Exploits

日期	标题	类型	平台	作者
2017-09-30	Sync Breeze Enterprise 10.0.28 – Remote Buffer Overflow	remote	windows	Owais Mehtab
2017-09-29	WordPress Plugin WPHRM – SQL Injection	webapps	php	Ihsan Sencan
2017-09-29	FileRun < 2017.09.18 - SQL Injection	webapps	php	SPARC
2017-09-29	Dup Scout Enterprise 10.0.18 – ‘Import Command’ Local Buffer Overflow	local	windows	Touhid M.Shaikh
2017-09-29	Trend Micro OfficeScan 11.0/XG (12.0) – Memory Corruption	dos	windows	hyp3rlinx
2017-09-29	ConverTo Video Downloader & Converter 1.4.1 – Arbitrary File Download	webapps	php	Ihsan Sencan
2017-09-28	Real Estate MLM plan script 1.0 – ‘srch’ SQL Injection	webapps	php	8bitsec
2017-09-28	Trend Micro OfficeScan 11.0/XG (12.0) – Image File Execution Bypass	local	windows	hyp3rlinx
2017-09-28	Microsoft Office Groove – ‘Workspace Shortcut’ Arbitrary Code Execution	dos	windows	Eduardo Braun Prado
2017-09-28	PHP Multi Vendor Script 1.02 – ‘sid’ SQL Injection	webapps	php	8bitsec
2017-09-28	Trend Micro OfficeScan 11.0/XG (12.0) – Private Key Disclosure	webapps	php	hyp3rlinx
2017-09-28	Easy Blog PHP Script 1.3a – ‘id’ SQL Injection	webapps	php	8bitsec
2017-09-28	DiskBoss Enterprise 8.4.16 – ‘Import Command’ Local Buffer Overflow	local	windows	Touhid M.Shaikh
2017-09-28	DiskBoss Enterprise 8.4.16 – Local Buffer Overflow (PoC)	dos	windows	Touhid M.Shaikh
2017-09-28	Roteador Wireless Intelbras WRN150 – Autentication Bypass	webapps	hardware	Elber Tavares
2017-09-28	Trend Micro OfficeScan 11.0/XG (12.0) – ‘Host’ Header Injection	webapps	php	hyp3rlinx
2017-09-28	Trend Micro OfficeScan 11.0/XG (12.0) – Server Side Request Forgery	webapps	php	hyp3rlinx
2017-09-28	Trend Micro OfficeScan 11.0/XG (12.0) – Information Disclosure	webapps	php	hyp3rlinx
2017-09-28	Trend Micro OfficeScan 11.0/XG (12.0) – Code Execution / Memory Corruption	webapps	windows	hyp3rlinx
2017-09-28	Trend Micro OfficeScan 11.0/XG (12.0) – Man In The Middle Remote Code Execution	remote	windows	hyp3rlinx
2017-09-27	Cisco Prime Collaboration Provisioning < 12.1 - Authentication Bypass / Remote Code Execution	remote	hardware	Adam Brown
2017-09-27	Netgear ReadyNAS Surveillance 1.4.3-16 – Remote Command Execution	webapps	hardware	Kacper Szurek
2017-09-27	SmarterStats 11.3.6347 – Cross-Site Scripting	webapps	aspx	sqlhacker
2017-09-27	LAquis SCADA 4.1.0.2385 – Directory Traversal (Metasploit)	remote	multiple	James Fitts
2017-09-27	Oracle WebLogic Server 10.3.6.0 – Java Deserialization Remote Code Execution	remote	java	SlidingWindow
2017-09-27	Sync Breeze Enterprise 10.0.28 – Denial of-Service (PoC)	dos	windows	Mr Bruce
2017-09-26	TicketPlus – Arbitrary File Upload	webapps	php	Ihsan Sencan
2017-09-26	Job Links – Arbitrary File Upload	webapps	php	Ihsan Sencan
2017-09-26	Linux Kernel 3.10.0-514.21.2.el7.x86_64 / 3.10.0-514.26.1.el7.x86_64 (CentOS 7) – SUID Position Independent Executable ‘PIE’ Local Privilege Escalation	local	linux	Qualys Corporation
2017-09-26	NodeJS Debugger – Command Injection (Metasploit)	remote	multiple	Metasploit
2017-09-26	Tiny HTTPd 0.1.0 – Directory Traversal	remote	linux	Touhid M.Shaikh
2017-09-26	WordPress Plugin WPAMS – SQL Injection	webapps	php	Ihsan Sencan
2017-09-26	WordPress Plugin School Management System – SQL Injection	webapps	php	Ihsan Sencan
2017-09-26	WordPress Plugin Hospital Management System – SQL Injection	webapps	php	Ihsan Sencan
2017-09-26	WordPress Plugin WPGYM – SQL Injection	webapps	php	Ihsan Sencan
2017-09-26	WordPress Plugin WPCHURCH – SQL Injection	webapps	php	Ihsan Sencan
2017-09-26	AMC Master – Arbitrary File Upload	webapps	php	Ihsan Sencan
2017-09-26	SMSmaster – SQL Injection	webapps	php	Ihsan Sencan
2017-09-26	Photo Fusion – Arbitrary File Upload	webapps	php	Ihsan Sencan
2017-09-25	Disk Pulse Enterprise 10.0.12 – GET Buffer Overflow (SEH)	remote	windows	sickness
2017-09-25	FLIR Thermal Camera F/FC/PT/D – Stream Disclosure	webapps	hardware	LiquidWorm
2017-09-25	FLIR Thermal Camera FC-S/PT – Command Injection	webapps	hardware	LiquidWorm
2017-09-25	FLIR Thermal Camera F/FC/PT/D – SSH Backdoor Access	remote	hardware	LiquidWorm
2017-09-25	FLIR Thermal Camera F/FC/PT/D – Information Disclosure	webapps	hardware	LiquidWorm
2017-09-25	FLIR Thermal Camera PT-Series (PT-334 200562) – Root Remote Code Execution	webapps	hardware	LiquidWorm
2017-09-25	Adobe Flash – Out-of-Bounds Read in applyToRange	dos	multiple	Google Security Research
2017-09-25	Adobe Flash – Out-of-Bounds Write in MP4 Edge Processing	dos	multiple	Google Security Research
2017-09-25	Apple iOS 10.2 – Broadcom Out-of-Bounds Write when Handling 802.11k Neighbor Report Response	remote	ios	Google Security Research
2017-09-25	Adobe Flash – Out-of-Bounds Memory Read in MP4 Parsing	dos	multiple	Google Security Research
2017-09-25	Oracle 9i XDB 9.2.0.1 – HTTP PASS Buffer Overflow	remote	windows	Charles Dardaman