Exploit 2011

Exploit 2011 - Úvod 2020 2019 2018 2017 2016 2015 2014 2013 2012 2011 2010 2009 2008 2007 2006 2005 2004 2003 2002 2001 2000

Úvod Remote Web App Local&Privilege Escalation DoS & PoC ShellCode Exploit Exploit prog. Ex. Techniky Exp. kit Typy Exploitů Exploit Articles

2011-12-31	Linux/x86 - setuid(0) + setgid(0) + Add Root User (iph) To /etc/passwd + No Password + Polymorphic Shellcode	shellcode	Linux_x86
2011-12-31	lighttpd - Denial of Service (PoC)	dos	Linux
2011-12-31	WordPress Plugin TheCartPress 1.6 - 'OptionsPostsList.php' Cross-Site Scripting	webapps	PHP
2011-12-31	WordPress Plugin The Welcomizer 1.3.9.4 - 'twiz-index.php' Cross-Site Scripting	webapps	PHP
2011-12-30	Reaver - WiFi Protected Setup (WPS)	remote	Hardware
2011-12-30	Dede CMS - SQL Injection	webapps	PHP
2011-12-30	Akiva WebBoard 8.x - SQL Injection	webapps	PHP
2011-12-30	Neturf eCommerce Shopping Cart - 'searchFor' Cross-Site Scripting	webapps	PHP
2011-12-29	DIY-CMS blog mod - SQL Injection	webapps	PHP
2011-12-29	Winn Guestbook 2.4.8c - Persistent Cross-Site Scripting	webapps	PHP
2011-12-29	Pligg CMS 1.1.2 - 'status' SQL Injection	webapps	PHP
2011-12-29	Pligg CMS 1.1.4 - 'SERVER[php_self]' Cross-Site Scripting	webapps	PHP
2011-12-29	Linux Kernel 3.1.8 - KVM Local Denial of Service	dos	Linux
2011-12-28	Joomla! Component Module Simple File Upload 1.3 - Remote Code Execution	webapps	PHP
2011-12-28	VideoLAN VLC Media Player 1.1.11 - libav 'libavcodec_plugin.dll' Denial of Service	dos	Windows
2011-12-27	CoCSoft Stream Down 6.8.0 - Universal (Metasploit)	remote	Windows
2011-12-26	WordPress Plugin Mailing List - Arbitrary File Download	webapps	PHP

2011-12-26	Free Image Hosting Script - Arbitrary File Upload	webapps	PHP
2011-12-26	Nagios Plugins check_ups - Local Buffer Overflow (PoC)	dos	Linux
2011-12-26	TelnetD encrypt_keyid - Function Pointer Overwrite	remote	Linux
2011-12-25	OpenEMR 4 - Multiple Vulnerabilities	webapps	PHP
2011-12-24	freeSSHd - Denial of Service (PoC)	dos	Windows
2011-12-24	MySQL 5.5.8 - Remote Denial of Service	dos	Windows
2011-12-24	Putty 0.60 - Crash (PoC)	dos	Windows
2011-12-24	Microsoft Windows Media Player 11.0.5721.5262 - Remote Denial of Service	dos	Windows
2011-12-24	Microsoft Windows Explorer - Denial of Service	dos	Windows
2011-12-24	Construindo Shellcodes (Portuguese)	papers	Linux
2011-12-23	Open Conference/Journal/Harvester Systems 2.3.x - Multiple Remote Code Execution Vulnerabilities	webapps	PHP
2011-12-22	False SQL Injection and Advanced Blind SQL Injection	papers	Multiple
2011-12-22	Tiki Wiki CMS Groupware 8.2 - 'snarf_ajax.php' Remote PHP Code Injection	webapps	PHP
2011-12-21	Infoproject Business Hero - Multiple Vulnerabilities	webapps	PHP
2011-12-21	Barracuda Control Center 620 - Multiple Web Vulnerabilities	webapps	JSP
2011-12-21	SpamTitan 5.08 - Multiple Vulnerabilities	webapps	PHP
2011-12-21	Plone and Zope - Remote Command Execution	webapps	Multiple
2011-12-21	epesi BIM 1.2 rev 8154 - Multiple Cross-Site Scripting Vulnerabilities	webapps	PHP
2011-12-21	Barracuda Control Center 620 - Cross-Site Scripting / HTML Injection	remote	Hardware
2011-12-21	Kaspersky Internet Security/Anti-Virus - '.cfg' File Memory Corruption	local	Windows
2011-12-20	IrfanView - '.tiff' Image Processing Buffer Overflow	dos	Windows
2011-12-20	Armitage - Hacking Made Easy Part 1	papers	Multiple
2011-12-20	IrfanView FlashPix PlugIn - Double-Free	dos	Windows
2011-12-20	TORCS 1.3.1 - acc Buffer Overflow	local	Windows
2011-12-20	Joomla! Component com_tsonymf - 'idofitem' SQL Injection	webapps	PHP
2011-12-20	Tiki Wiki CMS Groupware 8.1 - 'show_errors' HTML Injection	webapps	PHP
2011-12-20	PHPShop CMS 3.4 - Multiple Cross-Site Scripting / SQL Injections	webapps	PHP
2011-12-20	Joomla! Component com_caproductprices - 'id' SQL Injection	webapps	PHP
2011-12-20	Cyberoam UTM 10 - 'tableid' SQL Injection	webapps	PHP
2011-12-19	appRain CMF 0.1.5 - Multiple Web Vulnerabilities	webapps	PHP
2011-12-19	DotA OpenStats 1.3.9 - SQL Injection	webapps	PHP
2011-12-19	Joomla! Component com_dshop - SQL Injection	webapps	PHP
2011-12-19	Free Mp3 Player 1.0 - Local Denial of Service	dos	Windows
2011-12-19	PHP Booking Calendar 10e - 'page_info_message' Cross-Site Scripting	webapps	PHP
2011-12-18	Apple Safari - GdiDrawStream Blue Screen of Death	dos	Windows_x86-64
2011-12-18	novell sentinel log manager 1.2.0.1 - Directory Traversal	webapps	Multiple
2011-12-18	Video Community Portal - 'userID' SQL Injection	webapps	PHP
2011-12-18	PHP 5.3.8 - Remote Denial of Service	dos	PHP
2011-12-17	Flirt-Projekt 4.8 - 'rub' SQL Injection	webapps	PHP
2011-12-17	Social Network Community 2 - 'userID' SQL Injection	webapps	PHP
2011-12-16	Seotoaster - SQL Injection	webapps	PHP
2011-12-16	Capexweb 1.1 - SQL Injection	webapps	Multiple
2011-12-16	mPDF 5.3 - File Disclosure	webapps	PHP
2011-12-16	Fork CMS 3.1.5 - Multiple Cross-Site Scripting Vulnerabilities	webapps	PHP
2011-12-15	Splunk - Remote Command Execution	remote	Multiple
2011-12-15	Owl Intranet Engine 1.00 - 'userid' Authentication Bypass	webapps	PHP
2011-12-15	Websense 7.6 - Triton Report Management Interface Cross-Site Scripting	webapps	CGI
2011-12-15	Websense 7.6 Triton - 'ws_irpt.exe' Remote Command Execution	webapps	CGI
2011-12-15	Websense 7.6 Products - 'favorites.exe' Authentication Bypass	webapps	CGI
2011-12-14	Active Domain Offline Hash Dump & Forensic Analysis	papers	Windows_x86
2011-12-14	PmWiki 2.2.34 - 'pagelist' Remote PHP Code Injection (2) (Metasploit)	webapps	PHP
2011-12-14	Pulse Pro 1.7.2 - Multiple Cross-Site Scripting Vulnerabilities	webapps	PHP
2011-12-14	BrowserCRM 5.100.1 - 'parent_id' SQL Injection	webapps	PHP
2011-12-14	BrowserCRM 5.100.1 - 'contact_id' SQL Injection	webapps	PHP
2011-12-14	BrowserCRM 5.100.1 - URI Cross-Site Scripting	webapps	PHP
2011-12-14	BrowserCRM 5.100.1 - 'framed' Cross-Site Scripting	webapps	PHP
2011-12-14	BrowserCRM 5.100.1 - 'clients.php' Cross-Site Scripting	webapps	PHP
2011-12-14	BrowserCRM 5.100.1 - 'login[]' Cross-Site Scripting	webapps	PHP
2011-12-14	Nagios XI - Multiple Cross-Site Scripting / HTML Injection Vulnerabilities	remote	Multiple
2011-12-13	Traq 2.3 - Authentication Bypass / Remote Code Execution (Metasploit)	webapps	PHP
2011-12-13	CoDeSys SCADA 2.3 - WebServer Stack Buffer Overflow (Metasploit)	remote	Windows
2011-12-13	White Paper- An analysis of a spam Exploited through browser add-ons in Facebook	papers	Multiple
2011-12-13	Paper on Crypter(Unprotecting the Crypter)	papers	Multiple
2011-12-13	WordPress Plugin flash-album-gallery - 'flagshow.php' Cross-Site Scripting	webapps	PHP
2011-12-12	The Tor Project: Authority 'No Check' Weakness	papers	Multiple
2011-12-12	WordPress Plugin GRAND FlAGallery 1.57 - 'flagshow.php' Cross-Site Scripting	webapps	PHP
2011-12-12	Opera Web Browser < 11.60 - Denial of Service / Multiple Vulnerabilities	dos	Windows
2011-12-11	WordPress Plugin UPM Polls 1.0.4 - Blind SQL Injection	webapps	PHP
2011-12-11	FCMS CMS 2.7.2 - Multiple Cross-Site Request Forgery Vulnerabilities	webapps	PHP
2011-12-11	Xoops 2.5.4 - Blind SQL Injection	webapps	PHP
2011-12-11	zFTPServer Suite 6.0.0.52 - 'rmdir' Directory Traversal	remote	Windows
2011-12-11	Pixie 1.04 - Blog Post Cross-Site Request Forgery	webapps	PHP
2011-12-10	Linux/MIPS - Reverse (0x7a69/TCP) Shell Shellcode (168 bytes)	shellcode	Linux_MIPS
2011-12-10	Linux/MIPS - reboot() Shellcode (32 bytes)	shellcode	Linux_MIPS
2011-12-10	Acpid 1:2.0.10-1ubuntu2 (Ubuntu 11.04/11.10) - Boundary Crossing Privilege Escalation	local	Linux
2011-12-10	White Paper : Post Exploitation Using Meterpreter	papers	Multiple
2011-12-10	Family CMS 2.7.2 - Multiple Persistent Cross-Site Scripting Vulnerabilities	webapps	PHP
2011-12-09	CyberLink (Multiple Products) - File Project Handling Stack Buffer Overflow (PoC)	dos	Windows
2011-12-09	Apache - Denial of Service	dos	Linux
2011-12-09	SePortal 2.5 - SQL Injection (1)	webapps	PHP
2011-12-09	Free Opener - Local Denial of Service	dos	Windows
2011-12-09	Docebo Lms 4.0.4 - 'Messages' Remote Code Execution	webapps	PHP
2011-12-09	CSF Firewall - Buffer Overflow (PoC)	dos	Linux
2011-12-09	Pet Listing - 'preview.php' Cross-Site Scripting	webapps	PHP
2011-12-08	SantriaCMS - SQL Injection	webapps	PHP
2011-12-08	Joomla! Component com_qcontacts 1.0.6 - SQL Injection	webapps	PHP
2011-12-08	HomeSeer HS2 2.5.0.20 - Web Interface Log Viewer Page URI Cross-Site Scripting	remote	Hardware
2011-12-08	HP Application Lifestyle Management 11 - 'GetInstalledPackages' Local Privilege Escalation	local	Linux
2011-12-07	Family Connections CMS 2.7.1 - 'less.php' Remote Command Execution (Metasploit)	webapps	PHP
2011-12-07	SourceBans 1.4.8 - SQL Injection / Local File Inclusion Injection	webapps	PHP
2011-12-07	web backdoors evasion detection	papers	Multiple
2011-12-07	PHP City Portal Script Software - SQL Injection	webapps	PHP
2011-12-07	[Spanish] Hacking dispositivos iOS (iPhone, iPod, iPad)	papers	iOS
2011-12-07	phpBB MyPage Plugin - SQL Injection	webapps	PHP
2011-12-07	Traq 2.3 - Authentication Bypass / Remote Code Execution	webapps	PHP
2011-12-07	SMF 2.0.1 - SQL Injection / Privilege Escalation	webapps	PHP
2011-12-07	Apache Struts 2.0.9/2.1.8 - Session Tampering Security Bypass	remote	Multiple
2011-12-07	PowerDVD 11.0.0.2114 - Remote Denial of Service	dos	Windows
2011-12-07	Axis M10 Series Network Cameras - Cross-Site Scripting	remote	Hardware
2011-12-06	White Paper: Using Google as Malware Spreading Technique	papers	Multiple
2011-12-06	Alstrasoft EPay Enterprise 4.0 - Blind SQL Injection	webapps	PHP
2011-12-06	WordPress Plugin Pretty Link 1.5.2 - 'pretty-bar.php' Cross-Site Scripting	webapps	PHP
2011-12-06	Simple Machines Forum (SMF) 1.1.15 - 'fckeditor' Arbitrary File Upload	webapps	PHP
2011-12-06	Linux Kernel 2.6.35 - Network Namespace Remote Denial of Service	dos	Linux
2011-12-05	SopCast 3.4.7 - 'sop://' URI Handling Remote Stack Buffer Overflow (PoC)	dos	Windows
2011-12-05	D-Link DNS-320 ShareCenter - Remote Reboot/Shutdown/Reset (Denial of Service)	dos	Hardware
2011-12-05	SopCast 3.4.7 - 'Diagnose.exe' Improper Permissions	local	Windows
2011-12-05	Meditate Web Content Editor 'username_input' - SQL Injection	webapps	PHP
2011-12-05	Serv-U FTP Server 11.1.0.3 - Denial of Service / Security Bypass	dos	Windows
2011-12-05	Elxis CMS 2009 - 'index.php?task' Cross-Site Scripting	webapps	PHP
2011-12-05	Elxis CMS 2009 - 'administrator/index.php' URI Cross-Site Scripting	webapps	PHP
2011-12-04	Family Connections CMS 2.5.0/2.7.1 - 'less.php' Remote Command Execution	webapps	PHP
2011-12-03	CCMPlayer 1.5 - '.m3u' Stack Buffer Overflow (Metasploit)	local	Windows
2011-12-03	NJStar Communicator MiniSmtp - Buffer Overflow (ASLR Bypass)	dos	Windows
2011-12-03	Linux/x64 - execve(/bin/sh) Shellcode (52 bytes)	shellcode	Linux_x86-64
2011-12-02	Hillstone Software HS TFTP Server 1.3.2 - Denial of Service	dos	Windows
2011-12-02	Ipswitch TFTP Server 1.0.0.24 - Directory Traversal	remote	Windows
2011-12-02	RhinoSoft Serv-U FTPd Server < 4.2 - Remote Buffer Overflow (Metasploit)	remote	Windows
2011-12-02	A bit away from Kernel execution	papers	Windows
2011-12-02	Joomla! Component com_jobprofile - SQL Injection	webapps	PHP

2011-12-02	WSN Classifieds 6.2.12/6.2.18 - Multiple Vulnerabilities	webapps	PHP
2011-12-02	HP Device Access Manager for HP ProtectTools 5.0/6.0 - Heap Memory Corruption	dos	Windows
2011-12-01	[Hebrew] Digital Whisper Security Magazine #27	papers	Multiple
2011-12-01	FreeBSD - 'ftpd / ProFTPd' Remote Command Execution	remote	FreeBSD
2011-12-01	Serv-U FTP Server - Jail Break	remote	Windows
2011-12-01	AVID Media Composer Phonetic Indexer - Remote Stack Buffer Overflow (Metasploit)	remote	Windows
2011-12-01	Final Draft 8 - Multiple Stack Buffer Overflows (Metasploit)	local	Windows
2011-12-01	Muster Render Farm Management System - Arbitrary File Download	webapps	PHP
2011-12-01	StoryBoard Quick 6 - Local Stack Buffer Overflow (Metasploit)	local	Windows
2011-12-01	CoDeSys SCADA 2.3 - Remote Buffer Overflow	remote	Windows
2011-12-01	AtMail 1.04 - 'func' Multiple Cross-Site Scripting Vulnerabilities	webapps	PHP
2011-12-01	Hero 3.69 - 'month' Cross-Site Scripting	webapps	ASP
2011-11-30	Java Applet Rhino Script Engine - Remote Code Execution (Metasploit)	remote	Multiple
2011-11-30	CTEK SkyRouter 4200/4300 - Command Execution (Metasploit)	remote	Hardware
2011-11-30	Bugbear FlatOut 2005 - '.bed' File Buffer Overflow	dos	Windows
2011-11-30	GOM Player 2.1.33.5071 - '.asx' File Unicode Stack Buffer Overflow	local	Windows
2011-11-30	Microsoft Windows XP/2003 - 'afd.sys' Local Privilege Escalation (MS11-080)	local	Windows
2011-11-30	WikkaWiki 1.3.2 - Multiple Vulnerabilities	webapps	PHP
2011-11-30	CCMPlayer 1.5 - '.m3u' Stack Buffer Overflow (SEH) (Metasploit)	local	Windows
2011-11-30	IBM Lotus Domino Server Controller - Authentication Bypass	remote	JSP
2011-11-30	CoDeSys 3.4 - POST Null Pointer Content-Length Parsing Remote Denial of Service	dos	Multiple
2011-11-30	CoDeSys 3.4 - Null Pointer Invalid HTTP Request Parsing Remote Denial of Service	dos	Multiple
2011-11-30	OrangeHRM 2.6.11 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities	webapps	PHP
2011-11-30	OrangeHRM 2.6.11 - 'lib/controllers/CentralController.php' URI Cross-Site Scripting	webapps	PHP
2011-11-30	OrangeHRM 2.6.11 - '/lib/controllers/CentralController.php?id' SQL Injection	webapps	PHP
2011-11-30	WordPress Plugin 1-jquery-photo-gallery-Slideshow-flash 1.01 - Cross-Site Scripting	webapps	PHP
2011-11-30	WordPress Plugin flash-album-gallery - 'facebook.php' Cross-Site Scripting	webapps	PHP
2011-11-30	SugarCRM Community Edition 6.3.0RC1 - 'index.php' Multiple SQL Injections	webapps	PHP
2011-11-29	Go Null Yourself (GNY) E-Zine #6	papers	eZine
2011-11-29	Virtual Vertex Muster 6.1.6 - Web Interface Directory Traversal	webapps	ASP
2011-11-29	Oxide WebServer - Directory Traversal	remote	Windows
2011-11-28	Google Android - 'content://' URI Multiple Information Disclosure Vulnerabilities	webapps	Android
2011-11-28	siemens automation license manager 500.0.122.1 - Multiple Vulnerabilities	dos	Windows
2011-11-28	Siemens SIMATIC WinCC Flexible (Runtime) - Multiple Vulnerabilities	dos	Windows
2011-11-28	JQuery-Real-Person plugin - Bypass Captcha	webapps	PHP
2011-11-28	WordPress Plugin Skysa App Bar - 'idnews' Cross-Site Scripting	webapps	PHP
2011-11-28	Manx 1.0.1 - '/admin/tiny_mce/plugins/ajaxfilemanager/ajax_get_file_listing.php' Multiple Cross-Site Scripting Vulnerabilities	webapps	PHP
2011-11-28	Manx 1.0.1 - '/admin/tiny_mce/plugins/ajaxfilemanager_OLD/ajax_get_file_listing.php' Multiple Cross-Site Scripting Vulnerabilities	webapps	PHP
2011-11-28	Manx 1.0.1 - '/admin/admin_blocks.php?Filename' Traversal Arbitrary File Access	webapps	PHP
2011-11-28	Manx 1.0.1 - '/admin/admin_pages.php?Filename' Traversal Arbitrary File Access	webapps	PHP
2011-11-27	Linux/MIPS - execve(/bin/sh) Shellcode (48 bytes)	shellcode	Linux_MIPS
2011-11-27	Linux/MIPS - Add Root User (rOOt/pwn3d) To /etc/passwd Shellcode (164 bytes)	shellcode	Linux_MIPS
2011-11-26	eSyndiCat Pro 2.3.5 - Multiple Cross-Site Scripting Vulnerabilities	webapps	PHP
2011-11-25	PHP video script - SQL Injection	webapps	PHP
2011-11-25	[Turkish] Jynx Rootkit Analysis	papers	Multiple
2011-11-25	XChat 2.8.9 - Heap Overflow Denial of Service	dos	Linux
2011-11-25	Titan FTP Server 8.40 - 'APPE' Remote Denial of Service	dos	Windows
2011-11-24	Log1 CMS 2.0 - 'ajax_create_folder.php' Remote Code Execution	webapps	PHP
2011-11-24	LibLime Koha 4.2 - Local File Inclusion	webapps	CGI
2011-11-24	Linux/SuperH (sh4) - setuid(0) + execve("/bin/sh", NULL, NULL) Shellcode (27 bytes)	shellcode	SuperH_SH4
2011-11-24	Zabbix 1.8.4 - 'popup.php' SQL Injection	webapps	PHP
2011-11-24	AdaptCMS 2.0 - SQL Injection	webapps	PHP
2011-11-24	Balitbang CMS 3.3 - 'index.php?hal' SQL Injection	webapps	PHP
2011-11-24	Balitbang CMS 3.3 - 'alumni.php?hal' SQL Injection	webapps	PHP
2011-11-24	Apache 7.0.x mod_proxy - Reverse Proxy Security Bypass	remote	Linux
2011-11-24	HP Network Node Manager (NMM) i 9.10 - '/nnm/mibdiscover?node' Cross-Site Scripting	webapps	JSP
2011-11-24	HP Network Node Manager (NMM) i 9.10 - 'nnm/protected/configurationpoll.jsp?nodename' Cross-Site Scripting	webapps	JSP
2011-11-24	HP Network Node Manager (NMM) i 9.10 - 'nnm/protected/ping.jsp?nodename' Cross-Site Scripting	webapps	JSP
2011-11-24	HP Network Node Manager (NMM) i 9.10 - 'nnm/protected/statuspoll.jsp?nodename' Cross-Site Scripting	webapps	JSP
2011-11-24	HP Network Node Manager (NMM) i 9.10 - 'nnm/protected/traceroute.jsp?nodename' Cross-Site Scripting	webapps	JSP
2011-11-23	bzexe (bzip2) - Race Condition	local	Linux
2011-11-23	PHP-Nuke 8.1.0.3.5b - 'Downloads' Blind SQL Injection	webapps	PHP
2011-11-23	PmWiki 2.2.34 - 'pagelist' Remote PHP Code Injection (1)	webapps	PHP
2011-11-23	Dolibarr ERP/CRM 3.1 - Multiple Script URI Cross-Site Scripting Vulnerabilities	webapps	PHP
2011-11-23	Dolibarr ERP/CRM 3.1.0 - '/user/index.php' Multiple SQL Injections	webapps	PHP
2011-11-23	Dolibarr ERP/CRM 3.1.0 - '/user/info.php?id' SQL Injection	webapps	PHP
2011-11-23	Dolibarr ERP/CRM 3.1.0 - '/admin/boxes.php?rowid' SQL Injection	webapps	PHP
2011-11-23	WordPress Plugin ClickDesk Live Support 2.0 - 'cdwidget' Cross-Site Scripting	webapps	PHP
2011-11-23	WordPress Plugin Featurific For WordPress 1.6.2 - 'snum' Cross-Site Scripting	webapps	PHP
2011-11-23	WordPress Plugin NewsLetter Meenews 5.1 - 'idnews' Cross-Site Scripting	webapps	PHP
2011-11-23	PrestaShop 1.4.4.1 mondialrelay (kit_mondialrelay) - Multiple Cross-Site Scripting Vulnerabilities	webapps	PHP
2011-11-23	PrestaShop 1.4.4.1 - '/modules/mondialrelay/googlemap.php' Multiple Cross-Site Scripting Vulnerabilities	webapps	PHP
2011-11-23	PrestaShop 1.4.4.1 - '/modules/mondialrelay/kit_mondialrelay/SuiviExpedition_ajax.php?Expedition' Cross-Site Scripting	webapps	PHP
2011-11-23	PrestaShop 1.4.4.1 - '/admin/ajaxfilemanager/ajax_save_text.php' Multiple Cross-Site Scripting Vulnerabilities	webapps	PHP
2011-11-23	Prestashop 1.4.4.1 - 'displayImage.php' HTTP Response Splitting	webapps	PHP
2011-11-23	Zen Cart CMS 1.3.9h - Multiple Cross-Site Scripting Vulnerabilities	webapps	PHP
2011-11-23	Pro Clan Manager 0.4.2 - SQL Injection	webapps	PHP
2011-11-22	Free MP3 CD Ripper 1.1 - '.wav' Local Stack Buffer Overflow (Metasploit)	local	Windows
2011-11-22	Microsoft Excel - Malformed OBJ Record Handling Overflow (MS11-038) (Metasploit)	local	Windows
2011-11-22	[Spanish] #breaking80211	papers	Multiple
2011-11-22	Wireshark 1.4.4 - DECT Dissector Remote Buffer Overflow	remote	Linux
2011-11-22	Microsoft Windows XP/7 Kernel - 'win32k.sys' Keyboard Layout Privilege Escalation (MS10-073)	local	Windows
2011-11-22	TA.CMS (TeachArabia) - 'index.php?id' SQL Injection	webapps	PHP
2011-11-22	TA.CMS (TeachArabia) - 'lang' Traversal Local File Inclusion	webapps	PHP
2011-11-22	Hastymail2 - 'rs' Cross-Site Scripting	webapps	PHP
2011-11-21	Paper: Enumerating and Breaking VoIP	papers	Multiple
2011-11-21	QQPLAYER Player 3.2 - PICT PnSize Buffer Overflow Windows (ASLR + DEP Bypass) (Metasploit)	local	Windows_x86
2011-11-21	VMware - Update Manager Directory Traversal	remote	Windows
2011-11-21	Microsoft Winows 7 - Keyboard Layout Blue Screen of Death (MS10-073)	dos	Windows
2011-11-21	WordPress Plugin Alert Before Your Post - 'name' Cross-Site Scripting	webapps	PHP
2011-11-21	WordPress Plugin Advanced Text Widget 2.0 - 'page' Cross-Site Scripting	webapps	PHP
2011-11-21	WordPress Plugin Adminimize 1.7.21 - 'page' Cross-Site Scripting	webapps	PHP
2011-11-21	WordPress Plugin Lanoba Social 1.0 - 'action' Cross-Site Scripting	webapps	PHP
2011-11-20	Viscom Software Movie Player Pro SDK ActiveX 6.8 - Stack Buffer Overflow (Metasploit)	remote	Windows
2011-11-20	Social Engineering - The Human Factor	papers	Multiple
2011-11-20	Digital Attic Foundation CMS - 'id' SQL Injection	webapps	PHP
2011-11-19	Support Incident Tracker 3.65 - 'translate.php' Remote Code Execution	webapps	PHP
2011-11-19	Wireshark - console.lua pre-loading (Metasploit)	remote	Windows
2011-11-19	WordPress Plugin jetpack - 'sharedaddy.php' ID SQL Injection	webapps	PHP
2011-11-19	Freelancer Calendar 1.01 - SQL Injection	webapps	PHP
2011-11-19	Valid tiny-erp 1.6 - SQL Injection	webapps	PHP
2011-11-19	Blogs manager 1.101 - SQL Injection	webapps	PHP
2011-11-19	ARASTAR - SQL Injection	webapps	PHP
2011-11-18	Thunder Kankan Player 4.8.3.840 - Stack Overflow / Denial of Service	dos	Windows
2011-11-18	Jetty Web Server - Directory Traversal	remote	Windows
2011-11-18	GoAhead Web Server 2.5 - 'goform/formTest' Multiple Cross-Site Scripting Vulnerabilities	remote	Windows
2011-11-17	Viscom Image Viewer CP Pro 8.0/Gold 6.0 - ActiveX Control (Metasploit)	remote	Windows
2011-11-17	webERP 4.3.8 - Multiple Script URI Cross-Site Scripting Vulnerabilities	webapps	PHP
2011-11-17	webERP 4.3.8 - '/reportwriter/ReportMaker.php?reportid' SQL Injection	webapps	PHP
2011-11-17	webERP 4.3.8 - '/reportwriter/FormMaker.php?ReportID' SQL Injection	webapps	PHP
2011-11-17	ZOHO ManageEngine ADSelfService Plus 4.5 Build 4521 - Cross-Site Scripting	webapps	PHP
2011-11-17	WordPress Plugin Flexible Custom Post Type - 'id' Cross-Site Scripting	webapps	PHP
2011-11-16	Attachmate Reflection FTP Client - Heap Overflow	dos	Windows
2011-11-16	FleaHttpd - Remote Denial of Service	dos	Linux
2011-11-16	FreeWebShop 2.2.9 R2 - 'ajax_save_name.php' Remote Code Execution	webapps	PHP
2011-11-16	SonicWALL Aventail SSL-VPN - SQL Injection	webapps	Hardware
2011-11-16	Webistry 1.6 - 'pid' SQL Injection	webapps	PHP
2011-11-15	Authenex A-Key/ASAS Web Management Control 3.1.0.2 - Blind SQL Injection	webapps	Multiple
2011-11-15	QuiXplorer 2.3 - Bugtraq Arbitrary File Upload	webapps	PHP
2011-11-15	Hack The Planet (HTP) Zine 3	papers	eZine

