Exploits

日期	标题	类型	平台	作者
2018-03-05	Memcached 1.5.5 – ‘Memcrashed’ Insufficient Control Network Message Volume Denial of Service (1)	dos	linux	anonymous
2018-03-05	ActivePDF Toolkit < 8.1.0.19023 - Multiple Memory Corruptions	dos	windows	François Goichon
2018-03-05	ClipBucket < 4.0.0 - Release 4902 - Command Injection / File Upload / SQL Injection	webapps	php	SEC Consult
2018-03-05	Suricata < 4.0.4 - IDS Detection Bypass	dos	multiple	Positive Technologies
2018-03-05	Sophos UTM 9.410 – ‘loginuser’ ‘confd’ Service Privilege Escalation	local	linux	KoreLogic
2018-03-05	Memcached 1.5.5 – ‘Memcrashed’ Insufficient Control Network Message Volume Denial of Service (2)	dos	linux	Alex Conrey
2018-03-05	Netgear – ‘TelnetEnable’ Magic Packet (Metasploit)	remote	hardware	Metasploit
2018-03-02	IrfanView 4.50 Email Plugin – Buffer Overflow (SEH Unicode)	local	windows	bzyo
2018-03-02	IrfanView 4.44 Email Plugin – Buffer Overflow (SEH)	local	windows	bzyo
2018-03-02	DualDesk 20 – ‘Proxy.exe’ Denial of Service	dos	windows	hyp3rlinx
2018-03-02	uWSGI < 2.0.17 - Directory Traversal	webapps	php	Marios Nicolaides
2018-03-02	TestLink Open Source Test Management < 1.9.16 - Remote Code Execution	remote	php	Manish Tanwar
2018-03-02	iSumsoft ZIP Password Refixer 3.1.1 – Buffer Overflow	local	windows	ScrR1pTK1dd13
2018-03-02	SEGGER embOS/IP FTP Server 3.22 – Denial of Service	dos	windows	hyp3rlinx
2018-03-02	antMan < 0.9.1a - Authentication Bypass	webapps	multiple	Joshua Bowser
2018-03-02	D-Link DIR-600M Wireless – Cross-Site Scripting	webapps	hardware	Prasenjit Kanti Paul
2018-03-01	Microsoft Windows Kernel (7 x86) – Local Privilege Escalation (MS16-039)	local	windows_x86	xiaodaozhi
2018-02-28	Routers2 2.24 – Cross-Site Scripting	webapps	perl	Lorenzo Di Fuccia
2018-02-28	Apple iOS 11.2.5 / watchOS 4.2.2 / tvOS 11.2.5 – ‘bluetoothd’ Memory Corruption	dos	multiple	Zimperium zLabs Team
2018-02-27	CMS Made Simple 2.1.6 – Remote Code Execution	webapps	php	Keerati T.
2018-02-27	School Management Script 3.0.4 – Authentication Bypass	webapps	php	Samiran Santra
2018-02-27	netek 0.8.2 – Denial of Service	dos	linux	Lawrence Amer
2018-02-27	Microsoft Windows 8.1/2012 R2 – SMBv3 Null Pointer Dereference Denial of Service	dos	windows	Nabeel Ahmed
2018-02-27	GetGo Download Manager 5.3.0.2712 – Buffer Overflow (SEH)	remote	windows	bzyo
2018-02-27	MyBB My Arcade Plugin 1.3 – Cross-Site Scripting	webapps	php	0xB9
2018-02-27	Asterisk chan_pjsip 15.2.0 – ‘SUBSCRIBE’ Stack Corruption	dos	linux	EnableSecurity
2018-02-27	Asterisk chan_pjsip 15.2.0 – ‘SDP fmtp’ Denial of Service	dos	linux	EnableSecurity
2018-02-27	Asterisk chan_pjsip 15.2.0 – ‘SDP’ Denial of Service	dos	linux	EnableSecurity
2018-02-27	Asterisk chan_pjsip 15.2.0 – ‘INVITE’ Denial of Service	dos	linux	EnableSecurity
2018-02-27	Chrome V8 – ‘TranslatedState::MaterializeCapturedObjectAt’ Type Confusion	dos	multiple	Google Security Research
2018-02-27	Chrome V8 – ‘PropertyArray’ Integer Overflow	dos	multiple	Google Security Research
2018-02-27	Transmission – Integer Overflows Parsing Torrent Files	dos	multiple	Google Security Research
2018-02-27	Sony Playstation 4 (PS4) 5.01 < 5.05 - WebKit Code Execution (PoC)	dos	hardware	ALEXZZZ9
2018-02-27	Sony Playstation 4 (PS4) 4.55 – ‘Jailbreak’ ‘setAttributeNodeNS’ WebKit 5.02 / ‘bpf’ Kernel Loader 4.55	remote	hardware	Specter
2018-02-27	Concrete5 CMS < 8.3.0 - Username / Comments Enumeration	webapps	php	Chapman Schleiss
2018-02-26	Disk Savvy Enterprise 10.4.18 – Stack-Based Buffer Overflow (Metasploit)	remote	windows	Metasploit
2018-02-26	Sony Playstation 4 (PS4) 4.07 < 4.55 - 'bpf' Local Kernel Code Execution (PoC)	local	hardware	qwertyoruiop
2018-02-26	AsusWRT LAN – Remote Code Execution (Metasploit)	remote	hardware	Metasploit
2018-02-26	CloudMe Sync 1.10.9 – Stack-Based Buffer Overflow (Metasploit)	remote	windows	Metasploit
2018-02-25	Papenmeier WiFi Baby Monitor Free & Lite < 2.02.2 - Remote Audio Record	remote	android	iamrastating
2018-02-22	Armadito Antivirus 0.12.7.2 – Detection Bypass	local	windows	Souhail Hammou
2018-02-22	NoMachine < 6.0.80 (x64) - 'nxfuse' Privilege Escalation	local	windows_x86-64	Fidus InfoSecurity
2018-02-22	NoMachine < 6.0.80 (x86) - 'nxfuse' Privilege Escalation	local	windows_x86	Fidus InfoSecurity
2018-02-22	Trend Micro Email Encryption Gateway 5.5 (Build 1111.00) – Multiple Vulnerabilities	webapps	jsp	Core Security
2018-02-22	Joomla! Component OS Property Real Estate 3.12.7 – SQL Injection	webapps	php	Ihsan Sencan
2018-02-22	Joomla! Component Proclaim 9.1.1 – Arbitrary File Upload	webapps	php	Ihsan Sencan
2018-02-22	Joomla! Component CheckList 1.1.1 – SQL Injection	webapps	php	Ihsan Sencan
2018-02-22	Joomla! Component Alexandria Book Library 3.1.2 – ‘letter’ SQL Injection	webapps	php	Ihsan Sencan
2018-02-22	Parallels Remote Application Server 15.5 – Path Traversal	webapps	windows	Nicolas Markitanis
2018-02-22	Joomla! Component Ek Rishta 2.9 – SQL Injection	webapps	php	Ihsan Sencan