL Injection	webapps	PHP
2009-03-02	Media Commands - '.m3u' / '.m3l' / '.TXT' / '.LRC' Local Heap Overflow (PoC)	dos	Windows
2009-03-02	Joomla! / Mambo Component eXtplorer - Code Execution	webapps	PHP
2009-03-02	Media Commands - '.m3u' Local Overwrite (SEH)	local	Windows
2009-03-02	VUplayer 2.49 - '.cue' Local Buffer Overflow	local	Windows
2009-03-02	ritsblog 0.4.2 - Authentication Bypass / Cross-Site Scripting	webapps	PHP
2009-03-02	iDefense COMRaider - ActiveX Control 'write()' Arbitrary File Overwrite	remote	Windows
2009-03-02	Afian - 'includer.php' Directory Traversal	webapps	PHP
2009-03-02	Yektaweb Academic Web Tools CMS 1.4.2.8/1.5.7 - Multiple Cross-Site Scripting Vulnerabilities	webapps	PHP
2009-03-02	Linux Kernel 2.6.x - 'seccomp' System Call Security Bypass	local	Linux
2009-03-02	NovaStor NovaNET 12 - 'DtbClsLogin()' Remote Stack Buffer Overflow	remote	Windows
2009-03-02	Blogsa 1.0 - 'Widgets.aspx' Cross-Site Scripting	webapps	ASP
2009-02-28	CMSCart 1.04 - 'maindatafunctions.php' SQL Injection	webapps	PHP
2009-02-27	POP Peeper 3.4.0.0 - UIDL Remote Buffer Overflow (SEH)	remote	Windows
2009-02-27	Orbit Downloader 2.8.4 - 'Hostname' Remote Buffer Overflow	remote	Windows
2009-02-27	SkyPortal Downloads Manager 1.1 - Remote Contents Change	webapps	ASP
2009-02-27	Hex Workshop 6.0 - '.hex' Local Code Execution	local	Windows
2009-02-27	irokez blog 0.7.3.2 - Cross-Site Scripting / Remote File Inclusion / Blind SQL Injection	webapps	PHP
2009-02-27	Demium CMS 0.2.1b - Multiple Vulnerabilities	webapps	PHP

2009-02-27	[eZine] r3m #2	papers	eZine
2009-02-27	[Spanish] clustering	papers	Multiple
2009-02-27	[Morocco] Playing with cookies (ST1)	papers	Multiple
2009-02-27	[Arabic] Perl Writing Exploits	papers	Multiple
2009-02-27	Linux/x86 - Read /etc/passwd Shellcode (65+ bytes)	shellcode	Linux_x86
2009-02-27	Windows/x86 - Add Administrator User (GAZZA/123456) + Start Telnet Service Shellcode (111 bytes)	shellcode	Windows_x86
2009-02-27	Irokez Blog 0.7.3.2 - Multiple Input Validation Vulnerabilities	webapps	PHP
2009-02-27	Internet Download Manager 5.15 Build 3 - Language File Parsing Buffer Overflow (PoC)	dos	Windows
2009-02-27	djbdns 1.05 - Long Response Packet Remote Cache Poisoning	remote	Linux
2009-02-26	Golabi CMS 1.0 - Remote File Inclusion	webapps	PHP
2009-02-26	DesignerfreeSolutions NewsLetter Manager Pro - Authentication Bypass	webapps	ASP
2009-02-26	Coppermine Photo Gallery 1.4.20 - BBCode IMG Privilege Escalation	webapps	PHP
2009-02-26	Coppermine Photo Gallery 1.4.20 - 'IMG' Privilege Escalation	webapps	PHP
2009-02-26	BannerManager 0.81 - Authentication Bypass	webapps	PHP
2009-02-26	Parsi PHP CMS 2.0 - 'index.php' SQL Injection	webapps	PHP
2009-02-26	OpenSC 0.11.x - PKCS#11 Implementation Unauthorized Access	local	Linux
2009-02-26	APC PowerChute Network Shutdown - HTTP Response Splitting / Cross-Site Scripting	webapps	Java
2009-02-26	IBM Websphere Application Server 6.1/7.0 - Administrative Console Cross-Site Scripting	remote	Multiple
2009-02-25	pPIM 1.0 - Multiple Vulnerabilities	webapps	PHP
2009-02-25	NETGEAR WGR614v9 Wireless Router - Denial of Service	dos	Hardware
2009-02-25	PenPal 2.0 - Authentication Bypass	webapps	ASP
2009-02-25	Apple Mac OSX xnu 1228.x - Local Kernel Memory Disclosure	local	OSX
2009-02-25	SkyPortal Classifieds System 0.12 - Contents Change	webapps	ASP
2009-02-25	SkyPortal Picture Manager 0.11 - Contents Change	webapps	ASP
2009-02-25	SkyPortal WebLinks 0.12 - Contents Change	webapps	ASP
2009-02-25	ContentKeeper Web Appliance < 125.10 - Command Execution (Metasploit)	webapps	Multiple
2009-02-25	Linux Kernel 2.6.x - Cloned Process 'CLONE_PARENT' Local Origin Validation	dos	Linux
2009-02-25	Orooj CMS - 'news.php' SQL Injection	webapps	PHP
2009-02-25	Apple Safari 4 - 'feeds:' URI Null Pointer Dereference Remote Denial of Service	dos	OSX
2009-02-25	JOnAS 4.10.3 - 'select' Error Page Cross-Site Scripting	webapps	Java
2009-02-25	Wesnoth 1.x - PythonAI Remote Code Execution	remote	Linux
2009-02-24	XGuestBook 2.0 - Authentication Bypass	webapps	PHP
2009-02-24	Counter Strike Source ManiAdminPlugin 1.x - Remote Buffer Overflow (PoC)	dos	Windows
2009-02-24	Qwerty CMS - 'id' SQL Injection	webapps	PHP
2009-02-24	Wi-Foo Ninjitsu Exploitation	papers	Multiple
2009-02-24	Windows/x86 - PEB!NtGlobalFlags Shellcode (14 bytes)	shellcode	Windows_x86
2009-02-24	Magento 1.2 - '/app/code/core/Mage/Admin/Model/Session.php?login['Username']' Cross-Site Scripting	webapps	PHP
2009-02-24	Magento 1.2 - '/app/code/core/Mage/Adminhtml/controllers/IndexController.php?email' Cross-Site Scripting	webapps	PHP
2009-02-24	Magento 1.2 - 'downloader/index.php' Cross-Site Scripting	webapps	PHP
2009-02-24	Adobe Flash Player 9/10 - Invalid Object Reference Remote Code Execution	remote	Unix
2009-02-23	Multiple PDF Readers - JBIG2 Local Buffer Overflow (PoC)	dos	Windows
2009-02-23	Mozilla Firefox 3.0.6 - BODY onload Remote Crash	dos	Multiple
2009-02-23	zFeeder 1.6 - 'admin.php' Admin Bypass	webapps	PHP
2009-02-23	pPIM 1.01 - 'notes.php' Remote Command Execution	webapps	PHP
2009-02-23	Free Arcade Script 1.0 - Local File Inclusion Command Execution	webapps	PHP