2011-11-14	optima apiftp server 1.5.2.13 - Multiple Vulnerabilities	dos	Windows
2011-11-14	Mini-stream RM-MP3 Converter 3.1.2.1 - '.pls' Local Stack Buffer Overflow (Metasploit)	local	Windows
2011-11-14	WordPress Plugin AdRotate 3.6.6 - SQL Injection	webapps	PHP
2011-11-14	Pixie CMS 1.01 < 1.04 - Blind SQL Injections	webapps	PHP
2011-11-14	Mozilla Firefox 8.0 - Null Pointer Dereference (PoC)	dos	Multiple
2011-11-14	Joomla! Component Content - 'year' SQL Injection	webapps	PHP
2011-11-13	Support Incident Tracker 3.65 - Remote Command Execution (Metasploit)	webapps	PHP
2011-11-13	Aviosoft Digital TV Player Professional 1.0 - Local Stack Buffer Overflow (Metasploit)	local	Windows
2011-11-13	Mambo 4.x - 'Zorder' SQL Injection	webapps	PHP
2011-11-13	WordPress Plugin Zingiri 2.2.3 - 'ajax_save_name.php' Remote Code Execution	webapps	PHP
2011-11-13	Search Plugin for Hotaru CMS 1.4.2 - 'admin_index.php?site_name' Cross-Site Scripting	webapps	PHP
2011-11-11	Soda PDF Professional 1.2.155 - '.pdf' / '.WWF' File Handling Denial of Service	dos	Windows
2011-11-11	Kool Media Converter 2.6.0 - Denial of Service	dos	Windows
2011-11-11	Infoblox NetMRI 6.2.1 - Admin Login Page Multiple Cross-Site Scripting Vulnerabilities	webapps	Java
2011-11-11	Kool Media Converter 2.6.0 - '.ogg' File Buffer Overflow	dos	Windows
2011-11-10	glibc - 'LD_AUDIT' Arbitrary DSO Load Privilege Escalation	local	Linux
2011-11-10	Joomla! Component com_alfcontact 1.9.3 - Multiple Cross-Site Scripting Vulnerabilities	webapps	PHP
2011-11-09	Aviosoft Digital TV Player Professional 1.x - Local Stack Buffer Overflow	local	Windows
2011-11-09	osCSS2 - '_ID' Local file Inclusion	webapps	PHP
2011-11-09	labwiki 1.1 - Multiple Vulnerabilities	webapps	PHP
2011-11-09	COMTREND CT-5624 Router - Root/Support Password Disclosure/Change	webapps	Hardware
2011-11-09	AbsoluteFTP 1.9.6 < 2.2.10 - 'LIST' Remote Buffer Overflow (Metasploit)	remote	Windows
2011-11-09	OpenPAM - 'pam_start()' Local Privilege Escalation	local	BSD
2011-11-09	AShop - Open Redirection / Cross-Site Scripting	webapps	PHP
2011-11-08	11in1 CMS 1.0.1 - 'do.php' CRLF Injection	webapps	PHP
2011-11-08	Microsoft Windows - TCP/IP Stack Reference Counter Integer Overflow (MS11-083)	dos	Windows
2011-11-08	PBCS Technology - 'articlenav.php' SQL Injection	webapps	PHP
2011-11-07	WHMCompleteSolution 3.x/4.x - Multiple Vulnerabilities	webapps	PHP
2011-11-07	KnFTP 1.0 - Remote Buffer Overflow (DEP Bypass) (Metasploit)	remote	Windows
2011-11-07	LabStoRe 1.5.4 - SQL Injection	webapps	PHP
2011-11-07	OrderSys 1.6.4 - SQL Injection	webapps	PHP
2011-11-07	Oracle Hyperion Strategic Finance 12.x - Tidestone Formula One WorkBook OLE Control TTF16.ocx Remote Heap Overflow	remote	Windows
2011-11-07	Oracle - xdb.xdb_pitrig_pkg.PITRIG_DROPMETADATA procedure	remote	Windows
2011-11-07	Hacking Embedded Devices For Fun & Profit	papers	Hardware
2011-11-07	SmartJobBoard - 'keywords' Cross-Site Scripting	webapps	PHP
2011-11-07	Admin Bot - 'news.php' SQL Injection	webapps	PHP
2011-11-07	XAMPP 1.7.7 - 'PHP_SELF' Multiple Cross-Site Scripting Vulnerabilities	remote	Windows
2011-11-07	Oracle NoSQL 11g 1.1.100 R2 - 'log' Directory Traversal	webapps	Java
2011-11-07	Linux Kernel 3.0.4 - '/proc/interrupts' Password Length Local Information Disclosure	local	Linux
2011-11-05	ZenPhoto 1.4.1.4 - 'ajax_create_folder.php' Remote Code Execution	webapps	PHP
2011-11-05	PHPMyFAQ 2.7.0 - 'ajax_create_folder.php' Remote Code Execution	webapps	PHP
2011-11-05	aidiCMS 3.55 - 'ajax_create_folder.php' Remote Code Execution	webapps	PHP
2011-11-05	Calibre E-Book Reader - Local Privilege Escalation (3)	local	Linux
2011-11-05	Microsoft Excel 2007 - '.xlb' Local Buffer Overflow (MS11-021) (Metasploit)	local	Windows
2011-11-04	[eZine] Owned and Exposed - ISSUE no 3	papers	eZine
2011-11-04	Ajax File and Image Manager 1.0 Final - Remote Code Execution	webapps	PHP
2011-11-04	Advanced Poll 2.02 - SQL Injection	webapps	PHP
2011-11-04	HP Data Protector Media Operations 6.20 - Directory Traversal	webapps	Windows
2011-11-04	Microsoft Excel 2003 11.8335.8333 - Use-After-Free	dos	Windows
2011-11-04	DreamBox DM800 1.5rc1 - File Disclosure	remote	Hardware
2011-11-04	Linux Kernel 2.6.37-rc1 - 'serial_multiport_struct' Local Information Leak	local	Linux
2011-11-04	WHMCompleteSolution (WHMCS) 3.x - 'clientarea.php' Local File Disclosure	webapps	PHP
2011-11-04	Mini-stream Ripper 3.0.1.1 - Local Buffer Overflow (Metasploit) (3)	local	Windows
2011-11-04	DreamBox DM800 - 'file' Local File Disclosure	webapps	Hardware
2011-11-04	WordPress Theme Bonus 1.0 - 's' Cross-Site Scripting	webapps	PHP
2011-11-04	Libc - 'regcomp()' Stack Exhaustion Denial of Service	dos	Multiple
2011-11-04	Centreon 2.3.1 - 'command_name' Remote Command Execution	webapps	PHP
2011-11-03	Jara 1.6 - Multiple Vulnerabilities	webapps	PHP
2011-11-03	Web File Browser 0.4b14 - File Download	webapps	PHP
2011-11-03	Calibre E-Book Reader - Local Privilege Escalation (2)	local	Linux
2011-11-03	Calibre E-Book Reader - Race Condition Privilege Escalation	local	Linux
2011-11-03	S9Y Serendipity 1.5.5 - 'serendipity[filter][bp.ALT]' Cross-Site Scripting	webapps	PHP
2011-11-03	CmyDocument - Multiple Cross-Site Scripting Vulnerabilities	webapps	ASP
2011-11-03	Google Android 2.3.5 - PowerVR SGX Driver Information Disclosure	remote	Android
2011-11-02	Oracle Hyperion Financial Management TList6 - ActiveX Control Remote Code Execution	remote	Windows
2011-11-02	BST (BestShopPro) - 'nowosci.php' Multiple Vulnerabilities	webapps	PHP
2011-11-02	Calibre E-Book Reader - Local Privilege Escalation (1)	local	Linux
2011-11-02	SetSeed CMS 5.8.20 - 'loggedInUser' SQL Injection	webapps	PHP
2011-11-02	CaupoShop Pro (2.x < 3.70) Classic 3.01 - Local File Inclusion	webapps	PHP
2011-11-02	Microsoft Excel 2007 SP2 - Buffer Overwrite (MS11-021)	local	Windows
2011-11-02	eFront 3.6.x - Multiple Cross-Site Scripting / SQL Injections	webapps	PHP
2011-11-02	Apache < 2.0.64 / < 2.2.21 mod_setenvif - Integer Overflow	dos	Linux
2011-11-01	[Hebrew] Digital Whisper Security Magazine #26	papers	Multiple
2011-11-01	ZTE ZXDSL 831IIV7.5.0a_Z29_OV - Multiple Vulnerabilities	webapps	Hardware
2011-11-01	Domain Shop - 'index.php' Cross-Site Scripting	webapps	PHP
2011-11-01	vBulletin 4.1.7 - Multiple Remote File Inclusions	webapps	PHP
2011-11-01	Hyperic HQ Enterprise 4.5.1 - Cross-Site Scripting / Multiple Security Vulnerabilities	webapps	JSP
2011-11-01	IBSng B1.34(T96) - 'str' Cross-Site Scripting	webapps	PHP
2011-11-01	eFront 3.6.10 Build 11944 - Multiple Cross-Site Scripting Vulnerabilities	webapps	PHP
2011-11-01	Symphony 2.2.3 - '/symphony/publish/images?filter' Cross-Site Scripting	webapps	PHP
2011-11-01	Symphony 2.2.3 - '/symphony/publish/comments?filter' SQL Injection	webapps	PHP
2011-10-31	Joomla! Component HM Community - Multiple Vulnerabilities	webapps	PHP
2011-10-31	BroadWin Webaccess SCADA/HMI Client - Remote Code Execution	remote	Windows
2011-10-31	Oracle DataDirect ODBC Drivers - HOST Attribute 'arsqls24.dll' Stack Buffer Overflow (PoC)	dos	Windows
2011-10-31	WordPress Theme classipress 3.1.4 - Persistent Cross-Site Scripting	webapps	PHP
2011-10-31	[Turkish] Heap, Overflows and Exploiting	papers	Windows
2011-10-31	WordPress Plugin Glossary - SQL Injection	webapps	PHP
2011-10-31	jbShop e107 7 CMS Plugin - SQL Injection	webapps	PHP
2011-10-31	NJStar Communicator 3.00 - MiniSMTP Server Remote (Metasploit)	remote	Windows
2011-10-31	Joomla! Component Alameda 1.0 - SQL Injection	webapps	PHP
2011-10-29	Joomla! Component Barter Sites 1.3 - Multiple Vulnerabilities	webapps	PHP
2011-10-29	PHP Photo Album 0.4.1.16 - Multiple Disclosure Vulnerabilities	webapps	PHP
2011-10-29	Joomla! Component com_jeemasms 3.2 - Multiple Vulnerabilities	webapps	PHP
2011-10-29	Joomla! Component Vik Real Estate 1.0 - Multiple Vulnerabilities	webapps	PHP
2011-10-29	Apple Mac OSX 10.6.5 / iOS 4.3.3 Mail - Denial of Service	dos	OSX
2011-10-28	Joomla! Component Techfolio 1.0 - SQL Injection	webapps	PHP
2011-10-28	GFI Faxmaker Fax Viewer 10.0 (build 237) - Denial of Service (PoC)	dos	Windows
2011-10-28	X.Org xorg 1.4 < 1.11.2 - File Permission Change	local	Linux
2011-10-28	eFront 3.6.10 - 'professor.php' Script Multiple SQL Injections	webapps	PHP
2011-10-28	Opera Web Browser 11.52 - Escape Sequence Stack Buffer Overflow (Denial of Service) (PoC)	dos	Windows
2011-10-28	SjXjV 2.3 - 'post.php' SQL Injection	webapps	PHP
2011-10-28	Plici Search 2.0.0.Stable.r.1878 - 'p48-search.html' Cross-Site Scripting	webapps	PHP
2011-10-27	eFront 3.6.10 (build 11944) - Multiple Vulnerabilities	webapps	PHP
2011-10-27	WordPress Plugin wptouch - SQL Injection	webapps	PHP
2011-10-26	Online Subtitles Workshop - Cross-Site Scripting	webapps	PHP
2011-10-26	phpScheduleIt 1.2.10 - 'reserve.php' Arbitrary Code Injection (Metasploit)	webapps	PHP
2011-10-26	GTA SA-MP - 'server.cfg' Local Buffer Overflow (Metasploit)	local	Windows
2011-10-26	vTiger CRM 5.2.1 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities (2)	webapps	PHP
2011-10-26	Cisco - 'file' Directory Traversal	remote	Hardware
2011-10-26	Trend Micro IWSS 3.1 - Local Privilege Escalation	local	Linux
2011-10-26	XAMPP 1.7.4 - Cross-Site Scripting	remote	Windows
2011-10-25	Joomla! Component com_yjcontactus - Local File Inclusion	webapps	PHP
2011-10-25	BlueZone Desktop - Multiple Malformed Files Local Denial of Service Vulnerabilities	dos	Windows
2011-10-25	phpLDAPadmin 1.2.1.1 - Remote PHP Code Injection (Metasploit) (2)	webapps	PHP
2011-10-25	Alsbtain Bulletin 1.5/1.6 - Multiple Local File Inclusions	webapps	PHP
2011-10-24	Cytel Studio 9.0 - '.CY3' Local Stack Buffer Overflow (Metasploit)	local	Windows
2011-10-24	zFTPServer - 'cwd/stat' Remote Denial of Service	dos	Windows
2011-10-24	BlueZone - '.zft' File Local Denial of Service	dos	Windows
2011-10-24	SAP Management Console - OSExecute Payload Execution (Metasploit)	webapps	Windows
2011-10-24	Oracle AutoVue 20.0.1 - 'AutoVueX.ocx' ActiveX Control 'ExportEdaBom()' Insecure Method	remote	Windows

2011-10-24	e107 0.7.24 - 'cmd' Remote Command Execution	webapps	PHP
2011-10-24	InverseFlow 2.4 - Multiple Cross-Site Scripting Vulnerabilities	webapps	PHP
2011-10-23	Jara 1.6 - SQL Injection	webapps	PHP
2011-10-23	phpLDAPadmin 1.2.1.1 - Remote PHP Code Injection (1)	webapps	PHP
2011-10-23	InverseFlow 2.4 - Cross-Site Request Forgery (Add Admin)	webapps	PHP
2011-10-23	phpLDAPadmin 0.9.4b - Denial of Service	dos	PHP
2011-10-23	Microsoft Win32k - Null Pointer De-reference (PoC) (MS11-077)	dos	Windows
2011-10-23	Google Chrome - Denial of Service	dos	Multiple
2011-10-22	Google Chrome - Killing Thread (PoC)	dos	Windows
2011-10-21	Opera 11.51 - Use-After-Free Crash (PoC)	dos	Windows
2011-10-21	Oracle AutoVue 20.0.1 AutoVueX - ActiveX Control SaveViewStateToFile	remote	Windows
2011-10-21	Cyclope Internet Filtering Proxy 4.0 - 'CEPMServer.exe' Denial of Service (PoC)	dos	Windows
2011-10-21	SportsPHool 1.0 - Remote File Inclusion	webapps	PHP
2011-10-21	DELL Quest One Password Manager - CAPTCHA Security Bypass	remote	Multiple
2011-10-20	CMS mini 0.2.2 - Local File Inclusion	webapps	PHP
2011-10-20	Uiga Personal Portal - Multiple Vulnerabilities	webapps	PHP
2011-10-20	fims File Management System 1.2.1a - Multiple Vulnerabilities	webapps	PHP
2011-10-20	Simple Free PHP Forum Script - SQL Injection	webapps	PHP
2011-10-20	OCS Inventory NG 2.0.1 - Persistent Cross-Site Scripting	webapps	Windows
2011-10-20	Opera 11.52 - Denial of Service (PoC)	dos	Windows
2011-10-20	Oracle DataDirect - Multiple Native Wire Protocol ODBC Drivers HOST Attribute Stack Buffer Overflows (PoC)	dos	Windows
2011-10-20	Opera 11.52 - Stack Overflow	dos	Windows
2011-10-20	Pre Studio Business Cards Designer - SQL Injection	webapps	ASP
2011-10-20	Skype Software Vulnerabilities - 0Day Exploitation 2011	papers	Multiple
2011-10-20	UnrealIRCd 3.2.8.1 - Local Configuration Stack Overflow	dos	Windows
2011-10-20	Metasploit 4.1.0 Web UI - Persistent Cross-Site Scripting	webapps	Multiple
2011-10-20	Cyclope Internet Filtering Proxy 4.0 - Persistent Cross-Site Scripting	webapps	Windows
2011-10-20	HP Power Manager - 'formExportDataLogs' Remote Buffer Overflow (Metasploit)	remote	CGI
2011-10-20	Innovate Portal 2.0 - 'cat' Cross-Site Scripting	webapps	PHP
2011-10-20	Splunk 4.1.6 - 'segment' Cross-Site Scripting	remote	Multiple
2011-10-20	Splunk 4.1.6 Web Component - Remote Denial of Service	dos	Multiple
2011-10-20	osCommerce - Arbitrary File Upload / File Disclosure	webapps	PHP
2011-10-20	Tine 2.0 - Multiple Cross-Site Scripting Vulnerabilities	webapps	PHP
2011-10-19	Yet Another CMS 1.0 - SQL Injection / Cross-Site Scripting	webapps	PHP
2011-10-19	Openemr-4.1.0 - SQL Injection	webapps	PHP
2011-10-19	WHMCompleteSolution (WHMCS) 3.x < 4.0.x - 'cart.php' Local File Disclosure	webapps	PHP
2011-10-19	1024 CMS 1.1.0 Beta - 'force_download.php' Local File Inclusion	webapps	PHP
2011-10-19	Boonex Dolphin 6.1 - 'get_list.php' SQL Injection	webapps	PHP
2011-10-18	Apple Safari Webkit - libxslt Arbitrary File Creation (Metasploit)	remote	Windows
2011-10-18	Dolphin 7.0.7 - 'member_menu_queries.php' Remote PHP Code Injection	webapps	PHP
2011-10-18	Joomla! Plugin NoNumber Framework - Multiple Vulnerabilities	webapps	PHP
2011-10-18	Linux/MIPS - XOR Encoder Shellcode (60 bytes) (Generator)	shellcode	Generator
2011-10-18	Check Point UTM-1 Edge and Safe 8.2.43 - Multiple Vulnerabilities	remote	Hardware
2011-10-18	Site@School 2.4.10 - '/index.php' Cross-Site Scripting / SQL Injection	webapps	PHP
2011-10-17	Apple Safari - 'file://' Arbitrary Code Execution (Metasploit)	remote	OSX
2011-10-17	WordPress Plugin BackWPUp 2.1.4 - Code Execution	webapps	PHP
2011-10-17	Dominant Creature BBG/RPG Browser Game - Persistent Cross-Site Scripting	webapps	PHP
2011-10-17	Security Issues in Android Custom ROM	papers	Android
2011-10-17	GNUBoard 4.33.02 - 'tp.php?PATH_INFO' SQL Injection	webapps	PHP
2011-10-17	asgbookPHP 1.9 - 'index.php' Cross-Site Scripting	webapps	PHP
2011-10-17	Toshiba e-Studio (Multiple Devices) - Security Bypass	remote	Multiple
2011-10-16	Real Networks Netzip Classic 7.5.1 86 - File Parsing Buffer Overflow (Metasploit)	local	Windows
2011-10-16	Ruubikcms 1.1.0 - '/extra/image.php' Local File Inclusion	webapps	PHP
2011-10-15	Microsoft Windows - TCP/IP Stack Denial of Service (MS11-064)	dos	Windows
2011-10-15	BlueZone Desktop - '.zap' file Local Denial of Service	dos	Windows
2011-10-15	WordPress Plugin Photo Album Plus 4.1.1 - SQL Injection	webapps	PHP
2011-10-15	vTiger CRM 5.2 - 'onlyforuser' SQL Injection	webapps	PHP
2011-10-14	SCADA and PLC Vulnerabilities in Correctional Facilities	papers	Hardware
2011-10-14	WordPress Plugin Contact Form 2.7.5 - SQL Injection	webapps	PHP
2011-10-14	PROMOTIC 8.1.3 - Multiple Vulnerabilities	remote	Windows
2011-10-14	Xenon - 'id' Multiple SQL Injections	webapps	PHP
2011-10-13	Mozilla Firefox - 'Array.reduceRight()' Integer Overflow (Metasploit) (2)	remote	Windows
2011-10-13	Microsoft Windows - '.fon' Kernel-Mode Buffer Overrun (PoC) (MS11-077)	dos	Windows
2011-10-13	Microsys PROMOTIC 8.1.4 - ActiveX GetPromoticSite Unitialized Pointer	dos	Windows
2011-10-13	WordPress Plugin Pretty Link 1.4.56 - Multiple Cross-Site Scripting Vulnerabilities	webapps	PHP
2011-10-13	G-WAN 2.10.6 - Buffer Overflow (Denial of Service) (PoC)	dos	Multiple
2011-10-12	Buffer Overflow Exploitation SEH	papers	Windows
2011-10-12	MyBB MyStatus 3.1 - SQL Injection	webapps	PHP
2011-10-12	WordPress Plugin GD Star Rating 1.9.10 - SQL Injection	webapps	PHP
2011-10-12	Mozilla Firefox - 'Array.reduceRight()' Integer Overflow (1)	remote	Windows
2011-10-12	PcVue 10.0 SV.UIGrdCtrl.1 - 'LoadObject()'/'SaveObject()' Trusted DWORD (Metasploit)	remote	Windows
2011-10-12	Joomla! Component com_sgicatalog 1.0 - 'id' SQL Injection	webapps	PHP
2011-10-12	BugFree 2.1.3 - Multiple Cross-Site Scripting Vulnerabilities	webapps	PHP
2011-10-11	WordPress Plugin WP-SpamFree Spam Plugin - SQL Injection	webapps	PHP
2011-10-11	Apache mod_proxy - Reverse Proxy Exposure	remote	Multiple
2011-10-11	TugZip 3.5 Archiver - '.ZIP' File Parsing Buffer Overflow (Metasploit)	local	Windows
2011-10-11	Evading Antimalware Engines via Assembly Ghostwriting	papers	Windows
2011-10-11	JBoss AS 2.0 - Remote Command Execution	remote	Windows
2011-10-11	Microsoft Internet Explorer 8 - Select Element Memory Corruption	remote	Windows
2011-10-11	Joomla! Component com_tree - 'key' SQL Injection	webapps	PHP
2011-10-11	Joomla! Component com_br - 'state_id' SQL Injection	webapps	PHP
2011-10-11	Joomla! Component com_shop - 'id' SQL Injection	webapps	PHP
2011-10-11	2Moons 1.4 - Multiple Remote File Inclusions	webapps	PHP
2011-10-11	SilverStripe CMS 2.4.5 - Multiple Cross-Site Scripting Vulnerabilities	webapps	PHP
2011-10-10	openEngine 2.0 - Multiple Blind SQL Injection Vulnerabilities	webapps	PHP
2011-10-10	KaiBB 2.0.1 - SQL Injection	webapps	PHP
2011-10-10	Filmis 0.2 Beta - Multiple Vulnerabilities	webapps	PHP
2011-10-10	6kbbs - Multiple Vulnerabilities	webapps	PHP
2011-10-10	Roundcube Webmail 0.3.1 - Cross-Site Request Forgery / SQL Injection	webapps	PHP
2011-10-10	cotonti CMS 0.9.4 - Multiple Vulnerabilities	webapps	PHP
2011-10-10	POSH - Multiple Vulnerabilities	webapps	PHP
2011-10-10	Opera Browser 10/11/12 - 'SVG Layout' Memory Corruption (Metasploit)	remote	Windows
2011-10-10	MyBB Advanced Forum Signatures - 'afsignatures-2.0.4' SQL Injection	webapps	PHP
2011-10-10	MyBB Forum Userbar Plugin (Userbar 2.2) - SQL Injection	webapps	PHP
2011-10-10	atvise webMI2ADS Web Server 1.0 - Multiple Vulnerabilities	dos	Windows
2011-10-10	IRAI AUTOMGEN 8.0.0.7 - Use-After-Free	dos	Windows
2011-10-10	OPC Systems.NET 4.00.0048 - Denial of Service	dos	Windows
2011-10-10	ACDSee FotoSlate - '.PLP' File 'id' Local Overflow (Metasploit)	local	Windows
2011-10-10	Jaws 0.8.14 - Multiple Remote File Inclusions	webapps	PHP
2011-10-10	GoAhead Web Server 2.18 - 'addgroup.asp?group' Cross-Site Scripting	remote	Windows
2011-10-10	GoAhead Web Server 2.18 - 'addlimit.asp?url' Cross-Site Scripting	remote	Windows
2011-10-10	GoAhead Web Server 2.18 - 'adduser.asp' Multiple Cross-Site Scripting Vulnerabilities	remote	Windows
2011-10-10	6KBBS 8.0 build 20101201 - Cross-Site Scripting / Information Disclosure	webapps	PHP
2011-10-09	Snortreport - '/nmap.php' / 'nbtscan.php' Remote Command Execution (Metasploit)	webapps	PHP
2011-10-09	ScriptFTP 3.3 - LIST Remote Buffer Overflow (Metasploit) (2)	remote	Windows
2011-10-09	MyBB 1.6.4 - Backdoor Access (Metasploit)	webapps	PHP
2011-10-09	GotoCode Online Classifieds - Multiple Vulnerabilities	webapps	PHP
2011-10-09	Joomla! Component com_expedition - 'id' SQL Injection	webapps	PHP
2011-10-08	pkexec - Race Condition Privilege Escalation	local	Linux
2011-10-08	BOOKSolved 1.2.2 - Remote File Disclosure	webapps	PHP
2011-10-08	Joomla! Component Time Returns 2.0 - SQL Injection	webapps	PHP
2011-10-08	[French] Le sidejacking avec pycookiejsinject	papers	Multiple
2011-10-08	NexusPHP 1.5 - SQL Injection	webapps	PHP
2011-10-07	URL Shortener Script 1.0 - SQL Injection	webapps	PHP
2011-10-07	EFront 3.6.9 Community Edition - Multiple Vulnerabilities	webapps	PHP
2011-10-07	BlazeVideo HDTV Player 6.6 Professional - Universal ASLR + DEP Bypass	local	Windows
2011-10-07	Linux/MIPS - execve(/bin/sh) Shellcode (52 bytes)	shellcode	Linux_MIPS
2011-10-07	Spreecommerce 0.60.1 - Arbitrary Command Execution (Metasploit)	webapps	Linux
2011-10-07	BuzzyWall 1.3.2 - 'resolute.php' Information Disclosure	webapps	PHP
2011-10-06	Beyond SQLi: Obfuscate and Bypass	papers	Multiple

2011-10-06	Tsmim Lessons Library - 'show.php' SQL Injection	webapps	PHP
2011-10-06	Opera 10/11 - Bad Nesting with Frameset Tag Memory Corruption (Metasploit)	remote	Windows
2011-10-06	Active CMS 1.2 - 'mod' Cross-Site Scripting	webapps	PHP
2011-10-06	PHP 5.3.11/5.4.0RC2 - 'header()' HTTP Header Injection	remote	PHP
2011-10-05	PolicyKit polkit-1 < 0.101 - Local Privilege Escalation	local	Linux
2011-10-05	DivX Plus Web Player - 'file://' Buffer Overflow (PoC)	dos	Windows
2011-10-04	Concrete5 CMS < 5.4.2.1 - Multiple Vulnerabilities	webapps	PHP
2011-10-04	Easy Hosting Control Panel - Admin Authentication Bypass	webapps	PHP
2011-10-04	CF Image Hosting Script 1.3.82 - File Disclosure	webapps	PHP
2011-10-04	Ashampoo Burning Studio Elements 10.0.9 - '.ashprj' Heap Overflow	dos	Windows
2011-10-04	Google Chrome < 14.0.835.163 - '.pdf' File Handling Memory Corruption	dos	Windows
2011-10-04	Cytel Studio 9.0.0 - Multiple Vulnerabilities	dos	Windows
2011-10-04	GenStat 14.1.0.5943 - Multiple Vulnerabilities	dos	Windows
2011-10-04	vTiger CRM 5.2.1 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities (1)	webapps	PHP
2011-10-04	vTiger CRM 5.2.1 - 'PHPrint.php' Multiple Cross-Site Scripting Vulnerabilities	webapps	PHP
2011-10-04	SonicWALL - 'SessId' Cookie Brute Force / Admin Session Hijacking	remote	Hardware
2011-10-03	GotoCode Online Bookstore - Multiple Vulnerabilities	webapps	ASP
2011-10-03	Bypassing IDS with Return Oriented Programming	papers	Linux
2011-10-03	JBoss & JMX Console - Misconfigured Deployment Scanner	webapps	JSP
2011-10-03	Netvolution 2.5.8 - 'referer' Header SQL Injection	webapps	PHP
2011-10-03	Phorum 5.2.18 - '/admin/index.php' Cross-Site Scripting	webapps	PHP
2011-10-02	Frontal Attacks - From Basic Compromise to Advanced Persistent Threat	papers	Multiple
2011-10-02	Spying on Internet Explorer 8.0	papers	Windows
2011-10-02	Bypassing ASLR/DEP	papers	Windows
2011-10-02	JBoss Exploitation	papers	Multiple
2011-10-02	Wireless Hacking & Wireless Security	papers	Hardware
2011-10-02	[Hebrew] Digital Whisper Security Magazine #25	papers	Multiple
2011-10-02	Adobe Photoshop Elements 8.0 - Multiple Arbitrary Code Execution Vulnerabilities	dos	Windows
2011-10-02	Banana Dance CMS and Wiki - SQL Injection	webapps	PHP
2011-10-02	Vivvo CMS - Local File Inclusion	webapps	PHP
2011-10-02	CA Total Defense Suite - reGenerateReports Stored procedure SQL Injection (Metasploit)	webapps	CGI
2011-10-02	SonicWALL Viewpoint 6.0 - 'scheduleID' SQL Injection	webapps	PHP
2011-10-02	Perl 5.x - Digest Module 'Digest->new()' Code Injection	remote	Linux
2011-10-02	ContaoCMS 2.10.1 - Cross-Site Scripting	webapps	PHP
2011-10-01	ezCourses - 'admin.asp' Security Bypass	webapps	PHP
2011-10-01	Polipo 1.0.4.1 - POST/PUT HTTP Header Processing Denial of Service	dos	Multiple
2011-09-30	WordPress Plugin Bannerize 2.8.7 - SQL Injection	webapps	PHP
2011-09-30	Embedding the Payload	papers	Multiple
2011-09-30	FreeBSD - UIPC socket heap Overflow (PoC)	dos	FreeBSD
2011-09-30	Marinet CMS - 'room.php' Blind SQL Injection	webapps	PHP
2011-09-30	Busting Windows With Backtrack 5 R1 & Metasploit Framework 4.0	papers	Multiple
2011-09-30	Feed on Feeds 0.5 - Remote PHP Code Injection	webapps	PHP
2011-09-30	WordPress Theme Morning Coffee 3.5 - 'index.php' Cross-Site Scripting	webapps	PHP
2011-09-30	WordPress Theme Black-LetterHead 1.5 - 'index.php' Cross-Site Scripting	webapps	PHP
2011-09-30	WordPress Theme RedLine 1.65 - 's' Cross-Site Scripting	webapps	PHP
2011-09-30	WordPress Plugin WP Bannerize 2.8.7 - 'ajax_sorter.php' SQL Injection	webapps	PHP
2011-09-30	ProjectForum 7.0.1 3038 - 'more' Object HTML Injection	webapps	PHP
2011-09-29	NCSS 07.1.21 - Array Overflow with Write2	dos	Windows
2011-09-29	ScriptFTP 3.3 - Remote Buffer Overflow (Metasploit)	remote	Windows
2011-09-29	Typo3 - File Disclosure	webapps	PHP
2011-09-29	Joomla! < 1.7.0 - Multiple Cross-Site Scripting Vulnerabilities	webapps	PHP
2011-09-29	Bitweaver 2.8.1 - Multiple Cross-Site Scripting Vulnerabilities	webapps	PHP
2011-09-29	WordPress Theme Atahualpa 3.6.7 - 's' Cross-Site Scripting	webapps	PHP
2011-09-29	WordPress Theme Elegant Grunge 1.0.3 - 's' Cross-Site Scripting	webapps	PHP
2011-09-29	WordPress Theme EvoLve 1.2.5 - 's' Cross-Site Scripting	webapps	PHP
2011-09-29	WordPress Theme Pixiv Custom Theme 2.1.5 - 'cpage' Cross-Site Scripting	webapps	PHP
2011-09-28	timelive time and expense tracking 4.1.1 - Multiple Vulnerabilities	webapps	ASP
2011-09-28	Hacking your Droid	papers	Hardware
2011-09-28	Apple Mac OSX < 10.6.7 - Kernel Panic (Denial of Service)	dos	OSX
2011-09-28	Norman Security Suite 8 - 'nprosec.sys' Local Privilege Escalation	local	Windows
2011-09-28	Traq 2.2 - Multiple SQL Injections / Cross-Site Scripting	webapps	PHP
2011-09-28	A2CMS - 'index.php' Local File Disclosure	webapps	PHP
2011-09-27	WordPress Plugin Mingle Forum 1.0.31 - SQL Injection	webapps	PHP
2011-09-27	Jarida 1.0 - Multiple Vulnerabilities	webapps	PHP
2011-09-27	PcVue 10.0 - Multiple Vulnerabilities	dos	Windows
2011-09-27	Omnidocs - Multiple Vulnerabilities	webapps	JSP
2011-09-27	redmind Online-Shop / E-Commerce-System - SQL Injection	webapps	PHP
2011-09-27	Adobe ColdFusion 7 - Multiple Cross-Site Scripting Vulnerabilities	webapps	CFM
2011-09-27	Vanira CMS - 'vtpidshow' SQL Injection	webapps	PHP
2011-09-27	ServersCheck Monitoring Software 8.8.x - Multiple Vulnerabilities	remote	Windows
2011-09-26	Sterling Trader 7.0.2 - Integer Overflow	dos	Windows
2011-09-26	GMER 1.0.15.15641 - MFT Overwrite	dos	Windows
2011-09-26	WordPress Plugin CevherShare 2.0 - SQL Injection	webapps	PHP
2011-09-26	Muse Music All-in-One 1.5.0.001 - '.pls' Local Buffer Overflow (DEP Bypass)	local	Windows
2011-09-26	GTA SA-MP server.cfg - Local Buffer Overflow	local	Windows
2011-09-26	WordPress Plugin BuddyPress 1.2.10 / WordPress Theme DEV Blogs Mu 1.2.6 (WordPress 3.1.4) - Regular Subscriber HTML Injection	webapps	PHP
2011-09-26	AdaptCMS 2.0.1 - Cross-Site Scripting / Information Disclosure	webapps	PHP
2011-09-26	S9Y Serendipity Freetag-plugin 3.23 - 'serendipity[tagview]' Cross-Site Scripting	webapps	PHP
2011-09-26	Joomla! Component Biitatemplateshop - 'groups' SQL Injection	webapps	PHP
2011-09-24	WordPress Plugin Link Library 5.2.1 - SQL Injection	webapps	PHP
2011-09-24	WordPress Plugin AdRotate 3.6.5 - SQL Injection	webapps	PHP
2011-09-24	IceWarp Mail Server 10.3.2 server/webmail.php Soap Message Parsing - Arbitrary File Disclosure	webapps	PHP
2011-09-24	WordPress Theme Hybrid 0.9 - 'cpage' Cross-Site Scripting	webapps	PHP
2011-09-24	WordPress Theme F8 Lite 4.2.1 - 's' Cross-Site Scripting	webapps	PHP
2011-09-24	WordPress Theme Cover WP 1.6.5 - 's' Cross-Site Scripting	webapps	PHP
2011-09-24	WordPress Theme Web Minimalist 1.1 - 'index.php' Cross-Site Scripting	webapps	PHP
2011-09-24	WordPress Theme Trending 0.1 - 'cpage' Cross-Site Scripting	webapps	PHP
2011-09-24	PHP PDORow Object - Remote Denial of Service	dos	PHP
2011-09-23	sunway ForceControl 6.1 sp3 - Multiple Vulnerabilities	dos	Windows
2011-09-23	Freefloat FTP Server - Remote Buffer Overflow (DEP Bypass)	remote	Windows
2011-09-22	JAKCMS PRO 2.2.5 - Arbitrary File Upload	webapps	PHP
2011-09-22	Blue Coat Reporter - Directory Traversal	remote	Hardware
2011-09-22	Cogent Datahub 7.1.1.63 - Remote Unicode Buffer Overflow	remote	Windows
2011-09-22	Zyncro 3.0.1.20 - Multiple HTML Injection Vulnerabilities	webapps	PHP
2011-09-22	Zyncro 3.0.1.20 - Social Network Message Menu SQL Injection	webapps	PHP
2011-09-22	TWiki 5.0.2 - '/bin/view/Main/Jump?newtopic' Cross-Site Scripting	webapps	PHP
2011-09-22	TWiki 5.0.2 SlideShowPlugin - Slide Show Pages URI Cross-Site Scripting	webapps	PHP
2011-09-22	AWStats 6.95/7.0 - 'awredir.pl' Multiple Cross-Site Scripting Vulnerabilities	webapps	PHP
2011-09-21	EViews 7.0.0.1 (aka 7.2) - Multiple Vulnerabilities	dos	Windows
2011-09-21	MetaServer RT 3.2.1.450 - Multiple Vulnerabilities	dos	Windows
2011-09-21	Clickjacking for Shells	papers	Multiple
2011-09-21	i-Gallery 3.4 - 'd' Cross-Site Scripting	webapps	ASP
2011-09-21	OneCMS 2.6.4 - Multiple SQL Injections	webapps	PHP
2011-09-20	SharePoint 2007/2010 and DotNetNuke < 6 - File Disclosure (via XEE)	webapps	Windows
2011-09-20	NETGEAR Wireless Cable Modem Gateway - Authentication Bypass / Cross-Site Request Forgery	webapps	Hardware
2011-09-20	Bypassing IE's XSS Filter	papers	Windows
2011-09-20	ScriptFTP 3.3 - Remote Buffer Overflow (LIST) (1)	remote	Windows
2011-09-20	AVCon - DEP Bypass	local	Windows
2011-09-20	eSignal and eSignal Pro 10.6.2425.1208 - File Parsing Buffer Overflow in QUO (Metasploit)	local	Windows
2011-09-20	IBM Lotus Domino 8.5.2 - 'NSFComputeEvaluateExt()' Remote Stack Buffer Overflow	remote	Windows
2011-09-19	WordPress Plugin Filedownload 0.1 - 'download.php' Remote File Disclosure	webapps	PHP
2011-09-19	Toko Lite CMS 1.5.2 - 'edit.php' HTTP Response Splitting	webapps	PHP
2011-09-19	WordPress Plugin TheCartPress 1.1.1 - Remote File Inclusion	webapps	PHP
2011-09-19	WordPress Plugin AllWebMenus 1.1.3 - Remote File Inclusion	webapps	PHP
2011-09-19	WordPress Plugin WPEasyStats 1.8 - Remote File Inclusion	webapps	PHP
2011-09-19	WordPress Plugin Annonces 1.2.0.0 - Remote File Inclusion	webapps	PHP
2011-09-19	WordPress Plugin Livesig 0.4 - Remote File Inclusion	webapps	PHP
2011-09-19	WordPress Plugin Disclosure Policy 1.0 - Remote File Inclusion	webapps	PHP
2011-09-19	WordPress Plugin Mailing List 1.3.2 - Remote File Inclusion	webapps	PHP
2011-09-19	WordPress Plugin Zingiri Web Shop 2.2.0 - Remote File Inclusion	webapps	PHP

