Exploits

日期	标题	类型	平台	作者
2016-06-10	Apple Mac OSX Kernel – NULL Dereference in CoreCaptureResponder Due to Unchecked Return Value	dos	osx	Google Security Research
2016-06-10	Poison Ivy 2.1.x (C2 Server) – Remote Buffer Overflow (Metasploit)	remote	windows	Jos Wetzels
2016-06-10	Apple Mac OSX Kernel – NULL Dereference in IOAccelSharedUserClient2::page_off_resource	dos	osx	Google Security Research
2016-06-10	Apple Mac OSX Kernel – Null Pointer Dereference in AppleGraphicsDeviceControl	dos	osx	Google Security Research
2016-06-10	Apple Mac OSX Kernel – Null Pointer Dereference in AppleMuxControl.kext	dos	osx	Google Security Research
2016-06-10	Google Android – ‘/system/bin/sdcard’ Stack Buffer Overflow (PoC)	dos	android	Google Security Research
2016-06-10	Apple Mac OSX Kernel – Null Pointer Dereference in nvCommandQueue::GetHandleIndex in GeForce.kext	dos	osx	Google Security Research
2016-06-10	Apache Struts – REST Plugin With Dynamic Method Invocation Remote Code Execution (Metasploit)	remote	multiple	Metasploit
2016-06-10	IPFire – ‘Shellshock’ Bash Environment Variable Command Injection (Metasploit)	remote	cgi	Metasploit
2016-06-10	IPFire – ‘proxy.cgi’ Remote Code Execution (Metasploit)	remote	cgi	Metasploit
2016-06-10	Riot Games League of Legends – Insecure File Permissions Privilege Escalation	local	windows	Cyril Vallicari
2016-06-10	Armadito Antimalware – Backdoor Access/Bypass	dos	windows	Ax.
2016-06-10	Apple Mac OSX Kernel – GeForce GPU Driver Stack Buffer Overflow	dos	osx	Google Security Research
2016-06-10	phpMyFAQ 2.9.0 – Persistent Cross-Site Scripting	webapps	php	Kacper Szurek
2016-06-09	Microsoft Word (Windows/OSX) – Crash (PoC)	dos	multiple	halsten
2016-06-08	Drale DBTableViewer 100123 – Blind SQL Injection	webapps	php	HaHwul
2016-06-07	Cisco EPC 3928 – Multiple Vulnerabilities	webapps	asp	Patryk Bogdan
2016-06-07	League of Legends Screensaver – Insecure File Permissions Privilege Escalation	local	windows	Vincent Yiu
2016-06-07	League of Legends Screensaver – Unquoted Service Path Privilege Escalation	local	windows	Vincent Yiu
2016-06-06	WordPress Plugin WP PRO Advertising System 4.6.18 – SQL Injection	webapps	php	wp0Day.com
2016-06-06	WordPress Theme Creative Multi-Purpose 9.1.3 – Persistent Cross-Site Scripting	webapps	php	wp0Day.com
2016-06-06	WordPress Plugin WP Mobile Detector 3.5 – Arbitrary File Upload	webapps	php	Aaditya Purani
2016-06-06	Electroweb Online Examination System 1.0 – SQL Injection	webapps	php	Ali Ghanbari
2016-06-06	ArticleSetup 1.00 – Cross-Site Request Forgery (Change Admin Password)	webapps	php	Ali Ghanbari
2016-06-06	Valve Steam 3.42.16.13 – Local Privilege Escalation	local	windows	Gregory Smiley
2016-06-06	Sun Secure Global Desktop and Oracle Global Desktop 4.61.915 – Command Injection (Shellshock)	webapps	cgi	lastc0de
2016-06-06	Apache Continuum 1.4.2 – Multiple Vulnerabilities	webapps	java	David Shanahan
2016-06-06	Dream Gallery 1.0 – Cross-Site Request Forgery (Add Admin)	webapps	php	Ali Ghanbari
2016-06-06	WordPress Plugin Simple Backup 2.7.11 – Multiple Vulnerabilities	webapps	php	PizzaHatHacker
2016-06-06	Nagios XI 5.2.7 – Multiple Vulnerabilities	webapps	php	Security-Assessment.com
2016-06-06	rConfig 3.1.1 – Local File Inclusion	webapps	php	Gregory Pickett
2016-06-06	Notilus Travel Solution Software 2012 R3 – SQL Injection	webapps	asp	Alex Haynes
2016-06-06	WordPress Plugin Double Opt-In for Download 2.0.9 – SQL Injection	webapps	php	Kacper Szurek
2016-06-06	WordPress Theme Uncode 1.3.1 – Arbitrary File Upload	webapps	php	wp0Day.com
2016-06-06	WordPress Theme Newspaper 6.7.1 – Privilege Escalation	webapps	php	wp0Day.com
2016-06-02	Relay Ajax Directory Manager relayb01-071706/1.5.1/1.5.3 – Arbitrary File Upload	webapps	php	RedTeam Pentesting GmbH
2016-06-02	Websockify (C Implementation) 0.8.0 – Buffer Overflow (PoC)	dos	multiple	RedTeam Pentesting GmbH
2016-06-02	Liferay CE < 6.2 CE GA6 - Persistent Cross-Site Scripting	webapps	jsp	Fernando Câmara
2016-06-02	Joomla! Component SecurityCheck 2.8.9 – Multiple Vulnerabilities	webapps	php	ADEO Security
2016-06-01	Wireshark – erf_meta_read_tag SIGSEGV	dos	multiple	Google Security Research
2016-06-01	AjaxExplorer 1.10.3.2 – Multiple Vulnerabilities	webapps	php	hyp3rlinx
2016-05-31	HP Data Protector A.09.00 – Encrypted Communications Arbitrary Command Execution (Metasploit)	remote	windows	Ian Lovering
2016-05-31	CCextractor 0.80 – Crash (PoC)	dos	linux	David Silveiro
2016-05-31	ProcessMaker 3.0.1.7 – Multiple Vulnerabilities	webapps	php	Mickael Dorigny
2016-05-31	AirOS NanoStation M2 5.6-beta – Multiple Vulnerabilities	webapps	cgi	Pablo Rebolini
2016-05-31	Flatpress 1.0.3 – Cross-Site Request Forgery / Arbitrary File Upload	webapps	php	LiquidWorm
2016-05-31	TCPDump 4.5.1 – Crash (PoC)	dos	linux	David Silveiro
2016-05-30	Open Source Real Estate Script 3.6.0 – SQL Injection	webapps	php	Meisam Monsef
2016-05-30	MySQL 5.5.45 – procedure analyse Function Denial of Service	dos	multiple	Osanda Malith Jayathissa
2016-05-29	FreeBSD Kernel (FreeBSD 10.2 x64) – ‘sendmsg’ Kernel Heap Overflow (PoC)	dos	freebsd_x86-64	CTurt