Exploits

日期	标题	类型	平台	作者
2018-02-22	Joomla! Component CheckList 1.1.1 – SQL Injection	webapps	php	Ihsan Sencan
2018-02-22	Joomla! Component Alexandria Book Library 3.1.2 – ‘letter’ SQL Injection	webapps	php	Ihsan Sencan
2018-02-22	Parallels Remote Application Server 15.5 – Path Traversal	webapps	windows	Nicolas Markitanis
2018-02-21	Disk Pulse Enterprise 10.4.18 – ‘Import Command’ Buffer Overflow (SEH)	remote	windows	Daniel Teixeira
2018-02-21	Disk Savvy Enterprise 10.4.18 – Buffer Overflow (SEH)	remote	windows	Daniel Teixeira
2018-02-21	EChat Server 3.1 – ‘CHAT.ghp’ Buffer Overflow	remote	windows	Juan Sacco
2018-02-21	Wavpack 5.1.0 – Denial of Service	dos	multiple	r4xis
2018-02-20	Microsoft Internet Explorer 11 – ‘Js::RegexHelper::RegexReplace’ Use-After-Free	dos	windows	Google Security Research
2018-02-20	Microsoft Windows – StorSvc SvcMoveFileInheritSecurity Arbitrary File Creation Privilege Escalation	local	windows	Google Security Research
2018-02-20	μTorrent (uTorrent) Classic/Web – JSON-RPC Remote Code Execution / Information Disclosure	remote	multiple	Google Security Research
2018-02-20	MagniComp SysInfo – mcsiwrapper Privilege Escalation (Metasploit)	local	multiple	Metasploit
2018-02-20	Microsoft Windows – Constrained Impersonation Capability Privilege Escalation	local	windows	Google Security Research
2018-02-20	Microsoft Windows – NPFS Symlink Security Feature Bypass/Elevation of Privilege/Dangerous Behavior	local	windows	Google Security Research
2018-02-20	Microsoft Windows – Global Reparse Point Security Feature Bypass/Elevation of Privilege	local	windows	Google Security Research
2018-02-20	Microsoft Windows Kernel – ‘nt!RtlpCopyLegacyContextX86’ Stack Memory Disclosure	dos	windows	Google Security Research
2018-02-19	October CMS < 1.0.431 - Cross-Site Scripting	webapps	php	Samrat Das
2018-02-19	Aastra 6755i SIP SP4 – Denial of Service	dos	hardware	Wadeek
2018-02-16	Joomla! Component SimpleCalendar 3.1.9 – SQL Injection	webapps	php	Ihsan Sencan
2018-02-16	Joomla! Component File Download Tracker 3.0 – SQL Injection	webapps	php	Ihsan Sencan
2018-02-16	Joomla! Component Realpin 1.5.04 – SQL Injection	webapps	php	Ihsan Sencan
2018-02-16	Joomla! Component Fastball 2.5 – ‘season’ SQL Injection	webapps	php	Ihsan Sencan
2018-02-16	Oracle Primavera P6 Enterprise Project Portfolio Management – HTTP Response Splitting	webapps	multiple	Marios Nicolaides
2018-02-16	Joomla! Component Project Log 1.5.3 – ‘search’ SQL Injection	webapps	php	Ihsan Sencan
2018-02-16	Joomla! Component DT Register 3.2.7 – ‘id’ SQL Injection	webapps	php	Ihsan Sencan
2018-02-16	PSNews Website 1.0.0 – ‘Keywords’ SQL Injection	webapps	php	L0RD
2018-02-16	Joomla! Component NeoRecruit 4.1 – SQL Injection	webapps	php	Ihsan Sencan
2018-02-16	Joomla! Component AllVideos Reloaded 1.2.x – ‘divid’ SQL Injection	webapps	php	Ihsan Sencan
2018-02-16	PHIMS – Hospital Management Information System – ‘Password’ SQL Injection	webapps	php	L0RD
2018-02-16	Joomla! Component MediaLibrary Free 4.0.12 – SQL Injection	webapps	php	Ihsan Sencan
2018-02-16	Joomla! Component Aist 2.0 – ‘id’ SQL Injection	webapps	php	Ihsan Sencan
2018-02-16	Front Accounting ERP 2.4.3 – Cross-Site Request Forgery	webapps	php	Samrat Das
2018-02-16	Joomla! Component JTicketing 2.0.16 – SQL Injection	webapps	php	Ihsan Sencan
2018-02-16	Joomla! Component Advertisement Board 3.1.0 – ‘catname’ SQL Injection	webapps	php	Ihsan Sencan
2018-02-16	Joomla! Component Saxum Picker 3.2.10 – SQL Injection	webapps	php	Ihsan Sencan
2018-02-16	Joomla! Component JS Jobs 1.1.9 – SQL Injection	webapps	php	Ihsan Sencan
2018-02-16	Joomla! Component Kubik-Rubik Simple Image Gallery Extended (SIGE) 3.2.3 – Cross-Site Scripting	webapps	php	Alwin Peppels
2018-02-16	Joomla! Component SquadManagement 1.0.3 – SQL Injection	webapps	php	Ihsan Sencan
2018-02-16	Joomla! Component JS Autoz 1.0.9 – SQL Injection	webapps	php	Ihsan Sencan
2018-02-16	Siemens SIPROTEC 4 and SIPROTEC Compact EN100 Ethernet Module < 4.25 - Denial of Service	dos	hardware	M. Can Kurnaz
2018-02-16	Joomla! Component Saxum Numerology 3.0.4 – SQL Injection	webapps	php	Ihsan Sencan
2018-02-16	Joomla! Component JquickContact 1.3.2.2.1 – SQL Injection	webapps	php	Ihsan Sencan
2018-02-16	Twig < 2.4.4 - Server Side Template Injection	webapps	php	JameelNabbo
2018-02-16	Joomla! Component Saxum Astro 4.0.14 – SQL Injection	webapps	php	Ihsan Sencan
2018-02-16	Joomla! Component JomEstate PRO 3.7 – ‘id’ SQL Injection	webapps	php	Ihsan Sencan
2018-02-16	UserSpice 4.3 – Blind SQL Injection	webapps	php	Dolev Farhi
2018-02-16	Joomla! Component ccNewsletter 2.x.x ‘id’ – SQL Injection	webapps	php	Ihsan Sencan
2018-02-16	Joomla! Component jGive 2.0.9 – SQL Injection	webapps	php	Ihsan Sencan
2018-02-16	TV – Video Subscription – Authentication Bypass SQL Injection	webapps	php	L0RD
2018-02-16	Joomla! Pinterest Clone Social Pinboard 2.0 – SQL Injection	webapps	php	Ihsan Sencan
2018-02-16	Joomla! Component JB Bus 2.3 – ‘order_number’ SQL Injection	webapps	php	Ihsan Sencan