Exploits

日期	标题	类型	平台	作者
2018-09-12	SynaMan 4.0 build 1488 – SMTP Credential Disclosure	webapps	windows	bzyo
2018-09-12	jiNa OCR Image to Text 1.0 – Denial of Service (PoC)	dos	windows_x86	Gionathan Reale
2018-09-12	Apple macOS 10.13.4 – Denial of Service (PoC)	dos	macos	Sriram
2018-09-12	PixGPS 1.1.8 – Denial of Service (PoC)	dos	windows_x86	Gionathan Reale
2018-09-12	RoboImport 1.2.0.72 – Denial of Service (PoC)	dos	windows_x86	Gionathan Reale
2018-09-11	Bayanno Hospital Management System 4.0 – Cross-Site Scripting	webapps	php	Gokhan Sagoglu
2018-09-11	HTML5 Video Player 1.2.5 – Denial of Service (PoC)	dos	windows_x86	T3jv1l
2018-09-11	Android – ‘zygote->init;’ Chain from USB Privilege Escalation	local	android	Google Security Research
2018-09-11	InTouch Machine Edition 8.1 SP1 – ‘Nombre del Tag’ Buffer Overflow (SEH)	local	windows_x86-64	Luis Martínez
2018-09-10	Any Sound Recorder 2.93 – Denial of Service (PoC)	dos	windows_x86	T3jv1l
2018-09-10	Flash Slideshow Maker Professional 5.20 – Buffer Overflow (SEH)	local	windows_x86	Shubham Singh
2018-09-10	Zenmap (Nmap) 7.70 – Denial of Service (PoC)	dos	windows_x86	Gionathan Reale
2018-09-10	Ghostscript – Failed Restore Command Execution (Metasploit)	local	linux	Metasploit
2018-09-10	Apache Struts 2 – Namespace Redirect OGNL Injection (Metasploit)	remote	multiple	Metasploit
2018-09-10	SocuSoft iPod Photo Slideshow 8.05 – Buffer Overflow (SEH)	local	windows_x86	Shubham Singh
2018-09-10	LW-N605R 12.20.2.1486 – Remote Code Execution	webapps	hardware	Nassim Asrir
2018-09-10	Socusoft 3GP Photo Slideshow 8.05 – Buffer Overflow (SEH)	local	windows_x86	Shubham Singh
2018-09-10	Microsoft Baseline Security Analyzer 2.3 – XML External Entity Injection	local	windows	hyp3rlinx
2018-09-10	Photo To Video Converter Professional 8.07 – Buffer Overflow (SEH)	local	windows_x86	Shubham Singh
2018-09-07	iSmartViewPro 1.5 – ‘SavePath for ScreenShots’ Local Buffer Overflow (SEH)	local	windows_x86	Gionathan Reale
2018-09-07	DVD Photo Slideshow Professional 8.07 – Buffer Overflow (SEH)	local	windows	T3jv1l
2018-09-07	QNAP Photo Station 5.7.0 – Cross-Site Scripting	webapps	hardware	Mitsuaki Shiraishi
2018-09-07	MedDream PACS Server Premium 6.7.1.1 – ’email’ SQL Injection	webapps	php	Carlos Avila
2018-09-07	Tenable WAS-Scanner 7.4.1708 – Remote Command Execution	remote	linux	Sameer Goyal
2018-09-07	Softneta MedDream PACS Server Premium 6.7.1.1 – Directory Traversal	webapps	php	Carlos Avila
2018-09-06	NovaRad NovaPACS Diagnostics Viewer 8.5 – XML External Entity Injection (File Disclosure)	webapps	xml	LiquidWorm
2018-09-06	Jorani Leave Management 0.6.5 – Cross-Site Scripting	webapps	php	Javier Olmedo
2018-09-06	Cisco Umbrella Roaming Client 2.0.168 – Local Privilege Escalation	local	windows_x86-64	ParagonSec
2018-09-06	Apache Roller 5.0.3 – XML External Entity Injection (File Disclosure)	webapps	linux	Marko Jokic
2018-09-06	Jorani Leave Management 0.6.5 – (Authenticated) ‘startdate’ SQL Injection	webapps	php	Javier Olmedo
2018-09-06	WirelessHART Fieldgate SWG70 3.0 – Directory Traversal	webapps	hardware	Hamit CİBO
2018-09-06	D-Link Dir-600M N150 – Cross-Site Scripting	webapps	hardware	PUNIT DARJI
2018-09-05	Tenda ADSL Router D152 – Cross-Site Scripting	webapps	hardware	Sandip Dey
2018-09-05	FUJI XEROX DocuCentre-V 3065 Printer – Remote Command Execution	remote	hardware	vr_system
2018-09-05	Microsoft People 10.1807.2131.0 – Denial of service (PoC)	dos	windows_x86-64	L0RD
2018-09-04	RPi Cam Control < 6.4.25 - 'preview.php' Remote Command Execution	webapps	linux	Reigning Shells
2018-09-04	Simple POS 4.0.24 – ‘columns[0][search][value]’ SQL Injection	webapps	php	Renos Nikolaou
2018-09-04	PHP File Browser Script 1 – Directory Traversal	webapps	php	AkkuS
2018-09-04	mooSocial Store Plugin 2.6 – SQL Injection	webapps	php	Andrea Bocchetti
2018-09-04	iSmartViewPro 1.5 – ‘DDNS’ Buffer Overflow	local	windows_x86	Luis Martínez
2018-09-04	Logicspice FAQ Script 2.9.7 – Remote Code Execution	webapps	php	AkkuS
2018-09-03	Wikipedia 12.0 – Denial of Service (PoC)	dos	windows	0xB9
2018-09-03	D-Link DIR-615 – Denial of Service (PoC)	dos	hardware	Aniket Dinda
2018-09-03	Visual Ping 0.8.0.0 – ‘Host’ Denial of Service (PoC)	dos	windows_x86-64	Uriel Corral Salinas
2018-09-03	VSAXESS V2.6.2.70 build 20171226_053 – ‘Nickname’ Denial of Service (PoC)	dos	windows	Diego Santamaria
2018-09-03	Online Quiz Maker 1.0 – ‘catid’ SQL Injection	webapps	php	AkkuS
2018-09-03	Microsoft Windows Explorer Out-of-Bound Read – Denial of Service (PoC)	dos	windows	Ghaaf
2018-09-03	Trend Micro Virtual Mobile Infrastructure 5.5.1336 – ‘Server address’ Denial of Service (PoC)	dos	ios	Luis Martínez
2018-09-03	Admidio 3.3.5 – Cross-Site Request Forgery (Change Permissions)	webapps	php	Nawaf Alkeraithe
2018-09-03	FsPro Labs Event Log Explorer v4.6.1.2115 – XML External Entity Injection	webapps	windows	hyp3rlinx