2011-09-19	WordPress Plugin Mini Mail Dashboard Widget 1.36 - Remote File Inclusion	webapps	PHP
2011-09-19	WordPress Plugin Relocate Upload 0.14 - Remote File Inclusion	webapps	PHP
2011-09-19	KnFTP 1.0.0 Server - 'USER' Remote Buffer Overflow	remote	Windows
2011-09-19	Cisco TelePresence SOS-11-010 - Multiple Vulnerabilities	webapps	Hardware
2011-09-19	Multiple WordPress Plugins - 'timthumb.php' File Upload	webapps	PHP
2011-09-19	Toko Lite CMS 1.5.2 - HTTP Response Splitting / Cross-Site Scripting	webapps	PHP
2011-09-19	Aspgwy Access 1.0 - 'matchword' Cross-Site Scripting	webapps	ASP
2011-09-19	net4visions (Multiple Products) - 'dir' Multiple Cross-Site Scripting Vulnerabilities	webapps	PHP
2011-09-19	Apple Mac OSX (Lion) - Directory Services Security Bypass	local	OSX
2011-09-19	Card sharj 1.0 - Multiple SQL Injections	webapps	PHP
2011-09-18	WordPress Plugin Count per Day 2.17 - SQL Injection	webapps	PHP
2011-09-18	DaqFactory - HMI NETB Request Overflow (Metasploit)	remote	Windows
2011-09-18	KnFTP 1.0.0 Server - Multiple Buffer Overflows (PoC) (SEH)	dos	Windows
2011-09-18	ASP Basit Haber Script 1.0 - 'id' SQL Injection	webapps	ASP
2011-09-18	phpRS 2.8.1 - Multiple SQL Injections / Cross-Site Scripting	webapps	PHP
2011-09-17	RealNetworks Realplayer - QCP Parsing Heap Overflow (Metasploit)	remote	Windows
2011-09-17	iBrowser Plugin 1.4.1 - 'lang' Local File Inclusion	webapps	PHP
2011-09-17	iManager Plugin 1.2.8 - 'lang' Local File Inclusion	webapps	PHP
2011-09-17	iManager Plugin 1.2.8 - 'd' Arbitrary File Deletion	webapps	PHP
2011-09-17	MY MP3 Player 3.0 - '.m3u' DEP Bypass	local	Windows
2011-09-17	Ay Computer (Multiple Products) - Multiple SQL Injections	webapps	ASP
2011-09-16	Mini-stream Ripper 2.9.7 - DEP Bypass	local	Windows
2011-09-16	Measuresoft ScadaPro 4.0.0 - Remote Command Execution (Metasploit)	remote	Windows
2011-09-16	PunBB 1.3.5 - Multiple Cross-Site Scripting Vulnerabilities	webapps	PHP
2011-09-15	Top Five ColdFusion Security Issues	papers	CFM
2011-09-15	Nortel Contact Recording Centralized Archive 6.5.1 - SQL Injection	webapps	JSP
2011-09-15	StarDevelop LiveHelp 2.0 - 'index.php' Local File Inclusion	webapps	PHP
2011-09-14	WordPress Plugin E-Commerce 3.8.6 - SQL Injection	webapps	PHP
2011-09-14	[Indonesian] Devilzc0de E-Magazine #3	papers	Multiple
2011-09-14	Beckhoff TwinCAT 2.11.0.2004 - Denial of Service	dos	Windows
2011-09-14	Equis MetaStock 11 - Use-After-Free	dos	Windows
2011-09-14	eSignal and eSignal Pro 10.6.2425.1208 - Multiple Vulnerabilities	dos	Windows
2011-09-14	Cogent DataHub 7.1.1.63 - Stack Overflow	dos	Windows
2011-09-14	Cogent DataHub 7.1.1.63 - Integer Overflow	dos	Windows
2011-09-14	Cogent DataHub 7.1.1.63 - Source Disclosure	webapps	Windows
2011-09-14	DaqFactory 5.85 build 1853 - Stack Overflow	dos	Windows
2011-09-14	progea movicon / powerhmi 11.2.1085 - Multiple Vulnerabilities	dos	Windows
2011-09-14	Rockwell RSLogix 19 - Denial of Service	dos	Windows
2011-09-14	Measuresoft ScadaPro 4.0.0 - Multiple Vulnerabilities	dos	Windows
2011-09-14	Microsoft SharePoint 2007/2010 - 'Source' Multiple Open Redirections	webapps	ASP
2011-09-14	WordPress Plugin Auctions 1.8.8 - 'wpa_id' SQL Injection	webapps	PHP
2011-09-13	dotProject 2.1.5 - SQL Injection	webapps	PHP
2011-09-13	WordPress Plugin Forum Server 1.7 - SQL Injection	webapps	PHP
2011-09-13	Microsoft WINS Service 5.2.3790.4520 - Memory Corruption (MS11-035)	dos	Windows
2011-09-13	Microsoft WINS - ECommEndDlg Input Validation Error (MS11-035/MS11-070)	dos	Windows
2011-09-13	ScadaTEC ScadaPhone 5.3.11.1230 - Local Stack Buffer Overflow (Metasploit)	local	Windows
2011-09-13	Carel PlantVisor 2.4.4 - Directory Traversal	webapps	Windows
2011-09-12	ScadaTEC ModbusTagServer & ScadaPhone - '.zip' Local Buffer Overflow	local	Windows
2011-09-12	TomatoCart 1.1 - (Authenticated) Local File Inclusion	webapps	PHP
2011-09-12	KnFTP Server - Remote Buffer Overflow	remote	Windows
2011-09-12	Aika 0.2 - colladaconverter Xml Parsing Buffer Overflow	local	Windows
2011-09-12	Wav Player 1.1.3.6 - '.pll' Local Buffer Overflow	local	Windows
2011-09-12	PHP Support Tickets 2.2 - Code Execution	webapps	PHP
2011-09-12	NetCat CMS - Multiple Vulnerabilities	webapps	PHP
2011-09-12	Slaed CMS - Code Execution	webapps	PHP
2011-09-12	AstroCMS - Multiple Vulnerabilities	webapps	PHP
2011-09-12	Procyon Core Server HMI 1.13 - 'Coreservice.exe' Remote Stack Buffer Overflow (Metasploit)	remote	Windows
2011-09-12	Papoo CMS Light 4.0 - Multiple Cross-Site Scripting Vulnerabilities	webapps	PHP
2011-09-12	Orion Network Performance Monitor 10.1.3 - 'CustomChart.aspx' Cross-Site Scripting	webapps	ASP
2011-09-10	WordPress Plugin Tune Library 2.17 - SQL Injection	webapps	PHP
2011-09-09	WordPress Plugin WP-Filebase Download Manager 0.2.9 - SQL Injection	webapps	PHP
2011-09-09	WordPress Plugin A to Z Category Listing 1.3 - SQL Injection	webapps	PHP
2011-09-09	BisonWare BisonFTP Server 3.5 - Remote Buffer Overflow (Metasploit)	remote	Windows
2011-09-09	MYRE Real Estate Software - Multiple Vulnerabilities	webapps	PHP
2011-09-09	Xataface WebAuction and Xataface Librarian DB - Multiple Vulnerabilities	webapps	PHP
2011-09-09	WordPress Plugin Event Registration 5.44 - SQL Injection	webapps	PHP
2011-09-09	MelOn Player 1.0.11.x - Denial of Service (PoC)	dos	Windows
2011-09-09	Spring Security - HTTP Header Injection	remote	Multiple
2011-09-08	WordPress Plugin Paid Downloads 2.01 - SQL Injection	webapps	PHP
2011-09-08	WordPress Plugin Community Events 1.2.1 - SQL Injection	webapps	PHP
2011-09-08	LFI With PHPInfo Assistance	papers	PHP
2011-09-08	AM4SS 1.2 - Cross-Site Request Forgery (Add Admin)	webapps	PHP
2011-09-08	WordPress Plugin 1 Flash Gallery 1.30 < 1.5.7a - Arbitrary File Upload (Metasploit)	webapps	PHP
2011-09-08	Inline Hooking in Windows	papers	Windows
2011-09-08	DVD X Player 5.5 Pro - Local Overflow (SEH + ASLR + DEP Bypass)	local	Windows
2011-09-08	FTP Client (Ubuntu 11.04) - Local Buffer Overflow Crash (PoC)	dos	Linux
2011-09-08	OpenCart 1.5.1.2 - Blind SQL Injection	webapps	PHP
2011-09-08	SkaDate - 'blogs.php' Cross-Site Scripting	webapps	PHP
2011-09-08	In-link 2.3.4/5.1.3 RC1 - 'cat' SQL Injection	webapps	PHP
2011-09-08	Wireshark 1.6.1 - Malformed Packet Trace File Remote Denial of Service	dos	Windows
2011-09-08	Pluck CMS 4.7 - Multiple Local File Inclusion / File Disclosure Vulnerabilities	webapps	PHP
2011-09-07	WordPress Plugin SCORM Cloud 1.0.6.6 - SQL Injection	webapps	PHP
2011-09-07	WordPress Plugin Eventify - Simple Events 1.7.f SQL Injection	webapps	PHP
2011-09-07	Crush FTP 5 - 'APPE' Remote JVM Blue Screen of Death (PoC)	dos	Windows
2011-09-07	Microsoft Windows Server 2008 R1 - Local Denial of Service	dos	Windows
2011-09-06	DVD X Player 5.5 Pro - Overwrite (SEH)	local	Windows
2011-09-06	WordPress Plugin Tweet Old Post 3.2.5 - SQL Injection	webapps	PHP
2011-09-06	WordPress Plugin post highlights 2.2 - SQL Injection	webapps	PHP
2011-09-06	WordPress Plugin KNR Author List Widget 2.0.0 - SQL Injection	webapps	PHP
2011-09-06	PlaySms 0.9.5.2 - Remote File Inclusion	webapps	PHP
2011-09-06	Apple QuickTime 7.6.9 - 'QuickTimePlayer.dll' ActiveX Buffer Overflow	remote	Windows
2011-09-06	Kisanji - 'gr' Cross-Site Scripting	webapps	ASP
2011-09-06	GeoClassifieds Lite 2.0.x - Multiple Cross-Site Scripting / SQL Injections	webapps	PHP
2011-09-06	Free Help Desk 1.1b - Multiple Input Validation Vulnerabilities	webapps	PHP
2011-09-05	Linux Kernel < 2.6.36.2 (Ubuntu 10.04) - 'Half-Nelson.c' Econet Privilege Escalation	local	Linux
2011-09-05	WordPress Plugin oQey Gallery 0.4.8 - SQL Injection	webapps	PHP
2011-09-05	CoolPlayer Portable 2.19.2 - Local Buffer Overflow (ASLR Bypass) (1)	local	Windows
2011-09-05	World Of Warcraft - 'chat-cache.txt' Local Stack Overflow Denial of Service	dos	Windows
2011-09-05	Elite Gaming Ladders 3.6 - SQL Injection	webapps	PHP
2011-09-05	ZipX 1.71 - '.ZIP' File Buffer Overflow	local	Windows
2011-09-05	Recursive Stack Overflows	papers	Linux
2011-09-05	TOWeb 3.0 - Local Format String Denial of Service 'TOWeb.MO' File Corruption	dos	Windows
2011-09-05	Webmobo WB News System - Blind SQL Injection	webapps	PHP
2011-09-05	Cerberus FTP Server 4.0.9.8 - Remote Buffer Overflow	remote	Windows
2011-09-05	Advanced Image Hosting Script 2.3 - 'report.php' Cross-Site Scripting	webapps	PHP
2011-09-05	EasyGallery 5 - 'index.php' Multiple SQL Injections	webapps	PHP
2011-09-05	Zikula Application Framework 1.2.7/1.3 - 'themename' Cross-Site Scripting	webapps	PHP
2011-09-04	WordPress Plugin Zotpress 4.4 - SQL Injection	webapps	PHP
2011-09-03	WordPress Plugin Facebook Opengraph Meta 1.0 - SQL Injection	webapps	PHP
2011-09-03	openads-2.0.11 - Remote File Inclusion	webapps	PHP
2011-09-03	Simple x64 XOR Shellcode Obfuscation	papers	Multiple
2011-09-03	Apple QuickTime - PICT PnSize Buffer Overflow (Metasploit)	local	Windows
2011-09-02	WordPress Plugin VideoWhisper Video Presentation 1.1 - SQL Injection	webapps	PHP
2011-09-02	BroadWin Webaccess Client - Multiple Vulnerabilities	dos	Windows
2011-09-02	Mambo Component N-Skyrslur - Cross-Site Scripting	webapps	PHP
2011-09-02	Mambo Component N-Gallery - SQL Injection	webapps	PHP
2011-09-02	Mambo Component Ahsshop - SQL Injection	webapps	PHP
2011-09-02	Mambo Component N-Press - SQL Injection	webapps	PHP
2011-09-02	KaiBB 2.0.1 - SQL Injection / Arbitrary File Upload	webapps	PHP
2011-09-02	Mambo Component N-Frettir - SQL Injection	webapps	PHP

2011-09-02	Mambo Component N-Myndir - SQL Injection	webapps	PHP
2011-09-02	ACal 2.2.6 - 'calendar.php' Cross-Site Scripting	webapps	PHP
2011-09-01	WordPress Plugin Donation 1.0 - SQL Injection	webapps	PHP
2011-09-01	WordPress Plugin Bannerize 2.8.6 - SQL Injection	webapps	PHP
2011-09-01	[Hebrew] Digital Whisper Security Magazine #24	papers	Multiple
2011-09-01	NetSaro Enterprise Messenger 2.0 - Multiple Vulnerabilities	webapps	Windows
2011-09-01	WordPress Plugin SearchAutocomplete 1.0.8 - SQL Injection	webapps	PHP
2011-09-01	DVD X Player 5.5 - '.plf' Playlist Buffer Overflow (Metasploit)	local	Windows
2011-09-01	Linux Kernel 3.0.0 - 'perf_count_sw_cpu_clock' event Denial of Service	dos	Linux
2011-08-31	WordPress Plugin grapefile 1.1 - Arbitrary File Upload	webapps	PHP
2011-08-31	WordPress Plugin image Gallery with Slideshow 1.5 - Multiple Vulnerabilities	webapps	PHP
2011-08-31	Citrix Gateway - ActiveX Control Stack Buffer Overflow (Metasploit)	remote	Windows
2011-08-31	TinyWebGallery 1.8.4 - Local File Inclusion / SQL Injection	webapps	PHP
2011-08-31	S9Y Serendipity 1.5.1 - 'research_display.php' SQL Injection	webapps	PHP
2011-08-31	Web Professional - 'default.php' SQL Injection	webapps	PHP
2011-08-30	WordPress Plugin Advertizer 1.0 - SQL Injection	webapps	PHP
2011-08-30	WordPress Plugin Event Registration 5.4.3 - SQL Injection	webapps	PHP
2011-08-30	vAuthenticate 3.0.1 - Authentication Bypass	webapps	PHP
2011-08-30	FileBox File Hosting & Sharing Script 1.5 - SQL Injection	webapps	PHP
2011-08-30	DVD X Player 5.5.0 Professional / Standard - '.plf' File Universal (ASLR + DEP Bypass)	local	Windows
2011-08-30	WordPress Plugin Crawl Rate Tracker 2.0.2 - SQL Injection	webapps	PHP
2011-08-30	WordPress Plugin Audio Gallery Playlist 0.12 - SQL Injection	webapps	PHP
2011-08-30	WordPress Plugin yolink Search 1.1.4 - SQL Injection	webapps	PHP
2011-08-30	WordPress Plugin PureHTML 1.0.0 - SQL Injection	webapps	PHP
2011-08-30	WordPress Plugin Couponer 1.2 - SQL Injection	webapps	PHP
2011-08-30	IBM Open Admin Tool 2.71 - Multiple Cross-Site Scripting Vulnerabilities	webapps	PHP
2011-08-30	MapServer 6.0 - '.Map' File Double-Free Remote Denial of Service	dos	Windows
2011-08-30	CS-Cart 2.2.1 - 'products.php' SQL Injection	webapps	PHP
2011-08-29	Mini-stream Ripper 2.9.7.273 - '.m3u' Universal Buffer Overflow	local	Windows
2011-08-29	DVD X Player 5.5 Professional - '.plf' Universal Buffer Overflow	local	Windows
2011-08-29	Writing Assembly on FreeBSD (x64)	papers	FreeBSD_x86-64
2011-08-29	Simple x64 XOR Shellcode Encoder/Loader	papers	Linux_x86-64
2011-08-29	WordPress Plugin SH Slideshow 3.1.4 - SQL Injection	webapps	PHP
2011-08-29	WordPress Plugin iCopyright(R) Article Tools 1.1.4 - SQL Injection	webapps	PHP
2011-08-29	ClickCMS - Denial of Service / CAPTCHA Bypass	webapps	PHP
2011-08-28	Ferdows CMS Pro 1.1.0 - Multiple Vulnerabilities	webapps	ASP
2011-08-28	Joomla! Component joomlacontenteditor 2.0.10 - Multiple Vulnerabilities	webapps	PHP
2011-08-28	Yahoo! player 1.5 - '.m3u' Universal Buffer Overflow (SEH)	local	Windows
2011-08-28	Joomla! Component mod_simpleFileLister 1.0 - Directory Traversal	webapps	PHP
2011-08-28	WordPress Plugin Facebook Promotions 1.3.3 - SQL Injection	webapps	PHP
2011-08-28	WordPress Plugin Evarisk 5.1.3.6 - SQL Injection	webapps	PHP
2011-08-28	WordPress Plugin Profiles 2.0 RC1 - SQL Injection	webapps	PHP
2011-08-28	WordPress Plugin mySTAT 2.6 - SQL Injection	webapps	PHP
2011-08-28	Omnistar Mailer - Multiple Vulnerabilities	webapps	PHP
2011-08-28	Mini FTP Server 1.1 - Buffer Corruption Remote Denial of Service	dos	Windows
2011-08-28	LifeSize Room - Command Injection (Metasploit)	webapps	PHP
2011-08-27	WordPress Plugin Js-appointment 1.5 - SQL Injection	webapps	PHP
2011-08-27	WordPress Plugin MM Forms Community 1.2.3 - SQL Injection	webapps	PHP
2011-08-27	Bypassing PHPIDS 0.6.5	papers	PHP
2011-08-27	Free MP3 CD Ripper 1.1 - Local Buffer Overflow	local	Windows
2011-08-27	WordPress Plugin Super CAPTCHA 2.2.4 - SQL Injection	webapps	PHP
2011-08-27	WordPress Plugin Collision Testimonials 3.0 - SQL Injection	webapps	PHP
2011-08-27	WordPress Plugin oQey Headers 0.3 - SQL Injection	webapps	PHP
2011-08-27	WordPress Plugin Photoracer 1.0 - Multiple Vulnerabilities	webapps	PHP
2011-08-27	Free MP3 CD Ripper 1.1 - DEP Bypass	local	Windows
2011-08-27	phpWebSite 1.7.1 - 'mod.php' SQL Injection	webapps	PHP
2011-08-26	Groovy Media Player 2.6.0 - '.m3u' Local Buffer Overflow (PoC)	dos	Windows
2011-08-26	RealVNC - Authentication Bypass (Metasploit)	remote	Windows
2011-08-26	WordPress Plugin Photoracer 1.0 - SQL Injection	webapps	PHP
2011-08-26	Sunway Force Control SCADA 6.1 SP3 - 'httpsrv.exe' Remote Overflow	remote	Windows
2011-08-26	Jcow Social Networking Script 4.2 < 5.2 - Arbitrary Code Execution (Metasploit)	webapps	PHP
2011-08-26	[French] Reversing on Linux x86 (with GDB)	papers	Linux_x86
2011-08-26	Mambo 4.6.5 - 'index.php' Cross-Site Request Forgery	webapps	PHP
2011-08-25	WordPress Plugin SendIt 1.5.9 - Blind SQL Injection	webapps	PHP
2011-08-25	Demystifying the Android Malware	papers	Android
2011-08-25	Zazavi 1.2.1 - '/FileManager/Controller.php' Arbitrary File Upload	webapps	PHP
2011-08-25	Simple Machines Forum (SMF) 1.1.14/2.0 - '[img]' BBCode Tag Cross-Site Request Forgery	webapps	PHP
2011-08-24	Help Desk Software 1.1g - Cross-Site Request Forgery (Add Admin)	webapps	PHP
2011-08-24	F-Secure (Multiple Products) - ActiveX HeapSpray Overwrite (SEH)	local	Windows
2011-08-24	CommodityRentals Real Estate Script - 'txtsearch' HTML Injection	webapps	PHP
2011-08-24	Tourismscripts Hotel Portal - 'hotel_city' HTML Injection	webapps	PHP
2011-08-24	VicBlog - 'tag' SQL Injection	webapps	PHP
2011-08-23	ManageEngine ServiceDesk Plus 8.0 - Multiple Persistent Cross-Site Scripting Vulnerabilities	webapps	JSP
2011-08-23	Open Classifieds 1.7.2 - Multiple Cross-Site Scripting Vulnerabilities	webapps	PHP
2011-08-22	WordPress Plugin MM Duplicate 1.2 - SQL Injection	webapps	PHP
2011-08-22	Web Solutions Wcs2u - SQL Injection	webapps	PHP
2011-08-22	Bonza Digital Cart Script - SQL Injection	webapps	PHP
2011-08-22	DV Cart Shopping Cart software - SQL Injection	webapps	PHP
2011-08-22	Redlab CMS - Multiple SQL Injections	webapps	ASP
2011-08-22	Adobe Photoshop CS5 - '.gif' Remote Code Execution	dos	Windows
2011-08-22	Pandora FMS 3.x - 'index.php' Cross-Site Scripting	webapps	PHP
2011-08-22	TotalShopUK 1.7.2 - 'index.php' SQL Injection	webapps	PHP
2011-08-22	Concrete 5.4.1 1 - 'rcID' Cross-Site Scripting	webapps	PHP
2011-08-21	EasySiteEdit - Remote File Inclusion	webapps	PHP
2011-08-21	OneFileCMS 1.1.1 - Multiple Vulnerabilities	webapps	PHP
2011-08-21	OneFileCMS 1.1.1 - 'onefilecms.php' Cross-Site Scripting	webapps	PHP
2011-08-20	HP Easy Printer Care - XMLSimpleAccessor Class ActiveX Control Remote Code Execution (Metasploit)	remote	Windows
2011-08-20	Social Engineering Toolkit	papers	Multiple
2011-08-20	WordPress Plugin Block-Spam-By-Math-Reloaded - Bypass	webapps	PHP
2011-08-20	Axis Commerce (E-Commerce System) - Persistent Cross-Site Scripting	webapps	PHP
2011-08-20	WordPress Plugin UnGallery 1.5.8 - Local File Disclosure	webapps	PHP
2011-08-20	Freefloat FTP Server - 'ALLO' Remote Buffer Overflow	remote	Windows
2011-08-19	Microsoft Patch Analysis	papers	Windows
2011-08-19	Apache Struts < 2.2.0 - Remote Command Execution (Metasploit)	remote	Multiple
2011-08-19	Solar FTP Server 2.1.2 - PASV Buffer Overflow (Metasploit)	remote	Windows
2011-08-19	PHPMyRealty 1.0.7 - SQL Injection	webapps	PHP
2011-08-19	network tracker .95 - Persistent Cross-Site Scripting	webapps	PHP
2011-08-19	Apache - Remote Memory Exhaustion (Denial of Service)	dos	Multiple
2011-08-19	Oracle Secure Backup - Authentication Bypass/Command Injection (Metasploit)	webapps	PHP
2011-08-19	Symantec System Center Alert Management System - 'xfr.exe' Arbitrary Command Execution (Metasploit)	remote	Windows
2011-08-19	Symantec System Center Alert Management System - 'hndlrsvc.exe' Arbitrary Command Execution (Metasploit)	remote	Windows
2011-08-19	PHP < 5.3.7 - Multiple Null Pointer Dereference Denial of Service Vulnerabilities	dos	PHP
2011-08-19	Xlight FTP Server 3.7 - Remote Buffer Overflow	dos	Windows
2011-08-18	WordPress Plugin DS FAQ 1.3.2 - SQL Injection	webapps	PHP
2011-08-18	WordPress Plugin Forum 1.7.8 - SQL Injection	webapps	PHP
2011-08-18	Elgg 1.7.10 - Multiple Vulnerabilities	webapps	PHP
2011-08-18	WordPress Plugin Ajax Gallery 3.0 - SQL Injection	webapps	PHP
2011-08-18	WordPress Plugin Global Content Blocks 1.2 - SQL Injection	webapps	PHP
2011-08-18	WordPress Plugin Allow PHP in Posts and Pages 2.0.0.RC1 - SQL Injection	webapps	PHP
2011-08-18	WordPress Plugin Menu Creator 1.1.7 - SQL Injection	webapps	PHP
2011-08-18	Adobe ColdFusion - 'probe.cfm' Cross-Site Scripting	webapps	CFM
2011-08-18	Mantis Bug Tracker 1.1.8 - Cross-Site Scripting / SQL Injection	webapps	PHP
2011-08-17	Joomla! Component JoomTouch 1.0.2 - Local File Inclusion	webapps	PHP
2011-08-17	SoftwareDEP Classified Script 2.5 - SQL Injection (1)	webapps	PHP
2011-08-17	Notepad++ NppFTP Plugin - 'LIST' Remote Heap Overflow (PoC)	dos	Windows
2011-08-17	WordPress Plugin File Groups 1.1.2 - SQL Injection	webapps	PHP
2011-08-17	WordPress Plugin Contus HD FLV Player 1.3 - SQL Injection	webapps	PHP
2011-08-17	WordPress Plugin Symposium 0.64 - SQL Injection	webapps	PHP
2011-08-17	WordPress Plugin Easy Contact Form Lite 1.0.7 - SQL Injection	webapps	PHP
2011-08-17	WordPress Plugin OdiHost NewsLetter 1.0 - SQL Injection	webapps	PHP

