Exploits

日期	标题	类型	平台	作者
2017-02-14	LG G4 – Touchscreen Driver write_log Kernel Read/Write	dos	android	Google Security Research
2017-02-14	LG G4 – lghashstorageserver Directory Traversal	dos	android	Google Security Research
2017-02-14	LG G4 – lgdrmserver Binder Service Multiple Race Conditions	dos	android	Google Security Research
2017-02-14	ShadeYouVPN Client 2.0.1.11 – Local Privilege Escalation	local	windows	Kacper Szurek
2017-02-14	F5 BIG-IP 11.6 SSL Virtual Server – ‘Ticketbleed’ Memory Disclosure	remote	hardware	@0x00string
2017-02-14	Piwik 2.14.0/2.16.0/2.17.1/3.0.1 – Superuser Plugin Upload (Metasploit)	remote	php	Metasploit
2017-02-13	Joomla! Component Hbooking 1.9.9 – ‘h_id’ SQL Injection	webapps	php	Ihsan Sencan
2017-02-13	Joomla! Component JE Awd Song 1.8 – SQL Injection	webapps	php	Ihsan Sencan
2017-02-13	Joomla! Component JE Auto 1.5 – ‘d_itemid’ SQL Injection	webapps	php	Ihsan Sencan
2017-02-13	Joomla! Component JE auction 1.6 – ‘eid’ SQL Injection	webapps	php	Ihsan Sencan
2017-02-13	Joomla! Component JE Video Rate 1.0 – SQL Injection	webapps	php	Ihsan Sencan
2017-02-13	Joomla! Component JE Tour 2.0 – SQL Injection	webapps	php	Ihsan Sencan
2017-02-13	Joomla! Component JE Property Finder 1.6.3 – SQL Injection	webapps	php	Ihsan Sencan
2017-02-13	Joomla! Component JE Messanger – SQL Injection	webapps	php	Ihsan Sencan
2017-02-13	Joomla! Component JE Ticket System 1.2 – SQL Injection	webapps	php	Ihsan Sencan
2017-02-13	Joomla! Component JE Portfolio Creator 1.2 – ‘d_itemid’ SQL Injection	webapps	php	Ihsan Sencan
2017-02-13	Joomla! Component JE QuoteForm – ‘Itemid’ SQL Injection	webapps	php	Ihsan Sencan
2017-02-13	Joomla! Component JE Form Creator 1.8 – ‘Itemid’ SQL Injection	webapps	php	Ihsan Sencan
2017-02-13	Joomla! Component JE Directory 1.7 – ‘ditemid’ SQL Injection	webapps	php	Ihsan Sencan
2017-02-13	Joomla! Component JE K2 Multiple Form Story 1.3 – ‘Itemid’ SQL Injection	webapps	php	Ihsan Sencan
2017-02-13	Joomla! Component JE Gallery 1.3 – ‘photo_id’ SQL Injection	webapps	php	Ihsan Sencan
2017-02-13	Joomla! Component JE Grid Folio – ‘id’ SQL Injection	webapps	php	Ihsan Sencan
2017-02-13	Joomla! Component JE Classify Ads 1.2 – ‘pro_id’ SQL Injection	webapps	php	Ihsan Sencan
2017-02-13	Joomla! Component JE Quiz 2.3 – SQL Injection	webapps	php	Ihsan Sencan
2017-02-13	PHP Marketplace Script – SQL Injection	webapps	php	Th3GundY
2017-02-12	Joomla! Component Soccer Bet 4.1.5 – ‘userid’ SQL Injection	webapps	php	Ihsan Sencan
2017-02-12	Linux Kernel 3.10.0 (CentOS 7) – Denial of Service	dos	linux	FarazPajohan
2017-02-12	Quadz School Management System 3.1 – ‘uisd’ SQL Injection	webapps	php	Ihsan Sencan
2017-02-12	Cimetrics BACnet Explorer 4.0 – XML External Entity Injection	local	windows	LiquidWorm
2017-02-12	Viavi Product Review – ‘id’ SQL Injection	webapps	php	Ihsan Sencan
2017-02-12	Cimetrics BACstac 6.2f – Local Privilege Escalation	local	windows	LiquidWorm
2017-02-12	Viavi Movie Review – ‘id’ SQL Injection	webapps	php	Ihsan Sencan
2017-02-12	Domains & Hostings Manager PRO 3.0 – ‘entries’ SQL Injection	webapps	php	Ihsan Sencan
2017-02-12	Viavi Real Estate – SQL Injection	webapps	php	Ihsan Sencan
2017-02-12	TI Online Examination System 2.0 – SQL Injection	webapps	php	Ihsan Sencan
2017-02-12	WhizBiz 1.9 – SQL Injection	webapps	php	Ihsan Sencan
2017-02-12	Kodi 17.1 – Arbitrary File Disclosure	webapps	linux	Eric Flokstra
2017-02-12	Itech B2B Script 4.29 – Multiple Vulnerabilities	webapps	php	Marc Castejon
2017-02-11	SonicDICOM PACS 2.3.2 – Cross-Site Scripting	webapps	windows	LiquidWorm
2017-02-11	Joomla! Component Soccer Bet 4.1.5 – ‘cat’ SQL Injection	webapps	php	Persian Hack Team
2017-02-11	Joomla! Component Vik Booking 1.7 – SQL Injection	webapps	php	Persian Hack Team
2017-02-11	Joomla! Component Sponsor Wall 7.0 – ‘wallid’ SQL Injection	webapps	php	Persian Hack Team
2017-02-11	Joomla! Component onisMusic 2 – ‘tag’ SQL Injection	webapps	php	Persian Hack Team
2017-02-11	Joomla! Component onisQuotes 2.5 – ‘tag’ SQL Injection	webapps	php	Persian Hack Team
2017-02-11	Joomla! Component onisPetitions 2.5 – ‘tag’ SQL Injection	webapps	php	Persian Hack Team
2017-02-11	SonicDICOM PACS 2.3.2 – Privilege Escalation	webapps	windows	LiquidWorm
2017-02-11	SonicDICOM PACS 2.3.2 – Cross-Site Request Forgery (Add Admin)	webapps	windows	LiquidWorm
2017-02-10	Youtube Analytics Multi Channel 3.0 – SQL Injection	webapps	php	Ihsan Sencan
2017-02-10	Gram Post 1.0 – SQL Injection	webapps	php	Ihsan Sencan
2017-02-10	HotelCMS with Booking Engine – SQL Injection	webapps	php	Ihsan Sencan