Exploits

日期	标题	类型	平台	作者
2016-04-14	PHPmongoDB 1.0.0 – Multiple Vulnerabilities	webapps	php	Ozer Goker
2016-04-14	Brickcom Corporation Network Cameras – Multiple Vulnerabilities	webapps	hardware	Orwelllabs
2016-04-14	pfSense Firewall 2.2.6 – Services Cross-Site Request Forgery	webapps	php	Aatif Shahdad
2016-04-14	Microsoft Excel – Out-of-Bounds Read Code Execution (MS16-042)	local	windows	Sébastien Morin
2016-04-13	Dell KACE K1000 – Arbitrary File Upload (Metasploit)	remote	unix	Metasploit
2016-04-13	Texas Instrument Emulator 3.03 – Local Buffer Overflow	local	linux	Juan Sacco
2016-04-13	Oracle Application Testing Suite (ATS) 12.4.0.2.0 – Authentication Bypass / Arbitrary File Upload	webapps	jsp	Zhou Yu
2016-04-12	Ovidentia troubleticketsModule 7.6 – Remote File Inclusion	webapps	php	bd0rk
2016-04-11	Google Android – IOMX ‘getConfig’/’getParameter’ Information Disclosure	dos	android	Google Security Research
2016-04-11	Axis Network Cameras – Multiple Vulnerabilities	webapps	hardware	Orwelllabs
2016-04-11	RockMongo PHP MongoDB Administrator 1.1.8 – Multiple Vulnerabilities	webapps	php	Ozer Goker
2016-04-11	CAM UnZip 5.1 – .’ZIP’ File Directory Traversal	local	windows	hyp3rlinx
2016-04-11	OpenCart 2.1.0.2 < 2.2.0.0 - json_decode Function Remote Code Execution	webapps	php	Naser Farhadi
2016-04-11	WPN-XM Serverstack 0.8.6 – Cross-Site Request Forgery	webapps	php	hyp3rlinx
2016-04-11	Hikvision Digital Video Recorder – Cross-Site Request Forgery	webapps	hardware	LiquidWorm
2016-04-11	Novell ServiceDesk 6.5/7.0.3/7.1.0 – Multiple Vulnerabilities	webapps	jsp	Pedro Ribeiro
2016-04-11	Google Android – IMemory Native Interface is Insecure for IPC Use	dos	android	Google Security Research
2016-04-08	op5 7.1.9 – Remote Command Execution	webapps	php	hyp3rlinx
2016-04-08	Apple Intel HD 3000 Graphics Driver 10.0.0 – Local Privilege Escalation	local	osx	Piotr Bania
2016-04-08	Express Zip 2.40 – Directory Traversal	local	windows	R-73eN
2016-04-07	ExaGrid – Known SSH Key and Default Password (Metasploit)	remote	linux	Metasploit
2016-04-07	Mess Emulator 0.154-3.1 – Local Buffer Overflow	local	linux	Juan Sacco
2016-04-07	PLANET Technology IP Surveillance Cameras – Multiple Vulnerabilities	webapps	hardware	Orwelllabs
2016-04-06	Asbru Web Content Management System 9.2.7 – Multiple Vulnerabilities	webapps	jsp	LiquidWorm
2016-04-06	Panda Endpoint Administration Agent < 7.50.00 - Local Privilege Escalation	local	windows	Kyriakos Economou
2016-04-06	Panda Security URL Filtering < 4.3.1.9 - Local Privilege Escalation	local	windows	Kyriakos Economou
2016-04-06	Linux Kernel (x86) – Disable ASLR by Setting the RLIMIT_STACK Resource to Unlimited	dos	linux_x86	Hector Marco & Ismael Ripoll
2016-04-06	SocialEngine 4.8.9 – SQL Injection	webapps	php	High-Tech Bridge SA
2016-04-05	Microsoft Windows Kernel – ‘win32k.sys’ Local Privilege Escalation (MS14-058)	local	windows	MWR InfoSecurity
2016-04-05	ManageEngine Password Manager Pro 8102 to 8302 – Multiple Vulnerabilities	webapps	jsp	S3ba
2016-04-05	Microsoft Internet Explorer – MSHTML!CSVGHelpers::SetAttributeStringAndPointer Use-After-Free (MS16-023)	dos	windows	Google Security Research
2016-04-05	PCMan FTP Server – ‘PUT’ Buffer Overflow (Metasploit)	remote	windows	Metasploit
2016-04-05	Easy File Sharing HTTP Server 7.2 – Remote Overflow (SEH) (Metasploit)	remote	windows	Metasploit
2016-04-04	PQI Air Pen Express 6W51-0000R2/6W51-0000R2XXX – Multiple Vulnerabilities	webapps	hardware	Orwelllabs
2016-04-04	Hexchat IRC Client 2.11.0 – CAP LS Handling Buffer Overflow	dos	multiple	PizzaHatHacker
2016-04-04	Hexchat IRC Client 2.11.0 – Directory Traversal	local	multiple	PizzaHatHacker
2016-04-04	Xion Audio Player 1.5 (build 160) – ‘.mp3’ Crash (PoC)	dos	windows	Charley Celice
2016-04-03	DameWare Remote Controller < 12.0.0.520 - Remote Code Execution	remote	windows	Securifera
2016-04-01	Microsoft Windows Kernel – Bitmap Use-After-Free	dos	windows	Nils Sommer
2016-04-01	WordPress Plugin Advanced Video 1.0 – Local File Inclusion	webapps	php	evait security GmbH
2016-04-01	PHP 5.5.33/7.0.4 – SNMP Format String	remote	multiple	Andrew Kramer
2016-04-01	PHP 5.5.33 – Invalid Memory Write	dos	php	vah_13
2016-04-01	Adobe Flash – Color.setTransform Use-After-Free	dos	multiple	Google Security Research
2016-04-01	Google Android – ‘ih264d_process_intra_mb’ Memory Corruption	dos	android	Google Security Research
2016-04-01	Adobe Flash – textfield.maxChars Use-After-Free	dos	multiple	Google Security Research
2016-04-01	Adobe Flash – URLStream.readObject Use-After-Free	dos	multiple	Google Security Research
2016-04-01	Microsoft Windows Kernel – ‘NtGdiGetTextExtentExW’ Out-of-Bounds Memory Read	dos	windows	Nils Sommer
2016-03-31	Wireshark – dissect_pktc_rekey Heap Out-of-Bounds Read	dos	multiple	Google Security Research
2016-03-31	Apache Jetspeed – Arbitrary File Upload (Metasploit)	remote	java	Metasploit
2016-03-31	Apache OpenMeetings 1.9.x < 3.1.0 - '.ZIP' File Directory Traversal	webapps	linux	Andreas Lindh