2011-08-17	Contrexx ShopSystem 2.2 SP3 - 'catId' Blind SQL Injection	webapps	PHP
2011-08-17	phpWebSite - 'page_id' Cross-Site Scripting	webapps	PHP
2011-08-17	StudioLine Photo Basic 3.70.34.0 - 'NMSDVDXU.dll' ActiveX Control Arbitrary File Overwrite	remote	Windows
2011-08-17	WordPress Plugin Fast Secure Contact Form 3.0.3.1 - 'index.php' Cross-Site Scripting	webapps	PHP
2011-08-17	WordPress Plugin WP-Stats-Dashboard 2.6.5.1 - Multiple Cross-Site Scripting Vulnerabilities	webapps	PHP
2011-08-17	Code Widgets Online Job Application - 'admin.asp' Multiple SQL Injections	webapps	ASP
2011-08-17	Code Widgets DataBound Index Style Menu - 'category.asp' SQL Injection	webapps	ASP
2011-08-17	Code Widgets DataBound Collapsible Menu - 'main.asp' SQL Injection	webapps	ASP
2011-08-17	Code Widgets Multiple Question - Multiple Choice Online Questionnaire SQL Injections	webapps	ASP
2011-08-16	Sagem Router Fast 3304/3464/3504 - Telnet Authentication Bypass	remote	Hardware
2011-08-16	Userland Hooking in Windows	papers	Windows
2011-08-16	Mozilla Firefox 3.6.16 (Windows 7) - mChannel Object Use-After-Free	remote	Windows
2011-08-16	WordPress Plugin IP-Logger 3.0 - SQL Injection	webapps	PHP
2011-08-16	SurgeFTP 23b6 - Multiple Cross-Site Scripting Vulnerabilities	remote	CGI
2011-08-15	Simple HTTPd 1.42 - 'PUT' Remote Buffer Overflow	remote	Windows
2011-08-15	awiki 20100125 - Multiple Local File Inclusions	webapps	PHP
2011-08-15	phpList 2.10.x - Security Bypass / Information Disclosure	webapps	PHP
2011-08-14	Prediction Football 2.51 - Cross-Site Request Forgery	webapps	PHP
2011-08-14	Contrexx ShopSystem 2.2 SP3 - Blind SQL Injection	webapps	PHP
2011-08-13	D.R. Software Audio Converter 8.1 - DEP Bypass	local	Windows
2011-08-13	Microsoft MPEG Layer-3 Audio - Stack Overflow (MS10-026) (Metasploit)	remote	Windows
2011-08-13	VideoDB 3.1.0 - SQL Injection	webapps	PHP
2011-08-13	Kahf Poems 1.0 - Multiple Vulnerabilities	webapps	PHP
2011-08-13	Mambo 4.6.x < 4.6.5 - SQL Injection	webapps	PHP
2011-08-13	NSHC Papyrus 2.0 - Heap Overflow	dos	Windows
2011-08-12	Simple HTTPd 1.42 - Denial of Servive	dos	Windows
2011-08-11	Hack The Planet (HTP) Zine 2	papers	eZine
2011-08-11	Adobe RoboHelp 9 - DOM Cross-Site Scripting	webapps	CGI
2011-08-11	MP3 CD Converter Professional 5.3.0 - Universal DEP Bypass	local	Windows
2011-08-11	TeeChart Professional ActiveX Control 2010.0.0.3 - Trusted Integer Dereference (Metasploit)	remote	Windows
2011-08-11	PHP Flat File Guestbook 1.0 - 'ffgb_admin.php' Remote File Inclusion	webapps	PHP
2011-08-10	A-PDF All to MP3 2.3.0 - Universal DEP Bypass	local	Windows
2011-08-10	HP Data Protector (Linux) - Remote Command Execution	remote	Linux
2011-08-10	BisonWare BisonFTP Server 3.5 - Remote Buffer Overflow	remote	Windows
2011-08-10	Mozilla Firefox 3.6.16 (Windows) - mChannel Use-After-Free (Metasploit) (1)	remote	Windows
2011-08-10	[Spanish] Asaltando redes wifi	papers	Multiple
2011-08-10	[Spanish] Jugando en la red	papers	Multiple
2011-08-10	WordPress Plugin eShop 6.2.8 - Multiple Cross-Site Scripting Vulnerabilities	webapps	PHP
2011-08-09	BlogPHP 2.0 - Persistent Cross-Site Scripting	webapps	PHP
2011-08-09	Acoustica Mixcraft 1.00 - Local Crash	dos	Windows
2011-08-09	Excel - SLYK Format Parsing Buffer Overrun (PoC)	dos	Windows
2011-08-09	FCKEditor Core - 'FileManager test.html' Arbitrary File Upload (2)	webapps	PHP
2011-08-09	iphone/ipad phone drive 1.1.1 - Directory Traversal	remote	Hardware
2011-08-09	Joomla! Component Search 3.0.0 - SQL Injection	webapps	PHP
2011-08-09	Microsoft Visual Studio Report Viewer 2005 Control - Multiple Cross-Site Scripting Vulnerabilities	remote	Windows
2011-08-09	OpenEMR 4.0 - Multiple Cross-Site Scripting Vulnerabilities	webapps	PHP
2011-08-09	Adobe Flash Media Server 4.0.2 - Null Pointer Dereference Remote Denial of Service	dos	Multiple
2011-08-08	LiteServe 2.81 - 'PASV' Denial of Service	dos	Windows
2011-08-08	XpressEngine 1.4.5.7 - Persistent Cross-Site Scripting	webapps	PHP
2011-08-08	Search Network 2.0 - 'query' Cross-Site Scripting	webapps	PHP
2011-08-08	BlueSoft Banner Exchange - 'referer_id' SQL Injection	webapps	PHP
2011-08-08	BlueSoft Rate My Photo Site - 'ty' SQL Injection	webapps	PHP
2011-08-07	Simple Machines Forum (SMF) 2.0 - Session Hijacking	webapps	PHP
2011-08-07	Free CD to MP3 Converter 3.1 - Universal DEP Bypass	local	Windows
2011-08-07	HP JetDirect PJL - Interface Universal Directory Traversal (Metasploit)	remote	Hardware
2011-08-07	HP JetDirect PJL - Query Execution (Metasploit)	remote	Hardware
2011-08-06	WordPress Plugin UPM Polls 1.0.3 - SQL Injection	webapps	PHP
2011-08-06	WordPress Plugin Media Library Categories 1.0.6 - SQL Injection	webapps	PHP
2011-08-06	acontent 1.1 - Multiple Vulnerabilities	webapps	PHP
2011-08-06	AChecker 1.2 - Multiple Error-Based SQL Injection Vulnerabilities	webapps	PHP
2011-08-06	ATutor 2.0.2 - Multiple Vulnerabilities	webapps	PHP
2011-08-06	Cart Software - Multiple Vulnerabilities	webapps	PHP
2011-08-05	OpenSLP 1.2.1 / < 1647 trunk - Denial of Service	dos	Multiple
2011-08-05	Unrar 3.9.3 - Local Stack Overflow	local	Linux
2011-08-05	Mozilla Firefox 3.6.16 - OBJECT mChannel Remote Code Execution (DEP Bypass) (Metasploit)	remote	Windows
2011-08-05	WordPress Plugin E-Commerce 3.8.4 - SQL Injection	webapps	PHP
2011-08-05	HP Data Protector (HP-UX) - Remote Shell	remote	HP-UX
2011-08-05	Sun/Oracle GlassFish Server - (Authenticated) Code Execution (Metasploit)	webapps	JSP
2011-08-05	WordPress Plugin ProPlayer 4.7.7 - SQL Injection	webapps	PHP
2011-08-05	WordPress Plugin Social Slider 5.6.5 - SQL Injection	webapps	PHP
2011-08-05	CiscoKits 1.0 - TFTP Server 'Write Command' Denial of Service	dos	Windows
2011-08-05	CiscoKits 1.0 - TFTP Server Directory Traversal	remote	Windows
2011-08-05	threedify designer 5.0.2 - Multiple Vulnerabilities	dos	Windows
2011-08-05	[Indonesian] Intro To Hack Basic #1	papers	Multiple
2011-08-05	[Italian] e-zine 'HitNote' number 7	papers	Multiple
2011-08-05	[Italian] e-zine 'HitNote' 6	papers	Multiple
2011-08-05	Softbiz Recipes Portal Script - Multiple Cross-Site Scripting Vulnerabilities	webapps	PHP
2011-08-04	ABBS Audio Media Player 3.0 - Local Buffer Overflow (Metasploit)	local	Windows
2011-08-04	ABBS Electronic Flashcards 2.1 - Local Buffer Overflow (Metasploit)	local	Windows
2011-08-04	DZYGroup CMS Portal - Multiple SQL Injections	webapps	Multiple
2011-08-04	FreeAmp 2.0.7 - '.fat' Local Buffer Overflow (Metasploit)	local	Windows
2011-08-04	Xpdf 3.02-13 - 'zxpdf' Security Bypass	remote	Multiple
2011-08-04	WordPress Plugin WP E-Commerce 3.8.6 - 'cart_messages[]' Cross-Site Scripting	webapps	PHP
2011-08-04	Community Server 2007/2008 - 'TagSelector.aspx' Cross-Site Scripting	webapps	ASP
2011-08-03	Kolibri HTTP Server 2.0 - HEAD Buffer Overflow (Metasploit)	remote	Windows
2011-08-03	[Arabic] Exploring and Patching File Inclusion Vulnerabilities	papers	Multiple
2011-08-03	Zinf Audio Player 2.2.1 - '.pls' Local Buffer Overflow (DEP Bypass)	local	Windows
2011-08-03	Omnicom Alpha 4.0e LPD Server - Denial of Service	dos	Windows
2011-08-03	WordPress Plugin TimThumb 1.32 - Remote Code Execution	webapps	PHP
2011-08-03	Joomla! Component com_jdirectory - SQL Injection	webapps	PHP
2011-08-03	mt LinkDatenbank - 'b' Cross-Site Scripting	webapps	PHP
2011-08-03	BESNI OKUL PORTAL - 'sayfa.asp' Cross-Site Scripting	webapps	ASP
2011-08-03	Ataccan E-Ticaret Scripti - 'id' SQL Injection	webapps	ASP
2011-08-03	Joomla! Component com_xeslidegalfx - 'id' SQL Injection	webapps	PHP
2011-08-03	foomatic-gui python-foomatic 0.7.9.4 - 'pysmb.py' Arbitrary Shell Command Execution	remote	Multiple
2011-08-03	Joomla! Component com_community - 'userid' SQL Injection	webapps	PHP
2011-08-03	HESK 2.2 - Multiple Cross-Site Scripting Vulnerabilities	webapps	PHP
2011-08-02	MyBB MyTabs Plugin - SQL Injection	webapps	PHP
2011-08-02	SiteGenius - Blind SQL Injection	webapps	PHP
2011-08-02	[Turkish] Return-oriented Programming / DEP Bypass	papers	Windows
2011-08-02	[Hebrew] Digital Whisper Security Magazine #23	papers	Multiple
2011-08-02	MyBB MyTabs Plugin - 'tab' SQL Injection	webapps	PHP
2011-08-02	Open Handset Alliance Android 2.3.4/3.1 - Browser Sandbox Security Bypass	remote	Multiple
2011-08-01	CMSPro! 2.08 - Cross-Site Request Forgery	webapps	PHP
2011-08-01	ZoneMinder 1.24.3 - Remote File Inclusion	webapps	PHP
2011-08-01	CA Arcserve D2D GWT RPC - Credential Information Disclosure (Metasploit)	webapps	JSP
2011-08-01	Curverider Elgg 1.7.9 - Multiple Cross-Site Scripting Vulnerabilities	webapps	PHP
2011-08-01	Skype 5.3 - 'Mobile Phone' HTML Injection	remote	Multiple
2011-07-31	Actfax FTP Server 4.27 - 'USER' Stack Buffer Overflow (Metasploit)	remote	Windows
2011-07-31	Digital Scribe 1.5 - register_form()' Multiple POST Cross-Site Scripting Vulnerabilities	webapps	PHP
2011-07-31	Joomla! Component obSuggest - Local File Inclusion	webapps	PHP
2011-07-30	Link Station Pro - Multiple Vulnerabilities	webapps	PHP
2011-07-29	cFTP 0.1 - 'r80' Arbitrary File Upload	webapps	PHP
2011-07-29	ManageEngine ServiceDesk Plus 8.0 Build 8013 - Multiple Cross-Site Scripting Vulnerabilities	webapps	JSP
2011-07-29	Chyrp 2.x - 'action' Traversal Local File Inclusion	webapps	PHP
2011-07-29	Chyrp 2.x - '/includes/lib/gz.php?File' Traversal Arbitrary File Access	webapps	PHP
2011-07-29	Chyrp 2.x swfupload Extension - 'upload_handler.php' Arbitrary File Upload / Arbitrary PHP Code Execution	webapps	PHP
2011-07-28	Joomla! Component com_virtuemart 1.1.7/1.5 - Blind SQL Injection (Metasploit)	webapps	PHP
2011-07-28	MyWebServer 1.0.3 - Denial of Service	dos	Windows
2011-07-28	MyWebServer 1.0.3 - Arbitrary File Download	remote	Windows

2011-07-28	Citrix XenApp / XenDesktop - Stack Buffer Overflow	dos	Windows
2011-07-28	Citrix XenApp / XenDesktop XML Service - Heap Corruption	dos	Windows
2011-07-28	HP Network Automation 9.10 - SQL Injection	webapps	PHP
2011-07-28	Sitecore CMS 6.4.1 - 'url' Open Redirection	webapps	ASP
2011-07-27	SWAT Samba Web Administration Tool - Cross-Site Request Forgery	webapps	CGI
2011-07-27	MinaliC WebServer 2.0 - Remote Source Disclosure	remote	Windows
2011-07-27	Sagem F@st 3304 Routers - PPPoE Credentials Information Disclosure	remote	Hardware
2011-07-27	MBoard 1.3 - 'url' Open Redirection	webapps	PHP
2011-07-27	PHPJunkYard GBook 1.6/1.7 - Multiple Cross-Site Scripting Vulnerabilities	webapps	PHP
2011-07-26	CA ARCserve D2D r15 GWT RPC - Multiple Vulnerabilities	webapps	JSP
2011-07-26	OpenX Ad Server 2.8.7 - Cross-Site Request Forgery	webapps	PHP
2011-07-26	ManageEngine ServiceDesk Plus 8.0.0 Build 8013 - Improper User Privileges	webapps	Multiple
2011-07-26	PHP-Barcode 0.3pl1 - Remote Code Execution	webapps	PHP
2011-07-26	Apple Safari 5.0.5 - SVG Remote Code Execution (DEP Bypass)	remote	Windows
2011-07-26	Support Incident Tracker (SiT!) 3.63 p1 - 'report_marketing.php?exc[]' SQL Injection	webapps	PHP
2011-07-26	Support Incident Tracker (SiT!) 3.63 p1 - 'billable_incidents.php?sites[]' SQL Injection	webapps	PHP
2011-07-26	Support Incident Tracker (SiT!) 3.63 p1 - 'tasks.php?selected[]' SQL Injection	webapps	PHP
2011-07-26	Support Incident Tracker (SiT!) 3.63 p1 - 'search.php?search_string' SQL Injection	webapps	PHP
2011-07-25	Apple Safari 5.0.6/5.1 - SVG DOM Processing (PoC)	dos	OSX
2011-07-25	Go Null Yourself (GNY) E-Zine #5	papers	eZine
2011-07-25	Ciscokits 1.0 - TFTP Server File Name Denial of Service	dos	Windows
2011-07-25	MusicBox 3.7 - Multiple Vulnerabilities	webapps	PHP
2011-07-25	CobraScripts Trading Marketplace Script - 'cid' SQL Injection	webapps	PHP
2011-07-25	Joomla! Component com_virtualmoney 1.5 - SQL Injection	webapps	PHP
2011-07-25	Godly Forums - 'id' SQL Injection	webapps	PHP
2011-07-25	Online Grades 3.2.5 - Multiple Cross-Site Scripting Vulnerabilities	webapps	PHP
2011-07-25	Willscript Recipes Website Script Silver Edition - 'viewRecipe.php' SQL Injection	webapps	PHP
2011-07-25	CA Arcserve D2D - GWT RPC Credential Information Disclosure (Metasploit)	local	Windows
2011-07-24	OSX/x64 - Universal ROP + Reverse (/TCP) Shell Shellcode	shellcode	OSX
2011-07-24	MPlayer Lite r33064 - '.m3u' Local Buffer Overflow (DEP Bypass)	local	Windows
2011-07-23	ExtCalendar2 - Cookie Authentication Bypass / Backdoor Upload	webapps	PHP
2011-07-23	Download Accelerator Plus (DAP) 9.7 - '.M3U' File Buffer Overflow (SEH Unicode)	local	Windows
2011-07-22	Kingsoft AntiVirus 2012 'KisKrnl.sys' 2011.7.8.913 - Kernel Mode Privilege Escalation	local	Windows
2011-07-21	Mevin Basic PHP Events Lister 2.03 - Cross-Site Request Forgery	webapps	PHP
2011-07-21	vBulletin 4.0.x 4.1.3 - 'messagegroupid' SQL Injection	webapps	PHP
2011-07-21	Joomla! Component JE Story Submit - Local File Inclusion	webapps	PHP
2011-07-21	Dell IT Assistant - detectIESettingsForITA.ocx ActiveX Control	remote	Windows
2011-07-21	Linux/x86 - Egghunter + Null-Free Shellcode (29 bytes)	shellcode	Linux_x86
2011-07-21	Joomla! Component mod_spo - SQL Injection	webapps	PHP
2011-07-21	Synergy Software - 'id' SQL Injection	webapps	PHP
2011-07-20	Joomla! Component com_rsappt_pro2 - Local File Inclusion	webapps	PHP
2011-07-20	Owning WD TV Live HUB (Go to Root...)	papers	Hardware
2011-07-20	Oracle Sun GlassFish Enterprise Server - Persistent Cross-Site Scripting	webapps	JSP
2011-07-20	Joomla! < 1.6.5 - Multiple Cross-Site Scripting Vulnerabilities	webapps	PHP
2011-07-20	Tiki Wiki CMS Groupware 7.2 - 'snarf_ajax.php' Cross-Site Scripting	webapps	PHP
2011-07-20	Cyberoam UTM - Multiple Cross-Site Scripting Vulnerabilities	webapps	PHP
2011-07-19	Freefloat FTP Server - 'REST' Remote Buffer Overflow (Metasploit)	remote	Windows
2011-07-19	Lotus Domino SMTP Router & Email Server and Client - Denial of Service	dos	Multiple
2011-07-19	Freefloat FTP Server 1.0 - 'ACCL' Remote Buffer Overflow	remote	Windows
2011-07-18	Freefloat FTP Server - 'MKD' Remote Buffer Overflow (Metasploit)	remote	Windows
2011-07-18	What is a vulnerability assessment	papers	Multiple
2011-07-18	GDI+ - 'gdiplus.dll' CreateDashedPath Integer Overflow	dos	Windows
2011-07-18	Windows/x86 (PerfectXp-pc1/SP3 ) (Turkish) - Add Administrator User (kpss/12345) Shellcode (112 bytes)	shellcode	Windows_x86
2011-07-18	Freefloat FTP Server 1.0 - 'REST' / 'PASV' Remote Buffer Overflow	remote	Windows
2011-07-18	BlueSoft (Multiple Products) - Multiple SQL Injections	webapps	PHP
2011-07-18	Iskratel SI2000 Callisto 821+ - Cross-Site Request Forgery / HTML Injection	remote	Hardware
2011-07-17	Automated Web Application Fingerprinting	papers	Multiple
2011-07-17	Freefloat FTP Server 1.0 - 'MKD' Remote Buffer Overflow	remote	Windows
2011-07-17	Iconics GENESIS32 9.21.201.01 - Integer Overflow (Metasploit)	remote	Windows
2011-07-17	BlueSoft Social Networking CMS - SQL Injection	webapps	PHP
2011-07-16	HP OpenView Network Node Manager (OV NNM) - 'Toolbar.exe' CGI Cookie Handling Buffer Overflow (Metasploit)	remote	Windows
2011-07-15	Http Parameter Contamination (HPC) Attack / Research Paper	papers	Multiple
2011-07-15	Java RMI - Server Insecure Default Configuration Java Code Execution (Metasploit)	remote	Multiple
2011-07-15	Auto Web Toolbox - 'id' SQL Injection	webapps	PHP
2011-07-15	Easy Estate Rental - 's_location' SQL Injection	webapps	PHP
2011-07-15	Joomla! Component Foto - 'id_categoria' SQL Injection	webapps	PHP
2011-07-15	Joomla! Component Juicy Gallery - 'picId' SQL Injection	webapps	PHP
2011-07-15	Joomla! Component com_hospital - SQL Injection	webapps	PHP
2011-07-15	Joomla! Component Controller - 'Itemid' SQL Injection	webapps	PHP
2011-07-15	Joomla! Component com_newssearch - SQL Injection	webapps	PHP
2011-07-15	AJ Classifieds - 'listingid' SQL Injection	webapps	PHP
2011-07-14	Joomla! Component com_sobi2 2.9.3.2 - Blind SQL Injections	webapps	PHP
2011-07-14	PG eLms Pro vDEC_2007_01 - 'contact_us.php' Multiple POST Cross-Site Scripting Vulnerabilities	webapps	PHP
2011-07-14	PG eLms Pro vDEC_2007_01 - Multiple Blind SQL Injections	webapps	PHP
2011-07-14	Inscribe Webmedia - SQL Injection	webapps	PHP
2011-07-13	LiteRadius 3.2 - Multiple Blind SQL Injections	webapps	PHP
2011-07-13	TCExam 11.2.011 - Multiple SQL Injections	webapps	PHP
2011-07-13	TCExam 11.2.x - Multiple Cross-Site Scripting Vulnerabilities	webapps	PHP
2011-07-13	Chyrp 2.x - '/admin/help.php' Multiple Cross-Site Scripting Vulnerabilities	webapps	PHP
2011-07-13	Chyrp 2.x - '/includes/JavaScript.php?action' Cross-Site Scripting	webapps	PHP
2011-07-12	Fire Soft Board 2.0.1 - Persistent Cross-Site Scripting (Admin Panel)	webapps	PHP
2011-07-12	Tradingeye E-Commerce Shopping Cart - Multiple Vulnerabilities	webapps	PHP
2011-07-12	Pandora Fms 3.2.1 - Cross-Site Request Forgery	webapps	PHP
2011-07-12	Joomla! Component com_xmap 1.2.11 - Blind SQL Injection	webapps	PHP
2011-07-12	[Hebrew] Digital Whisper Security Magazine #22	papers	Multiple
2011-07-12	Solar FTP Server 2.1.1 - PASV Buffer Overflow	remote	Windows
2011-07-12	Alice Modem 1111 - 'rulename' Cross-Site Scripting / Denial of Service	dos	Hardware
2011-07-12	Sphider 1.3.x - Admin Panel Multiple SQL Injections	webapps	PHP
2011-07-12	Flowplayer 3.2.7 - 'linkUrl' Cross-Site Scripting	webapps	Multiple
2011-07-11	Prontus CMS - 'page' Cross-Site Scripting	webapps	PHP
2011-07-11	ICMusic 1.2 - 'music_id' SQL Injection	webapps	PHP
2011-07-11	WordPress Plugin bSuite 4.0.7 - Multiple HTML Injection Vulnerabilities	webapps	PHP
2011-07-11	Gilnet News - 'read_more.php' SQL Injection	webapps	PHP
2011-07-10	Tugux CMS 1.2 - 'pid' Arbitrary File Deletion	webapps	PHP
2011-07-10	Freefloat FTP Server - 'LIST' Remote Buffer Overflow	remote	Windows
2011-07-10	Mozilla Firefox - 'nsTreeRange' Dangling Pointer (Metasploit) (1)	remote	Windows
2011-07-09	Blue Coat Authentication and Authorization Agent (BCAAA) 5 - Remote Buffer Overflow (Metasploit)	remote	Windows
2011-07-09	phpMyAdmin 3.x - Swekey Remote Code Injection	webapps	PHP
2011-07-09	Portix-CMS 1.5.0. rc5 - Local File Inclusion	webapps	PHP
2011-07-09	Symantec Backup Exec 12.5 - Man In The Middle	remote	Windows
2011-07-08	ZipWiz 2005 5.0 - '.zip' Buffer Corruption	dos	Windows
2011-07-08	Avaya IP Office Manager TFTP Server 8.1 - Directory Traversal	remote	Hardware
2011-07-08	appRain Quick Start Edition Core Edition Multiple 0.1.4-Alpha - Cross-Site Scripting	webapps	PHP
2011-07-08	phpMyAdmin3 (pma3) - Remote Code Execution	webapps	PHP
2011-07-08	ZipGenius 6.3.2.3000 - '.zip' Local Buffer Overflow	local	Windows
2011-07-08	ZipItFast 3.0 - '.zip' Heap Overflow	dos	Windows
2011-07-08	Joomla! Component com_voj - SQL Injection	webapps	PHP
2011-07-07	Freefloat FTP Server - Remote Buffer Overflow (Metasploit)	remote	Windows
2011-07-07	CoolPlayer Portable 2.19.2 - Local Buffer Overflow (Metasploit)	local	Windows
2011-07-07	LuxCal Web Calendar 2.4.2/2.5.0 - SQL Injection	webapps	PHP
2011-07-07	D-Link DSL-2650U - Denial of Service (PoC)	dos	Hardware
2011-07-07	MicroP 0.1.1.1600 - '.mppl' Local Stack Buffer Overflow (Metasploit)	local	Windows
2011-07-07	ManageEngine ServiceDesk 8.0.0.12 - Database Disclosure	webapps	JSP
2011-07-07	Defeating Data Execution Prevention and ASLR in Windows XP SP3	papers	Windows
2011-07-07	Structured Exception Handler Exploitation	papers	Windows
2011-07-07	Become fully aware of the potential dangers of ActiveX attacks	papers	Windows
2011-07-06	BbZL.php - Remote File Inclusion	webapps	PHP
2011-07-06	Joomla! 1.6.3 - Cross-Site Request Forgery	webapps	PHP
2011-07-06	ESTsoft ALPlayer 2.0 - ASX Playlist File Handling Buffer Overflow	dos	Windows
2011-07-06	Pro Softnet IDrive Online Backup 3.4.0 - ActiveX 'SaveToFile()' Arbitrary File Overwrite	remote	Windows

2011-07-06	TeaMp0isoN Issue 2	papers	eZine
2011-07-05	Wordtrainer 3.0 - '.ord' Local Buffer Overflow (Metasploit)	local	Windows
2011-07-05	vsftpd 2.3.4 - Backdoor Command Execution (Metasploit)	remote	Unix
2011-07-05	DmxReady Secure Document Library 1.2 - SQL Injection	webapps	ASP
2011-07-05	Joomla! Component com_jr_tfb - 'Controller' Local File Inclusion	webapps	PHP
2011-07-05	Portech MV-372 VoIP Gateway - Multiple Vulnerabilities	remote	Hardware
2011-07-05	Classified Script - c-BrowseClassified Cross-Site Scripting	webapps	PHP
2011-07-04	DMXReady Account List Manager 1.2 - SQL Injection	webapps	PHP
2011-07-04	DmxReady Links Manager 1.2 - SQL Injection	webapps	PHP
2011-07-04	PhpFood CMS 2.00 - SQL Injection	webapps	PHP
2011-07-04	PHP 5.3.6 - Local Buffer Overflow (ROP)	local	Multiple
2011-07-04	WeBid 1.0.2 - 'converter.php' Remote Code Execution	webapps	PHP
2011-07-04	Adobe Reader 5.1 - XFDF Buffer Overflow (SEH)	local	Windows
2011-07-04	Word List Builder 1.0 - Local Buffer Overflow (Metasploit)	local	Windows
2011-07-04	HP OmniInet.exe Opcode 20 - Remote Buffer Overflow (Metasploit)	remote	Windows
2011-07-04	iMesh 10.0 - 'IMWebControl.dll' ActiveX Control Buffer Overflow	remote	Windows
2011-07-03	The Arashi (A.K.A Storm)	papers	Multiple
2011-07-03	[Arabic] exploring and patching of [Cross site scripting - XSS ] gap	papers	Multiple
2011-07-03	Donar Player 2.8.0 - Denial of Service	dos	Windows
2011-07-03	DmxReady Catalog Manager 1.2 - SQL Injection	webapps	ASP
2011-07-03	Adobe Reader X 10.0.0 < 10.0.1 - Atom Type Confusion	local	Windows
2011-07-03	Microsoft Office 2010 - '.RTF' Header Stack Overflow	local	Windows
2011-07-03	DmxReady News Manager 1.2 - SQL Injection	webapps	ASP
2011-07-03	Microsoft IIS 7.0 FTP Server - Stack Exhaustion Denial of Service (MS09-053) (Metasploit)	dos	Windows
2011-07-03	phpDealerLocator - Multiple SQL Injections	webapps	PHP
2011-07-03	DMXReady Registration Manager 1.2 - SQL Injection	webapps	ASP
2011-07-03	DmxReady Contact Us Manager 1.2 - SQL Injection	webapps	ASP
2011-07-03	DmxReady Faqs Manager 1.2 - SQL Injection	webapps	ASP
2011-07-03	DmxReady Bilboard 1.2 - SQL Injection	webapps	ASP
2011-07-03	DmxReady Document Library Manager 1.2 - SQL Injection	webapps	ASP
2011-07-03	eTAWASOL - 'id' SQL Injection	webapps	ASP
2011-07-02	HP Data Protector 6.11 - Remote Buffer Overflow (DEP Bypass)	remote	Windows
2011-07-02	Paliz Portal - Cross-Site Scripting / Multiple SQL Injections	webapps	ASP
2011-07-01	Joomla! Component mDigg 2.2.8 - SQL Injection	webapps	PHP
2011-07-01	WordPress 3.1.3 - SQL Injection	webapps	PHP
2011-07-01	Ollance Member Login Script - Multiple Vulnerabilities	webapps	PHP
2011-07-01	HP - 'OmniInet.exe' Opcode 27 Buffer Overflow (Metasploit)	remote	Windows
2011-07-01	NetBSD 5.1 - 'libc/net' Multiple Stack Buffer Overflows	remote	BSD
2011-06-30	Kaillera - Multiple Clients Buffer Overflow Vulnerabilities	remote	Windows
2011-06-30	HP Data Protector 6.20 - EXEC_CMD Buffer Overflow	dos	Windows
2011-06-30	FreeBSD OpenSSH 3.5p1 - Remote Command Execution	remote	FreeBSD
2011-06-30	Rhythmbox - '.m3u' Local Crash (PoC)	dos	Linux
2011-06-30	IBM DB2 - 'DT_RPATH' Insecure Library Loading Arbitrary Code Execution	remote	Multiple
2011-06-29	HP Data Protector 6.20 - Multiple Vulnerabilities	dos	Windows
2011-06-29	Valve Steam Client Application 1559/1559 - Local Privilege Escalation	local	Windows
2011-06-28	rgboard 4.2.1 - SQL Injection	webapps	PHP
2011-06-28	Joomla! 1.6.3 - Multiple Cross-Site Scripting Vulnerabilities	webapps	PHP
2011-06-28	RealityServer Web Services RTMP Server 3.1.1 build 144525.5 - Null Pointer Dereference Denial of Service	dos	Windows
2011-06-28	Flatpress 0.1010.1 - Multiple Cross-Site Scripting Vulnerabilities	webapps	PHP
2011-06-28	CygniCon CyViewer - ActiveX Control 'SaveData()' Insecure Method	remote	Windows
2011-06-28	Atlassian JIRA 3.13.5 - File Download Security Bypass	remote	Multiple
2011-06-27	Citrix Provisioning Services 5.6 - 'streamprocess.exe' Remote Buffer Overflow (Metasploit)	remote	Windows
2011-06-27	SmallFTPd 1.0.3 - Denial of Service	dos	Windows
2011-06-27	Joomla! Component com_morfeoshow - 'idm' SQL Injection	webapps	PHP
2011-06-27	Mambo 4.6.x - Multiple Cross-Site Scripting Vulnerabilities	webapps	PHP
2011-06-27	Ubisoft CoGSManager ActiveX Control 1.0.0.23 - 'Initialize()' Method Stack Buffer Overflow	remote	Windows
2011-06-27	Sybase Advantage Server 10.0.0.3 - 'ADS' Process Off-by-One Buffer Overflow	remote	Windows
2011-06-27	MySQLDriverCS 4.0.1 - SQL Injection	remote	Multiple
2011-06-27	WordPress Plugin Pretty Link Lite 1.4.56 - Multiple SQL Injections	webapps	PHP
2011-06-26	Microsoft Visio - 'VISIODWG.dll .DXF' File Handling (MS10-028) (Metasploit)	local	Windows
2011-06-26	Joomla! Component JoomlaXi - Persistent Cross-Site Scripting	webapps	PHP
2011-06-26	WordPress Plugin Beer Recipes 1.0 - Cross-Site Scripting	webapps	PHP
2011-06-25	Siemens FactoryLink 8 - CSService Logging Path Parameter Buffer Overflow (Metasploit)	remote	Windows
2011-06-24	FreeAmp 2.0.7 - '.pls' Local Buffer Overflow	local	Windows
2011-06-24	xAurora 10.00 - 'RSRC32.dll' DLL Loading Arbitrary Code Execution	remote	Windows
2011-06-24	AzeoTech DaqFactory - Denial of Service	dos	Multiple
2011-06-23	BrewBlogger 2.3.2 - Multiple Vulnerabilities	webapps	PHP
2011-06-23	iSupport 1.8 - SQL Injection	webapps	PHP
2011-06-23	ManageEngine ServiceDesk Plus 8.0 - Directory Traversal	webapps	JSP
2011-06-23	IBM Web Application Firewall - Bypass	remote	Windows
2011-06-23	Linux/SuperH (sh4) - Add Root User (shell-storm/toor) To /etc/passwd Shellcode (143 bytes)	shellcode	SuperH_SH4
2011-06-23	A Simpler Way of Finding 0day	papers	Multiple
2011-06-23	FreeAmp 2.0.7 - '.fat' Local Buffer Overflow	local	Windows
2011-06-23	ManageEngine Support Center Plus 7.8 Build 7801 - Directory Traversal	webapps	JSP
2011-06-23	ActivDesk 3.0 - Multiple Vulnerabilities	webapps	CGI
2011-06-23	Webcat - Multiple Blind SQL Injections	webapps	PHP
2011-06-23	2Point Solutions - 'cmspages.php' SQL Injection	webapps	PHP
2011-06-23	nodesforum 1.059 - Remote File Inclusion	webapps	PHP
2011-06-23	Lotus Notes 8.0.x < 8.5.2 FP2 - Autonomy Keyview ('.lzh' Attachment) (Metasploit)	remote	Windows
2011-06-23	Sitemagic CMS - 'SMTpl' Directory Traversal	webapps	PHP
2011-06-23	LeadTools Imaging LEADSmtp - ActiveX Control 'SaveMessage()' Insecure Method	remote	Windows
2011-06-23	Nodesforum - '_nodesforum_node' SQL Injection	webapps	PHP
2011-06-22	Linux/SuperH (sh4) - setuid(0) + chmod 0666 /etc/shadow + exit(0) Shellcode (43 bytes)	shellcode	SuperH_SH4
2011-06-22	Same Team E-shop manager - SQL Injection	webapps	PHP
2011-06-22	Cachelogic Expired Domains Script 1.0 - Multiple Vulnerabilities	webapps	PHP
2011-06-22	RealWin SCADA Server - DATAC Login Buffer Overflow (Metasploit)	remote	Windows
2011-06-22	H3C ER5100 - Authentication Bypass	webapps	ASP
2011-06-22	Eshop Manager - Multiple SQL Injections	webapps	PHP
2011-06-22	FanUpdate 3.0 - 'pageTitle' Cross-Site Scripting	webapps	PHP
2011-06-22	Easewe FTP OCX ActiveX Control 4.5.0.9 - 'EaseWeFtp.ocx' Multiple Insecure Method Vulnerabilities	dos	Windows
2011-06-22	Linux/SuperH (sh4) - execve("/bin/sh", 0, 0) Shellcode (19 bytes)	shellcode	SuperH_SH4
2011-06-21	DreamBox DM800 - Arbitrary File Download	remote	Hardware
2011-06-21	WordPress Plugin WPtouch 1.9.27 - URL redirection	webapps	PHP
2011-06-21	Black Ice Cover Page - ActiveX Control Arbitrary File Download (Metasploit)	remote	Windows
2011-06-21	iGiveTest 2.1.0 - SQL Injection	webapps	PHP
2011-06-21	Penetration Testing with Metasploit Framework	papers	Multiple
2011-06-21	FactoryLink - 'vrn.exe' Opcode 9 Buffer Overflow (Metasploit)	remote	Windows
2011-06-21	Sielco Sistemi Winlog - Remote Buffer Overflow (Metasploit)	remote	Windows
2011-06-21	Sitemagic CMS 2010.04.17 - 'SMExt' Cross-Site Scripting	webapps	PHP
2011-06-20	Black Ice Cover Page SDK - Insecure Method 'DownloadImageFileURL()' (Metasploit)	remote	Windows
2011-06-20	Black Ice Fax Voice SDK 12.6 - Remote Code Execution	remote	Windows
2011-06-20	DATAC RealWin SCADA Server 2 - On_FC_CONNECT_FCS_a_FILE Buffer Overflow (Metasploit)	remote	Windows
2011-06-20	IF-CMS 2.07 - Local File Inclusion (Metasploit) (2)	webapps	PHP
2011-06-20	Mozilla Firefox - 'nsTreeRange' Dangling Pointer (2)	remote	Windows
2011-06-20	XnView 1.98 - Denial of Service (PoC)	dos	Windows
2011-06-19	Joomla! Component com_team - SQL Injection	webapps	PHP
2011-06-19	Burning Board 3.1.5 - Full Path Disclosure	webapps	PHP
2011-06-19	Joomla! Component com_calcbuilder - 'id' Blind SQL Injection	webapps	PHP
2011-06-19	Nibbleblog 3 - Multiple SQL Injections	webapps	PHP
2011-06-18	AiCart 2.0 - Multiple Vulnerabilities	webapps	PHP
2011-06-18	Joomla! Component A Cool Debate 1.0.3 - Local File Inclusion	webapps	PHP
2011-06-18	Cisco Unified Operations Manager 8.5 - 'iptm/advancedfind.do?extn' Cross-Site Scripting	remote	Hardware
2011-06-18	Cisco Unified Operations Manager 8.5 - 'iptm/ddv.do?deviceInstanceName' Cross-Site Scripting	remote	Hardware
2011-06-18	Cisco Unified Operations Manager 8.5 - iptm/eventmon Multiple Cross-Site Scripting Vulnerabilities	remote	Hardware
2011-06-18	Cisco Unified Operations Manager 8.5 - '/iptm/faultmon/ui/dojo/Main/eventmon_wrapper.jsp' Multiple Cross-Site Scripting Vulnerabilities	remote	Hardware
2011-06-18	Cisco Unified Operations Manager 8.5 - '/iptm/logicalTopo.do' Multiple Cross-Site Scripting Vulnerabilities	remote	Hardware
2011-06-18	Immophp 1.1.1 - Cross-Site Scripting / SQL Injection	webapps	PHP
2011-06-18	Taha Portal 3.2 - 'sitemap.php' Cross-Site Scripting	webapps	PHP
2011-06-17	WeBid 1.0.2 - Persistent Cross-Site Scripting (via SQL Injection)	webapps	PHP
2011-06-17	Microsoft Internet Explorer - MSHTML!CObjectElement Use-After-Free (MS11-050) (Metasploit)	remote	Windows

