Exploits

日期	标题	类型	平台	作者
2017-02-21	Adobe Flash – MP4 AMF Parsing Overflow	dos	multiple	Google Security Research
2017-02-21	DIGISOL DG-HR1400 Wireless Router – Cross-Site Request Forgery	webapps	hardware	Indrajith.A.N
2017-02-21	Microsoft Office PowerPoint 2010 – GDI ‘GDI32!ConvertDxArray’ Insufficient Bounds Check	dos	windows	Google Security Research
2017-02-21	Microsoft Office PowerPoint 2010 – MSO/OART Heap Out-of-Bounds Access	dos	windows	Google Security Research
2017-02-21	ProjectSend r754 – Insecure Direct Object Reference	webapps	php	Vulnerability-Lab
2017-02-21	Microsoft Office PowerPoint 2010 – ‘MSO!Ordinal5429’ Missing Length Check Heap Corruption	dos	windows	Google Security Research
2017-02-21	Grails PDF Plugin 0.6 – XML External Entity Injection	webapps	java	Charles Fol
2017-02-21	Lock Photos Album&Videos Safe 4.3 – Directory Traversal	webapps	ios	Vulnerability-Lab
2017-02-20	Album Lock 4.0 iOS – Directory Traversal	webapps	ios	Vulnerability-Lab
2017-02-20	Joomla! Component PayPal IPN for DOCman 3.1 – ‘id’ SQL Injection	webapps	php	Ihsan Sencan
2017-02-20	Joomla! Component MaQma Helpdesk 4.2.7 – ‘id’ SQL Injection	webapps	php	Ihsan Sencan
2017-02-19	PHPShell 2.4 – Session Fixation	webapps	php	hyp3rlinx
2017-02-18	Sawmill Enterprise 8.7.9 – Authentication Bypass	webapps	windows	hyp3rlinx
2017-02-18	Netgear DGN2200v1/v2/v3/v4 – ‘ping.cgi’ Remote Command Execution	webapps	hardware	SivertPL
2017-02-18	Joomla! Component Most Wanted Real Estate 1.1.0 – SQL Injection	webapps	php	Ihsan Sencan
2017-02-18	Joomla! Component Google Map Store Locator 4.4 – SQL Injection	webapps	php	Ihsan Sencan
2017-02-18	Joomla! Component Bazaar Platform 3.0 – SQL Injection	webapps	php	Ihsan Sencan
2017-02-18	Joomla! Component Room Management 1.0 – SQL Injection	webapps	php	Ihsan Sencan
2017-02-18	Joomla! Component OS Services Booking 2.5.1 – SQL Injection	webapps	php	Ihsan Sencan
2017-02-18	WordPress Plugin Mail Masta 1.0 – SQL Injection	webapps	php	Hanley Shun
2017-02-18	Joomla! Component EShop 2.5.1 – ‘id’ SQL Injection	webapps	php	Ihsan Sencan
2017-02-18	Joomla! Component OS Property 3.0.8 – SQL Injection	webapps	php	Ihsan Sencan
2017-02-18	Joomla! Component JomWALL 4.0 – ‘wuid’ SQL Injection	webapps	php	Ihsan Sencan
2017-02-18	Joomla! Component Joomloc-Lite 1.3.2 – ‘site_id’ SQL Injection	webapps	php	Ihsan Sencan
2017-02-18	Joomla! Component Joomloc-CAT 4.1.3 – ‘ville’ SQL Injection	webapps	php	Ihsan Sencan
2017-02-17	Artifex MuPDF mujstest 1.10a – Null Pointer Dereference	dos	linux	Agostino Sarubbo
2017-02-17	Joomla! Component WMT Content Timeline 1.0 – ‘id’ SQL Injection	webapps	php	Ihsan Sencan
2017-02-17	Joomla! Component Groovy Gallery 1.0.0 – SQL Injection	webapps	php	Ihsan Sencan
2017-02-17	Joomla! Component Team Display 1.2.1 – ‘filter_category’ SQL Injection	webapps	php	Ihsan Sencan
2017-02-16	Joomla! Component JEmbedAll 1.4 – SQL Injection	webapps	php	Ihsan Sencan
2017-02-16	dotCMS 3.6.1 – Blind Boolean SQL Injection	webapps	php	Ben Nott
2017-02-16	WordPress Plugin Corner Ad 1.0.7 – Cross-Site Scripting	webapps	php	Atik Rahman
2017-02-16	Joomla! Component Spider FAQ Lite 1.3.1 – SQL Injection	webapps	php	Ihsan Sencan
2017-02-16	Joomla! Component Spider Facebook 1.6.1 – SQL Injection	webapps	php	Ihsan Sencan
2017-02-16	Joomla! Component Spider Catalog Lite 1.8.10 – SQL Injection	webapps	php	Ihsan Sencan
2017-02-16	Joomla! Component Spider Calendar Lite 3.2.16 – SQL Injection	webapps	php	Ihsan Sencan
2017-02-15	Geutebruck 5.02024 G-Cam/EFD-2250 – ‘testaction.cgi’ Remote Command Execution (Metasploit)	webapps	hardware	RandoriSec
2017-02-15	Coppermine Gallery < 1.5.44 - Directory Traversal	webapps	php	Hacker Fantastic
2017-02-15	Cisco ASA – WebVPN CIFS Handling Buffer Overflow	dos	hardware	Google Security Research
2017-02-15	Joomla! Component JSP Store Locator 2.2 – ‘id’ SQL Injection	webapps	php	Ihsan Sencan
2017-02-15	GOM Player 2.3.10.5266 – ‘.fpx’ Denial of Service	dos	windows	Peter Baris
2017-02-15	OpenText Documentum D2 – Remote Code Execution	remote	java	Andrey B. Panfilov
2017-02-15	NVIDIA Driver 375.70 – Buffer Overflow in Command Buffer Submission	dos	windows	Google Security Research
2017-02-15	NVIDIA Driver 375.70 – DxgkDdiEscape 0x100008b Out-of-Bounds Read/Write	dos	windows	Google Security Research
2017-02-15	Microsoft Windows – ‘gdi32.dll’ EMR_SETDIBITSTODEVICE Heap Out-of-Bounds Reads / Memory Disclosure	dos	windows	Google Security Research
2017-02-15	Joomla! Component JoomBlog 1.3.1 – SQL Injection	webapps	php	Ihsan Sencan
2017-02-14	Piwik 2.14.0/2.16.0/2.17.1/3.0.1 – Superuser Plugin Upload (Metasploit)	remote	php	Metasploit
2017-02-14	Microsoft Edge – TypedArray.sort Use-After-Free (MS16-145)	dos	windows	Google Security Research
2017-02-14	ntfs-3g – Unsanitized modprobe Environment Privilege Escalation	local	linux	Google Security Research
2017-02-14	Google Android – android.util.MemoryIntArray Ashmem Race Conditions	dos	android	Google Security Research