2009-02-23	Pyrophobia 2.1.3.1 - Local File Inclusion Command Execution	webapps	PHP
2009-02-23	Optus/Huawei E960 HSDPA Router - Sms Cross-Site Scripting	remote	Hardware
2009-02-23	MLdonkey 2.9.7 - Arbitrary File Disclosure	remote	Multiple
2009-02-23	taifajobs 1.0 - 'jobid' SQL Injection	webapps	PHP
2009-02-23	Adobe Acrobat Reader - JBIG2 Local Buffer Overflow (PoC) (2)	dos	Windows
2009-02-23	MDPro Module My_eGallery - 'pid' SQL Injection	webapps	PHP
2009-02-23	[Spanish] Cross Site Printing	papers	Multiple
2009-02-23	Stack Overflow Exploitation, Real Life Example	papers	Multiple
2009-02-23	Joomla! / Mambo Component gigCalendar 1.0 - 'banddetails.php' SQL Injection	webapps	PHP
2009-02-22	Blue Utopia - 'index.php' Local File Inclusion	webapps	PHP
2009-02-20	Microsoft Internet Explorer 7 (Windows XP SP2) - Memory Corruption (MS09-002)	remote	Windows
2009-02-20	Microsoft Internet Explorer 7 - Memory Corruption (MS09-002) (Python)	remote	Windows
2009-02-20	Microsoft Internet Explorer 7 (Windows 2003 SP2) - Memory Corruption (MS09-002)	remote	Windows
2009-02-20	phpBB 3 - 'autopost bot mod 0.1.3' Remote File Inclusion	webapps	PHP
2009-02-20	Got All Media 7.0.0.3 - Remote Denial of Service	dos	Windows
2009-02-20	i-dreams Mailer 1.2 Final - 'admin.dat' File Disclosure	webapps	CGI
2009-02-20	i-dreams GB 5.4 Final - 'admin.dat' File Disclosure	webapps	CGI
2009-02-20	i-dreams GB Server - 'admin.dat' File Disclosure	webapps	CGI
2009-02-20	Osmodia Bulletin Board 1.x - 'admin.txt' File Disclosure	webapps	PHP
2009-02-20	Graugon Forum 1 - 'id' Command Injection / SQL Injection	webapps	PHP
2009-02-20	Method to crash vsmon.exe ZoneAlarm/8.0.020.000	papers	Multiple
2009-02-20	Linux/x86 - chmod 666 /etc/shadow + exit(0) Shellcode (30 bytes)	shellcode	Linux_x86
2009-02-20	Windows/x86 (XP SP2) (French) - cmd.exe Shellcode (32 bytes)	shellcode	Windows_x86
2009-02-20	lastRSS autoposting bot MOD 0.1.3 - 'phpbb_root_path' Remote File Inclusion	webapps	PHP
2009-02-20	Linux Kernel 2.6.x - 'sock.c' SO_BSDCOMPAT Option Information Disclosure	local	Linux
2009-02-18	Oracle 10g - MDSYS.SDO_TOPO_DROP_FTBL SQL Injection (Metasploit)	local	Multiple
2009-02-18	Firepack - '/admin/ref.php' Remote Code Execution	webapps	PHP
2009-02-18	smNews 1.0 - Authentication Bypass / Column Truncation	webapps	PHP
2009-02-18	Microsoft Internet Explorer 7 - Memory Corruption (PoC) (MS09-002)	dos	Windows
2009-02-17	SAS Hotel Management System - Arbitrary File Upload	webapps	ASP
2009-02-17	S-CMS 1.1 Stable - Insecure Cookie Handling / Mass Page Delete	webapps	PHP
2009-02-17	pHNews Alpha 1 - 'mod' SQL Injection	webapps	PHP
2009-02-17	pHNews Alpha 1 - 'genbackup.php' Database Disclosure	webapps	PHP
2009-02-17	[French] Introduction to $_SERVER Superglobals Sniffing	papers	Multiple
2009-02-16	FreeBSD 7.0-RELEASE - Telnet Daemon Privilege Escalation	local	FreeBSD
2009-02-16	InselPhoto 1.1 - Cross-Site Scripting	webapps	PHP
2009-02-16	TPTEST 3.1.7 - Stack Buffer Overflow (PoC)	dos	Windows
2009-02-16	GeoVision LiveX 8200 - ActiveX 'LIVEX_~1.OCX' File Corruption	remote	Windows
2009-02-16	Falt4 CMS RC4 - 'FCKeditor' Arbitrary File Upload	webapps	PHP
2009-02-16	simplePms CMS 0.1.4 - Local File Inclusion / Remote Command Execution	webapps	PHP
2009-02-16	powermovielist 0.14b - SQL Injection / Cross-Site Scripting	webapps	PHP
2009-02-16	Novaboard 1.0.0 - Multiple Vulnerabilities	webapps	PHP
2009-02-16	MemHT Portal 4.0.1 - Delete All Private Messages	webapps	PHP
2009-02-16	SAS Hotel Management System - 'id' SQL Injection	webapps	ASP
2009-02-16	YACS CMS 8.11 - 'update_trailer.php' Remote File Inclusion	webapps	PHP
2009-02-16	Enomaly ECP / Enomalism < 2.2.1 - Multiple Local Vulnerabilities	local	Multiple
2009-02-16	ravennuke 2.3.0 - Multiple Vulnerabilities	webapps	PHP
2009-02-16	Grestul 1.x - Cookie Authentication Bypass	webapps	PHP
2009-02-16	[eZine] Road Technological Minds (RTM) Essential #6	papers	eZine
2009-02-16	Linux Kernel 2.6.x - 'make_indexed_dir()' Local Denial of Service	dos	Linux
2009-02-16	Clipbucket 1.7 - 'dwnld.php' Directory Traversal	webapps	PHP
2009-02-14	MySQL 6.0.9 - XPath Expression Remote Denial of Service	dos	Linux
2009-02-13	ideacart 0.02 - Local File Inclusion / SQL Injection	webapps	PHP
2009-02-13	Vlinks 1.1.6 - 'id' SQL Injection	webapps	PHP
2009-02-13	Nokia N95-8 browser - 'setAttributeNode' Method Crash	dos	Hardware
2009-02-13	ea-gBook 0.1 - Remote Command Execution / Remote File Inclusion	webapps	PHP
2009-02-13	BlogWrite 0.91 - Remote File Disclosure / SQL Injection	webapps	PHP
2009-02-13	CmsFaethon 2.2.0 - 'item' SQL Injection	webapps	PHP
2009-02-12	PHP Krazy Image Host Script 1.01 - 'id' SQL Injection	webapps	PHP
2009-02-12	Free Joke Script 1.0 - Authentication Bypass	webapps	PHP
2009-02-12	Baran CMS 1.0 - 'Arbitrary '.ASP' File Upload / File Disclosure / SQL Injection / Cross-Site Scripting / Cookie Manipulation	webapps	ASP
2009-02-12	From Legal Frame Injection to Illegal Redirect	papers	Multiple
2009-02-12	From Boot to Remote Root - How I owned the network	papers	AIX
2009-02-12	Poppler 0.10.3 - Denial of Service	dos	Linux