2011-06-17	Sunway ForceControl 6.1 - Multiple Heap Buffer Overflow Vulnerabilities	remote	Windows
2011-06-17	Wireshark 1.4.5 - 'bytes_repr_len()' Null Pointer Dereference Denial of Service	dos	Windows
2011-06-16	Adobe Reader/Acrobat 10.0.1 - Denial of Service	dos	Windows
2011-06-16	Catalog Builder eCommerce Software - Blind SQL Injection	webapps	PHP
2011-06-15	AMHSHOP 3.7.0 - SQL Injection	webapps	PHP
2011-06-15	Free Simple CMS 1.0 - Multiple Vulnerabilities	webapps	PHP
2011-06-15	IBM Websphere Application Server 7.0.0.13 - Cross-Site Request Forgery	webapps	Multiple
2011-06-15	miniblog 1.0 - Multiple Cross-Site Scripting Vulnerabilities	webapps	PHP
2011-06-15	MyBloggie 2.1.6 - HTML Injection / SQL Injection	webapps	PHP
2011-06-14	cubecart 2.0.7 - Multiple Vulnerabilities	webapps	PHP
2011-06-14	Opera Web Browser 11.11 - Remote Crash	dos	Windows
2011-06-14	Blind SQL Injection with Regular Expressions Attack	papers	Multiple
2011-06-14	Microsoft Windows Media Player with K-Lite Codec Pack - Denial of Service (PoC)	dos	Windows
2011-06-14	Microsoft Office XP - Remote code Execution	dos	Windows
2011-06-14	Conky Linux 1.8.0 - Local Denial of Service (PoC)	dos	Linux
2011-06-14	Microsoft HyperV - Persistent Denial of Service (MS11-047)	dos	Windows
2011-06-14	PHP 5.3.6 - Security Bypass	remote	PHP
2011-06-14	Opera Web Browser 11.11 - Denial of Service	dos	Multiple
2011-06-14	vBTube 1.2.9 - 'vBTube.php' Multiple Cross-Site Scripting Vulnerabilities	webapps	PHP
2011-06-14	MPlayer - '.SAMI' Subtitle File Buffer Overflow (DEP Bypass) (Metasploit)	local	Windows
2011-06-13	Oracle HTTP Server - Cross-Site Scripting Header Injection	webapps	Multiple
2011-06-13	Joomla! Component Scriptegrator 1.5 - Local File Inclusion	webapps	PHP
2011-06-13	Joomla! Component Minitek FAQ Book 1.3 - 'id' SQL Injection	webapps	PHP
2011-06-13	Microsoft Windows XP - 'tskill' Local Privilege Escalation	local	Windows
2011-06-13	WebFileExplorer 3.6 - 'user' / 'pass' SQL Injection	webapps	PHP
2011-06-13	Microsoft Lync Server 2010 - 'ReachJoin.aspx' Remote Command Injection	webapps	ASP
2011-06-13	PHP-Nuke 8.3 - 'upload.php' Arbitrary File Upload (1)	webapps	PHP
2011-06-13	PHP-Nuke 8.3 - 'upload.php' Arbitrary File Upload (2)	webapps	PHP
2011-06-12	IBM Tivoli Endpoint Manager - POST Query Buffer Overflow (Metasploit)	remote	Windows
2011-06-11	The KMPlayer 3.0.0.1440 (Windows 7) - '.mp3' Local Buffer Overflow (ASLR Bypass)	local	Windows
2011-06-11	[Arabic] The Art Of Information Gathering/Footprinting [PDF]	papers	Multiple
2011-06-11	UUSEE ActiveX < 6.11.0412.1 - Buffer Overflow	dos	Windows
2011-06-11	Trend Micro Data Loss Prevention Virtual Appliance 5.5 - Directory Traversal	webapps	Windows
2011-06-11	Technote 7.2 - Blind SQL Injection	webapps	PHP
2011-06-11	SUBRION CMS - Multiple Vulnerabilities	webapps	PHP
2011-06-11	Linux Kernel 2.6.28/3.0 (DEC Alpha Linux) - Local Privilege Escalation	local	Linux
2011-06-10	Pacer Edition CMS 2.1 - 'rm' Arbitrary File Deletion	webapps	PHP
2011-06-10	Pacer Edition CMS 2.1 - 'l' Local File Inclusion	webapps	PHP
2011-06-10	Angora Guestbook 1.5 - Local File Inclusion	webapps	PHP
2011-06-10	Simple Web Server 1.2 - Directory Traversal	remote	Windows
2011-06-10	Tele Data Contact Management Server - Directory Traversal	webapps	Windows
2011-06-10	Tolinet Agencia - 'id' SQL Injection	webapps	PHP
2011-06-09	7-Technologies IGSS 9 - IGSSdataServer .Rms Rename Buffer Overflow (Metasploit)	remote	Windows
2011-06-09	EquiPCS - SQL Injection	webapps	ASP
2011-06-09	Aastra IP Phone 9480i - Web Interface Data Disclosure	webapps	Hardware
2011-06-09	Polycom IP Phone - Web Interface Data Disclosure	webapps	Hardware
2011-06-08	Linux/x86 - Reverse (localhost:8080/TCP) Shell + SSL Shellcode (422 bytes)	shellcode	Linux_x86
2011-06-08	ActFax Server FTP - (Authenticated) Remote Buffer Overflow	remote	Windows
2011-06-08	VideoLAN VLC Media Player 1.1.9 - XSPF Playlist Local File Integer Overflow	dos	Windows
2011-06-08	WordPress Plugin GD Star Rating - 'votes' SQL Injection	webapps	PHP
2011-06-08	Perl Data::FormValidator 4.66 Module - 'results()' Security Bypass	remote	Linux
2011-06-07	IBM Tivoli Endpoint 4.1.1 - Remote SYSTEM	remote	Windows
2011-06-07	Dataface - Local File Inclusion	webapps	PHP
2011-06-07	Xataface 1.x - 'action' Local File Inclusion	webapps	PHP
2011-06-07	Blog:CMS 4.2 - Multiple Cross-Site Scripting Vulnerabilities	webapps	PHP
2011-06-07	The Pacer Edition CMS 2.1 - 'email' Cross-Site Scripting	webapps	PHP
2011-06-06	1ClickUnzip 3.00 - '.zip' Heap Overflow	dos	Windows
2011-06-06	The KMPlayer 3.0.0.1440 (Windows XP SP3) - '.mp3' File Buffer Overflow (DEP Bypass)	local	Windows
2011-06-06	Cisco AnyConnect VPN Client - ActiveX URL Property Download and Execute (Metasploit)	remote	Windows
2011-06-06	vBulletin vBExperience 3 - 'sortorder' Cross-Site Scripting	webapps	PHP
2011-06-06	Joomla! Component CCBoard - SQL Injection / Arbitrary File Upload	webapps	PHP
2011-06-06	Nakid CMS 1.0.2 - 'CKEditorFuncNum' Cross-Site Scripting	webapps	PHP
2011-06-06	Multiple WordPress WooThemes Themes - 'test.php' Cross-Site Scripting	webapps	PHP
2011-06-06	PopScript - 'index.php' Multiple Input Validation Vulnerabilities	webapps	PHP
2011-06-06	Squiz Matrix 4 - 'colour_picker.php' Cross-Site Scripting	webapps	PHP
2011-06-04	WebSVN 2.3.2 - Unproper Metacharacters Escaping 'exec()' Remote Command Injection	webapps	Windows
2011-06-04	Xitami Web Server 2.5b4 - Remote Buffer Overflow (Egghunter)	remote	Windows
2011-06-04	OpenDrive 1.3.141 - Local Password Disclosure	local	Windows
2011-06-03	Xitami Web Server 2.5b4 - Remote Buffer Overflow	remote	Windows
2011-06-02	Golden FTP Server 4.70 - PASS Stack Buffer Overflow (Metasploit)	remote	Windows
2011-06-02	MODACOM URoad-5000 1450 - Remote Command Execution / Backdoor Access	remote	Hardware
2011-06-02	Ushahidi 2.0.1 - 'range' SQL Injection	webapps	PHP
2011-06-02	Linux Kernel 2.6.x - KSM Local Denial of Service	dos	Linux
2011-06-01	EasyFTP Server 1.7.0.2 - (Authenticated) Buffer Overflow (2)	remote	Windows
2011-06-01	TEDE Simplificado 1.01/S2.04 - Multiple SQL Injections	webapps	PHP
2011-06-01	PikaCMS - Multiple Local File Disclosure Vulnerabilities	webapps	PHP
2011-06-01	ARSC Really Simple Chat 3.3-rc2 - Cross-Site Scripting / Multiple SQL Injections	webapps	PHP
2011-06-01	NETGEAR WNDAP350 Wireless Access Point - Multiple Information Disclosure Vulnerabilities	remote	Hardware
2011-06-01	Nagios 3.2.3 - 'expand' Cross-Site Scripting	remote	Multiple
2011-05-31	iPhone4 FTP Server 1.0 - Empty CWD-RETR Remote Crash	dos	Hardware
2011-05-31	Brother HL-5370DW - series Authentication Bypass printer flooder	dos	Hardware
2011-05-31	Kentico CMS 5.5R2.23 - 'userContextMenu_Parameter' Cross-Site Scripting	webapps	ASP
2011-05-31	S9Y Serendipity Freetag-plugin 3.21 - 'index.php' Cross-Site Scripting	webapps	PHP
2011-05-31	Microsoft Windows Live Messenger 14 - 'dwmapi.dll' DLL Loading Arbitrary Code Execution	remote	Windows
2011-05-31	libxmlInvalid 2.7.x - XPath Multiple Memory Corruption Vulnerabilities	remote	Linux
2011-05-30	w-Agora Forum 4.2.1 - Arbitrary File Upload	webapps	PHP
2011-05-30	Easy Media Script - SQL Injection	webapps	PHP
2011-05-30	Reverse Engineering and Memory Patching	papers	Windows
2011-05-30	Belkin F5D7234-4 v5 G Wireless Router - Remote Hash Exposed	webapps	Hardware
2011-05-30	Guru JustAnswer Professional 1.25 - Multiple SQL Injections	webapps	PHP
2011-05-30	7-Technologies IGSS 9 - Data Server/Collector Packet Handling (Metasploit)	remote	Windows
2011-05-30	Cotonti 0.9.2 - Multiple SQL Injections	webapps	PHP
2011-05-29	HP Data Protector Client 6.11 - 'EXEC_SETUP' Remote Code Execution	remote	Windows
2011-05-29	Joomla! Component com_joomnik - SQL Injection	webapps	PHP
2011-05-29	Puzzle Apps CMS 3.2 - Local File Inclusion	webapps	PHP
2011-05-29	Invisionix Roaming System Remote metasys 0.2 - Local File Inclusion	webapps	PHP
2011-05-28	Duhok Forum 1.1 - SQL Injection	webapps	PHP
2011-05-28	Guru Penny Auction Pro 3.0 - Blind SQL Injection	webapps	PHP
2011-05-28	Joomla! Component com_jmsfileseller - Local File Inclusion	webapps	PHP
2011-05-28	HP Data Protector Client 6.11 - 'EXEC_CMD' Remote Code Execution	remote	Windows
2011-05-28	NetVault: SmartDisk 1.2 - 'libnvbasics.dll' Remote Denial of Service	dos	Windows
2011-05-28	Gadu-Gadu 10.5 - Remote Code Execution	remote	Multiple
2011-05-27	HB eCommerce - SQL Injection	webapps	PHP
2011-05-27	Magneto ICMP ActiveX 4.0.0.20 - ICMPSendEchoRequest Remote Code Execute	remote	Windows
2011-05-27	Magix Musik Maker 16 - '.mmm' Local Stack Buffer Overflow (Without EggHunter) (Metasploit)	local	Windows
2011-05-27	cPanel < 11.25 - Cross-Site Request Forgery (Add User PHP Script)	webapps	PHP
2011-05-27	The Underground in 2011	papers	Multiple
2011-05-27	Poison Ivy 2.3.2 - Remote Buffer Overflow	remote	Windows
2011-05-26	Clipbucket 2.4 RC2 645 - SQL Injection	webapps	PHP
2011-05-26	Windows - Download File + Execute via DNS + IPv6 Shellcode (Generator) (Metasploit)	shellcode	Generator
2011-05-26	Asterisk 1.8.4.1 - SIP 'REGISTER' Request User Enumeration	remote	Linux
2011-05-25	PHP 5.3.5 - 'socket_connect()' Local Buffer Overflow	local	Multiple
2011-05-25	Windows - Add Administrator User (RubberDuck/mudbath) + ExitProcess WinExec Shellcode (279 bytes)	shellcode	Windows
2011-05-25	Tickets 2.13 - SQL Injection	webapps	PHP
2011-05-25	i-doIT 0.9.9-4 - Local File Inclusion	webapps	PHP
2011-05-25	Extcalendar 2.0b2 - 'cal_search.php' SQL Injection	webapps	PHP
2011-05-25	eGroupWare 1.8.001.20110421 - Multiple Vulnerabilities	webapps	PHP
2011-05-25	AWStats Totals 1.14 multisort - Remote Command Execution (Metasploit)	webapps	PHP
2011-05-25	MidiCMS Website Builder - Local File Inclusion / Arbitrary File Upload	webapps	PHP
2011-05-25	Joomla! Component com_shop - SQL Injection	webapps	PHP

2011-05-25	Kryn.cms 0.9 - '_kurl' Cross-Site Scripting	webapps	PHP
2011-05-25	Vordel Gateway 6.0.3 - Directory Traversal	remote	Linux
2011-05-25	RXS-3211 IP Camera - UDP Packet Password Information Disclosure	remote	Hardware
2011-05-25	BlackBoard Learn 8.0 - 'keywordraw' Cross-Site Scripting	webapps	CGI
2011-05-24	phpScheduleIt 1.2.12 - Multiple Cross-Site Scripting Vulnerabilities	webapps	PHP
2011-05-24	Lumension Security Lumension Device Control 4.x - Memory Corruption	remote	Multiple
2011-05-24	Ajax Chat 1.0 - 'ajax-chat.php' Cross-Site Scripting	webapps	PHP
2011-05-24	Gadu-Gadu Instant Messenger 6.0 - File Transfer Cross-Site Scripting	remote	Multiple
2011-05-23	VisiWave - '.VWR' File Parsing Trusted Pointer (Metasploit)	local	Windows
2011-05-23	vBulletin 4.0.x 4.1.2 - 'search.php' SQL Injection	webapps	PHP
2011-05-23	PHPortfolio - SQL Injection	webapps	PHP
2011-05-23	Joomla! Component Map Locator - 'cid' SQL Injection	webapps	PHP
2011-05-22	Tugux CMS 1.2 - Multiple Vulnerabilities	webapps	PHP
2011-05-22	Magix Musik Maker 16 - '.mmm' Local Stack Buffer Overflow (Metasploit)	local	Windows
2011-05-21	E-Manage MySchool 7.02 - SQL Injection	webapps	PHP
2011-05-20	Ultimate PHP Board 2.2.7 - Broken Authentication and Session Management	webapps	PHP
2011-05-20	Zen Cart 1.3.9h - Multiple Vulnerabilities	webapps	PHP
2011-05-20	PHP Captcha / Securimage 2.0.2 - Authentication Bypass	webapps	PHP
2011-05-19	Room Juice 0.3.3 - 'display.php' Cross-Site Scripting	webapps	PHP
2011-05-19	Andy's PHP KnowledgeBase 0.95.4 - 'step5.php' PHP Remote Code Execution	webapps	PHP
2011-05-19	Zend Framework 1.11.4 - 'PDO_MySql' Security Bypass	remote	Linux
2011-05-19	LimeSurvey 1.85+ - 'admin.php' Cross-Site Scripting	webapps	PHP
2011-05-18	Joomla! Component jDownloads 1.0 - Arbitrary File Upload	webapps	PHP
2011-05-18	Cisco Unified Operations Manager - Multiple Vulnerabilities	remote	Windows
2011-05-18	Microsoft Windows Vista/2008 - 'nsiproxy.sys' Local Kernel Denial of Service	dos	Windows
2011-05-18	SpongeBob SquarePants Typing - Local Buffer Overflow (SEH)	local	Windows
2011-05-18	TWiki 5.0.1 - 'origurl' Cross-Site Scripting	webapps	PHP
2011-05-18	CiscoWorks Common Services Framework 3.1.1 Help Servlet - Cross-Site Scripting	remote	Hardware
2011-05-18	Cisco Unified Operations Manager 8.5 - Common Services Device Center Cross-Site Scripting	remote	Hardware
2011-05-18	CiscoWorks Common Services 3.1.1 - Auditing Directory Traversal	webapps	Java
2011-05-18	klibc 1.5.2 - DHCP Options Processing Remote Shell Command Execution	remote	Linux
2011-05-17	WordPress Plugin Is-human 1.4.2 - Remote Command Execution	webapps	PHP
2011-05-17	Sonique 1.96 - '.m3u' Local Buffer Overflow	local	Windows
2011-05-17	Pligg CMS 1.1.4 - SQL Injection	webapps	PHP
2011-05-17	PHP Calendar Basic 2.3 - Multiple Cross-Site Scripting Vulnerabilities	webapps	PHP
2011-05-16	XtreamerPRO Media-player 2.6.0/2.7.0 - Multiple Vulnerabilities	remote	Hardware
2011-05-16	Steam Software - Denial of Service	dos	Windows
2011-05-16	MediaInSpot CMS - Local File Inclusion (2)	webapps	PHP
2011-05-16	MediaInSpot CMS - SQL Injection	webapps	PHP
2011-05-16	CoolPlayer Portable 2.19.2 - Local Buffer Overflow	local	Windows
2011-05-16	Vanilla Forum 2.0.17.9 - Local File Inclusion	webapps	PHP
2011-05-16	NoticeBoardPro 1.0 - Multiple Vulnerabilities	webapps	PHP
2011-05-16	Jcow 4.2.1 - Local File Inclusion	webapps	PHP
2011-05-16	Novell Netware eDirectory - Denial of Service	dos	Netware
2011-05-16	7-Technologies IGSS 9.00.00 b11063 - 'IGSSdataServer.exe' Remote Stack Overflow (Metasploit)	remote	Windows
2011-05-16	AVS Ringtone Maker 1.6.1 - '.au' File Remote Buffer Overflow	remote	Windows
2011-05-16	Joomla! Component com_cbcontact - 'contact_id' SQL Injection	webapps	PHP
2011-05-16	Mitel Audio and Web Conferencing 4.4.3.0 - Multiple Cross-Site Scripting Vulnerabilities	webapps	ASP
2011-05-16	Mambo Component Docman 1.3.0 - Multiple SQL Injections	webapps	PHP
2011-05-16	Novell eDirectory 8.8 and Netware LDAP-SSL Daemon - Denial of Service	dos	Multiple
2011-05-16	allocPSA 1.7.4 - '/login/login.php' Cross-Site Scripting	webapps	PHP
2011-05-16	openQRM 4.8 - 'source_tab' Cross-Site Scripting	webapps	PHP
2011-05-16	eFront 3.6.9 - 'scripts.php' Local File Inclusion	webapps	PHP
2011-05-16	eFront 3.6.9 - 'submitScore.php' Cross-Site Scripting	webapps	PHP
2011-05-15	Winamp 5.61 - 'in_midi' Component heap Overflow (crash only)	dos	Windows
2011-05-15	Joomla! Component com_question - SQL Injection	webapps	PHP
2011-05-15	frame-oshop - SQL Injection	webapps	PHP
2011-05-14	[Hebrew] Digital Whisper Security Magazine #18	papers	Multiple
2011-05-14	[Hebrew] Digital Whisper Security Magazine #19	papers	Multiple
2011-05-14	[Hebrew] Digital Whisper Security Magazine #20	papers	Multiple
2011-05-14	Linux Exploit Development Part 4 - ASCII armor bypass return-to-plt	papers	Linux
2011-05-14	WordPress Plugin EditorMonkey 2.5 - 'FCKeditor' Arbitrary File Upload	webapps	PHP
2011-05-14	osCommerce 2.3.1 - 'banner_manager.php' Arbitrary File Upload	webapps	PHP
2011-05-13	A-PDF Wav to MP3 Converter 1.2.0 - DEP Bypass	local	Windows
2011-05-13	Adobe Audition 3.0 build 7283 - Session File Handling Buffer Overflow (PoC)	dos	Windows
2011-05-13	DreamBox DM500(+) - Arbitrary File Download	remote	Hardware
2011-05-13	Flash Tag Cloud And MT-Cumulus Plugin - 'tagcloud' Cross-Site Scripting	webapps	Multiple
2011-05-12	Symantec Backup Exec System Recovery 8.5 - Kernel Pointers Dereferences	dos	Windows
2011-05-12	SlimPDF Reader - Denial of Service (PoC)	dos	Windows
2011-05-12	A-PDF All to MP3 Converter 2.0.0 - DEP Bypass	local	Windows
2011-05-12	Oracle GlassFish Server - Administration Console Authentication Bypass	webapps	Windows
2011-05-12	Apache 1.4/2.2.x - APR 'apr_fnmatch()' Denial of Service	dos	Linux
2011-05-12	Argyle Social - Multiple Cross-Site Scripting Vulnerabilities	webapps	PHP
2011-05-12	DocMGR 1.1.2 - 'history.php' Cross-Site Scripting	webapps	PHP
2011-05-11	SPlayer 3.7 - Content-Type Buffer Overflow (Metasploit)	remote	Windows
2011-05-11	Chasys Media Player 2.0 - Local Buffer Overflow (SEH)	local	Windows
2011-05-11	showoff! digital media software 1.5.4 - Multiple Vulnerabilities	webapps	CGI
2011-05-10	serva32 1.2.00 rc1 - Multiple Vulnerabilities	dos	Windows
2011-05-10	Traidnt UP 2.0 - 'view.php' SQL Injection	webapps	PHP
2011-05-10	ICONICS WebHMI - ActiveX Buffer Overflow (Metasploit)	remote	Windows
2011-05-10	Apache Struts 2.0.0 < 2.2.1.1 - XWork 's:submit' HTML Tag Cross-Site Scripting	remote	Multiple
2011-05-10	poMMo Aardvark PR16.1 - Multiple Cross-Site Scripting Vulnerabilities	webapps	PHP
2011-05-10	Calendarix 0.8.20080808 - Multiple Cross-Site Scripting / SQL Injections	webapps	PHP
2011-05-09	Joomla! Component com_versioning - SQL Injection	webapps	PHP
2011-05-09	Joomla! Component com_hello - SQL Injection	webapps	PHP
2011-05-09	BlueVoda Website Builder 11 - '.bvp' Local Stack Buffer Overflow	local	Windows
2011-05-09	encoder 0.4.10 - 'edit.php' Cross-Site Scripting	webapps	PHP
2011-05-09	Ampache 3.5.4 - 'login.php' Cross-Site Scripting	webapps	PHP
2011-05-09	Exponent CMS 2.0.0 Beta 1.1 - Local File Inclusion / Arbitrary File Upload	webapps	PHP
2011-05-09	Gelsheet 1.02 - 'index.php' Cross-Site Scripting	webapps	PHP
2011-05-09	phpWebSite 1.7.1 - 'upload.php' Arbitrary File Upload	webapps	PHP
2011-05-09	EmbryoCore 1.03 - 'index.php' SQL Injection	webapps	PHP
2011-05-09	HOMEPIMA Design - 'filedown.php' Local File Disclosure	webapps	PHP
2011-05-09	Keyfax Customer Response Management 3.2.2.6 - Multiple Cross-Site Scripting Vulnerabilities	webapps	ASP
2011-05-09	Imperva SecureSphere - SQL Query Filter Security Bypass	remote	Multiple
2011-05-09	ZAPms 1.22 - 'nick' SQL Injection	webapps	PHP
2011-05-08	Dangling Pointer	papers	Multiple
2011-05-08	Fuzzing Frameworks	papers	Multiple
2011-05-08	Remote and Local Exploitation of Network Drivers	papers	Multiple
2011-05-08	VoIP Security - Methodology and Results	papers	Multiple
2011-05-08	FestOS 2.3c - 'upload.php' Arbitrary File Upload	webapps	PHP
2011-05-07	Evolutionary Fuzzing	papers	Multiple
2011-05-07	Connection String Parameter Pollution Attacks	papers	Multiple
2011-05-07	WPA Too!	papers	Multiple
2011-05-07	Token Kidnapping's Revenge	papers	Multiple
2011-05-07	Attacks to SAP Web Applications	papers	Multiple
2011-05-07	Attacking with HTML5	papers	Multiple
2011-05-07	f-fileman 7.0 - Directory Traversal	webapps	CGI
2011-05-07	e107 0.7.25 - 'news.php' SQL Injection	webapps	PHP
2011-05-07	Getsimple CMS 3.0 - 'set' Local File Inclusion	webapps	PHP
2011-05-06	PHPDug 2.0.0 - Multiple Vulnerabilities	webapps	PHP
2011-05-06	Understanding the heap by breaking it	papers	Multiple
2011-05-06	phpThumb - 'phpThumbDebug' Information Disclosure	webapps	PHP
2011-05-06	VCalendar 1.1.5 - Cross-Site Request Forgery	webapps	PHP
2011-05-05	[Persian] ‫‪Introduction to Man-in-the-middle Attacks‬‬	papers	Multiple
2011-05-05	[Persian] Null Bind Attacks	papers	Multiple
2011-05-05	WordPress Plugin WP Ajax Calendar 1.0 - 'example.php' Cross-Site Scripting	webapps	PHP
2011-05-05	PHP Directory Listing Script 3.1 - 'index.php' Cross-Site Scripting	webapps	PHP
2011-05-05	BMC Remedy Knowledge Management 7.5.00 - Default Account / Multiple Cross-Site Scripting Vulnerabilities	webapps	JSP
2011-05-05	BMC Dashboards 7.6.01 - Cross-Site Scripting / Information Disclosure	webapps	JSP

2011-05-05	PHPDug 2.0 - Multiple Cross-Site Scripting Vulnerabilities	webapps	PHP
2011-05-04	SPlayer 3.7 (build 2055) - Remote Buffer Overflow	remote	Windows
2011-05-04	ZyWALL USG Appliance - Multiple Vulnerabilities	remote	Hardware
2011-05-04	Sothink DHTML Menu - SQL Injection	webapps	ASP
2011-05-04	sipdroid 2.2 - SIP INVITE Response User Enumeration	remote	Multiple
2011-05-03	Horizon Web Builder - 'fshow.php' SQL Injection	webapps	PHP
2011-05-03	Front Accounting 2.3.4 - Cross-Site Request Forgery	webapps	PHP
2011-05-03	Time and Expense Management System - Multiple Vulnerabilities	webapps	PHP
2011-05-03	ICONICS WebHMI - ActiveX Stack Overflow	remote	Windows
2011-05-03	E2 Photo Gallery 0.9 - 'index.php' Cross-Site Scripting	webapps	PHP
2011-05-03	YaPiG 0.95 - Multiple Cross-Site Scripting Vulnerabilities	webapps	PHP
2011-05-03	Web Auction 0.3.6 - 'lang' Cross-Site Scripting	webapps	PHP
2011-05-03	Proofpoint Protection Server 5.5.5 - 'process.cgi' Cross-Site Scripting	webapps	CGI
2011-05-03	SelectaPix 1.4.1 - 'uploadername' Cross-Site Scripting	webapps	PHP
2011-05-03	GoT.MY (Multiple Products) - 'theme_dir' Cross-Site Scripting	webapps	PHP
2011-05-03	Perl 5.10 - Multiple Null Pointer Dereference Denial of Service Vulnerabilities	dos	Multiple
2011-05-02	Parnian Opendata CMS - SQL Injection	webapps	PHP
2011-05-02	Exponent CMS 2.0 Beta 1.1 - Cross-Site Request Forgery (Add Administrator Account)	webapps	PHP
2011-05-02	Travel411 - SQL Injection	webapps	PHP
2011-05-02	LANSA aXes Web Terminal TN5250 - 'axes_default.css' Cross-Site Scripting	webapps	Java
2011-05-02	LDAP Account Manager 3.4.0 - 'selfserviceSaveOk' Cross-Site Scripting	webapps	PHP
2011-05-02	Asterisk 1.8.x - SIP INVITE Request User Enumeration	remote	Multiple
2011-05-02	OpenMyZip 0.1 - '.zip' Remote Buffer Overflow	remote	Windows
2011-05-01	TCExam 11.1.29 - 'tce_xml_user_results.php' Multiple SQL Injections	webapps	PHP
2011-04-30	MJM QuickPlayer 1.00 Beta 60a / QuickPlayer 2010 - '.s3m' Local Stack Buffer Overflow (Metasploit)	local	Windows
2011-04-30	MJM Core Player 2011 - '.s3m' Local Stack Buffer Overflow (Metasploit)	local	Windows
2011-04-30	Tine 2.0 - 'vbook.php' Cross-Site Scripting	webapps	PHP
2011-04-29	OSX/x64 - Reverse (FFFFFFFF:4444/TCP) Shell (/bin/sh) Shellcode (131 bytes)	shellcode	OSX
2011-04-29	phpGraphy 0.9.13b - Multiple Vulnerabilities	webapps	PHP
2011-04-29	Microsoft Excel - Axis Properties Record Parsing Buffer Overflow (PoC) (MS11-02)	dos	Windows
2011-04-29	SOOP Portal Raven 1.0b - SQL Injection	webapps	ASP
2011-04-29	OProfile 0.9.6 - 'opcontrol' Utility 'set_event()' Local Privilege Escalation	local	Linux
2011-04-28	eyeos 1.9.0.2 - Persistent Cross-Site Scripting Using Image Files	webapps	PHP
2011-04-28	kusaba x 0.9.1 - Multiple Vulnerabilities	webapps	PHP
2011-04-28	Libmodplug 0.8.8.2 - '.abc' Stack Buffer Overflow (PoC)	dos	Linux
2011-04-28	NetOp Remote Control 8.0/9.1/9.2/9.5 - Local Buffer Overflow	local	Windows
2011-04-28	Subtitle Processor 7.7.1 - '.m3u' File Buffer Overflow (SEH Unicode) (Metasploit)	local	Windows
2011-04-28	WordPress Plugin Daily Maui Photo Widget 0.2 - Multiple Cross-Site Scripting Vulnerabilities	webapps	PHP
2011-04-28	WordPress Plugin WP Photo Album 1.5.1 - 'id' Cross-Site Scripting	webapps	PHP
2011-04-28	BackupPC 3.x - 'index.cgi' Multiple Cross-Site Scripting Vulnerabilities	webapps	CGI
2011-04-28	phpGraphy 0.9.13b - 'theme_dir' Cross-Site Scripting	webapps	PHP
2011-04-28	ClanSphere 2011.0 - Local File Inclusion / Arbitrary File Upload	webapps	PHP
2011-04-27	Subtitle Processor 7.7.1 - Local Buffer Overflow (SEH Unicode)	local	Windows
2011-04-27	Symphony CMS 2.1.2 - Blind SQL Injection	webapps	PHP
2011-04-27	EMC HomeBase Server - Directory Traversal Remote Code Execution (Metasploit)	remote	Windows
2011-04-27	Cisco Unified Communications Manager 8.5 - 'xmldirectorylist.jsp' Multiple SQL Injections	webapps	JSP
2011-04-27	Kusaba X 0.9 - Multiple Cross-Site Scripting Vulnerabilities	webapps	PHP
2011-04-27	Joostina (Multiple Components) - SQL Injection	webapps	PHP
2011-04-27	up.time Software 5 - Administration Interface Remote Authentication Bypass	webapps	PHP
2011-04-26	WordPress Plugin SermonBrowser 0.43 - SQL Injection	webapps	PHP
2011-04-26	Snom IP Phone Web Interface < 8 - Multiple Vulnerabilities	webapps	Hardware
2011-04-26	Quick.CMS 3.0 - Cross-Site Request Forgery	webapps	PHP
2011-04-26	WordPress Plugin Sermon Browser 0.43 - Cross-Site Scripting / SQL Injection	webapps	PHP
2011-04-26	Noah's Classifieds 5.0.4 - 'index.php' Multiple HTML Injection Vulnerabilities	webapps	PHP
2011-04-26	phpList 2.10.x - 'email' Cross-Site Scripting	webapps	PHP
2011-04-26	html-edit CMS 3.1.x - 'html_output' Cross-Site Scripting	webapps	PHP
2011-04-26	WordPress Plugin WP Ajax Recent Posts 1.0.1 - 'do' Cross-Site Scripting	webapps	PHP
2011-04-26	PHP F1 Max's Photo Album - 'showimage.php' Cross-Site Scripting	webapps	PHP
2011-04-26	Football Website Manager 1.1 - SQL Injection / Multiple HTML Injection Vulnerabilities	webapps	PHP
2011-04-25	eZip Wizard 3.0 - Local Stack Buffer Overflow (Metasploit)	local	Windows
2011-04-25	mySeatXT 0.1781 - SQL Injection	webapps	PHP
2011-04-25	OrangeHRM 2.6.3 - 'PluginController.php' Local File Inclusion	webapps	PHP
2011-04-25	phpmychat plus 1.93 - Multiple Vulnerabilities	webapps	PHP
2011-04-25	TemaTres 1.3 - '_search_expresion' Cross-Site Scripting	webapps	PHP
2011-04-25	eXPert PDF 7.0.880.0 - '.pj' Heap Buffer Overflow	dos	Windows
2011-04-25	AT-TFTP Server 1.8 - 'Read' Request Remote Denial of Service	dos	Windows
2011-04-25	eyeOS 1.9.0.2 - Image File Handling HTML Injection	webapps	PHP
2011-04-24	SoftMP3 - SQL Injection	webapps	PHP
2011-04-22	Linux Exploit Development Part 3 (Rev 2) - Real App Demo ret2libc	papers	Linux
2011-04-22	First Escort Marketing CMS - Multiple SQL Injections Vulnerabilities	webapps	PHP
2011-04-22	360 Web Manager 3.0 - Multiple Vulnerabilities	webapps	PHP
2011-04-22	ZenPhoto 1.4.0.3 - x-forwarded-for HTTP Header Persistent Cross-Site Scripting	webapps	PHP
2011-04-22	PHP 'phar' Extension 1.1.1 - Heap Overflow	dos	Multiple
2011-04-22	Dolibarr ERP/CRM 3.0.0 - Multiple Vulnerabilities	webapps	PHP
2011-04-22	Web2Project 2.3 - SQL Injection	webapps	PHP
2011-04-22	DynMedia Pro Web CMS 4.0 - Local File Disclosure	webapps	PHP
2011-04-22	4Images 1.7.9 - Multiple Vulnerabilities	webapps	PHP
2011-04-22	Realmarketing CMS - Multiple SQL Injections	webapps	PHP
2011-04-22	WordPress Plugin Ajax Category Dropdown 0.1.5 - Multiple Vulnerabilities	webapps	PHP
2011-04-22	todoyu 2.0.8 - 'lang' Cross-Site Scripting	webapps	PHP
2011-04-22	Dolibarr ERP/CRM 3.0 - Local File Inclusion / Cross-Site Scripting	webapps	PHP
2011-04-22	Nuke Evolution Xtreme 2.0 - Local File Inclusion / SQL Injection	webapps	PHP
2011-04-21	Gesytec ElonFmt ActiveX 1.1.14 - 'ElonFmt.ocx' pid Item Buffer Overflow (SEH)	local	Windows
2011-04-21	Linux/x86 - Bind (6666/TCP) Netcat (/usr/bin/netcat) Shell (/bin/sh) + Polymorphic + XOR Encoded Shellcode (69/93 bytes)	shellcode	Linux_x86
2011-04-21	Spreecommerce < 0.50.0 - Arbitrary Command Execution (Metasploit)	remote	Unix
2011-04-21	SyCtel Design - 'menu' Multiple Local File Inclusions	webapps	PHP
2011-04-21	ZenPhoto 1.4.0.3 - '_zp_themeroot' Multiple Cross-Site Scripting Vulnerabilities	webapps	PHP
2011-04-21	LightNEasy 3.2.3 - 'userhandle' Cookie SQL Injection	webapps	PHP
2011-04-20	Ultimate eShop - Error-Based SQL Injection	webapps	PHP
2011-04-20	docuFORM Mercury WebApp 6.16a/5.20 - Multiple Cross-Site Scripting Vulnerabilities	webapps	PHP
2011-04-20	SocialCMS 1.0.2 - Multiple Cross-Site Request Forgery Vulnerabilities	webapps	PHP
2011-04-20	Automagick Tube Script 1.4.4 - 'module' Cross-Site Scripting	webapps	PHP
2011-04-20	Yahoo! CD Player - ActiveX Control 'open()' Method Stack Buffer Overflow	dos	Windows
2011-04-19	IBM Tivoli Directory Server SASL - Bind Request Remote Code Execution	dos	Windows
2011-04-19	Adobe Flash Player < 10.1.53.64 - Action Script Type Confusion (ASLR + DEP Bypass)	remote	Windows
2011-04-19	Wireshark 1.4.4 - 'packet-dect.c' Local Stack Buffer Overflow (Metasploit) (1)	local	Windows
2011-04-19	dalbum 1.43 - Multiple Vulnerabilities	webapps	PHP
2011-04-19	Wireshark 1.4.4 - 'packet-dect.c' Remote Stack Buffer Overflow (Metasploit) (2)	remote	Windows
2011-04-19	CRESUS - 'recette_detail.php' SQL Injection	webapps	PHP
2011-04-19	Ultra Marketing Enterprises CMS and Cart - Multiple SQL Injections	webapps	PHP
2011-04-19	WordPress Plugin WP-StarsRateBox 1.1 - 'j' SQL Injection	webapps	PHP
2011-04-19	Dalbum 1.43 - 'editini.php' Cross-Site Scripting	webapps	PHP
2011-04-19	ChatLakTurk PHP Botlu Video - 'ara.php' Cross-Site Scripting	webapps	PHP
2011-04-19	Oracle JD Edwards EnterpriseOne 8.9x Tools Web Runtime SEC - '/jde/E1Menu.maf?jdeowpBackButtonProtect' Cross-Site Scripting	remote	Multiple
2011-04-19	Oracle JD Edwards EnterpriseOne 8.9x Tools Web Runtime SEC - '/jde/E1Menu_Menu.mafService?e1.namespace' Cross-Site Scripting	remote	Multiple
2011-04-19	Oracle JD Edwards EnterpriseOne 8.9x Tools Web Runtime SEC - '/jde/E1Menu_OCL.mafService?e1.namespace' Cross-Site Scripting	remote	Multiple
2011-04-19	Oracle JD Edwards EnterpriseOne 8.9x Tools Web Runtime SEC - '/jde/MafletClose.mafService?RENDER_MAFLET' Cross-Site Scripting	remote	Multiple
2011-04-19	Oracle JD Edwards EnterpriseOne 8.9x Tools Web Runtime SEC - '/jde/JASMafletMafBrowserClose.mafService?jdemafjasLinkTarget' Cross-Site Scripting	remote	Multiple
2011-04-19	webSPELL 4.2.2a - Multiple Cross-Site Scripting Vulnerabilities	webapps	PHP
2011-04-19	Viola DVR VIO-4/1000 - Multiple Directory Traversal Vulnerabilities	remote	Linux
2011-04-18	Go Null Yourself (GNY) E-Zine #4	papers	eZine
2011-04-18	Wireshark 1.4.1 < 1.4.4 - Local Overflow (SEH)	local	Windows
2011-04-18	Joomla! Component com_phocadownload - Local File Inclusion	webapps	PHP
2011-04-18	XOOPS 2.5 - 'imagemanager.php' Local File Inclusion	webapps	PHP
2011-04-17	FiSH-irssi 0.99 - Evil ircd Buffer Overflow	remote	Linux
2011-04-17	osPHPSite - SQL Injection	webapps	PHP
2011-04-16	Blue Hat - Sensitive Database Disclosure / SQL Injection	webapps	PHP
2011-04-16	Bedder CMS - Blind SQL Injection	webapps	PHP
2011-04-16	Shape Web Solutions CMS - SQL Injection	webapps	PHP
2011-04-16	Adobe Flash Player 10.2.153.1 - SWF Memory Corruption (Metasploit)	remote	Windows

