Exploits

日期	标题	类型	平台	作者
2015-10-21	HandyPassword 4.9.3 – Overwrite (SEH)	local	windows	Un_N0n
2015-10-20	HTML Compiler – Remote Code Execution	remote	windows	Ehsan Noreddini
2015-10-19	RealtyScript 4.0.2 – Multiple Blind SQL Injections	webapps	php	LiquidWorm
2015-10-19	RealtyScript 4.0.2 – Multiple Cross-Site Request Forgery / Persistent Cross-Site Scripting Vulnerabilities	webapps	php	LiquidWorm
2015-10-19	Adobe Flash – ‘IExternalizable.writeExternal’ Type Confusion	dos	multiple	Google Security Research
2015-10-19	Nibbleblog 4.0.3 – Arbitrary File Upload (Metasploit)	remote	php	Metasploit
2015-10-19	Belkin N150 Router 1.00.08/1.00.09 – Directory Traversal	webapps	hardware	Rahul Pratap Singh
2015-10-18	VideoLAN VLC Media Player 2.2.1 – libvlccore ‘.mp3’ Stack Overflow	dos	windows	Andrea Sindoni
2015-10-18	WordPress Plugin Ajax Load More < 2.8.2 - Arbitrary File Upload	webapps	php	PizzaHatHacker
2015-10-18	Tomabo MP4 Player 3.11.6 – Local Stack Overflow (SEH)	local	windows	yokoacc, nudragn, rungga_reksya
2015-10-17	ASX to MP3 Converter 1.82.50 (Windows 2003 x86) – ‘.asx’ Local Stack Overflow	local	windows_x86	Ivan Ivanovic
2015-10-16	ZHONE < S3.0.501 - Multiple Remote Code Execution Vulnerabilities	dos	hardware	Lyon Yang
2015-10-15	AdobeWorkgroupHelper 2.8.3.3 – Local Stack Buffer Overflow	local	windows	hyp3rlinx
2015-10-15	Microsoft Windows 10 – Sandboxed Mount Reparse Point Creation Mitigation Bypass (MS15-111)	local	windows	Google Security Research
2015-10-15	Linux Kernel 3.17 – ‘Python ctypes and memfd_create’ noexec File Security Bypass	local	linux	soyer
2015-10-15	Blat 2.7.6 SMTP / NNTP Mailer – Local Buffer Overflow	local	windows	hyp3rlinx
2015-10-15	PROLiNK H5004NK ADSL Wireless Modem – Multiple Vulnerabilities	webapps	hardware	Karn Ganeshen
2015-10-15	netis RealTek Wireless Router / ADSL Modem – Multiple Vulnerabilities	webapps	hardware	Karn Ganeshen
2015-10-14	Boxoft WAV to MP3 Converter 1.1 – Local Buffer Overflow (SEH)	local	windows	ArminCyber
2015-10-14	ZYXEL PMG5318-B20A – OS Command Injection	webapps	hardware	Karn Ganeshen
2015-10-14	Linux/MIPS Kernel 2.6.36 – ‘NetUSB’ Remote Code Execution	remote	multiple	blasty
2015-10-13	Netgear Voice Gateway 2.3.0.23_2.3.23 – Multiple Vulnerabilities	webapps	hardware	Karn Ganeshen
2015-10-13	F5 Big-IP 10.2.4 Build 595.0 Hotfix HF3 – Directory Traversal	webapps	hardware	Karn Ganeshen
2015-10-13	libsndfile 1.0.25 – Local Heap Overflow	local	multiple	Marco Romano
2015-10-13	ZHONE < S3.0.501 - Multiple Vulnerabilities	remote	hardware	Lyon Yang
2015-10-13	CDex Genre 1.79 – Local Stack Buffer Overflow	local	windows	Un_N0n
2015-10-13	Kerio Control 8.6.1 – Multiple Vulnerabilities	webapps	php	Raschin Tavakoli
2015-10-11	Dream CMS 2.3.0 – Cross-Site Request Forgery (Add Extension) / Arbitrary File Upload / PHP Code Execution	webapps	php	LiquidWorm
2015-10-11	Joomla! Component com_realestatemanager 3.7 – SQL Injection	webapps	php	Omer Ramić
2015-10-11	Tomabo MP4 Converter 3.10.12 < 3.11.12 - '.m3u' File Crush Application (Denial of Service)	dos	windows_x86	mohammed Mohammed
2015-10-11	Liferay 6.1.0 CE – Privilege Escalation	webapps	php	Massimo De Luca
2015-10-11	PHPMyLicense 3.0.0 < 3.1.4 - Denial of Service	dos	php	Aria Akhavan Rezayat
2015-10-08	Kallithea 0.2.9 – ‘came_from’ HTTP Response Splitting	webapps	multiple	LiquidWorm
2015-10-08	VeryPDF Image2PDF Converter – Local Buffer Overflow (SEH)	local	windows	Robbie Corley
2015-10-07	Zope Management Interface 4.3.7 – Cross-Site Request Forgery	webapps	Python	hyp3rlinx
2015-10-06	ZTE ZXHN H108N Router – Configuration Disclosure	webapps	hardware	Todor Donev
2015-10-06	GLPI 0.85.5 – Arbitrary File Upload / Filter Bypass / Remote Code Execution	webapps	php	Raffaele Forte
2015-10-06	PHP-Fusion 7.02.07 – Blind SQL Injection	webapps	php	Manuel García Cárdenas
2015-10-06	Last PassBroker 3.2.16 – Stack Buffer Overflow (PoC)	dos	windows	Un_N0n
2015-10-06	LanWhoIs.exe 1.0.1.120 – Stack Buffer Overflow (PoC)	dos	windows	hyp3rlinx
2015-10-05	Kaseya Virtual System Administrator (VSA) – ‘uploader.aspx’ Arbitrary File Upload (Metasploit)	remote	windows	Metasploit
2015-10-05	Alienvault Open Source SIEM (OSSIM) 4.3 – Cross-Site Request Forgery	webapps	php	MohamadReza Mohajerani
2015-10-05	LanSpy 2.0.0.155 – Buffer Overflow (PoC)	dos	windows	hyp3rlinx
2015-10-05	ManageEngine ServiceDesk Plus 9.1 build 9110 – Directory Traversal	webapps	jsp	xistence
2015-10-05	TrueCrypt 7 / VeraCrypt 1.13 – Drive Letter Symbolic Link Creation Privilege Escalation	local	windows_x86	Google Security Research
2015-10-05	Zemra Botnet (C2 Web Panel) – Remote Code Execution (Metasploit)	remote	multiple	Metasploit
2015-10-02	ASX to MP3 Converter 1.82.50 (Windows XP SP3) – ‘.asx’ Local Stack Overflow	local	windows	ex_ptr
2015-10-02	WinRar < 5.30 Beta 4 - Settings Import Command Execution	local	windows	R-73eN
2015-10-02	FTGate 7 – Cross-Site Request Forgery	webapps	windows	hyp3rlinx
2015-10-02	FTGate 2009 Build 6.4.00 – Multiple Vulnerabilities	webapps	windows	hyp3rlinx