Exploits

日期	标题	类型	平台	作者
2018-09-21	WebRTC – FEC Out-of-Bounds Read	dos	multiple	Google Security Research
2018-09-20	NICO-FTP 3.0.1.19 – Buffer Overflow (SEH)	local	windows_x86	Abdullah Alıç
2018-09-19	WordPress Plugin Localize My Post 1.0 – Local File Inclusion	webapps	php	Manuel García Cárdenas
2018-09-19	LG SuperSign EZ CMS 2.5 – Local File Inclusion	webapps	hardware	Alejandro Fanjul
2018-09-19	Microsoft Windows – ‘CiSetFileCache’ WDAC Security Feature Bypass TOCTOU	dos	windows	Google Security Research
2018-09-19	WordPress Plugin Wechat Broadcast 1.2.0 – Local File Inclusion	webapps	php	Manuel García Cárdenas
2018-09-19	Roundcube rcfilters plugin 2.1.6 – Cross-Site Scripting	webapps	linux	Fahimeh Rezaei
2018-09-19	Microsoft Windows – Double Dereference in NtEnumerateKey Elevation of Privilege	dos	windows	Google Security Research
2018-09-18	Microsoft Edge Chakra – ‘PathTypeHandlerBase::SetAttributesHelper’ Type Confusion	dos	windows	Google Security Research
2018-09-18	WordPress Plugin Arigato Autoresponder and Newsletter 2.5 – Blind SQL Injection / Reflected Cross-Site Scripting	webapps	php	Larry W. Cashdollar
2018-09-18	Solaris – libnspr NSPR_LOG_FILE Privilege Escalation (Metasploit)	local	solaris	Metasploit
2018-09-18	Microsoft Edge Chakra JIT – ‘localeCompare’ Type Confusion	dos	windows	Google Security Research
2018-09-18	Ubisoft Uplay Desktop Client 63.0.5699.0 – Remote Code Execution	remote	windows	Che-Chun Kuo
2018-09-18	NUUO NVRMini2 3.8 – ‘cgi_system’ Buffer Overflow (Enable Telnet)	remote	hardware	Jacob Baines
2018-09-17	Oracle VirtualBox Manager 5.2.18 r124319 – ‘Name Attribute’ Denial of Service (PoC)	dos	windows_x86-64	Jose Eduardo Castro
2018-09-17	Joomla! Component JCK Editor 6.4.4 – ‘parent’ SQL Injection	webapps	php	Hamza Megahed
2018-09-17	Netis ADSL Router DL4322D RTK 2.1.1 – Denial of Service (PoC)	dos	hardware	cakes
2018-09-17	CA Release Automation NiMi 6.5 – Remote Command Execution	remote	java	Jakub Palaczynski
2018-09-17	Netis ADSL Router DL4322D RTK 2.1.1 – Cross-Site Scripting	webapps	hardware	cakes
2018-09-17	XAMPP Control Panel 3.2.2 – Denial of Service (PoC)	dos	windows_x86	Gionathan Reale
2018-09-17	Notebook Pro 2.0 – Denial Of Service (PoC)	dos	windows_x86-64	Ali Alipour
2018-09-15	STOPzilla AntiMalware 6.5.2.59 – Privilege Escalation (2)	local	windows	Ivan Ivanovic
2018-09-14	CdBurnerXP 4.5.8.6795 – ‘File Name’ Denial of Service (PoC)	dos	windows_x86-64	Alan Joaquín Baeza Meza
2018-09-14	Watchguard AP100 AP102 AP200 1.2.9.15 – Remote Code Execution (Metasploit)	webapps	linux	Stephen Shkardoon
2018-09-14	WordPress Plugin Survey & Poll 1.5.7.3 – ‘sss_params’ SQL Injection	webapps	php	Ceylan BOZOĞULLARINDAN
2018-09-14	Free MP3 CD Ripper 2.6 – ‘.wma’ Local Buffer Overflow (SEH)	local	windows_x86	Gionathan Reale
2018-09-14	InfraRecorder 0.53 – ‘.txt’ Denial of Service (PoC)	dos	windows_x86	Gionathan Reale
2018-09-14	Faleemi Plus 1.0.2 – Denial of Service (PoC)	dos	windows_x86-64	Gionathan Reale
2018-09-13	Free MP3 CD Ripper 2.6 – ‘.mp3’ Buffer Overflow (SEH)	local	windows_x86	Gionathan Reale
2018-09-13	TeamViewer App 13.0.100.0 – Denial of Service (PoC)	dos	windows_x86-64	Ali Alipour
2018-09-13	Linux 4.18 – Arbitrary Kernel Read into dmesg via Missing Address Check in segfault Handler	dos	linux	Google Security Research
2018-09-13	Chrome OS 10820.0.0 dev-channel – app->VM via garcon TCP Command Socket	local	linux	Google Security Research
2018-09-13	Apache Portals Pluto 3.0.0 – Remote Code Execution	webapps	windows	Che-Chun Kuo
2018-09-13	Socusoft Photo to Video Converter 8.07 – ‘Registration Name’ Buffer Overflow	local	windows	ZwX
2018-09-13	InduSoft Web Studio 8.1 SP1 – ‘Tag Name’ Buffer Overflow (SEH)	local	windows_x86-64	Luis Martínez
2018-09-13	Clone2Go Video to iPod Converter 2.5.0 – Denial of Service (PoC)	dos	windows_x86	ZwX
2018-09-13	MediaTek Wirless Utility rt2870 – Denial of Service (PoC)	dos	windows	Lawrence Amer
2018-09-13	Faleemi Desktop Software 1.8.2 – ‘SavePath for ScreenShots’ Buffer Overflow (SEH)	local	windows	Gionathan Reale
2018-09-13	STOPzilla AntiMalware 6.5.2.59 – Privilege Escalation (1)	local	windows	Parvez Anwar
2018-09-13	Apache Syncope 2.0.7 – Remote Code Execution	webapps	windows	Che-Chun Kuo
2018-09-12	PicaJet FX 2.6.5 – Denial of Service (PoC)	dos	windows_x86	Gionathan Reale
2018-09-12	Infiltrator Network Security Scanner 4.6 – Denial of Service (PoC)	dos	windows	Gionathan Reale
2018-09-12	PDF Explorer 1.5.66.2 – Denial of Service (PoC)	dos	windows	Gionathan Reale
2018-09-12	MyBB 1.8.17 – Cross-Site Scripting	webapps	php	0xB9
2018-09-12	CirCarLife SCADA 4.3.0 – Credential Disclosure	webapps	hardware	SadFud
2018-09-12	IBM Identity Governance and Intelligence 5.2.3.2 / 5.2.4 – SQL Injection	webapps	php	Mohamed Sayed
2018-09-12	LG Smart IP Camera 1508190 – Backup File Download	webapps	hardware	Ege Balci
2018-09-12	Rubedo CMS 3.4.0 – Directory Traversal	webapps	linux	Marouene Boubakri
2018-09-12	SynaMan 4.0 build 1488 – (Authenticated) Cross-Site Scripting	webapps	windows	bzyo
2018-09-12	iCash 7.6.5 – Denial of Service (PoC)	dos	windows	Gionathan Reale