2011-04-16	SoftXMLCMS - Arbitrary File Upload	webapps	ASP
2011-04-16	Microsoft Word 2003 - Record Parsing Buffer Overflow (MS09-027) (Metasploit)	local	Windows
2011-04-16	4Images 1.7.9 - Multiple Remote File Inclusions / SQL Injections	webapps	PHP
2011-04-16	ChillyCMS 1.2.1 - Multiple Remote File Inclusions	webapps	PHP
2011-04-15	cPassMan 1.82 - Arbitrary File Download	webapps	PHP
2011-04-15	TextAds 2.08 Script - Cross-Site Scripting	webapps	PHP
2011-04-15	SQL-Ledger 2.8.33 - (Authenticated) Local File Inclusion / Edit	webapps	Multiple
2011-04-15	Agahi Advertisement CMS 4.0 - 'view_ad.php' SQL Injection	webapps	PHP
2011-04-15	RunCMS Module Partners - 'id' SQL Injection	webapps	PHP
2011-04-15	PhoenixCMS 1.7 - Local File Inclusion / SQL Injection	webapps	PHP
2011-04-15	Technicolor THOMSON TG585v7 Wireless Router - 'url' Cross-Site Scripting	remote	Hardware
2011-04-14	[French] How to make backdoor with Return Oriented Programming and ROPgadget tool?	papers	Multiple
2011-04-14	NEdit 5.5 - Format String	local	BSD
2011-04-14	EZ-Shop 1.02 - Lateral SQL Injection	webapps	PHP
2011-04-14	SimplyPlay 66 - '.pls' Local Buffer Overflow	local	Windows
2011-04-14	EC Software Help & Manual 5.5.1 Build 1296 - 'ijl15.dll' DLL Loading Arbitrary Code Execution	remote	Windows
2011-04-14	PhpAlbum.net 0.4.1-14_fix06 - 'var3' Remote Command Execution	webapps	PHP
2011-04-14	Qianbo Enterprise Web Site Management System - 'Keyword' Cross-Site Scripting	webapps	PHP
2011-04-13	TinyBB 1.4 - Blind SQL Injection / Full Path Disclosure	webapps	PHP
2011-04-13	PlaylistMaker 1.5 - '.txt' Local Buffer Overflow	local	Windows
2011-04-13	TOTVS ERP Microsiga Protheus 8/10 - Memory Corruption (Denial of Service)	dos	Multiple
2011-04-12	Linux Exploit Development Part 2 (Rev 2) - Real App Demo	papers	Linux
2011-04-12	Cisco Security Agent Management Console - 'st_upload' Remote Code Execution	remote	Windows
2011-04-12	OpenText FirstClass Client 11.005 - Code Execution	remote	Windows
2011-04-12	Wordtrainer 3.0 - '.ord' Local Buffer Overflow	local	Windows
2011-04-12	Microsoft HTML Help 6.1 - Local Stack Overflow	local	Windows
2011-04-12	Microsoft Host Integration Server 8.5.4224.0 - Denial of Service	dos	Windows
2011-04-12	Microsoft Reader 2.1.1.3143 - Integer Overflow (1)	dos	Windows
2011-04-12	Microsoft Reader 2.1.1.3143 - Heap Overflow	dos	Windows
2011-04-12	Microsoft Reader 2.1.1.3143 - Integer Overflow (2)	dos	Windows
2011-04-12	Microsoft Reader 2.1.1.3143 - Array Overflow	dos	Windows
2011-04-12	Microsoft Reader 2.1.1.3143 - Null Byte Write	dos	Windows
2011-04-12	Microsoft Excel - Remote Buffer Overflow	remote	Windows
2011-04-12	WordPress Plugin Spellchecker 3.1 - '/general.php' Local/Remote File Inclusion	webapps	PHP
2011-04-12	WordPress Theme The Gazette Edition 2.9.4 - Multiple Vulnerabilities	webapps	PHP
2011-04-12	Plogger 1.0 RC1 - 'gallery_name' Cross-Site Scripting	webapps	PHP
2011-04-12	Website Baker 2.8.1 - Multiple SQL Injections	webapps	PHP
2011-04-12	Winamp 5.6.1 - '.m3u8' Remote Buffer Overflow	remote	Windows
2011-04-11	Vallen Zipper 2.30 - '.zip' Heap Overflow	dos	Windows
2011-04-11	K-Links - Link Directory Script SQL Injection	webapps	PHP
2011-04-11	tmux 1.3/1.4 - '-S' Option Incorrect SetGID Privilege Escalation	local	Linux
2011-04-11	VeryTools VideoSpirit Pro 1.70 - '.visprj' Local Buffer Overflow (Metasploit)	local	Windows
2011-04-11	Dimac CMS 1.3 XS - 'default.asp' SQL Injection	webapps	ASP
2011-04-11	Linux Kernel 2.6.x - 'inotify_init1()' Double-Free Local Denial of Service	dos	Linux
2011-04-11	Etki Video PRO 2.0 - 'izle.asp?id' SQL Injection	webapps	PHP
2011-04-11	Etki Video PRO 2.0 - 'kategori.asp?cat' SQL Injection	webapps	PHP
2011-04-11	WordPress Theme Live Wire 2.3.1 - Multiple Vulnerabilities	webapps	PHP
2011-04-11	MIT Kerberos 5 - kadmind Change Password Feature Remote Code Execution	remote	Linux
2011-04-11	Microsoft Host Integration Server 2004-2010 - Remote Denial of Service	dos	Windows
2011-04-10	Point Market System 3.1x vBulletin plugin - SQL Injection	webapps	PHP
2011-04-10	IrfanView 4.28 - '.ICO' With Transparent Colour Denial of Service / Remote Denial of Service	dos	Windows
2011-04-10	IrfanView 4.28 - '.ICO' Without Transparent Colour Denial of Service / Remote Denial of Service	dos	Windows
2011-04-10	MikeyZip 1.1 - '.zip' Local Buffer Overflow	local	Windows
2011-04-09	Joomla! Component joomlacontenteditor - Blind SQL Injection	webapps	PHP
2011-04-09	Nooms CMS 1.1.1 - Cross-Site Request Forgery	webapps	PHP
2011-04-09	Libmodplug ReadS3M - Stack Overflow	dos	Multiple
2011-04-09	Real Networks Arcade Games - StubbyUtil.ProcessMgr ActiveX Arbitrary Code Execution (Metasploit)	remote	Windows
2011-04-09	eForum 1.1 - 'eforum.php' Arbitrary File Upload	webapps	PHP
2011-04-08	Linux Exploit Development Part 3 - ret2libc	papers	Linux
2011-04-08	Joomla! Component com_virtuemart 1.1.7 - Blind SQL Injection	webapps	PHP
2011-04-08	Microsoft Windows XP - 'afd.sys' Local Kernel Denial of Service	dos	Windows
2011-04-08	phpcollab 2.5 - Multiple Vulnerabilities	webapps	PHP
2011-04-08	viscacha 0.8.1 - Multiple Vulnerabilities	webapps	PHP
2011-04-08	AOL Desktop 9.6 - RTX Buffer Overflow (Metasploit)	local	Windows
2011-04-08	ManageEngine Applications Manager - (Authenticated) Code Execution (Metasploit)	remote	Windows
2011-04-08	VideoLAN VLC Media Player 1.1.8 - ModPlug ReadS3M Stack Buffer Overflow (Metasploit)	remote	Windows
2011-04-08	vTiger CRM 5.2.1 - 'sortfieldsjson.php' Local File Inclusion	webapps	PHP
2011-04-08	PrestaShop 1.3.6 - 'cms.php' Remote File Inclusion	webapps	PHP
2011-04-08	FiberHome HG-110 - Cross-Site Scripting / Directory Traversal	remote	Hardware
2011-04-08	1024 CMS 1.1.0 Beta - Multiple Input Validation Vulnerabilities	webapps	PHP
2011-04-07	S40 CMS 0.4.2b - Local File Inclusion	webapps	PHP
2011-04-07	Omer Portal 3.220060425 - 'arama_islem.asp' Cross-Site Scripting	webapps	ASP
2011-04-07	vTiger CRM 5.2.1 - 'vtigerservice.php' Cross-Site Scripting	webapps	PHP
2011-04-07	eGroupWare 1.8.1 - 'test.php' Cross-Site Scripting	webapps	PHP
2011-04-06	MPlayer (r33064 Lite) - Local Buffer Overflow (ROP)	local	Windows
2011-04-06	Dream Vision Technologies Web Portal - SQL Injection	webapps	PHP
2011-04-06	Graugon Forum 1.3 - SQL Injection	webapps	PHP
2011-04-06	eyeos 2.3 - Multiple Vulnerabilities	webapps	PHP
2011-04-06	greenpants 0.1.7 - Multiple Vulnerabilities	webapps	PHP
2011-04-06	TextPattern 4.2 - 'index.php' Cross-Site Scripting	webapps	PHP
2011-04-06	Redmine 1.0.1/1.1.1 - 'projects/hg-hellowword/news/' Cross-Site Scripting	webapps	PHP
2011-04-05	Tutorialms 1.4 - 'show' SQL Injection	webapps	PHP
2011-04-05	OpenEMR 4.0.0 - Multiple Vulnerabilities	webapps	PHP
2011-04-05	WordPress Plugin Custom Pages 0.5.0.1 - Local File Inclusion	webapps	PHP
2011-04-05	Web Application Vulnerabilities in Context of Browser Extensions - 2: Opera	papers	Multiple
2011-04-05	Zend Server Java Bridge - Arbitrary Java Code Execution (Metasploit)	remote	Multiple
2011-04-05	Eleanor CMS - Cross-Site Scripting / Multiple SQL Injections	webapps	PHP
2011-04-05	UseBB 1.0.11 - 'admin.php' Local File Inclusion	webapps	PHP
2011-04-05	python-feedparser 5.0 - '/feedparser/feedparser.py' Cross-Site Scripting	remote	Multiple
2011-04-04	DoceboLms 4.0.4 - Multiple Persistent Cross-Site Scripting Vulnerabilities	webapps	PHP
2011-04-04	Yaws-Wiki 1.88-1 (Erlang) - Persistent / Reflective Cross-Site Scripting	webapps	Multiple
2011-04-04	Encore ENPS-2012 - Cross-Site Scripting	webapps	Hardware
2011-04-04	TP-Link TL-PS110U / TL-PS110P - Cross-Site Scripting	webapps	Hardware
2011-04-04	Planex Mini-300PU & Mini100s - Cross-Site Scripting	webapps	Hardware
2011-04-04	ZO Tech Multiple Print Servers - Cross-Site Scripting	webapps	Hardware
2011-04-04	Longshine Multiple Print Servers - Cross-Site Scripting	webapps	Hardware
2011-04-04	Planet FPS-1101 - Cross-Site Scripting	webapps	Hardware
2011-04-04	IBM Lotus Domino iCalendar - MAILTO Buffer Overflow (Metasploit)	remote	Windows
2011-04-04	Yaws-Wiki 1.88-1 - Multiple Cross-Site Scripting / HTML Injection Vulnerabilities	webapps	PHP
2011-04-04	Gazelle CMS 1.0 - Cross-Site Scripting / SQL Injection	webapps	PHP
2011-04-04	MyBB 1.4/1.6 - Multiple Vulnerabilities	webapps	PHP
2011-04-04	PHP-Fusion - 'article_id' SQL Injection	webapps	PHP
2011-04-04	WordPress Plugin WPwizz AdWizz Plugin 1.0 - 'link' Cross-Site Scripting	webapps	PHP
2011-04-04	XOOPS 2.5 - 'banners.php' Multiple Local File Inclusions	webapps	PHP
2011-04-03	Advanced Image Hosting 2.2 - 'index.php' SQL Injection	webapps	PHP
2011-04-03	RealNetworks RealGames StubbyUtil.ShellCtl.1 - ActiveX Control Multiple Remote Command Executions	remote	Windows
2011-04-03	RealNetworks RealGames StubbyUtil.ProcessMgr.1 - ActiveX Control Multiple Remote Command Executions	remote	Windows
2011-04-03	Rash CMS - SQL Injection	webapps	PHP
2011-04-03	Banner Ad Management Script - SQL Injection	webapps	PHP
2011-04-03	OpenCart 1.4.9 - Multiple Local File Inclusions	webapps	PHP
2011-04-03	DoceboLms 4.0.4 - 'index.php' Multiple HTML Injection Vulnerabilities	webapps	PHP
2011-04-03	RealNetworks GameHouse 'InstallerDlg.dll' 2.6.0.445 ActiveX Control - Multiple Vulnerabilities	remote	Windows
2011-04-03	WordPress Plugin Placester 0.1 - 'ajax_action' Cross-Site Scripting	webapps	PHP
2011-04-03	EasyPHP 5.3.5.0 - 'index.php' Arbitrary File Download	remote	Windows
2011-04-02	spidaNews 1.0 - 'news.php?id' SQL Injection	webapps	PHP
2011-04-02	ilchClan 1.0.5 - 'regist.php' SQL Injection	webapps	PHP
2011-04-02	Anzeigenmarkt 2011 - 'index.php' SQL Injection	webapps	PHP
2011-04-01	Word List Builder - Local Buffer Overflow (SEH)	local	Windows
2011-04-01	Real player 14.0.2.633 - Buffer Overflow (Denial of Service) (PoC)	dos	Windows
2011-04-01	GOM Media Player 2.1.6.3499 - Buffer Overflow (Denial of Service) (PoC)	dos	Windows

2011-04-01	Allomani E-Store 1.0 - Cross-Site Request Forgery (Add Admin) (2)	webapps	PHP
2011-04-01	Allomani News 1.0 - Cross-Site Request Forgery (Add Admin)	webapps	PHP
2011-04-01	Allomani Movies Library 2.0 - Cross-Site Request Forgery (Add Admin)	webapps	PHP
2011-04-01	Allomani Web Links 1.0 - Cross-Site Request Forgery (Add Admin)	webapps	PHP
2011-04-01	Allomani Audio and Video Library 2.7.0 - Cross-Site Request Forgery (Add Admin)	webapps	PHP
2011-04-01	Allomani Super MultiMedia Library 2.5.0 - Cross-Site Request Forgery (Add Admin)	webapps	PHP
2011-04-01	IPComp - encapsulation Kernel Memory Corruption	dos	BSD
2011-04-01	InTerra Blog Machine 1.84 - Cross-Site Scripting	webapps	PHP
2011-04-01	Feng Office 1.7.3.3 - Cross-Site Request Forgery	webapps	PHP
2011-04-01	AWCM 2.x - 'search.php' Cross-Site Scripting	webapps	PHP
2011-03-31	PHPBoost 3.0 - Remote Download Backup	webapps	PHP
2011-03-31	InTerra Blog Machine 1.84 - 'subject' HTML Injection	webapps	PHP
2011-03-31	Collabtive 0.6.5 - Multiple Remote Input Validation Vulnerabilities	webapps	PHP
2011-03-31	MoviePlay 4.82 - '.avi' Buffer Overflow	dos	Windows
2011-03-31	Microsoft Windows Media Player 11.0.5721.5145 - '.avi' Buffer Overflow	dos	Windows
2011-03-30	Media Player Classic Home Cinema 1.5.0.2827 - '.avi' Denial of Service (PoC)	dos	Windows
2011-03-30	YaCOMAS 0.3.6 Alpha - Multiple Vulnerabilities	webapps	PHP
2011-03-30	Pligg CMS 1.1.3 - Multiple Vulnerabilities	webapps	PHP
2011-03-30	Zend Java Bridge - Remote Code Execution	remote	Multiple
2011-03-30	IrIran Shoping Script - SQL Injection	webapps	PHP
2011-03-30	BigACE 2.7.5 - Arbitrary File Upload	webapps	PHP
2011-03-30	CosmoQuest - Authentication Bypass	webapps	ASP
2011-03-30	HT Editor 2.0.18 - File Opening Stack Overflow	local	Linux
2011-03-30	Andy's PHP KnowledgeBase 0.95.2 - 'viewusers.php' SQL Injection	webapps	PHP
2011-03-30	GuppY 4.6.14 - 'lng' Multiple SQL Injections	webapps	PHP
2011-03-30	YaCOMAS 0.3.6 OpenCMS - Multiple Cross-Site Scripting Vulnerabilities	webapps	PHP
2011-03-30	ICJobSite 1.1 - 'pid' SQL Injection	webapps	PHP
2011-03-30	Perl 5.x - 'lc()' / 'uc()' TAINT Mode Protection Security Bypass	remote	Linux
2011-03-29	The Beginners Guide to XSS	papers	Multiple
2011-03-29	Andy's PHP KnowledgeBase 0.95.4 - SQL Injection	webapps	PHP
2011-03-29	Claroline 1.10 - Persistent Cross-Site Scripting	webapps	PHP
2011-03-29	Easy File Sharing Web Server 5.8 - Multiple Vulnerabilities	remote	Windows
2011-03-29	IDEAL Administration 2011 11.4 - Local Buffer Overflow (SEH)	local	Windows
2011-03-29	Manual Shellcode	papers	Multiple
2011-03-29	Bypassing Anti-Virus Scanners	papers	Multiple
2011-03-29	Hacking the Skiddies	papers	Multiple
2011-03-29	jHTTPd 0.1a - Directory Traversal	remote	Multiple
2011-03-29	oscss2 2.1.0 rc12 - Multiple Vulnerabilities	webapps	PHP
2011-03-29	Rumble 0.25.2232 - Denial of Service	dos	Windows
2011-03-29	GOM Player 2.1.28.5039 - AVI Denial of Service (PoC)	dos	Windows
2011-03-29	Microsoft Windows Explorer 6.0.2900.5512 - 'Shmedia.dll 6.0.2900.5512' AVI Preview Denial of Service (PoC)	dos	Windows
2011-03-29	Faster Blind MySQL Injection Using Bit Shifting	papers	Multiple
2011-03-29	Winamp 5.61 - AVI Denial of Service (PoC)	dos	Windows
2011-03-29	osCSS 2.1 - Multiple Cross-Site Scripting / Local File Inclusions	webapps	PHP
2011-03-29	Spitfire 1.0.3x - 'cms_username' Cross-Site Scripting	webapps	PHP
2011-03-29	Tracks 1.7.2 - URI Cross-Site Scripting	webapps	PHP
2011-03-29	XOOPS - 'view_photos.php' Cross-Site Scripting	webapps	PHP
2011-03-28	Honey Soft Web Solution - Multiple Vulnerabilities	webapps	PHP
2011-03-28	WordPress Plugin BackWPup - Remote Code Execution / Local Code Execution	webapps	PHP
2011-03-28	webEdition CMS - Local File Inclusion	webapps	PHP
2011-03-28	Alkacon OpenCMS 7.5.x - Multiple Cross-Site Scripting Vulnerabilities	webapps	PHP
2011-03-28	webEdition CMS 6.1.0.2 - 'DOCUMENT_ROOT' Local File Inclusion	webapps	PHP
2011-03-28	Claroline 1.10 - Multiple HTML Injection Vulnerabilities	webapps	PHP
2011-03-27	SimplisCMS 1.0.3.0 - Multiple Vulnerabilities	webapps	PHP
2011-03-27	Guide Book on Cross Site Scripting	papers	Multiple
2011-03-27	wodWebServer.NET 1.3.3 - Directory Traversal	remote	Windows
2011-03-27	webEdition CMS 6.1.0.2 - Multiple Vulnerabilities	webapps	PHP
2011-03-27	Distributed Ruby - Send instance_eval/syscall Code Execution (Metasploit)	remote	Linux
2011-03-27	RealPlayer 11 - '.rmp' Remote Buffer Overflow	remote	Multiple
2011-03-27	eXPert PDF Batch Creator 7.0.880.0 - Denial of Service	dos	Windows
2011-03-27	DivX Player 7 - Multiple Remote Buffer Overflow Vulnerabilities	dos	Windows
2011-03-27	Cetera eCommerce - Multiple Cross-Site Scripting / SQL Injections	webapps	PHP
2011-03-27	FLVPlayer4Free 2.9 - '.fp4f' Remote Buffer Overflow	remote	Windows
2011-03-27	OrangeHRM 2.6.2 - 'jobVacancy.php' Cross-Site Scripting	webapps	PHP
2011-03-26	VideoLAN VLC Media Player 1.1.4 - 'AMV' Dangling Pointer (Metasploit)	remote	Windows
2011-03-26	Linux Exploit Writing Tutorial Part 2 - Stack Overflow ASLR bypass Using ret2reg	papers	Linux
2011-03-26	Family Connections CMS 2.3.2 - Persistent Cross-Site Scripting / XML Injection	webapps	PHP
2011-03-25	HP OpenView Network Node Manager (OV NNM) - 'getnnmdata.exe Hostname' CGI Buffer Overflow (Metasploit)	remote	Windows
2011-03-25	Family Connections 2.3.2 - 'subject' HTML Injection	webapps	PHP
2011-03-24	HP OpenView Network Node Manager (OV NNM) - 'nnmRptConfig.exe schdParams' Remote Buffer Overflow (Metasploit)	remote	Windows
2011-03-24	HP OpenView Network Node Manager (OV NNM) - 'getnnmdata.exe ICount' CGI Buffer Overflow (Metasploit)	remote	Windows
2011-03-24	HP OpenView Network Node Manager (OV NNM) - 'getnnmdata.exe' (MaxAge) CGI Buffer Overflow (Metasploit)	remote	Windows
2011-03-24	Avaya IP Office Manager 8.1 TFTP - Denial of Service	dos	Windows
2011-03-24	SyndeoCMS 2.8.02 - Multiple Vulnerabilities (2)	webapps	PHP
2011-03-24	MC Content Manager 10.1.1 - Multiple Cross-Site Scripting Vulnerabilities	webapps	PHP
2011-03-24	GrapeCity Data Dynamics Reports 1.6.2084.14 - Multiple Cross-Site Scripting Vulnerabilities	webapps	PHP
2011-03-24	Ripe Website Manager 1.1 - Cross-Site Scripting / Multiple SQL Injections	webapps	PHP
2011-03-24	netjukebox 4.01B/5.25 - 'skin' Cross-Site Scripting	webapps	PHP
2011-03-23	Symantec LiveUpdate Administrator Management GUI - HTML Injection	webapps	Windows
2011-03-23	Adobe Flash Player - AVM Bytecode Verification (Metasploit)	remote	Windows
2011-03-23	HP OpenView Network Node Manager (OV NNM) - nnmRptConfig nameParams Buffer Overflow (Metasploit)	remote	Windows
2011-03-23	HP Network Node Manager (NMM) - CGI 'webappmon.exe OvJavaLocale' Remote Buffer Overflow (Metasploit)	remote	Windows
2011-03-23	HP Network Node Manager (NMM) - CGI 'webappmon.exe execvp' Remote Buffer Overflow (Metasploit)	remote	Windows
2011-03-23	Distributed Ruby - send syscall (Metasploit)	remote	Linux
2011-03-23	VMCPlayer 1.0 - Denial of Service	dos	Windows
2011-03-23	IGSS 8 ODBC Server - Multiple Remote Uninitialized Pointer Free Denial of Service Vulnerabilities	dos	Windows
2011-03-23	Progea Movicon 11 - 'TCPUploadServer' Remote File System	remote	Windows
2011-03-23	Constructr CMS 3.03 - Arbitrary File Upload	webapps	PHP
2011-03-23	Web Wiz Forum - Injection	webapps	ASP
2011-03-23	HP OpenView Network Node Manager (OV NNM) - 'snmpviewer.exe' Remote Buffer Overflow (Metasploit)	remote	Windows
2011-03-23	HP OpenView Network Node Manager (OV NNM) - 'ovwebsnmpsrv.exe main' Remote Buffer Overflow (Metasploit)	remote	Windows
2011-03-23	HP OpenView Network Node Manager (OV NNM) - 'ovwebsnmpsrv.exe' Unrecognized Option Buffer Overflow (Metasploit)	remote	Windows
2011-03-23	HP OpenView Network Node Manager (OV NNM) - 'ovwebsnmpsrv.exe ovutil' Remote Buffer Overflow (Metasploit)	remote	Windows
2011-03-23	Web Wiz Forums 9.5 - Multiple SQL Injections	webapps	ASP
2011-03-23	Perl 5.x - 'Perl_reg_numbered_buff_fetch()' Remote Denial of Service	dos	Multiple
2011-03-23	Advantech/BroadWin SCADA Webaccess 7.0 - Multiple Vulnerabilities	remote	Multiple
2011-03-22	siemens tecnomatix factorylink 8.0.1.1473 - Multiple Vulnerabilities	remote	Windows
2011-03-22	iconics genesis32 and genesis64 - Multiple Vulnerabilities	dos	Windows
2011-03-22	7-Technologies IGSS 9.00.00.11059 - Multiple Vulnerabilities	remote	Windows
2011-03-22	DATAC RealWin - Multiple Vulnerabilities	dos	Windows
2011-03-21	CMS Lokomedia 1.5 - Arbitrary File Upload	webapps	PHP
2011-03-21	Element-IT PowUpload 1.3 - Arbitrary File Upload	webapps	ASP
2011-03-21	EAFlashUpload 2.5 - Arbitrary File Upload	webapps	ASP
2011-03-21	Exploitation of 'Self-Only' XSS in Google Code	papers	Multiple
2011-03-21	Shimbi CMS - Multiple SQL Injections	webapps	PHP
2011-03-21	RealPlayer 14.0.1.633 - Heap Overflow	dos	Windows
2011-03-21	Novell Netware - NWFTPD.NLM DELE Remote Code Execution	dos	Netware
2011-03-21	SpoonFTP 1.2 - RETR Denial of Service	dos	Windows
2011-03-21	Online store PHP script - Multiple Cross-Site Scripting / SQL Injections	webapps	PHP
2011-03-21	Newsportal 0.37 - 'post.php' Cross-Site Scripting	webapps	PHP
2011-03-21	PluggedOut Blog 1.9.9 - 'year' Cross-Site Scripting	webapps	PHP
2011-03-21	Apple Mac OSX 10.6.x - HFS Subsystem Information Disclosure	local	OSX
2011-03-20	Douran 3.9.7.8 - File Download/Source Code Disclosure	webapps	ASP
2011-03-20	Mediacoder 2011 RC3 - '.m3u' Local Buffer Overflow	local	Windows
2011-03-20	MPlayer Lite r33064 - '.m3u' Local Overflow (SEH)	local	Windows
2011-03-19	Kleophatra 0.1.4 - Arbitrary File Upload	webapps	PHP
2011-03-19	Balitbang CMS 3.3 - Multiple Vulnerabilities	webapps	PHP
2011-03-19	Phpbuddies - Arbitrary File Upload	webapps	PHP
2011-03-19	Linux Exploit Development Part 1 - Stack Overflow	papers	Linux
2011-03-19	CMS Balitbang 3.3 - Arbitrary File Upload	webapps	PHP

