Exploits

日期	标题	类型	平台	作者
2016-08-31	PHP 5.0.0 – ‘snmpwalkoid()’ Local Denial of Service	dos	php	Yakir Wizman
2016-08-30	PHP 5.0.0 – ‘imap_mail()’ Local Denial of Service	dos	php	Yakir Wizman
2016-08-30	RSS News AutoPilot Script 1.0.1/3.0.3 – Cross-Site Request Forgery	webapps	php	Arbin Godar
2016-08-30	PHP 5.0.0 – ‘html_doc_file()’ Local Denial of Service	dos	php	Yakir Wizman
2016-08-30	PHP 5.0.0 – ‘hw_docbyanchor()’ Local Denial of Service	dos	php	Yakir Wizman
2016-08-29	FreePBX 13.0.35 – Remote Command Execution	webapps	php	0x4148
2016-08-29	FreePBX 13.0.35 – SQL Injection	webapps	php	i-Hmx
2016-08-29	Adobe Flash – MovieClip Transform Getter Use-After-Free	dos	multiple	Google Security Research
2016-08-29	Adobe Flash – BitmapData.copyPixels Use-After-Free	dos	multiple	Google Security Research
2016-08-29	Adobe Flash – Use-After-Free When Returning Rectangle	dos	multiple	Google Security Research
2016-08-29	Adobe Flash – Stage.align Setter Use-After-Free	dos	multiple	Google Security Research
2016-08-29	Adobe Flash – Selection.setFocus Use-After-Free	dos	multiple	Google Security Research
2016-08-29	PHP 5.0.0 – ‘xmldocfile()’ Local Denial of Service	dos	php	Yakir Wizman
2016-08-29	PHP 5.0.0 – ‘simplexml_load_file()’ Local Denial of Service	dos	php	Yakir Wizman
2016-08-29	PLC Wireless Router GPN2.4P21-C-CN – Arbitrary File Disclosure	webapps	cgi	Rahul Raz
2016-08-29	Intellinet IP Camera INT-L100M20N – Unauthorized Admin Credential Change	webapps	cgi	Todor Donev
2016-08-29	PHP 7.0 – Object Cloning Local Denial of Service	dos	php	Yakir Wizman
2016-08-29	PHP 5.0.0 – ‘domxml_open_file()’ Local Denial of Service	dos	php	Yakir Wizman
2016-08-29	HelpDeskZ 1.0.2 – Arbitrary File Upload	webapps	php	Lars Morgenroth
2016-08-29	Goron WebServer 2.0 – Multiple Vulnerabilities	dos	windows	Guillaume Kaddouch
2016-08-29	NScan 0.9.1 – ‘Target’ Local Buffer Overflow	local	windows	hyp3rlinx
2016-08-28	CubeCart < 3.0.12 - Multiple Vulnerabilities	webapps	php	GulfTech Security
2016-08-24	WordPress Plugin CYSTEME Finder 1.3 – Arbitrary File Disclosure/Arbitrary File Upload	webapps	php	T0w3ntum
2016-08-23	Phoenix Exploit Kit – Remote Code Execution (Metasploit)	remote	php	Metasploit
2016-08-23	chatNow – Multiple Vulnerabilities	webapps	php	HaHwul
2016-08-23	SimplePHPQuiz – Blind SQL Injection	webapps	php	HaHwul
2016-08-23	Eye of Gnome 3.10.2 – GMarkup Out of Bounds Write	dos	linux	Kaslov Dmitri
2016-08-23	WordPress Plugin Mail Masta 1.0 – Local File Inclusion	webapps	php	Guillermo Garcia Marcos
2016-08-22	ObiHai ObiPhone 1032/1062 < 5-0-0-3497 - Multiple Vulnerabilities	dos	hardware	David Tomaschik
2016-08-22	WordPress Core 4.5.3 – Directory Traversal / Denial of Service	webapps	php	Yorick Koster
2016-08-22	Sakai 10.7 – Multiple Vulnerabilities	webapps	java	LiquidWorm
2016-08-22	Ocomon 2.0 – SQL Injection	webapps	php	Jonatas Fil
2016-08-22	VideoIQ Camera – Local File Disclosure	webapps	hardware	Yakir Wizman
2016-08-22	Honeywell IP-Camera HICC-1100PT – Local File Disclosure	webapps	cgi	Yakir Wizman
2016-08-22	JVC IP-Camera VN-T216VPRU – Local File Disclosure	webapps	cgi	Yakir Wizman
2016-08-22	Vanderbilt IP-Camera CCPW3025-IR / CVMW3025-IR – Local File Disclosure	webapps	cgi	Yakir Wizman
2016-08-19	Vanderbilt IP-Camera CCPW3025-IR / CVMW3025-IR – Credentials Disclosure	webapps	cgi	Yakir Wizman
2016-08-19	tcPbX – ‘tcpbx_lang’ Local File Inclusion	webapps	php	0x4148
2016-08-19	SIEMENS IP Cameras (Multiple Models) – Credential Disclosure / Configuration Download	webapps	cgi	Todor Donev
2016-08-19	MESSOA IP Cameras (Multiple Models) – Password Change	webapps	cgi	Todor Donev
2016-08-19	Fortigate Firewalls – ‘EGREGIOUSBLUNDER’ Remote Code Execution	webapps	hardware	Shadow Brokers
2016-08-19	TOPSEC Firewalls – ‘ELIGIBLEBACHELOR’ Remote Command Execution	remote	hardware	Shadow Brokers
2016-08-19	TOPSEC Firewalls – ‘ELIGIBLEBOMBSHELL’ Remote Code Execution	webapps	cgi	Shadow Brokers
2016-08-19	TOPSEC Firewalls – ‘ELIGIBLECANDIDATE’ Remote Code Execution	webapps	cgi	Shadow Brokers
2016-08-19	TOPSEC Firewalls – ‘ELIGIBLECONTESTANT’ Remote Code Execution	webapps	cgi	Shadow Brokers
2016-08-19	Cisco ASA / PIX – ‘EPICBANANA’ Local Privilege Escalation	local	hardware	Shadow Brokers
2016-08-19	Watchguard Firewalls – ‘ESCALATEPLOWMAN’ ifconfig Privilege Escalation	local	linux	Shadow Brokers
2016-08-19	ZYCOO IP Phone System – Remote Command Execution	webapps	cgi	0x4148
2016-08-19	Microsoft Windows – Fileless UAC Protection Bypass Privilege Escalation (Metasploit)	local	windows	Pablo González
2016-08-19	MESSOA IP-Camera NIC990 – Authentication Bypass / Configuration Download	webapps	cgi	Todor Donev