Exploits

日期	标题	类型	平台	作者
2015-12-18	Adobe Flash MovieClip.localToGlobal – Use-After-Free	dos	windows	Google Security Research
2015-12-18	Adobe Flash MovieClip.attachBitmap – Use-After-Free	dos	windows	Google Security Research
2015-12-18	Adobe Flash MovieClip.attachMovie – Use-After-Free	dos	windows	Google Security Research
2015-12-18	Google Chrome – Renderer Process to Browser Process Privilege Escalation	dos	multiple	Google Security Research
2015-12-18	Adobe Flash TextField.tabIndex Setter – Use-After-Free	dos	windows	Google Security Research
2015-12-18	pfSense 2.2.5 – Directory Traversal	webapps	php	R-73eN
2015-12-17	Zen Cart 1.5.4 – Local File Inclusion	webapps	php	High-Tech Bridge SA
2015-12-17	QEMU (Gentoo) – Local Privilege Escalation	local	linux	zx2c4
2015-12-17	win32k Clipboard Bitmap – Use-After-Free	dos	windows_x86	Nils Sommer
2015-12-17	win32k Desktop and Clipboard – Null Pointer Dereference	dos	windows_x86	Nils Sommer
2015-12-17	Microsoft Windows Kernel – ‘win32k!OffsetChildren’ Null Pointer Dereference	dos	windows	Nils Sommer
2015-12-17	Adobe Flash GradientFill – Use-After-Frees	dos	windows	Google Security Research
2015-12-17	Adobe Flash MovieClip.lineStyle – Use-After-Frees	dos	windows	Google Security Research
2015-12-17	Adobe Flash TextField.gridFitType Setter – Use-After-Free	dos	windows	Google Security Research
2015-12-17	Adobe Flash TextField.antiAliasType Setter – Use-After-Free	dos	windows	Google Security Research
2015-12-16	Wireshark – addresses_equal ‘dissect_rsvp_common’ Use-After-Free	dos	multiple	Google Security Research
2015-12-16	Wireshark – ascend_seek Static Out-of-Bounds Read	dos	multiple	Google Security Research
2015-12-16	Wireshark – my_dgt_tbcd_unpack Static Buffer Overflow	dos	multiple	Google Security Research
2015-12-16	Wireshark – dissect_nbap_MACdPDU_Size SIGSEGV	dos	multiple	Google Security Research
2015-12-16	Wireshark – memcpy ‘get_value / dissect_btatt’ SIGSEGV	dos	multiple	Google Security Research
2015-12-16	Wireshark – file_read ‘wtap_read_bytes_or_eof/mp2t_find_next_pcr’ Stack Buffer Overflow	dos	multiple	Google Security Research
2015-12-16	Wireshark – dissct_rsl_ipaccess_msg Static Out-of-Bounds Read	dos	multiple	Google Security Research
2015-12-16	Wireshark – dissect_zcl_pwr_prof_pwrprofstatersp Static Out-of-Bounds Read	dos	multiple	Google Security Research
2015-12-16	Wireshark – wmem_alloc Assertion Failure	dos	multiple	Google Security Research
2015-12-16	Easy File Sharing Web Server 7.2 – HEAD Request Buffer Overflow (SEH)	remote	windows	ArminCyber
2015-12-16	Wireshark – dissect_tds7_colmetadata_token Stack Buffer Overflow	dos	multiple	Google Security Research
2015-12-16	Easy File Sharing Web Server 7.2 – GET Buffer Overflow (SEH)	remote	windows	ArminCyber
2015-12-16	Wireshark – iseries_parse_packet Heap Buffer Overflow	dos	multiple	Google Security Research
2015-12-16	FireEye – Wormable Remote Code Execution in MIP JAR Analysis	remote	java	Tavis Ormandy & Natalie Silvanovich
2015-12-16	Ovidentia NewsLetter Module 2.2 – ‘admin.php’ Remote File Inclusion	webapps	php	bd0rk
2015-12-16	Wireshark – getRate Stack Out-of-Bounds Read	dos	multiple	Google Security Research
2015-12-16	Wireshark – AirPDcapPacketProcess Stack Buffer Overflow	dos	multiple	Google Security Research
2015-12-16	Wireshark – find_signature Stack Out-of-Bounds Read	dos	multiple	Google Security Research
2015-12-16	Wireshark – dissect_diameter_base_framed_ipv6_prefix Stack Buffer Overflow	dos	multiple	Google Security Research
2015-12-15	Tequila File Hosting 1.5 – Multiple Vulnerabilities	webapps	php	Ashiyane Digital Security Team
2015-12-15	Jenkins CLI – RMI Java Deserialization (Metasploit)	remote	java	Metasploit
2015-12-15	ManageEngine Desktop Central 9 – FileUploadServlet ConnectionId (Metasploit)	remote	jsp	Metasploit
2015-12-15	Ovidentia absences Module 2.64 – Remote File Inclusion	webapps	php	bd0rk
2015-12-15	IBM Tivoli Storage Manager FastBack Server 5.5.4.2 – ‘_FXCLI_GetConfFileChunk’ Stack Buffer Overflow (PoC)	dos	windows	Ptrace Security
2015-12-15	IBM Tivoli Storage Manager FastBack Server 5.5.4.2 – ‘_FXCLI_SetConfFileChunk’ Stack Buffer Overflow (PoC)	dos	windows	Ptrace Security
2015-12-15	IBM Tivoli Storage Manager FastBack Server 5.5.4.2 – Invalid Pointer Dereference	dos	windows	Ptrace Security
2015-12-15	Joomla! 1.5 < 3.4.5 - Object Injection Remote Command Execution	webapps	php	Sec-1
2015-12-15	ArticleSetup Article Script 1.00 – SQL Injection	webapps	php	Linux Zone Research Team
2015-12-15	Ovidentia bulletindoc Module 2.9 – Multiple Remote File Inclusions	webapps	php	bd0rk
2015-12-14	Adobe Flash – Type Confusion in Serialization with ObjectEncoder.dynamicPropertyWriter	dos	multiple	Google Security Research
2015-12-14	Adobe Flash – Type Confusion in IExternalizable.readExternal When Performing Local Serialization	dos	multiple	Google Security Research
2015-12-14	Microsoft Office / COM Object – DLL Planting with ‘comsvcs.dll’ Delay Load of ‘mqrt.dll’ (MS15-132)	remote	windows	Google Security Research
2015-12-14	WordPress Plugin Admin Management Xtended 2.4.0 – Privilege escalation	webapps	php	Kacper Szurek
2015-12-14	ECommerceMajor – ‘productdtl.php?prodid’ SQL Injection	webapps	php	Rahul Pratap Singh
2015-12-14	Siemens Simatic S7 1200 – CPU Command Module (Metasploit)	remote	hardware	Nguyen Manh Hung