2011-03-19	PHP LFI to Arbitrary Code Execution via rfc1867 File Upload Temporary Files	papers	PHP
2011-03-19	Web Poll Pro 1.0.3 - 'error' HTML Injection	webapps	PHP
2011-03-18	POP Peeper 3.7 - Local Overflow (SEH)	local	Windows
2011-03-18	Tugux CMS - 'nid' Blind SQL Injection	webapps	PHP
2011-03-18	CORE MultiMedia Suite 2011 CORE Player 2.4 - '.m3u' Local Buffer Overflow	local	Windows
2011-03-18	CMS Loko Media - Local File Download	webapps	PHP
2011-03-18	iCMS 1.1 - Admin SQL Injection / Brute Force	webapps	PHP
2011-03-18	PHP 5.3.5 libzip 0.9.3 - _zip_name_locate Null Pointer Dereference	dos	Linux
2011-03-18	XOOPS 2.x - Multiple Cross-Site Scripting Vulnerabilities	webapps	PHP
2011-03-17	Microsoft Source Code Analyzer for SQL Injection 1.3 - Improper Permissions	local	Windows
2011-03-17	Joomla! 1.6 - Multiple SQL Injections	webapps	PHP
2011-03-17	ACTi ASOC 2200 Web Configurator 2.6 - Remote Command Execution	remote	Hardware
2011-03-17	Windows 7/2008 Event Log Forensic and Reversing Analysis	papers	Windows
2011-03-17	Joomla! Component com_booklibrary - SQL Injection	webapps	PHP
2011-03-17	Fake Webcam 6.1 - Local Crash (PoC)	dos	Windows
2011-03-17	Tugux CMS 1.0_final - Multiple Vulnerabilities	webapps	PHP
2011-03-17	RealNetworks RealPlayer - CDDA URI Initialization (Metasploit)	remote	Windows
2011-03-17	WordPress Plugin Sodahead Polls 2.0.2 - Multiple Cross-Site Scripting Vulnerabilities	webapps	PHP
2011-03-17	WordPress Plugin Rating-Widget 1.3.1 - Multiple Cross-Site Scripting Vulnerabilities	webapps	PHP
2011-03-16	LotusCMS 3.0.3 - Multiple Vulnerabilities	webapps	PHP
2011-03-16	Adobe ColdFusion - Directory Traversal (Metasploit)	remote	Multiple
2011-03-16	AVIPreview 0.26 Alpha - Denial of Service	dos	Windows
2011-03-16	pointter PHP content management system 1.2 - Multiple Vulnerabilities	webapps	PHP
2011-03-16	WikiWig 5.01 - Multiple Cross-Site Scripting Vulnerabilities	webapps	PHP
2011-03-16	b2evolution 4.0.3 - Persistent Cross-Site Scripting	webapps	PHP
2011-03-16	Sun Java Applet2ClassLoader - Remote Code Execution (Metasploit)	remote	Multiple
2011-03-16	Monkey's Audio - '.ape' Remote Buffer Overflow	remote	Windows
2011-03-16	AplikaMedia CMS - 'page_info.php' SQL Injection	webapps	PHP
2011-03-15	Opera 11.01 - NULL PTR Dereference	dos	Windows
2011-03-15	IF-CMS 2.07 - Local File Inclusion (1)	webapps	PHP
2011-03-15	Reversing Basics - A Practical Approach [tutorial]	papers	Windows
2011-03-15	HP OpenView Performance Insight Server - Backdoor Account Code Execution (Metasploit)	remote	Windows
2011-03-15	VideoLAN VLC Media Player 1.0.5 - '.ape' Denial of Service	dos	Multiple
2011-03-15	SugarCRM 6.1.1 - Information Disclosure	webapps	PHP
2011-03-14	Log1 CMS 2.0 - Multiple Vulnerabilities	webapps	PHP
2011-03-14	ABBS Audio Media Player - '.m3u' / '.LST' Local Buffer Overflow	local	Windows
2011-03-14	iOS Checkview 1.1 - Directory Traversal	remote	iOS
2011-03-14	Linux Kenel 2.6.37-rc1 - serial_core TIOCGICOUNT Leak	dos	Linux
2011-03-14	Google Android 2.0/2.1/2.1.1 - WebKit Use-After-Free	remote	Android
2011-03-14	SmarterMail 8.0 - Multiple Cross-Site Scripting Vulnerabilities	webapps	ASP
2011-03-14	ABBS Audio Media Player 3.0 - '.lst' Local Buffer Overflow (SEH)	local	Windows
2011-03-14	ABBS Electronic Flash Cards 2.1 - '.fcd' Local Buffer Overflow	local	Windows
2011-03-14	Foxit PDF Reader 4.2 - JavaScript File Write (Metasploit)	local	Windows
2011-03-14	BoutikOne - 'categorie.php?path' SQL Injection	webapps	PHP
2011-03-14	BoutikOne - 'list.php?path' SQL Injection	webapps	PHP
2011-03-14	BoutikOne - 'search.php' Multiple SQL Injections	webapps	PHP
2011-03-14	BoutikOne - 'rss_news.php?lang' SQL Injection	webapps	PHP
2011-03-14	BoutikOne - 'rss_flash.php?lang' SQL Injection	webapps	PHP
2011-03-14	BoutikOne - 'rss_promo.php?lang' SQL Injection	webapps	PHP
2011-03-14	BoutikOne - 'rss_top10.php?lang' SQL Injection	webapps	PHP
2011-03-14	Trend Micro WebReputation API 10.5 - URI SecURIty Bypass	remote	Multiple
2011-03-13	15 First Dates With Assembly Programming	papers	Multiple
2011-03-13	Cover Vision - SQL Injection	webapps	PHP
2011-03-12	CoolZip 2.0 - zip Buffer Overflow	local	Windows
2011-03-12	PHP 5.3.6 - 'shmop_read()' Integer Overflow Denial of Service	dos	Linux
2011-03-11	Oracle WebLogic - POST Session Fixation	webapps	Multiple
2011-03-11	Linux NTP query client 4.2.6p1 - Heap Overflow	dos	Linux
2011-03-11	N`CMS 1.1E - Local File Inclusion / Remote Code	webapps	PHP
2011-03-11	SmarterStats 6.0 - Multiple Vulnerabilities	webapps	ASP
2011-03-11	Constructr CMS 3.03 - Multiple Remote Vulnerabilities	webapps	PHP
2011-03-11	Accellion File Transfer Appliance MPIPE2 - Command Execution (Metasploit)	remote	Unix
2011-03-10	CA BrightStor ARCserve for Laptops & Desktops LGServer - 'rxsSetDataGrowthScheduleAndFilter' Remote Buffer Overflow (Metasploit)	remote	Windows
2011-03-10	FreeBSD 6.4 - Netgraph Privilege Escalation	local	BSD
2011-03-10	Linux Kernel < 2.6.37-rc2 - 'TCP_MAXSEG' Kernel Panic (Denial of Service) (2)	dos	Linux
2011-03-10	Luch Web Designer - Multiple SQL Injections	webapps	ASP
2011-03-10	Keynect eCommerce - SQL Injection	webapps	PHP
2011-03-10	SmarterMail 7.3/7.4 - Multiple Vulnerabilities	webapps	ASP
2011-03-10	WordPress Plugin Lazyest Gallery 1.0.26 - 'image' Cross-Site Scripting	webapps	PHP
2011-03-10	Xinha 0.96 - 'spell-check-savedicts.php' Multiple HTML Injection Vulnerabilities	webapps	PHP
2011-03-10	Cosmoshop 10.05.00 - Multiple Cross-Site Scripting / SQL Injections	webapps	CGI
2011-03-10	Microsoft Windows Movie Maker 2.1.4026 - '.avi' Remote Buffer Overflow	remote	Windows
2011-03-10	Wikiwig 5.01 - Cross-Site Scripting / HTML Injection	webapps	PHP
2011-03-10	PHP 5.3.x 'Intl' Extension - 'NumberFormatter::setSymbol()' Denial of Service	dos	PHP
2011-03-10	PHP 5.3.x 'Zip' Extension - 'stream_get_contents()' Denial of Service	dos	PHP
2011-03-10	PHP < 5.3.6 'Zip' Extension - 'zip_fread()' Denial of Service	dos	PHP
2011-03-09	Esselbach Storyteller CMS System 1.8 - SQL Injection	webapps	PHP
2011-03-09	Maian Weblog 4.0 - Blind SQL Injection	webapps	PHP
2011-03-09	recordpress 0.3.1 - Multiple Vulnerabilities	webapps	PHP
2011-03-09	Apple QuickTime 7.5 - '.m3u' Remote Stack Buffer Overflow	remote	OSX
2011-03-09	WebKit 1.2.x - Local Webpage Cross Domain Information Disclosure	remote	Windows
2011-03-08	Ruubikcms 1.0.3 - Multiple Vulnerabilities	webapps	PHP
2011-03-08	.NET Runtime Optimization Service - Local Privilege Escalation	local	Windows
2011-03-08	EzPub Simple Classic ASP CMS - SQL Injection	webapps	ASP
2011-03-08	Movavi VideoSuite 8.0 MediaPlayer - '.m3u' Local Buffer Overflow	local	Windows
2011-03-08	Movavi VideoSuite 8.0 Slideshow - '.jpg' Local Crash (PoC)	dos	Windows
2011-03-08	Movavi VideoSuite 8.0 Movie Editor - '.avi' Local Crash (PoC)	dos	Windows
2011-03-08	Nokia N97 - '.m3u' Playlist Crash (PoC)	dos	Hardware
2011-03-08	WordPress Plugin GRAND Flash Album Gallery 0.55 - Multiple Vulnerabilities	webapps	PHP
2011-03-08	Oracle MySQL for Microsoft Windows - Payload Execution (Metasploit)	remote	Windows
2011-03-08	WS Interactive Automne 4.1 - '/admin/upload-controler.php' Arbitrary File Upload	webapps	PHP
2011-03-08	WordPress Plugin Inline Gallery 0.3.9 - 'do' Cross-Site Scripting	webapps	PHP
2011-03-08	WordPress Plugin PhotoSmash Galleries 1.0.x - 'action' Cross-Site Scripting	webapps	PHP
2011-03-08	WordPress Plugin 1 Flash Gallery 0.2.5 - Cross-Site Scripting / SQL Injection	webapps	PHP
2011-03-08	Ruubikcms 1.0.3 - 'head.php' Cross-Site Scripting	webapps	PHP
2011-03-08	PHP < 5.3.6 'OpenSSL' Extension - 'openssl_encrypt' Plaintext Data Memory Leak Denial of Service	dos	PHP
2011-03-08	PHP < 5.3.6 'OpenSSL' Extension - 'openssl_decrypt' Ciphertext Data Memory Leak Denial of Service	dos	PHP
2011-03-07	Bacula-Web 1.3.x < 5.0.3 - Multiple Vulnerabilities	webapps	PHP
2011-03-07	KingView 6.5.3 SCADA - ActiveX	remote	Windows
2011-03-07	EggAvatar 2.3.2 for vBulletin 3.8.x - Local File Read	webapps	PHP
2011-03-07	BMForum Myna 6.0 - SQL Injection	webapps	PHP
2011-03-07	Hiawatha WebServer 7.4 - Denial of Service	dos	Multiple
2011-03-07	Novell iPrint Client 5.52 - ActiveX Control Buffer Overflow (Metasploit)	remote	Windows
2011-03-07	Kodak InSite 5.5.2 - '/Troubleshooting/DiagnosticReport.asp?HeaderWarning' Cross-Site Scripting	webapps	ASP
2011-03-07	Kodak InSite 5.5.2 - '/Pages/login.aspx?Language' Cross-Site Scripting	webapps	ASP
2011-03-06	N-13 News 4.0 - Cross-Site Request Forgery (Add Admin)	webapps	PHP
2011-03-06	Quick Polls - Local File Inclusion / Deletion	webapps	PHP
2011-03-06	EggAvatar for vBulletin 3.8.x - SQL Injection	webapps	PHP
2011-03-05	MySms 1.0 - Multiple Vulnerabilities	webapps	PHP
2011-03-05	vTiger CRM 5.0.4 - Local File Inclusion	webapps	PHP
2011-03-05	BoutikOne - 'description.php' SQL Injection	webapps	PHP
2011-03-05	Windows/x86 - Eggsearch Shellcode (33 bytes)	shellcode	Windows_x86
2011-03-05	Allied Telesyn TFTP (AT-TFTP) Server/Daemon 1.9 - Long Filename Overflow (Metasploit)	remote	Windows
2011-03-05	Apple Mail.app - Image Attachment Command Execution (Metasploit)	remote	Multiple
2011-03-05	nostromo nhttpd 1.9.3 - Directory Traversal Remote Command Execution	remote	Linux
2011-03-04	Limelight Software - 'article.php' SQL Injection	webapps	PHP
2011-03-04	WordPress Plugin PHP Speedy 0.5.2 - 'admin_container.php' Remote Code Execution	webapps	PHP
2011-03-04	JBoss Application Server 4.2 < 4.2.0.CP09 / 4.3 < 4.3.0.CP08 - Remote Command Execution	webapps	JSP
2011-03-04	COMTREND ADSL Router CT-5367 C01_R12 - Remote Code Execution	remote	Hardware
2011-03-04	ADAN Neuronlabs - 'view.php' SQL Injection	webapps	PHP
2011-03-04	[Portuguese] Heap Spray Attack	papers	Multiple

2011-03-04	iOS iFileExplorer Free - Directory Traversal	remote	iOS
2011-03-04	Microsoft Word - '.RTF' pFragments Stack Buffer Overflow (File Format) (MS10-087) (Metasploit)	local	Windows
2011-03-04	InterPhoto Image Gallery 2.4.2 - 'IPLANG' Local File Inclusion	webapps	Windows
2011-03-04	Lms Web Ensino - Multiple Input Validation Vulnerabilities	webapps	PHP
2011-03-04	Microsoft .NET Framework JIT Compiler - Optimization NULL String Remote Code Execution	remote	Windows
2011-03-03	iOS TIOD 1.3.3 - Directory Traversal	remote	iOS
2011-03-03	NetSupport Manager Agent - Remote Buffer Overflow (Metasploit) (2)	remote	Linux
2011-03-03	Citrix Access Gateway - Command Execution (Metasploit)	remote	Linux
2011-03-03	Support Incident Tracker (SiT!) 3.62 - Multiple Cross-Site Scripting Vulnerabilities	webapps	PHP
2011-03-03	phpWebSite 1.7.1 - 'local' Cross-Site Scripting	webapps	PHP
2011-03-03	xtcModified 1.05 - Multiple HTML Injection / Cross-Site Scripting Vulnerabilities	webapps	PHP
2011-03-03	Pragyan CMS 3.0 Beta - Multiple Cross-Site Scripting Vulnerabilities	webapps	PHP
2011-03-03	Interleave 5.5.0.2 - 'basicstats.php' Multiple Cross-Site Scripting Vulnerabilities	webapps	PHP
2011-03-02	Magic Music Editor - Local Buffer Overflow	local	Windows
2011-03-02	Linux Kernel 2.6.37 - Local Kernel Denial of Service (1)	dos	Linux
2011-03-02	Readmore Systems Script - SQL Injection	webapps	PHP
2011-03-02	Quicktech - SQL Injection	webapps	PHP
2011-03-02	Bitweaver 2.8.0 - Multiple Vulnerabilities	webapps	PHP
2011-03-02	cChatBox for vBulletin 3.6.8/3.7.x - SQL Injection	webapps	PHP
2011-03-02	Penetration Testing Biometrics Systems	papers	Multiple
2011-03-02	vsftpd 2.3.2 - Denial of Service	dos	Linux
2011-03-02	Forritun - Multiple SQL Injections	webapps	PHP
2011-03-02	Linux Kernel 2.6.x - epoll Nested Structures Local Denial of Service	dos	Linux
2011-03-02	Linux Kernel 2.6.x - fs/eventpoll.c epoll Data Structure File Descriptor Local Denial of Service	dos	Linux
2011-03-02	VidiScript - 'vp' Cross-Site Scripting	webapps	PHP
2011-03-01	Microsoft Windows XP - WmiTraceMessageVa Integer Truncation (PoC) (MS11-011)	dos	Windows
2011-03-01	Wireshark 1.4.3 - NTLMSSP Null Pointer Dereference Denial of Service	dos	Linux
2011-02-28	Nitro PDF Reader 1.4.0 - Heap Memory Corruption (PoC)	dos	Windows
2011-02-28	Magic Music Editor - '.cda' Denial of Service	dos	Windows
2011-02-28	DO-CMS - Multiple SQL Injections	webapps	PHP
2011-02-28	SnapProof - 'page.php' SQL Injection	webapps	PHP
2011-02-28	Home FTP Server 1.12 - Directory Traversal	remote	Windows
2011-02-28	Quick 'n Easy FTP Server 3.2 - Denial of Service	dos	Windows
2011-02-28	PHP 'Exif' Extension - 'exif_read_data()' Remote Denial of Service	dos	Multiple
2011-02-28	Backdoor in Active Directory	papers	Windows
2011-02-28	KMPlayer 2.9.3.1214 - '.ksf' Remote Buffer Overflow	remote	Multiple
2011-02-28	DivX Player 6.x - '.dps' Remote Buffer Overflow	remote	Windows
2011-02-28	WordPress Plugin BackWPup 1.4 - Multiple Information Disclosure Vulnerabilities	webapps	PHP
2011-02-28	SnapProof - 'retPageID' Cross-Site Scripting	webapps	PHP
2011-02-27	Elecard AVC_HD/MPEG Player 5.7 - Local Buffer Overflow	local	Windows
2011-02-27	EMC Replication Manager < 5.3 - Command Execution (Metasploit)	local	Windows
2011-02-26	eXPert PDF Reader 4.0 - Null Pointer Dereference and Heap Corruption	dos	Windows
2011-02-26	phreebooks r30rc4 - Multiple Vulnerabilities	webapps	PHP
2011-02-26	WordPress Plugin jQuery Mega Menu 1.0 - Local File Inclusion	webapps	PHP
2011-02-26	WordPress Plugin OPS Old Post Spinner 2.2.1 - Local File Inclusion	webapps	PHP
2011-02-26	Cisco Linksys WAG120N - Cross-Site Request Forgery	webapps	Hardware
2011-02-25	RaksoCT - Multiple SQL Injections	webapps	ASP
2011-02-25	Edraw Office Viewer Component 7.4 - ActiveX Stack Buffer Overflow	remote	Windows
2011-02-25	iphone folders 2.5 - Directory Traversal	remote	Hardware
2011-02-25	iphone ifile 2.0 - Directory Traversal	remote	Hardware
2011-02-25	iphone mydocs 2.7 - Directory Traversal	remote	Hardware
2011-02-25	Joomla! Component com_xcloner-backupandrestore - Remote Command Execution	webapps	PHP
2011-02-25	Pragyan CMS 3.0 - Multiple Vulnerabilities	webapps	PHP
2011-02-25	GNU glibc < 2.12.2 - 'fnmatch()' Stack Corruption	dos	Multiple
2011-02-25	phpShop 0.8.1 - 'page' Cross-Site Scripting	webapps	PHP
2011-02-25	glFusion 1.1.x/1.2.1 - 'users.php' SQL Injection	webapps	PHP
2011-02-24	Alcassoft's SOPHIA CMS - SQL Injection	webapps	CFM
2011-02-24	iSO Air Files 2.6 - Directory Traversal	remote	Hardware
2011-02-24	iSO Filer Lite 2.1.0 - Directory Traversal	remote	Hardware
2011-02-24	iOS iDocManager 1.0.0 - Directory Traversal	remote	iOS
2011-02-24	iOS myDBLite 1.1.10 - Directory Traversal	remote	iOS
2011-02-24	Victory FTP Server 5.0 - Denial of Service	dos	Windows
2011-02-24	iOS Share 1.0 - Directory Traversal	remote	iOS
2011-02-24	WordPress Plugin GigPress 2.1.10 - Persistent Cross-Site Scripting	webapps	PHP
2011-02-24	WordPress Plugin Relevanssi 2.7.2 - Persistent Cross-Site Scripting	webapps	PHP
2011-02-24	Novell Netware - RPC XNFS xdrDecodeString	dos	Netware
2011-02-24	WordPress Plugin Forum Server 1.6.5 - SQL Injection	webapps	PHP
2011-02-24	WordPress Plugin IWantOneButton 3.0.1 - Multiple Vulnerabilities	webapps	PHP
2011-02-24	Elecard MPEG Player 5.7 - Local Buffer Overflow (PoC) (SEH)	dos	Windows
2011-02-24	iphone ishred 1.93 - Directory Traversal	remote	Hardware
2011-02-24	iPhone Guitar - Directory Traversal	remote	Hardware
2011-02-24	iphone pdf reader pro 2.3 - Directory Traversal	remote	Hardware
2011-02-24	Logwatch Log File - Special Characters Privilege Escalation	remote	Linux
2011-02-23	WordPress Plugin Comment Rating 2.9.23 - Multiple Vulnerabilities	webapps	PHP
2011-02-23	RedHat Linux - Stickiness of /tmp	dos	Linux
2011-02-23	course registration management system 2.1 - Multiple Vulnerabilities	webapps	PHP
2011-02-23	VidiScript - SQL Injection	webapps	PHP
2011-02-23	ProQuiz 2.0.0b - Arbitrary File Upload	webapps	PHP
2011-02-23	WordPress Plugin Z-Vote 1.1 - SQL Injection	webapps	PHP
2011-02-23	Hyena Cart - 'index.php' SQL Injection	webapps	PHP
2011-02-23	tplSoccerStats - 'player.php' SQL Injection	webapps	PHP
2011-02-23	Bitweaver 2.8.1 - Persistent Cross-Site Scripting	webapps	PHP
2011-02-23	CesarFTP 0.99g - 'MKD' Remote Buffer Overflow (Metasploit) (2)	remote	Windows
2011-02-23	WordPress Plugin IGIT Posts Slider Widget 1.0 - 'src' Cross-Site Scripting	webapps	PHP
2011-02-23	WordPress Plugin ComicPress Manager 1.4.9 - 'lang' Cross-Site Scripting	webapps	PHP
2011-02-23	WordPress Plugin YT-Audio 1.7 - 'v' Cross-Site Scripting	webapps	PHP
2011-02-23	Drupal Module Cumulus 5.x-1.1/6.x-1.4 - 'tagcloud' Cross-Site Scripting	webapps	PHP
2011-02-22	Solar FTP Server 2.1 - Denial of Service	dos	Windows
2011-02-22	WinMerge 2.12.4 - Project File Handling Stack Overflow	dos	Windows
2011-02-22	DIY Web CMS - Multiple Vulnerabilities	webapps	ASP
2011-02-22	Galilery 1.0 - Local File Inclusion	webapps	PHP
2011-02-22	dotProject 2.1.5 - Multiple Vulnerabilities	webapps	PHP
2011-02-22	iOS FtpDisc 1.0 - Directory Traversal	remote	iOS
2011-02-22	iOS SideBooks 1.0 - Directory Traversal	remote	iOS
2011-02-22	Mozilla Firefox - Interleaving 'document.write' / 'appendChild' (Metasploit)	remote	Windows
2011-02-22	Battlefield 2/2142 - Packet Null Pointer Dereference Remote Denial of Service	dos	Multiple
2011-02-22	WordPress Plugin GD Star Rating 1.9.7 - 'wpfn' Cross-Site Scripting	webapps	PHP
2011-02-22	IBM Lotus Sametime Server 8.0 - 'stcenter.nsf' Cross-Site Scripting	webapps	PHP
2011-02-22	Vanilla Forums 2.0.17.x - 'p' Cross-Site Scripting	webapps	PHP
2011-02-21	Woltlab Burning Board 2.3.6 Addon - 'hilfsmittel.php' SQL Injection	webapps	PHP
2011-02-21	Batavi 1.0 - Multiple Local File Inclusion / Cross-Site Scripting Vulnerabilities	webapps	PHP
2011-02-21	IBM Lotus Sametime - '/stconf.nsf/WebMessage?messageString' Cross-Site Scripting	remote	Multiple
2011-02-21	IBM Lotus Sametime - stconf.nsf Cross-Site Scripting	remote	Multiple
2011-02-20	Icy Phoenix 1.3.0.53a - HTTP Referer Persistent Cross-Site Scripting	webapps	PHP
2011-02-20	JAKCMS 2.01 - Code Execution	webapps	PHP
2011-02-20	JAKCMS 2.01 RC1 - Blind SQL Injection	webapps	PHP
2011-02-19	Avira AntiVir - '.QUA' File 'avcenter.exe' Local Crash (PoC)	dos	Windows
2011-02-19	eventum issue tracking system 2.3.1 - Persistent Cross-Site Scripting	webapps	PHP
2011-02-19	Escort Directory CMS - SQL Injection	webapps	PHP
2011-02-19	Independent Escort CMS - Blind SQL Injection	webapps	PHP
2011-02-18	Forgotten World: Corporate Business Application Systems	papers	Multiple
2011-02-18	IBM Lotus Domino LDAP - Bind Request Remote Code Execution	dos	Windows
2011-02-18	Novell ZENworks 10/11 - TFTPD Remote Code Execution	dos	Windows
2011-02-18	Novell Iprint - LPD Remote Code Execution	dos	Linux
2011-02-18	WSN Guest 1.24 - 'wsnuser' Cookie SQL Injection	webapps	PHP
2011-02-17	GAzie 5.10 - 'Login' Multiple Vulnerabilities	webapps	PHP
2011-02-17	BWMeter 5.4.0 - '.csv' Denial of Service	dos	Windows
2011-02-17	WordPress Plugin User Photo Component - Arbitrary File Upload	webapps	PHP
2011-02-17	PHP 5.3.5 - 'grapheme_extract()' Null Pointer Dereference	dos	Linux
2011-02-17	Microsoft Windows - Print Spooler Service Impersonation (MS10-061) (Metasploit)	remote	Windows

2011-02-17	Microsoft Server Service - NetpwPathCanonicalize Overflow (MS06-040) (Metasploit)	remote	Windows
2011-02-17	PHP 5.3.5 - 'grapheme_extract()' Null Pointer Dereference Denial of Service	dos	PHP
2011-02-16	ActFax Server (LPD/LPR) 4.25 Build 0221 (2010-02-11) - Remote Buffer Overflow	remote	Windows
2011-02-16	ActFax Server FTP 4.25 Build 0221 (2010-02-11) - (Authenticated) Remote Buffer Overflow	remote	Windows
2011-02-16	Rae Media Real Estate Single Agent - SQL Injection	webapps	ASP
2011-02-16	Rae Media Real Estate Multi Agent - SQL Injection	webapps	ASP
2011-02-16	Ruby on Rails 3.0.5 - 'WEBrick::HTTPRequest' Module HTTP Header Injection	remote	Multiple
2011-02-16	mySeatXT 0.164 - 'lang' Local File Inclusion	webapps	PHP
2011-02-15	Oracle 10/11g - 'exp.exe?file' Local Buffer Overflow	local	Windows
2011-02-15	phpMyBitTorrent 2.0.4 - SQL Injection	webapps	PHP
2011-02-15	Lingxia I.C.E CMS - Blind SQL Injection	webapps	CFM
2011-02-15	omegabill 1.0 build 6 - Multiple Vulnerabilities	webapps	PHP
2011-02-15	AutoPlay 1.33 (autoplay.ini) - Local Buffer Overflow (SEH)	local	Windows
2011-02-15	Seo Panel 2.2.0 - SQL Injection	webapps	PHP
2011-02-15	MG2 0.5.1 - Multiple Cross-Site Scripting Vulnerabilities	webapps	PHP
2011-02-15	Gollos 2.8 - Multiple Cross-Site Scripting Vulnerabilities	webapps	PHP
2011-02-15	Wikipad 1.6.0 - Cross-Site Scripting / HTML Injection / Information Disclosure	webapps	PHP
2011-02-15	Photopad 1.2 - Multiple Cross-Site Scripting Vulnerabilities	webapps	PHP
2011-02-15	Getsimple CMS 2.03 - 'upload-ajax.php' Arbitrary File Upload	webapps	PHP
2011-02-14	jSchool Advanced - SQL Injection	webapps	PHP
2011-02-14	RunCMS 2.2.2 - Multiple Vulnerabilities	webapps	PHP
2011-02-14	Access denied - A guide for breakers	papers	Multiple
2011-02-14	AWCM 2.2 Final - Persistent Cross-Site Scripting	webapps	PHP
2011-02-14	Microsoft Windows Server 2003 - AD BROWSER ELECTION Remote Heap Overflow	dos	Windows
2011-02-12	TaskFreak! 0.6.4 - Multiple Cross-Site Scripting Vulnerabilities	webapps	PHP
2011-02-12	Escort Agency CMS - Blind SQL Injection	webapps	PHP
2011-02-12	PixelPost 1.7.3 - Multiple POST SQL Injections	webapps	PHP
2011-02-12	CuteZip 2.1 - Local Buffer Overflow	local	Windows
2011-02-12	TaskFreak! 0.6.4 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities	webapps	PHP
2011-02-12	TaskFreak! 0.6.4 - 'print_list.php' Multiple Cross-Site Scripting Vulnerabilities	webapps	PHP
2011-02-12	TaskFreak! 0.6.4 - 'rss.php' HTTP Referer Header Cross-Site Scripting	webapps	PHP
2011-02-12	Dokeos 1.8.6 2 - 'style' Cross-Site Scripting	webapps	PHP
2011-02-11	MoviePlay 4.82 - '.lst' Local Buffer Overflow	local	Windows
2011-02-11	Horde - Horde_Image::factory driver Argument Local File Inclusion	webapps	PHP
2011-02-11	Geomi CMS 1.2/3.0 - SQL Injection	webapps	PHP
2011-02-11	Kunena < 1.5.13 / < 1.6.3 - SQL Injection	webapps	PHP
2011-02-11	Openedit 5.1294 - Remote Code Execution	webapps	JSP
2011-02-11	Drupal Module CAPTCHA - Security Bypass	webapps	PHP
2011-02-10	Linksys WAP610N - Root Access Security	remote	Hardware
2011-02-10	XM Easy Personal FTP Server 5.8.0 - 'TYPE' Denial of Service	dos	Windows
2011-02-10	Exploiting ARM Linux systems	papers	ARM
2011-02-10	LocatePC 1.05 (Ligatt Version + Others) - SQL Injection	webapps	Multiple
2011-02-10	ManageEngine ADSelfService Plus 4.4 - POST Manipulation Security Question	webapps	PHP
2011-02-10	ManageEngine ADSelfService Plus 4.4 - 'EmployeeSearch.cc' Multiple Cross-Site Scripting Vulnerabilities	webapps	PHP
2011-02-10	Dolphin 7.0.4 - Multiple Cross-Site Scripting Vulnerabilities	webapps	PHP
2011-02-10	webERP 4.0.1 - 'InputSerialItemsFile.php' Arbitrary File Upload	webapps	PHP
2011-02-10	RunCMS 2.2.2 - 'register.php' SQL Injection	webapps	PHP
2011-02-09	Multiple Vendor Calendar Manager - Remote Code Execution	remote	Multiple
2011-02-09	DESlock+ < 4.1.10 - 'vdlptokn.sys' Local Kernel Ring0 SYSTEM	local	Windows
2011-02-09	Auto Database System 1.0 Infusion Addon - SQL Injection	webapps	PHP
2011-02-09	Web 2.0 Social Network Freunde Community - SQL Injection	webapps	PHP
2011-02-09	xRadio 0.95b - '.xrl' Local Buffer Overflow (SEH)	local	Windows
2011-02-09	MihanTools Script 1.3.3 - SQL Injection	webapps	PHP
2011-02-09	WordPress Plugin Enable Media Replace - Multiple Vulnerabilities	webapps	PHP
2011-02-09	Unreal Tournament - Remote Buffer Overflow (SEH)	remote	Windows
2011-02-09	SourceBans 1.4.7 - Cross-Site Scripting	webapps	PHP
2011-02-09	PHPXref 0.7 - 'nav.html' Cross-Site Scripting	webapps	PHP
2011-02-09	Smarty Template Engine 2.6.9 - '$smarty.template' PHP Code Injection	webapps	PHP
2011-02-09	Air Contacts Lite - HTTP Packet Denial of Service	dos	Multiple
2011-02-08	Model Agentur Script - SQL Injection	webapps	PHP
2011-02-08	dotProject 2.1.5 - Cross-Site Request Forgery	webapps	PHP
2011-02-08	AIOCP 1.4.001 - Cross-Site Request Forgery	webapps	PHP
2011-02-08	Microsoft SQL Server - Payload Execution (via SQL Injection) (Metasploit)	remote	Windows
2011-02-08	Microsoft SQL Server - sp_replwritetovarbin Memory Corruption (MS09-004) (via SQL Injection) (Metasploit)	remote	Windows
2011-02-08	Microsoft Internet Explorer - CSS Recursive Import Use-After-Free (MS11-003) (Metasploit)	remote	Windows
2011-02-08	VideoLAN VLC Media Player 1.1.6 - 'MKV' Memory Corruption (Metasploit)	local	Windows
2011-02-08	Microsoft Windows - CreateSizedDIBSECTION Stack Buffer Overflow (MS11-006) (Metasploit)	local	Windows
2011-02-08	WebAsyst Shop-Script - Cross-Site Scripting / HTML Injection	webapps	PHP
2011-02-08	ViArt Shop 4.0.5 - Multiple Cross-Site Scripting Vulnerabilities	webapps	PHP
2011-02-08	CiviCRM 3.3.3 - Multiple Cross-Site Scripting Vulnerabilities	webapps	PHP
2011-02-08	UMI CMS 2.8.1.2 - Multiple Cross-Site Scripting Vulnerabilities	webapps	PHP
2011-02-07	T-Content Managment System - Multiple Vulnerabilities	webapps	PHP
2011-02-07	jakcms 2.0 pro rc5 - Persistent Cross-Site Scripting via useragent http header Injection	webapps	PHP
2011-02-07	ProFTPd - 'mod_sftp' Integer Overflow Denial of Service (PoC)	dos	Linux
2011-02-07	MyMarket 1.71 - 'index.php' SQL Injection	webapps	PHP
2011-02-07	SWFupload 2.5.0 Beta 3 - Arbitrary File Upload	webapps	PHP
2011-02-07	AoA DVD Creator 2.5 - ActiveX Stack Overflow	local	Windows
2011-02-07	AoA Mp4 Converter 4.1.0 - ActiveX Stack Overflow	local	Windows
2011-02-07	Escortservice 1.0 - 'custid' SQL Injection	webapps	PHP
2011-02-07	Multiple Check Point Endpoint Security Products - Information Disclosure	remote	Hardware
2011-02-07	Cain & Abel 2.7.3 - 'dagc.dll' DLL Loading Arbitrary Code Execution	remote	Windows
2011-02-06	Comcast DOCSIS 3.0 Business Gateways - Multiple Vulnerabilities	remote	Hardware
2011-02-06	FreeBSD 5.4-RELEASE ftpd 6.00LS - 'sendfile' Memory Leak	local	FreeBSD
2011-02-06	Hanso Player 1.4.0.0 - 'Skinfile' Buffer Overflow (Denial of Service)	dos	Windows
2011-02-06	Hanso Converter 1.1.0 - BufferOverflow Denial of Service	dos	Windows
2011-02-06	Dew-NewPHPLinks 2.1b - 'index.php' SQL Injection	webapps	PHP
2011-02-06	Exploit Development Made Easy with !pvefindaddr	papers	Windows
2011-02-06	[Indonesian] Code Reborn (eZine)	papers	eZine
2011-02-05	Chamilo 1.8.7 / Dokeos 1.8.6 - Remote File Disclosure	webapps	PHP
2011-02-05	[Indonesian] Praktek Stack Buffer Overflow	papers	Linux
2011-02-05	Qcodo Development Framework 0.3.3 - Full Information Disclosure	webapps	PHP
2011-02-05	Escort und Begleitservice Agentur Script - SQL Injection	webapps	PHP
2011-02-05	[Hebrew] Digital Whisper Security Magazine #17	papers	Multiple
2011-02-04	reos 2.0.5 - Multiple Vulnerabilities	webapps	PHP
2011-02-04	Podcast Generator 1.3 - Multiple Vulnerabilities	webapps	PHP
2011-02-04	[Macedonian] The Metasploit Framework	papers	Multiple
2011-02-04	Stack Overflow: Automatic write() discovery	papers	Linux
2011-02-04	osCommerce - Authentication Bypass	webapps	PHP
2011-02-04	SMC Networks SMCD3G Session Management - Authentication Bypass	remote	Multiple
2011-02-03	FTPGetter 3.58.0.21 - 'PASV' Remote Buffer Overflow	remote	Windows
2011-02-03	Islam Sound IV2 - 'details.php' SQL Injection	webapps	PHP
2011-02-03	Majordomo2 - 'SMTP/HTTP' Directory Traversal	remote	Multiple
2011-02-03	quickshare file share 1.2.1 - Directory Traversal (1)	remote	Windows
2011-02-03	OemPro 3.6.4 - Multiple Vulnerabilities	webapps	PHP
2011-02-03	AOL Desktop 9.6 - '.rtx' Local Buffer Overflow	local	Windows
2011-02-03	VideoLAN VLC Media Player 1.1 - Subtitle 'StripTags()' Memory Corruption	dos	Multiple
2011-02-03	Octeth Oempro 3.6.4 - SQL Injection / Information Disclosure	webapps	PHP
2011-02-03	Firebook - 'index.html' Cross-Site Scripting	webapps	PHP
2011-02-03	Wireshark 1.4.3 - '.pcap' Memory Corruption	remote	Linux
2011-02-02	Attacking Server Side XML Parsers	papers	Multiple
2011-02-02	Raja Natarajan Guestbook 1.0 - Local File Inclusion	webapps	PHP
2011-02-02	Terminal Server Client - '.rdp' Denial of Service	dos	Linux
2011-02-02	RedaxScript 0.3.2 - Multiple Vulnerabilities	webapps	PHP
2011-02-02	Zikula CMS 1.2.4 - Cross-Site Request Forgery	webapps	PHP
2011-02-02	Android 1.x/2.x HTC Wildfire - Local Privilege Escalation	local	Android
2011-02-02	Google Android 1.x/2.x - Local Privilege Escalation	local	Android
2011-02-02	Tandberg E & EX & C Series Endpoints - Default Root Account Credentials	remote	Hardware
2011-02-02	VideoLAN VLC Media Player 0.9.4 - TiVo Buffer Overflow (Metasploit)	local	Windows
2011-02-02	TCExam 11.1.16 - 'user_password' Cross-Site Scripting	webapps	PHP
2011-02-02	Betsy 4.0 - 'page' Local File Inclusion	webapps	PHP

