Exploits

日期	标题	类型	平台	作者
2018-09-26	CrossFont 7.5 – Denial of Service (PoC)	dos	windows_x86	Gionathan Reale
2018-09-26	TransMac 12.2 – Denial of Service (PoC)	dos	windows_x86	Gionathan Reale
2018-09-26	Linux Kernel – VMA Use-After-Free via Buggy vmacache_flush_all() Fastpath Local Privilege Escalation	local	linux	Google Security Research
2018-09-25	RICOH MP C6503 Plus Printer – Cross-Site Scripting	webapps	hardware	Ismail Tasdelen
2018-09-25	WebKit – ‘WebCore::RenderTreeBuilder::removeAnonymousWrappersForInlineChildrenIfNeeded’ Use-After-Free	dos	multiple	Google Security Research
2018-09-25	WebKit – ‘WebCore::RenderMultiColumnSet::updateMinimumColumnHeight’ Use-After-Free	dos	multiple	Google Security Research
2018-09-25	RICOH MP C2003 Printer – Cross-Site Scripting	webapps	hardware	Ismail Tasdelen
2018-09-25	RICOH MP C406Z Printer – Cross-Site Scripting	webapps	hardware	Ismail Tasdelen
2018-09-25	Joomla! Component eXtroForms 2.1.5 – ‘filter_type_id’ SQL Injection	webapps	php	AkkuS
2018-09-25	Joomla! Component Dutch Auction Factory 2.0.2 – ‘filter_order_Dir’ SQL Injection	webapps	php	Ihsan Sencan
2018-09-25	Joomla! Component Penny Auction Factory 2.0.4 – SQL Injection	webapps	php	Ihsan Sencan
2018-09-25	Joomla! Component Timetable Schedule 3.6.8 – SQL Injection	webapps	php	Ihsan Sencan
2018-09-25	WebKit – ‘WebCore::SVGTRefElement::updateReferencedText’ Use-After-Free	dos	multiple	Google Security Research
2018-09-25	RICOH MP 305+ Printer – Cross-Site Scripting	webapps	hardware	Ismail Tasdelen
2018-09-25	Joomla! Component Questions 1.4.3 – SQL Injection	webapps	php	Ihsan Sencan
2018-09-25	Joomla! Component Jobs Factory 2.0.4 – SQL Injection	webapps	php	Ihsan Sencan
2018-09-25	WebKit – ‘WebCore::SVGTextLayoutAttributes::context’ Use-After-Free	dos	multiple	Google Security Research
2018-09-25	WebKit – ‘WebCore::InlineTextBox::paint’ Out-of-Bounds Read	dos	multiple	Google Security Research
2018-09-25	Faleemi Desktop Software 1.8.2 – ‘Device alias’ Local Buffer Overflow (SEH)	local	windows_x86	Gionathan Reale
2018-09-25	WebKit – ‘WebCore::SVGAnimateElementBase::resetAnimatedType’ Use-After-Free	dos	multiple	Google Security Research
2018-09-25	Joomla! Component Collection Factory 4.1.9 – SQL Injection	webapps	php	Ihsan Sencan
2018-09-25	Joomla! Component Responsive Portfolio 1.6.1 – ‘filter_order_Dir’ SQL Injection	webapps	php	AkkuS
2018-09-25	WebKit – ‘WebCore::AXObjectCache::handleMenuItemSelected’ Use-After-Free	dos	multiple	Google Security Research
2018-09-25	WebKit – ‘WebCore::RenderLayer::updateDescendantDependentFlags’ Use-After-Free	dos	multiple	Google Security Research
2018-09-25	Super Cms Blog Pro 1.0 – SQL Injection	webapps	php	Ihsan Sencan
2018-09-25	Joomla! Component Swap Factory 2.2.1 – SQL Injection	webapps	php	Ihsan Sencan
2018-09-25	Joomla! Component Music Collection 3.0.3 – SQL Injection	webapps	php	Ihsan Sencan
2018-09-25	Easy PhoroResQ 1.0 – Buffer Overflow	local	windows_x86	Cemal Cihad ÇİFTÇİ
2018-09-25	Solaris – ‘EXTREMEPARR’ dtappgather Privilege Escalation (Metasploit)	local	solaris	Metasploit
2018-09-25	WebKit – ‘WebCore::Node::ensureRareData’ Use-After-Free	dos	multiple	Google Security Research
2018-09-25	Joomla! Component AlphaIndex Dictionaries 1.0 – SQL Injection	webapps	php	Ihsan Sencan
2018-09-25	Joomla! Component Reverse Auction Factory 4.3.8 – SQL Injection	webapps	php	Ihsan Sencan
2018-09-25	Joomla! Component Raffle Factory 3.5.2 – SQL Injection	webapps	php	Ihsan Sencan
2018-09-25	Joomla! Component Article Factory Manager 4.3.9 – SQL Injection	webapps	php	Ihsan Sencan
2018-09-25	Joomla! Component Social Factory 3.8.3 – SQL Injection	webapps	php	Ihsan Sencan
2018-09-24	RICOH MP C6003 Printer – Cross-Site Scripting	webapps	hardware	Ismail Tasdelen
2018-09-24	Navigate CMS 2.8 – Cross-Site Scripting	webapps	php	Renzi
2018-09-24	MyBB Visual Editor 1.8.18 – Cross-Site Scripting	webapps	php	Numan OZDEMIR
2018-09-24	Joomla! Component AMGallery 1.2.3 – ‘filter_category_id’ SQL Injection	webapps	php	Ihsan Sencan
2018-09-24	udisks2 2.8.0 – Denial of Service (PoC)	dos	linux	Marshall Whittaker
2018-09-24	Joomla! Component Micro Deal Factory 2.4.0 – ‘id’ SQL Injection	webapps	php	Ihsan Sencan
2018-09-24	Termite 3.4 – Denial of Service (PoC)	dos	windows_x86	Abdullah Alıç
2018-09-24	RICOH Aficio MP 301 Printer – Cross-Site Scripting	webapps	hardware	Ismail Tasdelen
2018-09-24	SoftX FTP Client 3.3 – Denial of Service (PoC)	dos	windows_x86	Cemal Cihad ÇİFTÇİ
2018-09-24	Joomla! Component Auction Factory 4.5.5 – ‘filter_order’ SQL Injection	webapps	php	Ihsan Sencan
2018-09-24	Beyond Remote 2.2.5.3 – Denial of Service (PoC)	dos	windows_x86	Erenay Gencay
2018-09-24	Joomla! Component CW Article Attachments 1.0.6 – ‘id’ SQL Injection	webapps	php	Haboob Team
2018-09-24	LG SuperSign EZ CMS 2.5 – Remote Code Execution	webapps	hardware	Alejandro Fanjul
2018-09-21	Collectric CMU 1.0 – ‘lang’ Hard-Coded Credentials / SQL injection	webapps	hardware	Simon Brannstrom
2018-09-21	WebRTC – FEC Out-of-Bounds Read	dos	multiple	Google Security Research