2009-02-11	SkaDate Online 7 - Arbitrary File Upload	webapps	PHP
2009-02-11	Graugon Gallery 1.0 - Cross-Site Scripting / SQL Injection / Cookie Bypass	webapps	PHP
2009-02-11	GeoVision Digital Video Surveillance System 8.2 - Arbitrary File Disclosure	remote	Windows
2009-02-11	dacio's CMS 1.08 - Cross-Site Scripting / SQL Injection / File Disclosure	webapps	PHP
2009-02-11	Bloggeruniverse 2.0 Beta - 'id' SQL Injection	webapps	PHP
2009-02-11	Den Dating 9.01 - 'txtlookgender' SQL Injection	webapps	PHP
2009-02-11	InselPhoto 1.1 - 'query' SQL Injection	webapps	PHP
2009-02-11	Step By Step Format String Exploitation On Windows	papers	Multiple
2009-02-11	Fuzzing for Fun and Profit	papers	Multiple
2009-02-10	Thyme 1.3 - 'export_to' Local File Inclusion	webapps	PHP
2009-02-10	Papoo CMS 3.x - 'pfadhier' Local File Inclusion	webapps	PHP

2009-02-10	Q-News 2.0 - Remote Command Execution	webapps	PHP
2009-02-10	Potato News 1.0.0 - Local File Inclusion	webapps	PHP
2009-02-10	AuthPhp 1.0 - Authentication Bypass	webapps	PHP
2009-02-10	Mynews 0.10 - Authentication Bypass	webapps	PHP
2009-02-10	BlueBird Pre-Release - Authentication Bypass	webapps	PHP
2009-02-10	Fluorine CMS 0.1 rc 1 - File Disclosure / SQL Injection / Command Execution	webapps	PHP
2009-02-10	ProFTPd - 'mod_mysql' Authentication Bypass	remote	Multiple
2009-02-10	TYPO3 < 4.0.12/4.1.10/4.2.6 - 'jumpUrl' Remote File Disclosure	webapps	PHP
2009-02-10	PHP filesystem attack vectors	papers	Multiple
2009-02-10	Practical SQL Injection: bit by bit	papers	Multiple
2009-02-10	[Persian] Web Application Security Consortium Glossary	papers	Multiple
2009-02-10	Bypassing Windows Server 2008 Password Protection	papers	Multiple
2009-02-10	Transferring Exploit code using HTML Canvas	papers	Multiple
2009-02-10	Swann DVR4 SecuraNet - Directory Traversal	remote	Linux
2009-02-10	Banking@Home 2.1 - 'login.asp' Multiple SQL Injections	webapps	ASP
2009-02-10	ProFTPd 1.3 - 'mod_sql' 'Username' SQL Injection	remote	Multiple
2009-02-10	Nokia Phoenix 2008.4.7 Service Software - ActiveX Controls Multiple Buffer Overflow Vulnerabilities	remote	Windows
2009-02-09	Traidnt UP 1.0 - Arbitrary File Upload	webapps	PHP
2009-02-09	IF-CMS 2.0 - 'id' Blind SQL Injection	webapps	PHP
2009-02-09	NETGEAR SSL312 Router - Denial of Service	dos	Hardware
2009-02-09	w3bcms 3.5.0 - Multiple Vulnerabilities	webapps	PHP
2009-02-09	feedDemon 2.7 - OPML Outline Tag Buffer Overflow	local	Windows
2009-02-09	BusinessSpace 1.2 - 'id' SQL Injection	webapps	PHP
2009-02-09	A Better Member-Based ASP Photo Gallery - 'entry' SQL Injection	webapps	PHP
2009-02-09	Nokia N95-8 - '.jpg' Remote Crash (PoC)	dos	Hardware
2009-02-09	PHP Director 0.21 - Remote Command Execution	webapps	PHP
2009-02-09	Hedgehog-CMS 1.21 - Remote Command Execution	webapps	PHP
2009-02-09	AdaptCMS Lite 1.4 - Cross-Site Scripting / Remote File Inclusion	webapps	PHP
2009-02-09	SnippetMaster Webpage Editor 2.2.2 - Remote File Inclusion / Cross-Site Scripting	webapps	PHP
2009-02-09	FlexCMS 2.5 - 'catId' SQL Injection	webapps	PHP
2009-02-09	ZeroBoardXE 1.1.5 (09.01.22) - Cross-Site Scripting	webapps	PHP
2009-02-09	Yet Another NOCC 0.1.0 - Local File Inclusion	webapps	PHP
2009-02-09	Squid < 3.1 5 - HTTP Version Number Parsing Denial of Service	dos	Multiple
2009-02-09	3Com OfficeConnect Wireless Cable/DSL Router - Authentication Bypass	remote	Hardware
2009-02-09	ZeroShell 1.0beta11 - Remote Code Execution	remote	Hardware
2009-02-09	TightVNC - Authentication Failure Integer Overflow (PoC)	dos	Windows
2009-02-09	webframe 0.76 - Multiple File Inclusions	webapps	PHP
2009-02-09	WB News 2.1.1 - config[installdir] Remote File Inclusion	webapps	PHP
2009-02-09	Gaeste 1.6 - 'gastbuch.php' Remote File Disclosure	webapps	PHP
2009-02-09	Hedgehog-CMS 1.21 - Local File Inclusion / Remote Command Execution	webapps	PHP
2009-02-09	PyBlosxom 1.6.3 Atom Flavor - Multiple XML Injection Vulnerabilities	remote	Multiple
2009-02-09	FotoWeb 6.0 - 'Login.fwx?s' Cross-Site Scripting	webapps	PHP
2009-02-09	FotoWeb 6.0 - 'Grid.fwx?search' Cross-Site Scripting	webapps	PHP
2009-02-09	Bitrix Site Manager 6/7 - Multiple Input Validation Vulnerabilities	webapps	PHP
2009-02-09	Novell QuickFinder Server - Multiple Cross-Site Scripting Vulnerabilities	remote	Novell
2009-02-09	eZoneScripts (Multiple Scripts) - Insecure Cookie Authentication Bypass	webapps	PHP
2009-02-07	PyCrypto ARC2 Module - Remote Buffer Overflow	remote	Linux
2009-02-06	WikkiTikkiTavi 1.11 - Arbitrary '.PHP' File Upload	webapps	PHP
2009-02-06	Simple PHP News 1.0 - Remote Command Execution	webapps	PHP
2009-02-06	Zeroboard4 pl8 (07.12.17) - Multiple Vulnerabilities	webapps	PHP
2009-02-06	Mailist 3.0 - Insecure Backup / Local File Inclusion	webapps	PHP
2009-02-06	CafeEngine - 'catid' SQL Injection	webapps	PHP
2009-02-06	1024 CMS 1.4.4 - Remote Command Execution / Remote File Inclusion	webapps	PHP
2009-02-06	SilverNews 2.04 - Authentication Bypass / Local File Inclusion / Remote Code Execution	webapps	PHP
2009-02-06	phpYabs 0.1.2 - 'Azione' Remote File Inclusion	webapps	PHP
2009-02-06	Ilch CMS 1.1 - 'HTTP_X_FORWARDED_FOR' SQL Injection	webapps	PHP
