Exploits

日期	标题	类型	平台	作者
2016-01-28	Ramui Web Hosting Directory Script 4.0 – Remote File Inclusion	webapps	php	bd0rk
2016-01-28	Apple Mac OSX Kernel – Hypervisor Driver Use-After-Free	dos	osx	Google Security Research
2016-01-28	Ramui Forum Script 9.0 – SQL Injection	webapps	php	bd0rk
2016-01-28	Apple Mac OSX – ‘IntelAccelerator::gstqConfigure’ Kernel NULL Dereference	dos	osx	Google Security Research
2016-01-28	VideoLAN VLC Media Player 2.2.1 – ‘.mp4’ Heap Memory Corruption	dos	windows	Francis Provencher
2016-01-28	Apple Mac OSX – ‘gst_configure’ Kernel Buffer Overflow	dos	osx	Google Security Research
2016-01-28	Apple Mac OSX – io_service_close Use-After-Free	dos	osx	Google Security Research
2016-01-28	SAP HANA 1.00.095 – hdbindexserver Memory Corruption	webapps	multiple	ERPScan
2016-01-28	Apple Mac OSX / iOS Kernel – iokit Registry Iterator Manipulation Double-Free	dos	multiple	Google Security Research
2016-01-28	Apple Mac OSX – ‘IOHDIXControllerUserClient::convertClient’ Buffer Integer Overflow	dos	osx	Google Security Research
2016-01-28	Apple Mac OSX / iOS Kernel – IOHDIXControllUserClient::clientClose Use-After-Free/Double-Free	dos	multiple	Google Security Research
2016-01-28	Apple Mac OSX – OSMetaClassBase::safeMetaCast in IOAccelContext2::connectClient NULL Dereference	dos	osx	Google Security Research
2016-01-28	iOS Kernel – IOReportHub Use-After-Free	dos	ios	Google Security Research
2016-01-28	Apple Mac OSX / iOS – Double-Delete IOHIDEventQueue::start Code Execution	dos	multiple	Google Security Research
2016-01-28	iOS Kernel – IOHIDEventService Use-After-Free	dos	ios	Google Security Research
2016-01-28	Apple Mac OSX / iOS – NECP System Control Socket Packet Parsing Kernel Code Execution Integer Overflow	dos	multiple	Google Security Research
2016-01-28	iOS Kernel – AppleOscarCMA Use-After-Free	dos	ios	Google Security Research
2016-01-28	Apple Mac OSX / iOS – Unsandboxable Kernel Use-After-Free in Mach Vouchers	dos	multiple	Google Security Research
2016-01-28	iOS Kernel – AppleOscarCompass Use-After-Free	dos	ios	Google Security Research
2016-01-28	Apple Mac OSX – IOSCSIPeripheralDeviceType00 Userclient Type 12 Kernel NULL Dereference	dos	osx	Google Security Research
2016-01-28	iOS Kernel – AppleOscarAccelerometer Use-After-Free	dos	ios	Google Security Research
2016-01-28	Apple Mac OSX Kernel – IOAccelDisplayPipeUserClient2 Use-After-Free	dos	osx	Google Security Research
2016-01-28	iOS Kernel – AppleOscarGyro Use-After-Free	dos	ios	Google Security Research
2016-01-28	Apple Mac OSX Kernel – IOAccelMemoryInfoUserClient Use-After-Free	dos	osx	Google Security Research
2016-01-28	Apple Mac OSX / iOS – Multiple Kernel Uninitialized Variable Bugs Leading to Code Execution Vulnerabilities	dos	multiple	Google Security Research
2016-01-28	Apple Mac OSX Kernel – no-more-senders Use-After-Free	dos	osx	Google Security Research
2016-01-28	Apple Mac OSX / iOS – Unsandboxable Kernel Code Exection Due to iokit Double Release in IOKit	dos	osx	Google Security Research
2016-01-28	Apple Mac OSX – ‘IOBluetoothHCIUserClient’ Arbitrary Kernel Code Execution	dos	osx	Google Security Research
2016-01-28	Netgear WNR1000v4 – Authentication Bypass	webapps	hardware	Daniel Haake
2016-01-27	BK Mobile jQuery CMS 2.4 – Multiple Vulnerabilities	webapps	php	Rahul Pratap Singh
2016-01-27	Secure Item Hub 1.0 iOS – Multiple Vulnerabilities	webapps	ios	Vulnerability-Lab
2016-01-27	WordPress Plugin Booking Calendar Contact Form 1.1.24 – addslashes SQL Injection	webapps	php	i0akiN SEC-LABORATORY
2016-01-27	WordPress Plugin Booking Calendar Contact Form 1.1.24 – Multiple Vulnerabilities	webapps	php	i0akiN SEC-LABORATORY
2016-01-27	Google Android – ‘sensord’ Local Privilege Escalation	local	android	s0m3b0dy
2016-01-26	Gongwalker API Manager 1.1 – Blind SQL Injection	webapps	php	HaHwul
2016-01-26	WordPress Plugin Booking Calendar Contact Form 1.1.23 – Shortcode SQL Injection	webapps	php	i0akiN SEC-LABORATORY
2016-01-26	Foxit Reader 7.2.8.1124 – ‘.PDF’ Parsing Memory Corruption	dos	windows	Francis Provencher
2016-01-26	Google Android ADB Debug Server – Remote Payload Execution (Metasploit)	remote	android	Metasploit
2016-01-26	Wireshark – dissect_ber_constrained_bitstring Heap Out-of-Bounds Read	dos	multiple	Google Security Research
2016-01-26	Wireshark – ‘nettrace_3gpp_32_423_file_open’ Stack Out-of-Bounds Read	dos	multiple	Google Security Research
2016-01-26	Wireshark – hiqnet_display_data Static Out-of-Bounds Read	dos	multiple	Google Security Research
2016-01-26	Wireshark – dissect_nhdr_extopt Stack Buffer Overflow	dos	multiple	Google Security Research
2016-01-26	Wireshark – ‘iseries_check_file_type’ Stack Out-of-Bounds Read	dos	multiple	Google Security Research
2016-01-26	pdfium – opj_j2k_read_mcc ‘libopenjpeg’ Heap Out-of-Bounds Read	dos	multiple	Google Security Research
2016-01-26	pdfium – opj_jp2_apply_pclr ‘libopenjpeg’ Heap Out-of-Bounds Read	dos	multiple	Google Security Research
2016-01-25	Microsoft Windows – Sandboxed Mount Reparse Point Creation Mitigation Bypass Redux (MS16-008) (1)	local	windows	Google Security Research
2016-01-25	Microsoft Windows – Sandboxed Mount Reparse Point Creation Mitigation Bypass Redux (MS16-008) (2)	local	windows	Google Security Research
2016-01-25	WordPress Plugin Booking Calendar Contact Form 1.1.23 – SQL Injection	webapps	php	i0akiN SEC-LABORATORY
2016-01-25	Linux Kernel 3.x/4.x – prima WLAN Driver Heap Overflow	dos	linux	Shawn the R0ck
2016-01-25	pfSense Firewall 2.2.5 – Config File Cross-Site Request Forgery	webapps	php	Aatif Shahdad