Exploits

日期	标题	类型	平台	作者
2016-05-02	QSEE – PRDiag* Commands Privilege Escalation	local	android	laginimaineb
2016-05-02	Apache Struts – Dynamic Method Invocation Remote Code Execution (Metasploit)	remote	linux	Metasploit
2016-05-02	Acunetix WVS 10 – Remote Command Execution	remote	windows	Daniele Linguaglossa
2016-04-29	GLPi 0.90.2 – SQL Injection	webapps	php	High-Tech Bridge SA
2016-04-29	Wireshark – ett_zbee_zcl_pwr_prof_enphases Static Out-of-Bounds Read	dos	multiple	Google Security Research
2016-04-29	Wireshark – alloc_address_wmem Assertion Failure	dos	multiple	Google Security Research
2016-04-29	Wireshark – dissect_2008_16_security_4 Stack Buffer Overflow	dos	multiple	Google Security Research
2016-04-29	Rough Auditing Tool for Security (RATS) 2.3 – Array Out of Block Crash	dos	linux	David Silveiro
2016-04-29	Merit Lilin IP Cameras – Multiple Vulnerabilities	webapps	cgi	Orwelllabs
2016-04-29	Observium 0.16.7533 – (Authenticated) Arbitrary Command Execution	webapps	php	Dolev Farhi
2016-04-29	Observium 0.16.7533 – Cross-Site Request Forgery	webapps	php	Dolev Farhi
2016-04-28	Microsoft Windows Kernel – ‘win32k.sys’ TTF Processing EBLC / EBSC Tables Pool Corruption (MS16-039)	dos	windows	Google Security Research
2016-04-28	PHP 7.0.5 – ZipArchive::getFrom* Integer Overflow	remote	php	Hans Jerry Illikainen
2016-04-27	Sony Playstation 4 (PS4) 1.76 – ‘dlclose’ Linux Kernel Loader	local	hardware	Carlos Pizarro
2016-04-27	Mach Race OSX – Local Privilege Escalation	local	osx	fG!
2016-04-27	Microsoft Windows – CSRSS BaseSrvCheckVDM Session 0 Process Creation Privilege Escalation (MS16-048)	dos	windows	Google Security Research
2016-04-27	RomPager 4.34 (Multiple Router Vendors) – ‘Misfortune Cookie’ Authentication Bypass	webapps	hardware	Milad Doorbash
2016-04-27	EMC ViPR SRM – Cross-Site Request Forgery	webapps	multiple	Han Sahin
2016-04-26	libgd 2.1.1 – Signedness Heap Overflow	remote	linux	Hans Jerry Illikainen
2016-04-26	Advantech Webaccess Dashboard Viewer – Arbitrary File Upload (Metasploit)	remote	windows	Metasploit
2016-04-26	Yasr Screen Reader 0.6.9 – Local Buffer Overflow	local	linux	Juan Sacco
2016-04-26	ImpressCMS 1.3.9 – SQL Injection	webapps	php	Manuel García Cárdenas
2016-04-25	Rough Auditing Tool for Security (RATS) 2.3 – Crash (PoC)	dos	linux	David Silveiro
2016-04-25	NationBuilder – Multiple Persistent Cross-Site Scripting Vulnerabilities	webapps	ruby	LiquidWorm
2016-04-25	PCMan FTP Server 2.0.7 – ‘RENAME’ Remote Buffer Overflow (Metasploit)	remote	windows_x86	Jonathan Smith
2016-04-25	CompuSource Systems Real Time Home Banking – Local Privilege Escalation	local	windows	Information Paradox
2016-04-25	Gemtek CPE7000 – WLTCS-106 ‘sysconf.cgi’ Remote Command Execution (Metasploit)	webapps	hardware	Federico Scalco
2016-04-25	Gemtek CPE7000 – WLTCS-106 Administrator SID Retriever (Metasploit)	webapps	hardware	Federico Scalco
2016-04-25	C/C++ Offline Compiler and C For OS – Persistent Cross-Site Scripting	webapps	ios	Vulnerability-Lab
2016-04-25	Totemomail 4.x/5.x – Persistent Cross-Site Scripting	webapps	jsp	Vulnerability-Lab
2016-04-25	Microsoft Windows 7 < 10 / 2008 < 2012 (x86/x64) - Local Privilege Escalation (MS16-032)	local	windows	fdiskyou
2016-04-21	Sony Playstation 4 (PS4) < 2.50 - WebKit Code Execution (PoC)	local	hardware	TJ Corley
2016-04-21	Microsoft Windows 7 < 10 / 2008 < 2012 R2 (x86/x64) - Local Privilege Escalation (MS16-032) (PowerShell)	local	windows	b33f
2016-04-21	Gemtek CPE7000 / WLTCS-106 – Multiple Vulnerabilities	webapps	hardware	Federico Ramondino
2016-04-21	Symantec Brightmail 10.6.0-7 – LDAP Credentials Disclosure (Metasploit)	webapps	java	Fakhir Karim Reda
2016-04-21	phpLiteAdmin 1.9.6 – Multiple Vulnerabilities	webapps	php	Ozer Goker
2016-04-20	Microsoft Windows Kernel – DrawMenuBarTemp Wild-Write (MS16-039)	dos	windows_x86-64	Nils Sommer
2016-04-20	PHPBack 1.3.0 – SQL Injection	webapps	php	hyp3rlinx
2016-04-20	Hyper-V – ‘vmswitch.sys’ VmsMpCommonPvtHandleMulticastOids Guest to Host Kernel-Pool Overflow	dos	windows	Google Security Research
2016-04-19	modified eCommerce Shopsoftware 2.0.0.0 rev 9678 – Blind SQL Injection	webapps	php	Felix Maduakor
2016-04-18	pfSense Community Edition 2.2.6 – Multiple Vulnerabilities	webapps	php	Security-Assessment.com
2016-04-18	Novell ServiceDesk – (Authenticated) Arbitrary File Upload (Metasploit)	remote	multiple	Metasploit
2016-04-18	Webutler CMS 3.2 – Cross-Site Request Forgery	webapps	php	Keerati T.
2016-04-18	TH692 Outdoor P2P HD Waterproof IP Camera – Hard-Coded Credentials	dos	hardware	DLY
2016-04-18	WordPress Plugin Kento Post View Counter 2.8 – Cross-Site Request Forgery / Cross-Site Scripting	webapps	php	cor3sm4sh3r
2016-04-18	WordPress Plugin leenk.me 2.5.0 – Cross-Site Request Forgery / Cross-Site Scripting	webapps	php	cor3sm4sh3r
2016-04-15	Exim – ‘perl_startup’ Local Privilege Escalation (Metasploit)	local	linux	Metasploit
2016-04-15	AirOS 6.x – Arbitrary File Upload	webapps	cgi	93c08539
2016-04-15	Microsoft Internet Explorer 11 – MSHTML!CMarkupPointer::UnEmbed Use-After-Free	dos	windows	Marcin Ressel
2016-04-14	Microsoft Excel – Out-of-Bounds Read Code Execution (MS16-042)	local	windows	Sébastien Morin