2009-02-05	ClearBudget 0.6.1 - Insecure Cookie Handling / Local File Inclusion	webapps	PHP
2009-02-05	Kipper 2.01 - Cross-Site Scripting / Local File Inclusion / File Disclosure	webapps	PHP
2009-02-05	dBpowerAMP Audio Player 2 - '.pls' Local Buffer Overflow	local	Windows
2009-02-05	FeedMon 2.7.0.0 - outline Tag Buffer Overflow (PoC)	dos	Windows
2009-02-05	ClearBudget 0.6.1 - Insecure Database Disclosure	webapps	PHP
2009-02-05	txtBB 1.0 RC3 - HTML/JS Injection / Arbitrary Add Admin Privileges	webapps	PHP
2009-02-05	Exploiting Web 2.0 , Real Life XSS-Worm	papers	Multiple
2009-02-05	Password Door 8.4 - Local Buffer Overflow	local	Windows
2009-02-05	glFusion 1.1 - Anonymous Comment 'Username' HTML Injection	webapps	PHP
2009-02-05	Barracuda Load Balancer - 'realm' Cross-Site Scripting	remote	Hardware
2009-02-04	Euphonics Audio Player 1.0 - '.pls' Universal Local Buffer Overflow	local	Windows
2009-02-04	Euphonics Audio Player 1.0 (Windows XP SP3) - '.pls' Local Buffer Overflow	local	Windows
2009-02-04	BlazeVideo HDTV Player 3.5 - '.PLF' Playlist File Local Overflow	local	Windows
2009-02-04	Jaws 0.8.8 - Multiple Local File Inclusions	webapps	PHP
2009-02-04	Syntax Desktop 2.7 - 'synTarget' Local File Inclusion	webapps	PHP
2009-02-04	rgboard 4 5p1 (07.07.27) - Multiple Vulnerabilities	webapps	PHP
2009-02-04	GRBoard 1.8 - Multiple Remote File Inclusions	webapps	PHP
2009-02-04	PHPbbBook 1.3 - 'bbcode.php?l' Local File Inclusion	webapps	PHP
2009-02-04	Power System Of Article Management 3.0 - File Disclosure / Cross-Site Scripting	webapps	ASP
2009-02-04	team 1.x - File Disclosure / Cross-Site Scripting	webapps	ASP
2009-02-04	YapBB 1.2 - 'forumID' Blind SQL Injection	webapps	PHP
2009-02-04	Novell Groupwise 8.0 - 'RCPT' Off-by-One	dos	Windows
2009-02-04	Free Download Manager 2.5/3.0 - Authorisation Stack Buffer Overflow (PoC)	dos	Windows
2009-02-04	gr blog 1.1.4 - Arbitrary File Upload / Authentication Bypass	webapps	PHP
2009-02-04	Amaya Web Browser 11 (Windows XP) - bdo tag Remote Stack Overflow	remote	Windows
2009-02-04	Amaya Web Browser 11 (Windows Vista) - bdo tag Remote Stack Overflow	remote	Windows
2009-02-04	UltraVNC/TightVNC (Multiple VNC Clients) - Multiple Integer Overflows (PoC)	dos	Windows
2009-02-04	GR Note 0.94 Beta - (Authentication Bypass) Remote Database Backup	webapps	ASP
2009-02-04	Linux/x86 - killall5 Shellcode (34 bytes)	shellcode	Linux_x86
2009-02-04	QIP 2005 - Malformed Rich Text Message Remote Denial of Service	dos	Multiple
2009-02-04	Cisco IOS 12.4(23) - HTTP Server Multiple Cross-Site Scripting Vulnerabilities	remote	Hardware
2009-02-04	MetaBBS 0.11 - Administration Settings Authentication Bypass	webapps	PHP
2009-02-03	WholeHogSoftware Ware Support - Insecure Cookie Handling	webapps	PHP
2009-02-03	WholeHogSoftware Password Protect - Insecure Cookie Handling	webapps	PHP
2009-02-03	ClickCart 6.0 - Authentication Bypass	webapps	PHP
2009-02-03	groone glinks 2.1 - Remote File Inclusion	webapps	PHP
2009-02-03	groone's Guestbook 2.0 - Remote File Inclusion	webapps	PHP
2009-02-03	Online Grades 3.2.4 - Authentication Bypass	webapps	PHP
2009-02-03	Free Download Manager 3.0 Build 844 - '.torrent' Local Buffer Overflow	local	Windows
2009-02-03	Euphonics Audio Player 1.0 - '.pls' Local Buffer Overflow	local	Windows
2009-02-03	Simple Machines Forum (SMF) - 'BBCode' Cookie Stealing	webapps	PHP
2009-02-03	AJA Modules Rapidshare 1.0.0 - Arbitrary File Upload	webapps	PHP
2009-02-03	WEBalbum 2.4b - 'id' Blind SQL Injection	webapps	PHP
2009-02-03	Hex Workshop 6.0 - '.cmap' Invalid Memory Reference (PoC)	dos	Windows
2009-02-03	MyDesing Sayac 2.0 - Authentication Bypass	webapps	ASP
2009-02-03	4Site CMS 2.6 - Multiple SQL Injections	webapps	PHP
2009-02-03	Technote 7.2 - Remote File Inclusion	webapps	PHP
2009-02-03	NaviCOPA Web Server 3.0.1 - Remote Buffer Overflow / Script Source Disclosure	remote	Windows
2009-02-03	TxtBlog 1.0 Alpha - Remote Command Execution	webapps	PHP
2009-02-03	DreamPics Photo/Video Gallery - Blind SQL Injection	webapps	PHP
2009-02-03	Flatnux 2009-01-27 - Remote File Inclusion	webapps	PHP
2009-02-03	OpenFiler 2.3 - (Authentication Bypass) Remote Password Change	webapps	PHP
2009-02-03	Ghostscript < 8.64 - 'gdevpdtb.c' Local Buffer Overflow	local	Multiple
2009-02-03	Exploiting Web 2.0 , Real Life SQL Injection	papers	Multiple
2009-02-03	Windows/x86 (XP SP2) - cmd.exe Shellcode (57 bytes)	shellcode	Windows_x86
2009-02-03	Nokia MultiMedia Player 1.1 - '.m3u' Heap Buffer Overflow	dos	Windows
2009-02-03	Simple Machines Forum (SMF) 1.1.7 - '[url]' Tag HTML Injection	webapps	PHP
2009-02-02	sma-db 0.3.12 - Remote File Inclusion / Cross-Site Scripting	webapps	PHP
2009-02-02	Flatnux 2009-01-27 - Cross-Site Scripting / Iframe Injection	webapps	PHP
2009-02-02	AJA Portal 1.2 (Windows) - Local File Inclusion	webapps	PHP
2009-02-02	WholeHogSoftware Ware Support - Authentication Bypass	webapps	PHP
2009-02-02	WholeHogSoftware Password Protect - Authentication Bypass	webapps	PHP
2009-02-02	Elecard AVC HD player - '.m3u' / '.xpl' Local Stack Overflow (PoC)	dos	Windows
