Exploits

日期	标题	类型	平台	作者
2016-03-31	MOBOTIX Video Security Cameras – Cross-Site Request Forgery (Add Admin)	webapps	hardware	LiquidWorm
2016-03-30	Google Android 5.0.1 – Metaphor Stagefright (ASLR Bypass)	remote	android	NorthBit
2016-03-30	ATutor 2.2.1 – Directory Traversal / Remote Code Execution (Metasploit)	remote	php	Metasploit
2016-03-30	Kamailio 4.3.4 – Heap Buffer Overflow	dos	linux	Stelios Tsampas
2016-03-30	CubeCart 6.0.10 – Multiple Vulnerabilities	webapps	php	High-Tech Bridge SA
2016-03-30	Apple QuickTime < 7.7.79.80.95 - '.PSD' Parsing Memory Corruption	dos	multiple	Francis Provencher
2016-03-30	Apple QuickTime < 7.7.79.80.95 - '.FPX' Parsing Memory Corruption (2)	dos	multiple	Francis Provencher
2016-03-30	Apple QuickTime < 7.7.79.80.95 - '.FPX' Parsing Memory Corruption (1)	dos	multiple	Francis Provencher
2016-03-29	Adobe Flash – Object.unwatch Use-After-Free	remote	multiple	Google Security Research
2016-03-28	FireEye – Malware Input Processor Privilege Escalation	local	linux	Google Security Research
2016-03-28	TallSoft SNMP/TFTP Server 1.0.0 – Denial of Service	dos	windows	Charley Celice
2016-03-28	Liferay Portal 5.1.2 – Persistent Cross-Site Scripting	webapps	multiple	Sarim Kiani
2016-03-28	Cogent Datahub 7.3.9 Gamma Script – Local Privilege Escalation	local	windows	mr_me
2016-03-28	Android One – mt_wifi IOCTL_GET_STRUCT Privilege Escalation	dos	android	Google Security Research
2016-03-27	WordPress Plugin Photocart Link 1.6 – Local File Inclusion	webapps	php	CrashBandicot
2016-03-27	Trend Micro Deep Discovery Inspector 3.8/3.7 – Cross-Site Request Forgery	webapps	hardware	hyp3rlinx
2016-03-27	WordPress Plugin IMDb Profile Widget 1.0.8 – Local File Inclusion	webapps	php	CrashBandicot
2016-03-23	Comodo AntiVirus – Heap Overflow in LZX Decompression	dos	windows	Google Security Research
2016-03-23	Comodo – Integer Overflow Leading to Heap Overflow in Win32 Emulation	dos	windows	Google Security Research
2016-03-23	Wireshark – dissect_ber_integer Static Out-of-Bounds Write	dos	multiple	Google Security Research
2016-03-23	Comodo – Integer Overlow Leading to Heap Overflow Parsing Composite Documents	dos	windows	Google Security Research
2016-03-23	Comodo – LZMA Decoder Heap Overflow via Insufficient Parameter Checks	dos	windows	Google Security Research
2016-03-23	Comodo – PackMan Unpacker Insufficient Parameter Validation	dos	windows	Google Security Research
2016-03-23	Apple Mac OSX Kernel – Use-After-Free and Double Delete Due to Incorrect Locking in Intel GPU Driver	dos	osx	Google Security Research
2016-03-23	Avira – Heap Underflow Parsing PE Section Headers	dos	windows	Google Security Research
2016-03-23	Apple Mac OSX Kernel – Unchecked Array Index Used to Read Object Pointer Then Call Virtual Method in Nvidia Geforce Driver	dos	osx	Google Security Research
2016-03-23	Comodo AntiVirus – Forwards Emulated API Calls to the Real API During Scans	remote	windows	Google Security Research
2016-03-23	Apple Mac OSX Kernel – AppleKeyStore Use-After-Free	dos	osx	Google Security Research
2016-03-23	MiCollab 7.0 – SQL Injection	webapps	multiple	Goran Tuzovic
2016-03-23	Adobe Flash – Uninitialized Stack Parameter Access in MovieClip.swapDepths UaF Fix	dos	windows	Google Security Research
2016-03-23	Multiple CCTV-DVR Vendors – Remote Code Execution	remote	hardware	K1P0D
2016-03-23	Adobe Flash – Uninitialized Stack Parameter Access in Object.unwatch UaF Fix	dos	windows	Google Security Research
2016-03-23	Apple Mac OSX / iOS – SUID Binary Logic Error Kernel Code Execution	local	multiple	Google Security Research
2016-03-23	Adobe Flash – Uninitialized Stack Parameter Access in AsBroadcaster.broadcastMessage UaF Fix	dos	windows	Google Security Research
2016-03-23	Adobe Flash – Sprite Creation Use-After-Free	dos	windows	Google Security Research
2016-03-23	Adobe Flash – Zlib Codec Heap Overflow	dos	windows	Google Security Research
2016-03-23	Adobe Flash – Shape Rendering Crash	dos	windows	Google Security Research
2016-03-23	Apple Mac OSX Kernel – Code Execution Due to Lack of Bounds Checking in AppleUSBPipe::Abort	dos	osx	Google Security Research
2016-03-22	WordPress Plugin HB Audio Gallery Lite 1.0.0 – Arbitrary File Download	webapps	php	CrashBandicot
2016-03-22	CoolPlayer (Standalone) build 2.19 – ‘.m3u’ Local Stack Overflow	local	windows	Charley Celice
2016-03-22	WordPress Plugin Memphis Document Library 3.1.5 – Arbitrary File Download	webapps	php	Felipe Molina
2016-03-22	WordPress Plugin Dharma Booking 2.38.3 – Remote File Inclusion	webapps	php	AMAR^SHG
2016-03-22	WordPress Plugin Brandfolder 3.0 – Local/Remote File Inclusion	webapps	php	AMAR^SHG
2016-03-22	Joomla! Component Easy Youtube Gallery 1.0.2 – SQL Injection	webapps	php	Persian Hack Team
2016-03-21	ProjectSend r582 – Multiple Cross-Site Scripting Vulnerabilities	webapps	php	Michael Helwig
2016-03-21	iTop 2.2.1 – Cross-Site Request Forgery	webapps	php	High-Tech Bridge SA
2016-03-21	Dating Pro Genie 2015.7 – Cross-Site Request Forgery	webapps	php	High-Tech Bridge SA
2016-03-21	Sysax Multi Server 6.50 – HTTP File Share Overflow Remote Code Execution (SEH)	remote	windows	Paul Purcell
2016-03-21	WordPress Plugin Image Export 1.1.0 – Arbitrary File Disclosure	webapps	php	AMAR^SHG
2016-03-21	XOOPS 2.5.7.2 – Directory Traversal Bypass	webapps	php	hyp3rlinx