2011-02-01	PMB Services 3.4.3 - SQL Injection	webapps	PHP
2011-02-01	NetLink - Arbitrary File Upload	webapps	PHP
2011-02-01	[Italian] E-Zine - HitNote 0x05	papers	Multiple
2011-02-01	TinyWebGallery 1.8.3 - Multiple Vulnerabilities	webapps	PHP
2011-02-01	Joomla! 1.5/1.6 - JFilterInput Cross-Site Scripting Bypass	webapps	PHP
2011-02-01	CodeBlocks 8.02 - 'cbp' Local Buffer Overflow	local	Windows
2011-02-01	Joomla! Component com_frontenduseraccess - Local File Inclusion	webapps	PHP
2011-02-01	Moodle 2.0.1 - 'PHPCOVERAGE_HOME' Cross-Site Scripting	webapps	PHP
2011-02-01	TinyWebGallery 1.8.3 - Cross-Site Scripting / Local File Inclusion	webapps	PHP
2011-02-01	Joomla! Component com_clan_members - 'id' SQL Injection	webapps	PHP
2011-02-01	WordPress Plugin TagNinja 1.0 - 'id' Cross-Site Scripting	webapps	PHP
2011-02-01	Oracle Java - Floating-Point Value Denial of Service	dos	Multiple
2011-02-01	ACollab - 't' SQL Injection	webapps	PHP
2011-01-31	AOL 9.5 - '.rtx' Local Buffer Overflow	local	Windows
2011-01-31	OpenVAS Manager - Command Injection	local	Linux
2011-01-31	Joomla! Component com_virtuemart 1.1.6 - SQL Injection	webapps	PHP
2011-01-31	All In One Control Panel 1.4.1 - 'cp_menu_data_file.php' SQL Injection	webapps	PHP
2011-01-30	vBSEO 3.2.2/3.5.2 - Persistent Cross-Site Scripting via LinkBacks	webapps	PHP
2011-01-30	vBSEO Sitemap 2.5/3.0 - Multiple Vulnerabilities	webapps	PHP
2011-01-30	SDP Downloader 2.3.0 - 'http_response' Remote Buffer Overflow	remote	Windows
2011-01-30	Google Chrome 8.0.552.237 - replace Denial of Service	dos	Multiple
2011-01-30	RW-Download 4.0.6 - 'index.php' SQL Injection	webapps	PHP
2011-01-30	Antivirus Firewall Evasion Techniques Evolution of Download Deploy Shellcode	papers	Multiple
2011-01-30	Effectiveness of Antivirus in Detecting Web Application Backdoors	papers	Multiple
2011-01-30	NetZip - Classic Buffer Overflow (SEH)	local	Windows
2011-01-30	Maxthon Browser 3.0.20.1000 - ref / replace Denial of Service	dos	Windows
2011-01-30	vBSEO 3.2.2/3.5.2 - Multiple Cross-Site Scripting Vulnerabilities	webapps	PHP
2011-01-30	eSyndiCat Directory Software 2.2/2.3 - 'preview' Cross-Site Scripting	webapps	PHP
2011-01-29	Microsoft Internet Explorer - MHTML Protocol Handler Cross-Site Scripting	local	Windows
2011-01-29	WM Downloader 3.1.2.2 2010.04.15 - '.m3u' File Buffer Overflow (DEP Bypass)	local	Windows
2011-01-29	A-PDF All to MP3 Converter 2.0.0 - '.wav' Local Buffer Overflow (SEH)	local	Windows
2011-01-29	MultiCMS - Local File Inclusion	webapps	PHP
2011-01-29	Caedo HTTPd Server 0.5.1 ALPHA - Arbitrary File Download	remote	Windows
2011-01-28	PHP Link Directory Software - 'sbcat_id' SQL Injection	webapps	PHP
2011-01-28	PHP Classified ads software - 'cid' Blind SQL Injection	webapps	PHP
2011-01-28	FreeBSD 8.0 - Local Forced Reboot (Denial of Service)	dos	BSD
2011-01-28	[Iranian] ASP Hacking Methods	papers	ASP
2011-01-28	PHP Script Directory Software - 'sbcat_id' SQL Injection	webapps	PHP
2011-01-28	Virtuosa Phoenix Edition 5.2 - ASX Buffer Overflow (SEH)	local	Windows
2011-01-28	Polycom SoundPoint IP Devices - Denial of Service	dos	Hardware
2011-01-27	comercioplus 5.6 - Multiple Vulnerabilities	webapps	PHP
2011-01-27	Vanilla Forums 2.0.16 - 'Target' Cross-Site Scripting	webapps	PHP
2011-01-27	TeaMp0isoN Issue 1	papers	eZine
2011-01-26	PHPDirector Game Edition - 'game.php' SQL Injection	webapps	PHP
2011-01-26	AWCM 2.2 Final - Local File Inclusion	webapps	PHP
2011-01-26	class.upload.php 0.30 - Arbitrary File Upload	webapps	PHP
2011-01-26	Froxlor 0.9.15 - Remote File Inclusion	webapps	PHP
2011-01-26	Oracle Document Capture 10.1.3.5 - Insecure Method / Buffer Overflow	remote	Windows
2011-01-26	Oracle Document Capture - Actbar2.ocx Insecure Method	remote	Windows
2011-01-26	sap crystal report server 2008 - Directory Traversal	webapps	Windows
2011-01-26	Oracle Document Capture - 'empop3.dll' Insecure Methods	remote	Windows
2011-01-26	Oracle - Document Capture Insecure READ Method	remote	Windows
2011-01-26	MultiPowUpload 2.1 - Arbitrary File Upload	webapps	PHP
2011-01-26	Xnova Legacies 2009.2 - Cross-Site Request Forgery	webapps	PHP
2011-01-26	SimpGB 1.49.2 - 'Guestbook.php' Multiple Cross-Site Scripting Vulnerabilities	webapps	PHP
2011-01-25	Automated Solutions Modbus/TCP OPC Server - Remote Heap Corruption (PoC)	dos	Windows
2011-01-25	Sun Microsystems SunScreen Firewall - Privilege Escalation	remote	Multiple
2011-01-25	Opera Web Browser 11.00 - Integer Overflow	dos	Windows
2011-01-25	ab Web CMS 1.35 - Multiple Vulnerabilities	webapps	PHP
2011-01-25	WordPress Plugin FCChat Widget 2.1.7 - 'path' Cross-Site Scripting	webapps	PHP
2011-01-25	web@all 1.1 - 'url' Cross-Site Scripting	webapps	PHP
2011-01-25	PivotX 2.2.2 - 'module_image.php' Cross-Site Scripting	webapps	PHP
2011-01-25	ActiveWeb Professional 3.0 - Arbitrary File Upload	webapps	CFM
2011-01-25	WordPress Plugin Videox7 UGC 2.5.3.2 - 'listid' Cross-Site Scripting	webapps	PHP
2011-01-25	PivotX 2.2 - '/pivotx/includes/blogroll.php?color' Cross-Site Scripting	webapps	PHP
2011-01-25	PivotX 2.2 - '/pivotx/includes/timwrapper.php?src' Cross-Site Scripting	webapps	PHP
2011-01-25	WordPress Plugin Featured Content 0.0.1 - 'listid' Cross-Site Scripting	webapps	PHP
2011-01-25	WordPress Plugin Recip.ly 1.1.7 - 'uploadImage.php' Arbitrary File Upload	webapps	PHP
2011-01-25	Opera Web Browser 11.00 - 'option' HTML Element Integer Overflow	remote	Multiple
2011-01-25	WordPress Plugin BezahlCode Generator 1.0 - 'gen_name' Cross-Site Scripting	webapps	PHP
2011-01-24	Joomla! Component com_b2portfolio 1.0.0 - Multiple SQL Injections	webapps	PHP
2011-01-24	Microsoft Fax - Cover Page Editor 5.2.3790.3959 Double-Free Memory Corruption	local	Windows
2011-01-24	Inetserv 3.23 POP3 - Denial of Service	dos	Windows
2011-01-24	Microsoft SQL Server - sp_replwritetovarbin Memory Corruption (MS09-004) (Metasploit)	remote	Windows
2011-01-24	WordPress Plugin oQey-Gallery 0.2 - 'tbpv_domain' Cross-Site Scripting	webapps	PHP
2011-01-24	libxml2 2.6.x - 'XMLWriter::writeAttribute()' Memory Leak Information Disclosure	remote	Multiple
2011-01-24	WordPress Plugin Uploader 1.0 - 'num' Cross-Site Scripting	webapps	PHP
2011-01-24	WordPress Plugin Feature Slideshow 1.0.6 - 'src' Cross-Site Scripting	webapps	PHP
2011-01-24	WordPress Plugin Powerhouse Museum Collection Image Grid 0.9.1.1 - 'tbpv_username' Cross-Site Scripting	webapps	PHP
2011-01-23	Attacking Oracle Web Applications with Metasploit	papers	AIX
2011-01-23	XSS Street-Fight: The Only Rule Is There Are No Rules	papers	AIX
2011-01-23	Non-Executable Stack ARM Exploitation	papers	AIX
2011-01-23	The Apple Sandbox	papers	AIX
2011-01-23	Kernel Pool Exploitation on Windows 7	papers	Windows
2011-01-23	PHP Coupon Script 6.0 - 'bus' Blind SQL Injection	webapps	PHP
2011-01-23	Inetserv 3.23 - SMTP Denial of Service	dos	Windows
2011-01-23	Golden FTP Server 4.70 - 'PASS' Buffer Overflow	remote	Windows
2011-01-23	PHP Link Directory 4.1.0 - Cross-Site Request Forgery (Add Admin)	webapps	PHP
2011-01-23	WordPress Plugin Audio 0.5.1 - 'showfile' Cross-Site Scripting	webapps	PHP
2011-01-23	WordPress Plugin RSS Feed Reader 0.1 - 'rss_url' Cross-Site Scripting	webapps	PHP
2011-01-23	WordPress Plugin WP Featured Post with Thumbnail 3.0 - 'src' Cross-Site Scripting	webapps	PHP
2011-01-23	WordPress Plugin WP Publication Archive 2.0.1 - 'file' Information Disclosure	webapps	PHP
2011-01-22	phpCMS 9.0 - Blind SQL Injection	webapps	PHP
2011-01-22	cultbooking 2.0.4 - Multiple Vulnerabilities	webapps	PHP
2011-01-22	Sun Java Web Start BasicServiceImpl - Remote Code Execution (Metasploit)	remote	Multiple
2011-01-21	Look n stop - Local Denial of Service	dos	Windows
2011-01-21	Panda Global Protection 2010 - Local Denial of Service	dos	Windows
2011-01-21	Panda Global Protection 2010 - Local Denial of Service (unfiltered wcscpy())	dos	Windows
2011-01-21	FreeBSD/x86 - Reverse (127.0.0.1:1337/TCP) Shell (/bin/sh) Shellcode (81 bytes) (Generator)	shellcode	Generator
2011-01-21	FreeBSD/x86 - Bind (31337/TCP) Shell (/bin/sh) + fork() Shellcode (111 bytes)	shellcode	FreeBSD_x86
2011-01-21	Microsoft Windows Server - Service Relative Path Stack Corruption (MS08-067) (Metasploit)	remote	Windows
2011-01-20	PHP Lowbids - 'viewfaqs.php' Blind SQL Injection	webapps	PHP
2011-01-20	phpCMS 2008 - SQL Injection	webapps	PHP
2011-01-20	Microsoft Internet Explorer - CSS SetUserClip Memory Corruption (MS10-090) (Metasploit)	remote	Windows
2011-01-20	Pixie CMS 1.0.4 - '/admin/index.php' SQL Injection	webapps	PHP
2011-01-19	Novell iPrint 5.52 - ActiveX 'GetDriverSettings()' Command Execution	remote	Windows
2011-01-19	Simploo CMS 1.7.1 - PHP Code Execution	webapps	PHP
2011-01-19	PHP auctions - 'viewfaqs.php' Blind SQL Injection	webapps	PHP
2011-01-19	acpid 1.0.x - Multiple Local Denial of Service Vulnerabilities	dos	Linux
2011-01-19	ESTsoft ALZip 8.12.0.3 - '.zip' Remote Buffer Overflow	remote	Windows
2011-01-19	Golden FTP Server 4.70 - Malformed Message Denial of Service	dos	Windows
2011-01-19	PHPAuctions - 'viewfaqs.php' SQL Injection	webapps	PHP
2011-01-18	Google Chrome 8.0.552.237 - address Overflow Denial of Service	dos	Windows
2011-01-18	A-PDF All to MP3 Converter 2.0.0 - '.wav' Local Buffer Overflow	local	Windows
2011-01-18	Joomla! Component allCineVid 1.0.0 - Blind SQL Injection	webapps	PHP
2011-01-18	CakePHP 1.3.5/1.2.8 - 'Unserialize()' File Inclusion	webapps	PHP
2011-01-18	N-13 News 3.4 - Cross-Site Request Forgery (Admin Add)	webapps	PHP
2011-01-18	Pango Font Parsing - 'pangoft2-render.c' Heap Corruption	remote	Linux
2011-01-18	B-Cumulus - 'tagcloud' Multiple Cross-Site Scripting Vulnerabilities	webapps	Multiple
2011-01-17	AneCMS 1.3 - Persistent Cross-Site Scripting	webapps	PHP

2011-01-17	PHP-Fusion Teams Structure Infusion Addon - SQL Injection	webapps	PHP
2011-01-17	Web Application Vulnerabilities in Context of Browser Extensions	papers	Multiple
2011-01-17	SmoothWall Express 3.0 - Multiple Vulnerabilities	webapps	CGI
2011-01-17	The Abuse of ASSOC Explained	papers	Windows
2011-01-17	phpCMS 2008 V2 - 'data.php' SQL Injection	webapps	PHP
2011-01-17	Linux Kernel 2.6.32 (Ubuntu 10.04) - '/proc' Handling SUID Privilege Escalation	local	Linux
2011-01-16	MeshCMS 3.5 - Remote Code Execution	webapps	JSP
2011-01-16	Kingsoft AntiVirus 2011 SP5.2 'KisKrnl.sys' 2011.1.13.89 - Local Kernel Mode Denial of Service	dos	Windows
2011-01-16	BetMore Site Suite 4 - 'bid' Blind SQL Injection	webapps	PHP
2011-01-16	ActiveX UserManager 2.03 - Buffer Overflow	dos	Windows
2011-01-16	Seo Panel 2.2.0 - Cookie-Rendered Persistent Cross-Site Scripting	webapps	PHP
2011-01-16	Joomla! Component com_people 1.0.0 - Local File Inclusion	webapps	PHP
2011-01-16	AWBS 2.9.2 - 'cart.php' Blind SQL Injection	webapps	PHP
2011-01-16	Advanced Webhost Billing System (AWBS) 2.9.2 - 'oid' SQL Injection	webapps	PHP
2011-01-15	ViArt Shop 4.0.5 - Cross-Site Request Forgery	webapps	PHP
2011-01-15	eXtremeMP3 Player - Local Buffer Overflow (SEH)	local	Windows
2011-01-15	glfusion CMS 1.2.1 - 'img' Persistent Cross-Site Scripting	webapps	PHP
2011-01-15	CompactCMS 1.4.1 - Multiple Vulnerabilities	webapps	PHP
2011-01-15	CompactCMS 1.4.1 - Multiple Cross-Site Scripting Vulnerabilities (2)	webapps	PHP
2011-01-14	Real Networks RealPlayer SP - 'RecordClip' Method Remote Code Execution	remote	Windows
2011-01-14	Objectivity/DB - Lack of Authentication	dos	Windows
2011-01-14	Joomla! Component People 1.0.0 - SQL Injection	webapps	PHP
2011-01-14	Session Hijacking Basic	papers	PHP
2011-01-14	Sielco Sistemi Winlog 2.07.00 - Stack Overflow	dos	Windows
2011-01-14	Microsoft WMI Administration Tools - ActiveX Buffer Overflow (Metasploit)	remote	Windows
2011-01-14	CakePHP 1.3.5/1.2.8 - Cache Corruption (Metasploit)	webapps	PHP
2011-01-14	Avira AntiVir Personal - Multiple Code Execution Vulnerabilities (1)	remote	Windows
2011-01-14	Avira AntiVir Personal - Multiple Code Execution Vulnerabilities (2)	remote	Windows
2011-01-14	Alguest 1.1c-patched - 'elimina' SQL Injection	webapps	PHP
2011-01-13	Microsoft Win32k - Keyboard Layout (MS10-073)	local	Windows
2011-01-13	Blackmoon FTP 3.1 Build 1735/1736 - Denial of Service	dos	Windows
2011-01-13	SiteScape Enterprise Forum 7 - TCL Injection	webapps	CGI
2011-01-12	Go Null Yourself (GNY) E-Zine #1	papers	eZine
2011-01-12	Go Null Yourself (GNY) E-Zine #2	papers	eZine
2011-01-12	Go Null Yourself (GNY) E-Zine #3	papers	eZine
2011-01-12	LifeType 1.2.10 - HTTP Referer Persistent Cross-Site Scripting	webapps	PHP
2011-01-12	Heap Overflow For Humans - 101	papers	Windows
2011-01-12	Exploiting the otherwise non-exploitable: Windows kernel-mode GS Cookies subverted	papers	Multiple
2011-01-12	Microsoft Data Access Components - Remote Overflow (MS11-002)	remote	Windows
2011-01-12	Joomla! 1.5.22 / 1.6.0 - 'com_mailto' Spam Mail Relay	webapps	PHP
2011-01-11	vam shop 1.6 - Multiple Vulnerabilities	webapps	PHP
2011-01-11	diafan.cms 4.3 - Multiple Vulnerabilities	webapps	PHP
2011-01-11	Cambio 0.5a - Cross-Site Request Forgery	webapps	PHP
2011-01-11	Extcalendar 2 - 'calendar.php' SQL Injection	webapps	PHP
2011-01-11	energine 2.3.8 - Multiple Vulnerabilities	webapps	PHP
2011-01-11	whCMS 0.115 - Cross-Site Request Forgery	webapps	PHP
2011-01-11	DriveCrypt 5.3 - Local Kernel Ring0 SYSTEM	local	Windows
2011-01-11	Wireshark - ZigBee ZCL Dissector Infinite Loop Denial of Service	dos	Multiple
2011-01-11	Mono/Moonlight Generic Type Argument - Privilege Escalation	dos	Linux
2011-01-11	Nokia MultiMedia Player 1.0 - Local Overflow (SEH Unicode)	local	Windows
2011-01-11	Microsoft RPC DCOM Interface - Remote Overflow (MS03-026) (Metasploit)	remote	Windows
2011-01-11	CMS Tovar - 'tovar.php' SQL Injection	webapps	PHP
2011-01-10	TinyBB 1.2 - SQL Injection	webapps	PHP
2011-01-10	Macro Express Pro 4.2.2.1 - '.MXE' File Syntactic Analysis Buffer Overflow (PoC)	dos	Windows
2011-01-10	Maximus CMS 1.1.2 - 'FCKeditor' Arbitrary File Upload	webapps	PHP
2011-01-10	Linux Kernel (Solaris 10 / < 5.10 138888-01) - Local Privilege Escalation	local	Solaris
2011-01-10	Microsoft Windows - Common Control Library 'Comctl32' Heap Overflow (MS10-081)	remote	Windows
2011-01-10	Lotus CMS Fraise 3.0 - Local File Inclusion / Remote Code Execution	webapps	PHP
2011-01-10	JBoss JMX - Console Beanshell Deployer WAR Upload and Deployment (Metasploit)	remote	Multiple
2011-01-10	WikLink 0.1.3 - Multiple SQL Injections	webapps	PHP
2011-01-10	Solar FTP Server 2.1.1 - 'PASV' Remote Buffer Overflow	remote	Windows
2011-01-10	Newv SmartClient 1.1.0 - 'NewvCommon.ocx' ActiveX Control Multiple Vulnerabilities	remote	Windows
2011-01-09	KingView 6.5.3 - SCADA HMI Heap Overflow	remote	Windows
2011-01-09	IrfanView 4.28 - Multiple Denial of Service Vulnerabilities	dos	Windows
2011-01-09	Remote Library Injection	papers	Windows
2011-01-09	Metasploit’s Meterprerter	papers	Multiple
2011-01-09	Metasploit Framework Telephony	papers	Multiple
2011-01-09	Hackproofing Lotus Domino Web Server	papers	Multiple
2011-01-09	Advanced SQL Injection Exploitation to Operating System Full Control	papers	Multiple
2011-01-09	SAP Penetration Testing	papers	Multiple
2011-01-09	State of the Art Post Exploitation in Hardened PHP Environments	papers	PHP
2011-01-09	Advanced MySQL Exploitation	papers	Multiple
2011-01-09	Joomla! Plugin Captcha 4.5.1 - Local File Disclosure	webapps	PHP
2011-01-09	ProFTPd 1.3.2 rc3 < 1.3.3b (Linux) - Telnet IAC Buffer Overflow (Metasploit)	remote	Linux
2011-01-09	ProFTPd 1.2 < 1.3.0 (Linux) - 'sreplace' Remote Buffer Overflow (Metasploit)	remote	Linux
2011-01-08	VeryTools VideoSpirit Pro 1.68 - Local Buffer Overflow	local	Windows
2011-01-08	NetSupport Manager Agent - Remote Buffer Overflow (1)	remote	Multiple
2011-01-08	axdcms-0.1.1 - Local File Inclusion	webapps	PHP
2011-01-08	Elxis CMS 2009.2 - Remote File Inclusion	webapps	PHP
2011-01-08	HP Data Protector Manager 6.11 - RDS Service Remote Denial of Service	dos	Windows
2011-01-08	Winamp 5.5.8 (in_mod plugin) - Local Stack Overflow (SEH)	local	Windows
2011-01-08	sahana agasti 0.6.5 - Multiple Vulnerabilities	webapps	PHP
2011-01-08	WordPress Plugin mingle forum 1.0.26 - Multiple Vulnerabilities	webapps	PHP
2011-01-08	Linux Kernel < 2.6.34 (Ubuntu 10.10 x86/x64) - 'CAP_SYS_ADMIN' Local Privilege Escalation (2)	local	Linux
2011-01-08	Zwii 2.1.1 - Remote File Inclusion	webapps	PHP
2011-01-08	Signed Applet Social Engineering - Code Execution (Metasploit)	remote	Multiple
2011-01-08	Microsoft IIS/PWS - CGI Filename Double Decode Command Execution (MS01-026) (Metasploit)	remote	Windows
2011-01-08	Apple QuickTime 7.6.6 - Invalid SMIL URI Buffer Overflow (Metasploit)	remote	Windows
2011-01-08	Sun Java - Runtime New Plugin docbase Buffer Overflow (Metasploit)	remote	Windows
2011-01-08	Apple QuickTime 7.6.7 - _Marshaled_pUnk Code Execution (Metasploit)	local	Windows
2011-01-08	Nuance PDF Reader 6.0 - Launch Stack Buffer Overflow (Metasploit)	local	Windows
2011-01-08	Apple Mac OSX - mDNSResponder UPnP Location Overflow (Metasploit)	remote	OSX
2011-01-08	Redmine SCM Repository 0.9.x/1.0.x - Arbitrary Command Execution (Metasploit)	webapps	Linux
2011-01-08	Fonality trixbox CE 2.6.1 - 'langChoice' Local File Inclusion (Metasploit)	webapps	PHP
2011-01-08	Mitel Audio and Web Conferencing - Command Injection (Metasploit)	remote	Linux
2011-01-08	Joostina 1.3 - 'index.php' Cross-Site Scripting	webapps	PHP
2011-01-07	openSite 0.2.2 Beta - Local File Inclusion	webapps	PHP
2011-01-07	StageTracker 2.5 - Denial of Service	dos	Windows
2011-01-07	Bypassing Browser Memory Protections	papers	Multiple
2011-01-07	The evil karmetasploit upgrade	papers	Multiple
2011-01-07	Oracle, Interrupted: Stealing Sessions and Credentials	papers	Multiple
2011-01-07	Neurosurgery With Meterpreter	papers	Multiple
2011-01-07	Router Exploitation	papers	Hardware
2011-01-07	BS.Player 2.57 - Local Buffer Overflow (SEH Unicode)	local	Windows
2011-01-07	GNU libc/regcomp(3) - Multiple Vulnerabilities	dos	Linux
2011-01-06	Ignition 1.3 - 'comment.php' Local File Inclusion	webapps	PHP
2011-01-06	Openfire 3.6.4 - Multiple Cross-Site Request Forgery Vulnerabilities	webapps	JSP
2011-01-06	Enzip 3.00 - Local Buffer Overflow	local	Windows
2011-01-06	F3Site 2011 alfa 1 - Cross-Site Scripting / Cross-Site Request Forgery	webapps	PHP
2011-01-06	phpMySport 1.4 - SQL Injection / Authentication Bypass / Full Path Disclosure	webapps	PHP
2011-01-06	Phenotype CMS 3.0 - SQL Injection	webapps	PHP
2011-01-06	PHP MicroCMS 1.0.1 - Cross-Site Request Forgery / Cross-Site Scripting	webapps	PHP
2011-01-06	Joomla! 1.0.x - 'ordering' Cross-Site Scripting	webapps	PHP
2011-01-06	Lexmark X651de - Printer Ready Message Value HTML Injection	remote	Hardware
2011-01-06	PHP MicroCMS 1.0.1 - 'page_text' Cross-Site Scripting	webapps	PHP
2011-01-05	Concrete CMS 5.4.1.1 - Cross-Site Scripting / Remote Code Execution	webapps	PHP
2011-01-05	Nucleus 3.61 - Multiple Remote File Inclusions	webapps	PHP
2011-01-05	[Italian] E-Zine - HitNote 0x00	papers	Multiple
2011-01-05	[Italian] E-Zine - HitNote 0x01	papers	Multiple
2011-01-05	[Italian] E-Zine - HitNote 0x02	papers	Multiple

2011-01-05	[Italian] E-Zine - HitNote 0x03	papers	Multiple
2011-01-05	[Italian] E-Zine - HitNote 0x04	papers	Multiple
2011-01-05	PhpGedView 4.2.3 - Local File Inclusion	webapps	PHP
2011-01-05	Linux Kernel < 2.6.34 (Ubuntu 10.10 x86) - 'CAP_SYS_ADMIN' Local Privilege Escalation (1)	local	Linux_x86
2011-01-05	WikLink 0.1.3 - 'getURL.php' SQL Injection	webapps	PHP
2011-01-05	BlogEngine.NET 1.6 - Directory Traversal / Information Disclosure	webapps	ASP
2011-01-05	Openfire 3.6.4 - Multiple Cross-Site Scripting Vulnerabilities	webapps	JSP
2011-01-05	Quick Notes Plus 5.0 47 - Multiple DLL Loading Arbitrary Code Executions	remote	Windows
2011-01-04	Windows Thumbnail Buffer Overflow: A Vulnerability in My Heart	papers	Windows
2011-01-04	S40 CMS 0.4.1 - Cross-Site Request Forgery (Change Admin Password)	webapps	PHP
2011-01-04	Music Animation Machine MIDI Player - Local Buffer Overflow (SEH)	local	Windows
2011-01-04	Xynph FTP Server 1.0 - USER Denial of Service	dos	Windows
2011-01-04	WonderCMS 0.3.3 - 'editText.php' Cross-Site Scripting	webapps	PHP
2011-01-03	Sahana Agasti 0.6.4 - Multiple Remote File Inclusions	webapps	PHP
2011-01-03	Music Animation Machine MIDI Player - Local Crash (PoC)	dos	Windows
2011-01-03	Wireshark - ENTTEC DMX Data RLE Buffer Overflow	dos	Multiple
2011-01-03	PHP 5.3.2 - 'zend_strtod()' Floating-Point Value Denial of Service	dos	PHP
2011-01-03	Ace Video Workshop 1.2.0.0 - 'ir50_lcs.dll' DLL Loading Arbitrary Code Execution	remote	Windows
2011-01-03	OpenLDAP 2.4.x - 'modrdn' NULL OldDN Remote Denial of Service	dos	Linux
2011-01-02	CoolPlayer 2.18 - DEP Bypass	local	Windows
2011-01-02	GALLARIFIC PHP Photo Gallery Script - 'gallery.php' SQL Injection	webapps	PHP
2011-01-02	YourTube 1.0 - Cross-Site Request Forgery (Add User)	webapps	PHP
2011-01-02	amoeba CMS 1.01 - Multiple Vulnerabilities	webapps	PHP
2011-01-02	Microsoft Windows - Class Handling (MS10-073)	dos	Windows
2011-01-01	[Hebrew] Digital Whisper Security Magazine #12	papers	Multiple
2011-01-01	[Hebrew] Digital Whisper Security Magazine #13	papers	Multiple
2011-01-01	[Hebrew] Digital Whisper Security Magazine #15	papers	Multiple
2011-01-01	HP Photo Creative 2.x audio.Record.1 - ActiveX Control Remote Stack Buffer Overflow	remote	Windows
2011-01-01	KLINK - SQL Injection	webapps	PHP
2011-01-01	ChurchInfo 1.2.12 - SQL Injection	webapps	PHP
2011-01-01	Bywifi 2.8.1 - Local Stack Buffer Overflow	local	Windows
2011-01-01	Sahana Agasti 0.6.4 - SQL Injection	webapps	PHP
2011-01-01	Tech Shop Technote 7 - SQL Injection	webapps	PHP
2011-01-01	ImgBurn 2.4 - 'dwmapi.dll' DLL Loading Arbitrary Code Execution	dos	Windows
2011-01-01	PHPB2B 4.1 - 'q' Cross-Site Scripting	webapps	PHP