Exploits

日期	标题	类型	平台	作者
2016-01-25	WordPress Plugin Booking Calendar Contact Form 1.1.23 – SQL Injection	webapps	php	i0akiN SEC-LABORATORY
2016-01-24	Huawei Mate 7 – ‘/dev/hifi_misc’ Privilege Escalation	local	hardware	pray3r
2016-01-21	xWPE 1.5.30a-2.1 – Local Buffer Overflow	local	linux	Juan Sacco
2016-01-21	Oracle – ‘HtmlConverter.exe’ Local Buffer Overflow	local	windows	hyp3rlinx
2016-01-21	NTP – Local Privilege Escalation	local	linux	halfdog
2016-01-19	Linux Kernel 4.4.1 – REFCOUNT Overflow Use-After-Free in Keyrings Local Privilege Escalation (2)	local	linux	Federico Bento
2016-01-19	Linux Kernel 4.4.1 – REFCOUNT Overflow Use-After-Free in Keyrings Local Privilege Escalation (1)	local	linux	Perception Point Team
2016-01-19	PDF-XChange Viewer 2.5.315.0 – Shading Type 7 Heap Memory Corruption	dos	windows	Sébastien Morin
2016-01-19	CesarFTP 0.99g – XCWD Denial of Service	dos	windows	Irving Aguilar
2016-01-18	SeaWell Networks Spectrum – Multiple Vulnerabilities	webapps	php	Karn Ganeshen
2016-01-18	Advanced Electron Forum 1.0.9 – Remote File Inclusion / Cross-Site Request Forgery	webapps	php	hyp3rlinx
2016-01-18	Advanced Electron Forum 1.0.9 – Persistent Cross-Site Scripting	webapps	php	hyp3rlinx
2016-01-18	Advanced Electron Forum 1.0.9 – Cross-Site Request Forgery	webapps	php	hyp3rlinx
2016-01-18	WEG SuperDrive G2 12.0.0 – Insecure File Permissions	local	windows	LiquidWorm
2016-01-15	mcart.xls Bitrix Module 6.5.2 – SQL Injection	webapps	php	High-Tech Bridge SA
2016-01-15	Roundcube Webmail 1.1.3 – Directory Traversal	webapps	php	High-Tech Bridge SA
2016-01-15	Amanda 3.3.1 – ‘amstar’ Command Injection Privilege Escalation	local	linux	Hacker Fantastic
2016-01-15	phpDolphin 2.0.5 – Multiple Vulnerabilities	webapps	php	WhiteCollarGroup
2016-01-15	NetSchedScan 1.0 – Crash (PoC)	dos	windows	Abraham Espinosa
2016-01-15	GlassFish Server – Arbitrary File Read	webapps	java	bingbing
2016-01-14	Manage Engine Application Manager 12.5 – Arbitrary Command Execution	webapps	multiple	Bikramaditya Guha
2016-01-14	Manage Engine Applications Manager 12 – Multiple Vulnerabilities	webapps	multiple	Bikramaditya Guha
2016-01-14	SevOne NMS 5.3.6.0 – Remote Command Execution	webapps	php	@iamsecurity
2016-01-13	Microsoft Office / COM Object – ‘WMALFXGFXDSP.dll’ DLL Planting (MS16-007)	dos	windows	Google Security Research
2016-01-13	Microsoft Windows – devenum.dll!DeviceMoniker::Load() Heap Corruption Buffer Underflow (MS16-007)	dos	windows	Google Security Research
2016-01-13	WhatsUp Gold 16.3 – Remote Code Execution	webapps	asp	Matt Buzanowski
2016-01-12	Linux Kernel 4.3.3 – ‘overlayfs’ Local Privilege Escalation (2)	local	linux	halfdog
2016-01-12	Grassroots DICOM (GDCM) 2.6.0 and 2.6.1 – ImageRegionReader::ReadIntoBuffer Buffer Overflow	dos	linux	Stelios Tsampas
2016-01-12	FingerTec Fingerprint Reader – Remote Access and Remote Enrolment	remote	hardware	Daniel Lawson
2016-01-12	SNScan 1.05 – Scan Hostname/IP Field Buffer Overflow Crash (PoC)	dos	windows	Daniel Velazquez
2016-01-12	Apple watchOS 2 – Crash (PoC)	dos	hardware	Mohammad Reza Espargham
2016-01-11	Adobe Flash BlurFilter Processing – Out-of-Bounds Memset	dos	multiple	Google Security Research
2016-01-11	Trend Micro – node.js HTTP Server Listening on localhost Can Execute Commands	remote	windows	Google Security Research
2016-01-11	Amanda 3.3.1 – Local Privilege Escalation	local	linux	Hacker Fantastic
2016-01-11	KeePass Password Safe Classic 1.29 – Crash (PoC)	dos	windows	Mohammad Reza Espargham
2016-01-11	Konica Minolta FTP Utility 1.00 – CWD Command Overflow (SEH)	remote	windows	TOMIWA
2016-01-11	Adobe Flash – Use-After-Free When Setting Stage	dos	windows_x86-64	Google Security Research
2016-01-11	SedSystems D3 Decimator – Multiple Vulnerabilities	webapps	multiple	prdelka
2016-01-11	Adobe Flash (Multiple Scripts) – Use-After-Free When Rendering Displays (1)	dos	windows	Google Security Research
2016-01-09	Fortinet FortiGate 4.x < 5.0.7 - SSH Backdoor Access	remote	linux	operator8203
2016-01-08	WordPress Plugin WP Symposium Pro Social Network Plugin 15.12 – Multiple Vulnerabilities	webapps	php	Rahul Pratap Singh
2016-01-07	AVM FRITZ!Box < 6.30 - Remote Buffer Overflow	remote	hardware	RedTeam Pentesting
2016-01-07	OpenMRS Reporting Module 0.9.7 – Remote Code Execution	webapps	java	Brian D. Hysell
2016-01-07	D-Link DCS-931L – Arbitrary File Upload (Metasploit)	webapps	hardware	Metasploit
2016-01-06	MediaAccess TG788vn – File Disclosure	webapps	hardware	0x4148
2016-01-05	Online Airline Booking System – Multiple Vulnerabilities	webapps	php	Manish Tanwar
2016-01-05	Linux Kernel 4.3.3 (Ubuntu 14.04/15.10) – ‘overlayfs’ Local Privilege Escalation (1)	local	linux	rebel
2016-01-05	PHPIPAM 1.1.010 – Multiple Vulnerabilities	webapps	php	Mickael Dorigny
2016-01-05	Atlassian Confluence 5.2/5.8.14/5.8.15 – Multiple Vulnerabilities	webapps	xml	Sebastian Perez
2016-01-05	Ganeti – Multiple Vulnerabilities	dos	multiple	Pierre Kim