2009-02-02	RealVNC 4.1.2 - 'vncviewer.exe' RFB Protocol Remote Code Execution (PoC)	dos	Windows

2009-01-23	Systrace 1.x (Linux Kernel x64) - Aware Local Privilege Escalation	Local	Linux_x86-64
2009-01-22	Browser3D 3.5 - '.sfs' Local Stack Overflow (C)	Local	Windows
2009-01-22	Browser3D 3.5 - '.sfs' Local Stack Overflow (Perl)	Local	Windows
2009-01-22	OwnRS Blog 1.2 - 'autor.php' SQL Injection	WebApps	PHP
2009-01-22	asp-project 1.0 - Insecure Cookie Method	WebApps	ASP
2009-01-22	Pardal CMS 0.2.0 - Blind SQL Injection	WebApps	PHP
2009-01-22	FTPShell Server 4.3 - Licence Key Remote Buffer Overflow (PoC)	DoS	Windows
2009-01-21	Joomla! Component Com BazaarBuilder Shopping Cart 5.0 - SQL Injection	WebApps	PHP
2009-01-21	Mambo Component SOBI2 RC 2.8.2 - SQL Injection	WebApps	PHP
2009-01-21	Mozilla Firefox 3.0.5 - Status Bar Obfuscation / Clickjacking	Remote	Windows
2009-01-21	Sad Raven's Click Counter 1.0 - 'passwd.dat' File Disclosure	WebApps	PHP
2009-01-21	AXIS 70U - Network Document Server Privilege Escalation / Cross-Site Scripting	Remote	Hardware
2009-01-21	Joomla! Component com_pcchess - Blind SQL Injection	WebApps	PHP
2009-01-21	Joomla! Component beamospetition 1.0.12 - SQL Injection / Cross-Site Scripting	WebApps	PHP
2009-01-20	Max.Blog 1.0.6 - Arbitrary Delete Post	WebApps	PHP
2009-01-20	AJ Auction Pro OOPD 2.3 - 'id' SQL Injection	WebApps	PHP
2009-01-20	LinPHA Photo Gallery 2.0 - Remote Command Execution	WebApps	PHP
2009-01-20	Dodo's Quiz Script 1.1 - Local File Inclusion	WebApps	PHP
2009-01-20	Total Video Player 1.31 - 'DefaultSkin.ini' Local Stack Overflow	Local	Windows
2009-01-20	Apache JackRabbit 1.4/1.5 Content Repository (JCR) - 'search.jsp?q' Cross-Site Scripting	WebApps	JSP
2009-01-20	Apache JackRabbit 1.4/1.5 Content Repository (JCR) - 'swr.jsp?q' Cross-Site Scripting	WebApps	JSP
2009-01-20	MoinMoin 1.8 - 'AttachFile.py' Cross-Site Scripting	WebApps	CGI
2009-01-19	Fhimage 1.2.1 - Remote Index Change	WebApps	PHP
2009-01-19	Fhimage 1.2.1 - Remote Command Execution (mq = off)	WebApps	PHP
2009-01-19	D-Bus Daemon < 1.2.4 - 'libdbus' Denial of Service	DoS	Multiple
2009-01-19	QNX 6.4.0 - bitflipped ELF Binary 'id' Kernel Panic (Denial of Service)	DoS	QNX
2009-01-19	Joomla! Component com_pccookbook - 'recipe_id' Blind SQL Injection	WebApps	PHP
2009-01-19	SmartVmd ActiveX 1.1 - Remote File Overwrite	Remote	Windows
2009-01-19	SmartVmd ActiveX 1.1 - Remote File Deletion	Remote	Windows
2009-01-19	Joomla! Component com_news - SQL Injection	WebApps	PHP
2009-01-19	Gallery Kys 1.0 - Admin Password Disclosure / Persistent Cross-Site Scripting	WebApps	PHP
2009-01-19	RCBlog 1.03 - Authentication Bypass	WebApps	PHP
2009-01-19	Ninja Blog 4.8 - Remote Information Disclosure	WebApps	PHP
2009-01-19	phpads 2.0 - Multiple Vulnerabilities	WebApps	PHP
2009-01-19	Joomla! Component com_waticketsystem - Blind SQL Injection	WebApps	PHP
2009-01-19	Ninja Blog 4.8 - Cross-Site Request Forgery/HTML Injection	WebApps	PHP
2009-01-19	QNX RTOS 6.4 - '.ELF' Binary File Local Denial of Service	DoS	Linux
2009-01-18	Joomla! Component Gigcal 1.x - 'id' SQL Injection	WebApps	PHP
2009-01-18	DS-IPN.NET Digital Sales IPN - Database Disclosure	WebApps	ASP
2009-01-18	Click&Email - Authentication Bypass	WebApps	PHP
2009-01-18	SCMS 1 - Local File Inclusion	WebApps	PHP
2009-01-18	ESPG (Enhanced Simple PHP Gallery) 1.72 - File Disclosure	WebApps	PHP
2009-01-16	Novell Netware 6.5 - 'ICEbrowser' Remote System Denial of Service	DoS	Windows
2009-01-16	eFAQ - Authentication Bypass	WebApps	ASP
2009-01-16	eReservations - Authentication Bypass	WebApps	ASP
2009-01-16	The Walking Club - Authentication Bypass	WebApps	ASP
2009-01-16	Ping IP - Authentication Bypass	WebApps	ASP
2009-01-16	MetaProducts MetaTreeX 1.5.100 - ActiveX File Overwrite	Remote	Windows
2009-01-16	Rankem - File Disclosure / Cross-Site Scripting / Cookie	WebApps	PHP
2009-01-16	blogit! - SQL Injection / File Disclosure / Cross-Site Scripting	WebApps	PHP
2009-01-16	ASP ActionCalendar 1.3 - Authentication Bypass	WebApps	ASP
2009-01-16	Aj Classifieds Real Estate 3.0 - Arbitrary File Upload	WebApps	PHP
2009-01-16	Aj Classifieds Personals 3.0 - Arbitrary File Upload	WebApps	PHP
2009-01-16	Aj Classifieds For Sale 3.0 - Arbitrary File Upload	WebApps	PHP
2009-01-16	MPlayer 1.0rc2 - TwinVQ Stack Buffer Overflow (PoC)	DoS	Multiple
2009-01-16	Simple PHP NewsLetter 1.5 - Local File Inclusion	WebApps	PHP
2009-01-16	BibCiter 1.4 - Multiple SQL Injections	WebApps	PHP
2009-01-16	LemonLDAP:NG 0.9.3.1 - User Enumeration / Cross-Site Scripting	WebApps	CGI
2009-01-16	Blog Manager - 'ItemID' SQL Injection	WebApps	ASP
2009-01-16	Blog Manager - 'categoryId' Cross-Site Scripting	WebApps	ASP
2009-01-15	DMXReady Billboard Manager 1.1 - Arbitrary File Upload	WebApps	ASP
2009-01-15	GNUBoard 4.31.03 (08.12.29) - Local File Inclusion	WebApps	PHP
2009-01-15	Joomla! Component com_Eventing 1.6.x - Blind SQL Injection	WebApps	PHP
2009-01-15	Ciansoft PDFBuilderX 2.2 - ActiveX Arbitrary File Overwrite	Remote	Windows
2009-01-15	Joomla! Component RD-Autos 1.5.5 - SQL Injection	WebApps	PHP
2009-01-15	MKPortal 1.2.1 - Multiple Vulnerabilities	WebApps	PHP
