Exploits

日期	标题	类型	平台	作者
2019-03-21	The Company Business Website CMS – Multiple Vulnerabilities	webapps	php	Ahmet Ümit BAYRAM
2019-03-21	Rails 5.2.1 – Arbitrary File Content Disclosure	webapps	multiple	NotoriousRebel
2019-03-21	DVD X Player 5.5.3 – ‘.plf’ Buffer Overflow	local	windows	Paolo Perego
2019-03-21	Netartmedia Vlog System – ’email’ SQL Injection	webapps	php	Ahmet Ümit BAYRAM
2019-03-21	Bootstrapy CMS – Multiple SQL Injection	webapps	php	Ahmet Ümit BAYRAM
2019-03-21	Canarytokens 2019-03-01 – Detection Bypass	dos	windows	Benjamin Zink Loft, Gionathan Reale
2019-03-21	Placeto CMS Alpha v4 – ‘page’ SQL Injection	webapps	php	Abdullah Çelebi
2019-03-20	Netartmedia PHP Car Dealer – SQL Injection	webapps	php	Ahmet Ümit BAYRAM
2019-03-20	202CMS v10beta – Multiple SQL Injection	webapps	php	Mehmet EMIROGLU
2019-03-20	PLC Wireless Router GPN2.4P21-C-CN – Incorrect Access Control	webapps	hardware	Kumar Saurav
2019-03-20	Netartmedia PHP Business Directory 4.2 – SQL Injection	webapps	php	Ahmet Ümit BAYRAM
2019-03-20	NetShareWatcher 1.5.8.0 – Local SEH Buffer Overflow	local	windows	Peyman Forouzan
2019-03-20	PLC Wireless Router GPN2.4P21-C-CN – Cross-Site Request Forgery	webapps	hardware	Kumar Saurav
2019-03-20	Netartmedia Deals Portal – ‘Email’ SQL Injection	webapps	php	Ahmet Ümit BAYRAM
2019-03-20	Netartmedia PHP Dating Site – SQL Injection	webapps	php	Ahmet Ümit BAYRAM
2019-03-20	Netartmedia Jobs Portal 6.1 – SQL Injection	webapps	php	Ahmet Ümit BAYRAM
2019-03-20	Netartmedia PHP Real Estate Agency 4.0 – SQL Injection	webapps	php	Ahmet Ümit BAYRAM
2019-03-19	Netartmedia PHP Mall 4.1 – SQL Injection	webapps	php	Ahmet Ümit BAYRAM
2019-03-19	Jenkins 2.137 and Pipeline Groovy Plugin 2.61 – ACL Bypass and Metaprogramming Remote Code Execution (Metasploit)	remote	java	Metasploit
2019-03-19	Netartmedia Real Estate Portal 5.0 – SQL Injection	webapps	php	Ahmet Ümit BAYRAM
2019-03-19	Google Chrome < M73 - FileSystemOperationRunner Use-After-Free	dos	multiple	Google Security Research
2019-03-19	Google Chrome < M73 - MidiManagerWin Use-After-Free	dos	multiple	Google Security Research
2019-03-19	Microsoft Edge – Flash click2play Bypass with CObjectElement::FinalCreateObject	dos	windows	Google Security Research
2019-03-19	eNdonesia Portal 8.7 – Multiple Vulnerabilities	webapps	php	Mehmet EMIROGLU
2019-03-19	Gila CMS 1.9.1 – Cross-Site Scripting	webapps	php	Ahmet Ümit BAYRAM
2019-03-19	Advanced Host Monitor 11.92 beta – Local Buffer Overflow	local	windows	Peyman Forouzan
2019-03-19	Microsoft Internet Explorer 11 – VBScript Execution Policy Bypass in MSHTML	dos	windows	Google Security Research
2019-03-19	MyBB Upcoming Events Plugin 1.32 – Cross-Site Scripting	webapps	php	0xB9
2019-03-19	Netartmedia Event Portal 2.0 – ‘Email’ SQL Injection	webapps	php	Ahmet Ümit BAYRAM
2019-03-19	Google Chrome < M73 - Double-Destruction Race in StoragePartitionService	dos	multiple	Google Security Research
2019-03-19	libseccomp < 2.4.0 - Incorrect Compilation of Arithmetic Comparisons	dos	linux	Google Security Research
2019-03-19	Microsoft VBScript – VbsErase Memory Corruption	dos	windows	Google Security Research
2019-03-19	Google Chrome < M73 - Data Race in ExtensionsGuestViewMessageFilter	dos	multiple	Google Security Research
2019-03-18	WinAVI iPod/3GP/MP4/PSP Converter 4.4.2 – Denial of Service	dos	windows	Achilles
2019-03-18	WinMPG Video Convert 9.3.5 – Denial of Service	dos	windows	Achilles
2019-03-18	BMC Patrol Agent – Privilege Escalation Code Execution Execution (Metasploit)	remote	multiple	Metasploit
2019-03-18	TheCarProject 2 – Multiple SQL Injection	webapps	php	Mehmet EMIROGLU
2019-03-15	Laundry CMS – Multiple Vulnerabilities	webapps	php	Mehmet EMIROGLU
2019-03-15	ICE HRM 23.0 – Multiple Vulnerabilities	webapps	php	Mehmet EMIROGLU
2019-03-15	Vembu Storegrid Web Interface 4.4.0 – Multiple Vulnerabilities	webapps	php	Gionathan Reale
2019-03-15	Moodle 3.4.1 – Remote Code Execution	webapps	php	Darryn Ten
2019-03-15	Mail Carrier 2.5.1 – ‘MAIL FROM’ Buffer Overflow	remote	windows	Joseph McDonagh
2019-03-15	CMS Made Simple Showtime2 Module 3.6.2 – (Authenticated) Arbitrary File Upload	webapps	php	Daniele Scanu
2019-03-15	NetData 1.13.0 – HTML Injection	webapps	multiple	s4vitar
2019-03-14	FTPGetter Standard 5.97.0.177 – Remote Code Execution	remote	windows	w4fz5uck5
2019-03-14	Pegasus CMS 1.0 – ‘extra_fields.php’ Plugin Remote Code Execution	webapps	php	R3zk0n
2019-03-14	Intel Modular Server System 10.18 – Cross-Site Request Forgery (Change Admin Password)	webapps	php	LiquidWorm
2019-03-14	Apache UNO / LibreOffice Version: 6.1.2 / OpenOffice 4.1.6 API – Remote Code Execution	remote	multiple	sud0woodo
2019-03-13	pfSense 2.4.4-p1 (HAProxy Package 0.59_14) – Persistent Cross-Site Scripting	webapps	php	Gionathan Reale
2019-03-13	elFinder PHP Connector < 2.1.48 - 'exiftran' Command Injection (Metasploit)	remote	php	Metasploit