Exploits

日期	标题	类型	平台	作者
2018-09-03	Symantec Mobile Encryption for iPhone 2.1.0 – ‘Server’ Denial of Service (PoC)	dos	ios	Luis Martínez
2018-08-31	DamiCMS 6.0.0 – Cross-Site Request Forgery (Change Admin Password)	webapps	php	Autism_JH
2018-08-31	Network Manager VPNC 1.2.6 – ‘Username’ Local Privilege Escalation (Metasploit)	local	linux	Metasploit
2018-08-31	Argus Surveillance DVR 4.0.0.0 – Privilege Escalation	local	windows_x86	hyp3rlinx
2018-08-31	Acunetix WVS Reporter 10.0 – Denial of Service (PoC)	dos	windows_x86-64	Ali Alipour
2018-08-31	Vox TG790 ADSL Router – Cross-Site Scripting	webapps	hardware	cakes
2018-08-30	Nord VPN 6.14.31 – Denial of Service (PoC)	dos	windows_x86-64	L0RD
2018-08-30	Cybrotech CyBroHttpServer 1.0.3 – Directory Traversal	webapps	windows_x86-64	Emre ÖVÜNÇ
2018-08-30	NetworkActiv Web Server 4.0 Pre-Alpha-3.7.2 – ‘Username’ Denial of Service (PoC)	dos	windows_x86-64	Victor Mondragón
2018-08-30	Cybrotech CyBroHttpServer 1.0.3 – Cross-Site Scripting	webapps	windows_x86-64	Emre ÖVÜNÇ
2018-08-30	WordPress Plugin Jibu Pro 1.7 – Cross-Site Scripting	webapps	php	Renos Nikolaou
2018-08-30	WordPress Plugin Quizlord 2.0 – Cross-Site Scripting	webapps	php	Renos Nikolaou
2018-08-30	DLink DIR-601 – Credential Disclosure	webapps	hardware	Kevin Randall
2018-08-29	Argus Surveillance DVR 4.0.0.0 – Directory Traversal	webapps	windows_x86	hyp3rlinx
2018-08-29	R 3.4.4 – Buffer Overflow (SEH)	local	windows	ZwX
2018-08-29	HD Tune Pro 5.70 – Denial of Service (PoC)	dos	windows_x86	Gionathan Reale
2018-08-29	SIPP 3.3 – Stack-Based Buffer Overflow	local	linux	Juan Sacco
2018-08-29	Drive Power Manager 1.10 – Denial Of Service (PoC)	dos	windows_x86	Gionathan Reale
2018-08-29	Episerver 7 patch 4 – XML External Entity Injection	webapps	hardware	Jonas Lejon
2018-08-29	Cisco AnyConnect Secure Mobility Client 4.6.01099 – ‘Introducir URL’ Denial of Service (PoC)	dos	ios	Luis Martínez
2018-08-29	ipPulse 1.92 – ‘TCP Port’ Denial of Service (PoC)	dos	windows_x86	Diego Santamaria
2018-08-29	Easy PhotoResQ 1.0 – Denial Of Service (PoC)	dos	windows_x86	Gionathan Reale
2018-08-29	phpMyAdmin 4.7.x – Cross-Site Request Forgery	webapps	php	VulnSpy
2018-08-29	Trillian 6.1 Build 16 – ‘Sign In’ Denial of service (PoC)	dos	windows_x86-64	Jose Miguel Gonzalez
2018-08-29	Eaton Xpert Meter 13.4.0.10 – SSH Private Key Disclosure	remote	hardware	BrianWGray
2018-08-29	Immunity Debugger 1.85 – Denial of Service (PoC)	dos	windows_x86	Gionathan Reale
2018-08-29	NASA openVSP 3.16.1 – Denial of Service (PoC)	dos	windows_x86-64	L0RD
2018-08-29	Fathom 2.4 – Denial Of Service (PoC)	dos	windows_x86	Gionathan Reale
2018-08-29	Skype Empresarial Office 365 16.0.10730.20053 – ‘Dirección de inicio de sesión’ Denial of service (PoC)	dos	windows_x86-64	Samuel Cruz
2018-08-28	VirtualBox 5.2.6.r120293 – VM Escape	local	linux	Reno Robert
2018-08-28	Microsoft Windows – Advanced Local Procedure Call (ALPC) Local Privilege Escalation	local	windows	SandboxEscaper
2018-08-28	Microsoft Windows – JScript RegExp.lastIndex Use-After-Free	dos	windows	Google Security Research
2018-08-28	Instagram App 41.1788.50991.0 – Denial of Service (PoC)	dos	windows_x86-64	Ali Alipour
2018-08-28	Cisco Network Assistant 6.3.3 – ‘Cisco Login’ Denial of Service (PoC)	dos	windows	Luis Martínez
2018-08-27	Responsive FileManager < 9.13.4 - Directory Traversal	webapps	php	Simon Uvarov
2018-08-27	RICOH MP C4504ex Printer – Cross-Site Request Forgery (Add Admin)	webapps	hardware	Ismail Tasdelen
2018-08-27	Sentrifugo HRMS 3.2 – ‘deptid’ SQL Injection	webapps	windows	Javier Olmedo
2018-08-27	Trend Micro Enterprise Mobile Security 2.0.0.1700 – ‘Servidor’ Denial of Service (PoC)	dos	ios	Luis Martínez
2018-08-27	Libpango 1.40.8 – Denial of Service (PoC)	dos	multiple	Jeffery M
2018-08-27	Firefox 55.0.3 – Denial of Service (PoC)	dos	windows_x86-64	L0RD
2018-08-27	CuteFTP 5.0 – Buffer Overflow	local	windows_x86	Matteo Malvica
2018-08-27	Gleez CMS 1.2.0 – Cross-Site Request Forgery (Add Admin)	webapps	php	GunEggWang
2018-08-27	Adobe Flash – AVC Processing Out-of-Bounds Read	dos	linux	Google Security Research
2018-08-27	Foxit PDF Reader 9.0.1.1049 – Pointer Overwrite Use-After-Free (Metasploit)	local	windows	Metasploit
2018-08-27	WordPress Plugin Plainview Activity Monitor 20161228 – (Authenticated) Command Injection	webapps	php	Lydéric Lefebvre
2018-08-27	LiteCart 2.1.2 – Arbitrary File Upload	webapps	php	Haboob Team
2018-08-27	HP Jetdirect – Path Traversal Arbitrary Code Execution (Metasploit)	remote	unix	Metasploit
2018-08-27	Seagate Personal Cloud SRN21C 4.3.16.0 / 4.3.18.0 – SQL Injection	webapps	hardware	Yorick Koster
2018-08-27	Electron WebPreferences – Remote Code Execution	remote	multiple	Matt Austin
2018-08-26	WordPress Plugin Gift Voucher 1.0.5 – (Authenticated) ‘template_id’ SQL Injection	webapps	php	Renos Nikolaou