2009-01-15	Blue Eye CMS 1.0.0 - 'clanek' Blind SQL Injection	WebApps	PHP
2009-01-15	Free Bible Search PHP Script - SQL Injection	WebApps	PHP
2009-01-15	Ganglia gmetad 3.0.6 - 'process_path()' Remote Stack Buffer Overflow	DoS	Linux
2009-01-15	MKPortal 1.2.1 - '/modules/blog/index.php' Home Template Textarea SQL Injection	WebApps	PHP
2009-01-15	MKPortal 1.2.1 - '/modules/rss/handler_image.php?i' Cross-Site Scripting	WebApps	PHP
2009-01-15	LinksPro - 'OrderDirection' SQL Injection	WebApps	ASP
2009-01-15	Active Bids - 'search' Cross-Site Scripting	WebApps	ASP
2009-01-15	Active Bids - 'search' SQL Injection	WebApps	ASP
2009-01-15	Masir Camp 3.0 - 'SearchKeywords' SQL Injection	WebApps	PHP
2009-01-15	w3bcms - '/admin/index.php' SQL Injection	WebApps	PHP
2009-01-15	FreeBSD 7.1 - libc Berkley DB Interface Uninitialized Memory Local Information Disclosure	Local	FreeBSD
2009-01-14	Syzygy CMS 0.3 - Authentication Bypass	WebApps	PHP
2009-01-14	TeamSpeak 2.0.23.17 - Remote File Disclosure	Remote	Multiple
2009-01-14	Netvolution CMS 1.0 - Cross-Site Scripting / SQL Injection	WebApps	ASP
2009-01-14	EDraw Office Viewer 5.4 - 'HttpDownloadFile()' Insecure Method	Remote	Windows
2009-01-14	Excel Viewer OCX 3.2 - Remote Command Execution	Remote	Windows
2009-01-14	DMXReady Blog Manager 1.1 - Remote File Delete	WebApps	PHP
2009-01-14	OtsTurntables 1.00.027 - '.ofl' Local Stack Overflow	Local	Windows
2009-01-14	DMXReady Catalog Manager 1.1 - Remote Contents Change	WebApps	ASP
2009-01-14	DMXReady Classified Listings Manager 1.1 - SQL Injection	WebApps	ASP
2009-01-14	DMXReady Contact Us Manager 1.1 - Remote Contents Change	WebApps	ASP
2009-01-14	DMXReady Document Library Manager 1.1 - Contents Change	WebApps	ASP
2009-01-14	DMXReady Faqs Manager 1.1 - Remote Contents Change	WebApps	ASP
2009-01-14	DMXReady Job Listing 1.1 - Remote Contents Change	WebApps	ASP
2009-01-14	DMXReady Links Manager 1.1 - Remote Contents Change	WebApps	ASP
2009-01-14	DMXReady Member Directory Manager 1.1 - SQL Injection	WebApps	ASP
2009-01-14	DMXReady Members Area Manager 1.2 - SQL Injection	WebApps	ASP
2009-01-14	Joomla! Component Camelcitydb2 2.2 - SQL Injection	WebApps	PHP
2009-01-14	Cisco - VLAN Trunking Protocol Denial of Service	DoS	Hardware
2009-01-14	Joomla! Component Fantasytournament - SQL Injection	WebApps	PHP
2009-01-14	phpList 2.10.8 - Local File Inclusion	WebApps	PHP
2009-01-14	AAA EasyGrid ActiveX 3.51 - Remote File Overwrite	Remote	Windows
2009-01-14	phosheezy 2.0 - Remote Command Execution	WebApps	PHP
2009-01-14	Oracle Secure Backup 10g - 'exec_qr()' Command Injection	Remote	Multiple
2009-01-14	DMXReady PayPal Store Manager 1.1 - Contents Change	WebApps	ASP
2009-01-14	DMXReady Photo Gallery Manager 1.1 - Contents Change	WebApps	ASP
2009-01-14	DMXReady Registration Manager 1.1 - Contents Change	WebApps	ASP
2009-01-14	Oracle TimesTen - Remote Format String (PoC)	DoS	Multiple
2009-01-14	PHP Photo Album 0.8b - 'preview' Local File Inclusion	WebApps	PHP
2009-01-14	DMXReady Secure Document Library 1.1 - SQL Injection	WebApps	PHP
2009-01-14	DMXReady BillboardManager 1.1 - Contents Change	WebApps	ASP
2009-01-14	DMXReady SDK 1.1 - Arbitrary File Download	WebApps	ASP
2009-01-14	netsurf Web browser 1.2 - Multiple Vulnerabilities	DoS	Windows
2009-01-14	Cisco IOS 12.x - HTTP Server Multiple Cross-Site Scripting Vulnerabilities	Remote	Hardware
2009-01-14	Dark Age CMS 2.0 - 'login.php' SQL Injection	WebApps	PHP
2009-01-13	Virtual Guestbook 2.1 - Remote Database Disclosure	WebApps	ASP
2009-01-13	VUPlayer 2.49 - '.asx' Universal Local Buffer Overflow	Local	Windows
2009-01-13	Joomla! Component gigCalendar 1.0 - SQL Injection	WebApps	PHP
2009-01-13	Word Viewer OCX 3.2 - ActiveX 'Save' Remote File Overwrite	Remote	Windows
2009-01-13	Office Viewer ActiveX Control 3.0.1 - 'Save' Remote File Overwrite	Remote	Windows
2009-01-13	Office Viewer ActiveX Control 3.0.1 - Remote Command Execution	Remote	Windows
2009-01-13	PowerPoint Viewer OCX 3.1 - Remote File Overwrite	DoS	Windows
2009-01-13	dBpowerAMP Audio Player 2 - '.pls' Local Buffer Overflow (PoC)	DoS	Windows
2009-01-13	DMXReady News Manager 1.1 - Arbitrary Category Change	WebApps	ASP

2009-01-13	HSPell 1.1 - 'cilla.cgi' Remote Command Execution	WebApps	CGI
2009-01-13	DMXReady Account List Manager 1.1 - Contents Change	WebApps	ASP
2009-01-13	PowerPoint Viewer OCX 3.1 - Remote Command Execution	Remote	Windows
2009-01-13	Nofeel FTP Server 3.6 - 'CWD' Remote Memory Consumption	DoS	Windows
2009-01-13	Word Viewer OCX 3.2 - Remote Command Execution	Remote	Windows
2009-01-13	Dark Age CMS 0.2c Beta - Authentication Bypass	WebApps	PHP
2009-01-12	Microsoft HTML Workshop 4.74 - Universal Buffer Overflow	Local	Windows
2009-01-12	Joomla! Component Portfol 1.2 - 'vcatid' SQL Injection	WebApps	PHP
2009-01-12	Simple Machines Forum (SMF) 1.0.13/1.1.5 - 'Destroyer 0.1' Password Reset Security Bypass	WebApps	PHP
2009-01-12	Comersus Shopping Cart 6.0 - Remote User Pass	WebApps	ASP
2009-01-12	Triologic Media Player 7 - '.m3u' Local Heap Buffer Overflow (PoC)	DoS	Windows
2009-01-12	WordPress Plugin WP-Forum 1.7.8 - SQL Injection	WebApps	PHP
