Exploits

日期	标题	类型	平台	作者
2016-02-10	Yeager CMS 1.2.1 – Multiple Vulnerabilities	webapps	php	SEC Consult
2016-02-10	Apache Sling Framework (Adobe AEM) 2.3.6 – Information Disclosure	webapps	multiple	Vulnerability-Lab
2016-02-10	Deepin Linux 15 – ‘lastore-daemon’ Local Privilege Escalation	local	linux	King's Way
2016-02-10	Microsoft Windows 7 SP1 (x86) – ‘WebDAV’ Local Privilege Escalation (MS16-016) (1)	local	windows_x86	koczkatamas
2016-02-09	Adobe Photoshop CC / Bridge CC – ‘.iff’ Parsing Memory Corruption	dos	windows	Francis Provencher
2016-02-09	Adobe Photoshop CC / Bridge CC – ‘.png’ Parsing Memory Corruption (2)	dos	windows	Francis Provencher
2016-02-09	Adobe Photoshop CC / Bridge CC – ‘.png’ Parsing Memory Corruption (1)	dos	windows	Francis Provencher
2016-02-09	PotPlayer 1.6.5x – ‘.mp3’ Crash (PoC)	dos	windows	Shantanu Khandelwal
2016-02-08	Samsung Galaxy S6 – libQjpeg je_free Crash	dos	android	Google Security Research
2016-02-08	WordPress Plugin Booking Calendar Contact Form 1.0.23 – Multiple Vulnerabilities	webapps	php	i0akiN SEC-LABORATORY
2016-02-08	WordPress Plugin WP User Frontend < 2.3.11 - Unrestricted Arbitrary File Upload	webapps	php	Panagiotis Vagenas
2016-02-08	WordPress Plugin WooCommerce Store Toolkit 1.5.5 – Privilege Escalation	webapps	php	Panagiotis Vagenas
2016-02-08	WordPress Plugin User Meta Manager 3.4.6 – Information Disclosure	webapps	php	Panagiotis Vagenas
2016-02-08	dotDefender Firewall 5.00.12865/5.13-13282 – Cross-Site Request Forgery	webapps	multiple	hyp3rlinx
2016-02-08	Solr 3.5.0 – Arbitrary Data Deletion	webapps	java	N37
2016-02-08	Adobe Flash – Processing AVC Causes Stack Corruption	dos	multiple	Google Security Research
2016-02-08	Samsung Galaxy S6 – ‘android.media.process’ ‘MdConvertLine’ Face Recognition Memory Corruption	dos	android	Google Security Research
2016-02-04	GE Industrial Solutions UPS SNMP Adapter < 4.8 - Multiple Vulnerabilities	webapps	hardware	Karn Ganeshen
2016-02-04	FTPShell Client 5.24 – ‘Create NewFolder’ Local Buffer Overflow	local	windows	Arash Khazaei
2016-02-04	Symphony CMS 2.6.3 – Multiple SQL Injections	webapps	php	Sachin Wagh
2016-02-04	ATutor 2.2 – Multiple Cross-Site Scripting Vulnerabilities	webapps	php	Curesec Research Team
2016-02-04	OpenDocMan 1.3.4 – Cross-Site Request Forgery	webapps	php	Curesec Research Team
2016-02-04	UliCMS v9.8.1 – SQL Injection	webapps	php	Manuel García Cárdenas
2016-02-04	Netgear NMS300 ProSafe Network Management System – Multiple Vulnerabilities	webapps	hardware	Pedro Ribeiro
2016-02-04	WordPress Plugin User Meta Manager 3.4.6 – Privilege Escalation	webapps	php	Panagiotis Vagenas
2016-02-04	WordPress Plugin User Meta Manager 3.4.6 – Blind SQL Injection	webapps	php	Panagiotis Vagenas
2016-02-04	D-Link DVG­N5402SP – Multiple Vulnerabilities	webapps	hardware	Karn Ganeshen
2016-02-03	Viprinet Multichannel VPN Router 300 – Persistent Cross-Site Scripting	webapps	hardware	Portcullis
2016-02-03	yTree 1.94-1.1 – Local Buffer Overflow (PoC)	dos	linux	Juan Sacco
2016-02-03	Jive Forums 5.5.25 – Directory Traversal	webapps	jsp	ZhaoHuAn
2016-02-03	TimeClock Software 0.995 – (Authenticated ) Multiple SQL Injections	webapps	php	Benetrix
2016-02-03	Baumer VeriSens Application Suite 2.6.2 – Buffer Overflow (PoC)	dos	windows	LiquidWorm
2016-02-02	eClinicalWorks (CCMR) – Multiple Vulnerabilities	webapps	jsp	Jerold Hoong
2016-02-02	pdfium – opj_t2_read_packet_header ‘libopenjpeg’ Heap Use-After-Free	dos	multiple	Google Security Research
2016-02-02	Toshiba Viewer v2 p3console – Local Denial of Service	dos	windows	JaMbA
2016-02-02	Manage Engine Network Configuration Manager Build 11000 – Cross-Site Request Forgery	webapps	multiple	Kaustubh G. Padwad
2016-02-01	Hippo CMS 10.1 – Multiple Vulnerabilities	webapps	java	LiquidWorm
2016-02-01	iScripts EasyCreate 3.0 – Remote Code Execution	webapps	php	Bikramaditya Guha
2016-02-01	iScripts EasyCreate 3.0 – Multiple Vulnerabilities	webapps	php	Bikramaditya Guha
2016-02-01	Microsoft Internet Explorer 11 – javascript Code Execution	local	windows	checkpoint
2016-02-01	WPS Office < 2016 - '.xls' Heap Memory Corruption	dos	windows	Francis Provencher
2016-02-01	Apache 2.4.7 + PHP 7.0.2 – ‘openssl_seal()’ Uninitialized Memory Code Execution	remote	php	akat1
2016-02-01	WPS Office < 2016 - '.ppt' drawingContainer Memory Corruption	dos	windows	Francis Provencher
2016-02-01	WPS Office < 2016 - '.doc' OneTableDocumentStream Memory Corruption	dos	windows	Francis Provencher
2016-02-01	WPS Office < 2016 - '.ppt' Heap Memory Corruption	dos	windows	Francis Provencher
2016-02-01	ManageEngine EventLog Analyzer 4.0 < 10 - Privilege Escalation	webapps	multiple	GraphX
2016-02-01	Autonics DAQMaster 1.7.3 – DQP Parsing Buffer Overflow Code Execution (PoC)	dos	windows	LiquidWorm
2016-01-29	ProjectSend r582 – Multiple Vulnerabilities	webapps	php	Filippo Cavallarin
2016-01-29	WordPress Plugin Simple Add Pages or Posts 1.6 – Cross-Site Request Forgery	webapps	php	ALIREZA_PROMIS
2016-01-28	Apple Mac OSX – IOBluetoothHCIPacketLogUserClient Memory Corruption	dos	osx	Google Security Research