2009-01-12	ExcelOCX ActiveX 3.2 - Download File Insecure Method	Remote	Windows
2009-01-12	PWP Wiki Processor 1-5-1 - Arbitrary File Upload	WebApps	PHP
2009-01-12	dMx READ - Remote Database Disclosure	WebApps	ASP
2009-01-12	Winamp 5.541 - '.mp3'/'.aiff' File Multiple Denial of Service Vulnerabilities	DoS	Windows
2009-01-12	Realtor 747 - 'define.php?INC_DIR' Remote File Inclusion	WebApps	PHP
2009-01-12	Visuplay CMS - Multiple SQL Injections	WebApps	PHP
2009-01-12	PHP 5.2.8 - 'popen()' Function Buffer Overflow	DoS	PHP
2009-01-12	Comersus Cart 6 - User Email and User Password Unauthorized Access	WebApps	ASP
2009-01-12	Ovidentia 6.7.5 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities	WebApps	PHP
2009-01-11	VUPlayer 2.49 - '.asx' HREF Local Buffer Overflow (1)	Local	Windows
2009-01-11	VUPlayer 2.49 - '.asx' 'HREF' Universal Buffer Overflow	Local	Windows
2009-01-11	Joomla! Component com_xevidmegahd - SQL Injection	WebApps	PHP
2009-01-11	Joomla! Component com_jashowcase - 'catid' SQL Injection	WebApps	PHP
2009-01-11	Joomla! Component com_newsflash - 'id' SQL Injection	WebApps	PHP
2009-01-11	Fast Guest Book - Authentication Bypass	WebApps	PHP
2009-01-11	Microsoft Windows - '.chm' Denial of Service (HTML Compiled)	DoS	Windows
2009-01-11	Browse3D 3.5 - '.sfs' Local Buffer Overflow (PoC)	DoS	Windows
2009-01-11	DZcms 3.1 - SQL Injection	WebApps	PHP
2009-01-11	Seo4SMF for SMF forums - Multiple Vulnerabilities	WebApps	PHP
2009-01-11	phpMDJ 1.0.3 - 'id_animateur' Blind SQL Injection	WebApps	PHP
2009-01-11	XOOPS Module tadbook2 - SQL Injection	WebApps	PHP
2009-01-11	BKWorks ProPHP 0.50b1 - Authentication Bypass	WebApps	PHP
2009-01-11	Weight Loss Recipe Book 3.1 - Authentication Bypass	WebApps	PHP
2009-01-11	PHP-Fusion Mod the_kroax - SQL Injection	WebApps	PHP
2009-01-11	Social Engine - SQL Injection	WebApps	PHP
2009-01-11	fttss 2.0 - Remote Command Execution	WebApps	PHP
2009-01-11	Silentum Uploader 1.4.0 - Remote File Deletion	WebApps	PHP
2009-01-11	Photobase 1.2 - 'Language' Local File Inclusion	WebApps	PHP
2009-01-09	MP3 TrackMaker 1.5 - '.mp3' Local Heap Overflow (PoC)	DoS	Windows
2009-01-09	VUPlayer 2.49 - '.asx' HREF Local Buffer Overflow (PoC)	DoS	Windows
2009-01-09	Microsoft Internet Explorer - JavaScript screen[ ] Denial of Service	DoS	Windows
2009-01-09	Fast FAQs System - Authentication Bypass	WebApps	PHP
2009-01-09	NETGEAR WG102 - Leaks SNMP Write Password With Read Access	Remote	Hardware
2009-01-09	VUPlayer 2.49 - '.asx' HREF Local Buffer Overflow (2)	Local	Windows
2009-01-08	CuteNews 1.4.6 - 'ip ban' Authorized Cross-Site Scripting / Command Execution	WebApps	PHP
2009-01-08	Samba < 3.0.20 - Remote Heap Overflow	Remote	Linux
2009-01-08	GOM Player 2.0.12.3375 - '.asx' Local Stack Overflow	Local	Windows
2009-01-08	PHP-Fusion Mod vArcade 1.8 - 'comment_id' SQL Injection	WebApps	PHP
2009-01-08	Pizzis CMS 1.5.1 - Blind SQL Injection	WebApps	PHP
2009-01-08	XOOPS 2.3.2 - 'mydirname' PHP Remote Code Execution	WebApps	PHP
2009-01-08	Anope IRC Services With bs_fantasy_ext 1.2.0-RC1 - mIRC script	Remote	Windows
2009-01-08	IntelliTamper (2.07/2.08) - Language Catalog Overflow (SEH)	Local	Windows
2009-01-08	Openfire 3.6.2 - 'group-summary.jsp' Cross-Site Scripting	WebApps	JSP
2009-01-08	Openfire 3.6.2 - 'user-properties.jsp' Cross-Site Scripting	WebApps	JSP
2009-01-08	Openfire 3.6.2 - 'log.jsp' Cross-Site Scripting	WebApps	JSP
2009-01-08	Openfire 3.6.2 - 'log.jsp' Directory Traversal	WebApps	JSP
2009-01-08	IBM Websphere DataPower XML Security Gateway 3.6.1 XS40 - Remote Denial of Service	DoS	Multiple
2009-01-08	PRTG Traffic Grapher 6.2.1 - 'url' Cross-Site Scripting	WebApps	Java
2009-01-07	Cain & Abel 4.9.25 - 'Cisco IOS-MD5' Local Buffer Overflow	Local	Windows
2009-01-07	Joomla! Component xstandard editor 1.5.8 - Local Directory Traversal	WebApps	PHP
2009-01-07	CoolPlayer 2.19 - 'PlaylistSkin' Local Buffer Overflow	Local	Windows
2009-01-07	Perception LiteServe 2.0.1 - 'user' Remote Buffer Overflow (PoC)	DoS	Windows
2009-01-07	Audacity 1.6.2 - '.aup' Remote Off-by-One Crash	DoS	Windows
2009-01-07	VUPlayer 2.49 - '.pls' Universal Buffer Overflow	Local	Windows
2009-01-07	Winamp GEN_MSN Plugin - Heap Buffer Overflow (PoC)	DoS	Windows
2009-01-07	PHP-Fusion Mod Members CV (job) 1.0 - SQL Injection	WebApps	PHP
2009-01-07	PHP-Fusion Mod E-Cart 1.3 - 'items.php' SQL Injection	WebApps	PHP
2009-01-07	QuoteBook - Remote Configuration File Disclosure	WebApps	PHP
2009-01-07	Plunet BusinessManager 4.1 - '/pagesUTF8/auftrag_allgemeinauftrag.jsp' Multiple Cross-Site Scripting Vulnerabilities	WebApps	JSP
2009-01-07	Plunet BusinessManager 4.1 - 'pagesUTF8/Sys_DirAnzeige.jsp?Pfad' Direct Request Information Disclosure	WebApps	JSP
2009-01-07	Plunet BusinessManager 4.1 - 'pagesUTF8/auftrag_job.jsp?Pfad' Direct Request Information Disclosure	WebApps	JSP
2009-01-07	Multiple CA Service Management Products - Remote Command Execution	Remote	Windows
2009-01-07	tadbook2 Module for XOOPS - 'open_book.php' SQL Injection	WebApps	PHP
2009-01-06	Oracle 10g - SYS.LT.REMOVEWORKSPACE SQL Injection	Local	Multiple
2009-01-06	Oracle 10g - SYS.LT.MERGEWORKSPACE SQL Injection	Local	Multiple
2009-01-06	Oracle 10g - 'SYS.LT.COMPRESSWORKSPACETREE' SQL Injection (1)	Local	Multiple
2009-01-06	PHPAuctionSystem - Multiple Remote File Inclusions	WebApps	PHP
2009-01-06	RiotPix 0.61 - 'forumid' Blind SQL Injection	WebApps	PHP
2009-01-06	ezpack 4.2b2 - Cross-Site Scripting / SQL Injection	WebApps	PHP
2009-01-06	Debian XTERM - 'DECRQSS/comments' Code Execution	Local	Linux
2009-01-06	RiotPix 0.61 - Authentication Bypass	WebApps	PHP
2009-01-06	Goople 1.8.2 - 'FrontPage.php' Blind SQL Injection	WebApps	PHP
2009-01-06	Rosoft Media Player 4.2.1 - Local Buffer Overflow	Local	Windows
2009-01-06	SeaMonkey 1.1.14 - Denial of Service	DoS	Multiple
2009-01-06	ItCMS 2.1a - Authentication Bypass	WebApps	PHP
2009-01-06	PlaySms 0.9.3 - Multiple Local/Remote File Inclusions	WebApps	PHP
2009-01-06	BlogHelper - Remote Configuration File Disclosure	WebApps	PHP
2009-01-06	PollHelper - Remote Configuration File Disclosure	WebApps	PHP
2009-01-05	Ayemsis Emlak Pro - 'acc.mdb' Database Disclosure	WebApps	ASP
2009-01-05	Ayemsis Emlak Pro - Authentication Bypass	WebApps	ASP
2009-01-05	Joomla! Component simple_review 1.x - SQL Injection	WebApps	PHP
2009-01-05	Cybershade CMS 0.2b - 'index.php' Remote File Inclusion	WebApps	PHP
2009-01-05	Joomla! Component com_na_newsdescription - 'newsid' SQL Injection	WebApps	PHP
2009-01-05	Joomla! Component com_phocadocumentation - 'id' SQL Injection	WebApps	PHP
2009-01-05	VUPlayer 2.49 - '.wax' Local Buffer Overflow	Local	Windows
2009-01-05	PHPAuctionSystem - Cross-Site Scripting / SQL Injection	WebApps	PHP
2009-01-05	Apple Safari - 'ARGUMENTS' Array Integer Overflow HeapSpray (PoC)	DoS	Multiple
2009-01-05	PHPAuctionSystem - Insecure Cookie Handling	WebApps	PHP
2009-01-05	SolucionXpressPro - 'main.php' SQL Injection	WebApps	PHP
2009-01-05	Google Chrome 1.0.154.36 - FTP Client PASV Port Scan Information Disclosure	Remote	Windows
2009-01-04	Destiny Media Player 1.61 - '.lst' Local Buffer Overflow (1)	Local	Windows
2009-01-04	Destiny Media Player 1.61 - '.lst' Local Buffer Overflow (2)	Local	Windows
2009-01-04	Destiny Media Player 1.61 - '.lst' Local Buffer Overflow (3)	Local	Windows
2009-01-04	webSPELL 4.01.02 - 'id' Remote Edit Topics	WebApps	PHP
2009-01-04	PNPHPBB2 < 1.2i - 'ModName' Multiple Local File Inclusions	WebApps	PHP
2009-01-04	WSN Guest 1.23 - 'Search' SQL Injection	WebApps	PHP
2009-01-04	PHPMesFilms 1.0 - 'index.php?id' SQL Injection	WebApps	PHP
2009-01-04	Destiny Media Player 1.61 - '.lst' Local Buffer Overflow (4)	Local	Windows
2009-01-04	Destiny Media Player 1.61 - '.lst' Local Buffer Overflow (5)	Local	Windows
2009-01-04	plxAutoReminder 3.7 - 'id' SQL Injection	WebApps	PHP
2009-01-04	The Rat CMS Alpha 2 - Blind SQL Injection	WebApps	PHP
2009-01-03	Lito Lite CMS - Multiple Cross-Site Scripting / Blind SQL Injection Vulnerabilities	WebApps	PHP
2009-01-03	Destiny Media Player 1.61 - '.m3u' Local Stack Overflow	Local	Windows
2009-01-03	Destiny Media Player 1.61 - '.lst' Local Buffer Overflow (PoC)	DoS	Windows
2009-01-03	webSPELL 4 - Authentication Bypass	WebApps	PHP
2009-01-03	aMSN - '.ctt' Remote Denial of Service	DoS	Linux
2009-01-02	Built2Go PHP Link Portal 1.95.1 - Arbitrary File Upload	WebApps	PHP
2009-01-02	Built2Go PHP Rate My Photo 1.46.4 - Arbitrary File Upload	WebApps	PHP

2009-01-02	PHP 5.2.8 gd library - 'imageRotate()' Information Leak	Local	Multiple
2009-01-02	VMware 2.5.1 - 'VMware-authd' Remote Denial of Service	DoS	Multiple
2009-01-02	phpskelsite 1.4 - Local File Inclusion / Remote File Inclusion / Cross-Site Scripting	WebApps	PHP
2009-01-02	Destiny Media Player 1.61 - '.m3u' Local Buffer Overflow (PoC)	DoS	Windows
2009-01-02	KDE Konqueror 4.1 - Multiple Cross-Site Scripting / Denial of Service Vulnerabilities	DoS	Linux
2009-01-01	Viart shopping cart 3.5 - Multiple Vulnerabilities	WebApps	PHP
2009-01-01	DDL-Speed Script - 'acp/backup' Admin Backup Bypass	WebApps	PHP
2009-01-01	Megacubo 5.0.7 - 'mega://' Arbitrary File Download and Execute	Remote	Windows
2009-01-01	2Capsule - SQL Injection	WebApps	PHP
2009-01-01	Nokia S60 SMS/MMS (Curse of Silence) - Denial of Service	DoS	Hardware
2009-01-01	EggBlog 3.1.10 - Cross-Site Request Forgery (Change Admin Password)	WebApps	PHP
2009-01-01	Audacity 1.2.6 - '.gro' Local Buffer Overflow (PoC)	DoS	Windows
2009-01-01	ASPThai.Net WebBoard 6.0 - SQL Injection	WebApps	PHP
2009-01-01	PHPFootball 1.6 - Remote Hash Disclosure	WebApps	PHP
2009-01-01	Elecard MPEG Player 5.5 - '.m3u' Stack Buffer Overflow (PoC)	DoS	Windows
2009-01-01	Memberkit 1.0 - Arbitrary File Upload	WebApps	PHP
2009-01-01	phpScribe 0.9 - 'user.cfg' Remote Configuration Disclosure	WebApps	PHP
2009-01-01	w3blabor CMS 3.3.0 - Authentication Bypass	WebApps	PHP
2009-01-01	PowerNews 2.5.4 - 'newsid' SQL Injection	WebApps	PHP
2009-01-01	PowerClan 1.14a - Authentication Bypass	WebApps	PHP
2009-01-01	Konqueror 4.1 - Cross-Site Scripting / Remote Crash	DoS	Multiple
2009-01-01	Apple Safari 3.2 WebKit - 'alink' Property Memory Leak Remote Denial of Service (1)	DoS	OSX
2009-01-01	Apple Safari 3.2 WebKit - 'alink' Property Memory Leak Remote Denial of Service (2)	DoS	OSX