Exploits

日期	标题	类型	平台	作者
2015-09-22	Kaspersky AntiVirus – ExeCryptor Parsing Memory Corruption	dos	windows	Google Security Research
2015-09-22	Microsoft Windows Kernel – ‘DeferWindowPos’ Use-After-Free (MS15-073)	dos	windows_x86	Nils Sommer
2015-09-22	Kaspersky AntiVirus – VB6 Parsing Integer Overflow	dos	windows	Google Security Research
2015-09-22	Microsoft Windows Kernel – Bitmap Handling Use-After-Free (MS15-061) (2)	dos	windows_x86	Nils Sommer
2015-09-22	Microsoft Windows Kernel – ‘NtGdiStretchBlt’ Pool Buffer Overflow (MS15-097)	dos	windows_x86	Nils Sommer
2015-09-22	Apple qlmanage – SceneKit::daeElement::setElementName Heap Overflow	dos	osx	Google Security Research
2015-09-22	Kirby CMS 2.1.0 – Cross-Site Request Forgery / Content Upload / PHP Script Execution	webapps	php	Dawid Golunski
2015-09-22	Microsoft Windows Kernel – Use-After-Free with Printer Device Contexts (MS15-097)	dos	windows_x86	Nils Sommer
2015-09-22	Apple Mac OSX Regex Engine (TRE) – Stack Buffer Overflow (PoC)	dos	osx	Google Security Research
2015-09-22	Microsoft Windows Kernel – Use-After-Free with Cursor Object (MS15-097)	dos	windows_x86	Nils Sommer
2015-09-22	Apple Mac OSX Regex Engine (TRE) – Integer Signedness / Overflow	dos	osx	Google Security Research
2015-09-22	Microsoft Windows Kernel – ‘bGetRealizedBrush’ Use-After-Free (MS15-097)	dos	windows_x86	Nils Sommer
2015-09-22	SAP NetWeaver < 7.01 - XML External Entity Injection	webapps	xml	Lukasz Miedzinski
2015-09-22	Microsoft Windows Kernel – ‘FlashWindowEx​’ Memory Corruption (MS15-097)	dos	windows_x86	Nils Sommer
2015-09-22	Konica Minolta FTP Utility 1.0 – Directory Traversal	remote	windows	shinnai
2015-09-22	Microsoft Windows Kernel – Bitmap Handling Use-After-Free (MS15-061) (1)	dos	windows_x86	Nils Sommer
2015-09-22	MASM32 11R – Crash (PoC)	dos	windows	VIKRAMADITYA
2015-09-22	Microsoft Windows Kernel – Null Pointer Dereference with Window Station and Clipboard (MS15-061)	dos	windows_x86	Nils Sommer
2015-09-22	Air Drive Plus 2.4 – Arbitrary File Upload	webapps	ios	Vulnerability-Lab
2015-09-22	Cisco AnyConnect Secure Mobility Client 3.1.08009 – Local Privilege Escalation	local	windows	Google Security Research
2015-09-22	Microsoft Windows Kernel – WindowStation Use-After-Free (MS15-061)	dos	windows_x86	Nils Sommer
2015-09-22	h5ai < 0.25.0 - Unrestricted Arbitrary File Upload	webapps	php	rTheory
2015-09-21	Konica Minolta FTP Utility 1.00 – (Authenticated) CWD Command Overflow (SEH) (Metasploit)	remote	windows	Metasploit
2015-09-20	Konica Minolta FTP Utility 1.0 – Remote Command Execution	remote	windows	R-73eN
2015-09-20	ADH-Web Server IP-Cameras – Multiple Vulnerabilities	webapps	hardware	Orwelllabs
2015-09-20	Total Commander 8.52 – Local Buffer Overflow	local	windows	VIKRAMADITYA
2015-09-20	Total Commander 8.52 (Windows 10) – Local Buffer Overflow	local	windows	VIKRAMADITYA
2015-09-19	Thomson CableHome Gateway (DWG849) Cable Modem Gateway – Information Exposure	remote	hardware	Matthew Dunlap
2015-09-18	Pligg CMS 2.0.2 – ‘load_data_for_search.php’ SQL Injection	webapps	php	jsass
2015-09-18	Wireshark 1.12.7 – Division by Zero Crash (PoC)	dos	windows	spyk
2015-09-17	IKEView R60 – Local Buffer Overflow (SEH)	local	windows	VIKRAMADITYA
2015-09-17	ZTE PC UI USB Modem Software – Local Buffer Overflow	local	windows	R-73eN
2015-09-17	IKEView.exe R60 – ‘.elg’ Local (SEH)	local	windows	cor3sm4sh3r
2015-09-17	Google Android – libstagefright Integer Overflow Remote Code Execution	remote	android	Google Security Research
2015-09-17	VBox Satellite Express 2.3.17.3 – Arbitrary Write	dos	windows	KoreLogic
2015-09-17	ZeusCart 4.0 – SQL Injection	webapps	php	Curesec Research Team
2015-09-17	ZeusCart 4.0 – Cross-Site Request Forgery	webapps	php	Curesec Research Team
2015-09-17	Microsoft Windows – Font Driver Buffer Overflow (MS15-078) (Metasploit)	local	windows_x86-64	Metasploit
2015-09-17	ManageEngine OpManager – Remote Code Execution (Metasploit)	remote	java	Metasploit
2015-09-16	Microsoft Office 2007 – ‘OGL.dll’ ValidateBitmapInfo Bounds Check Failure (MS15-097)	dos	windows	Google Security Research
2015-09-16	Microsoft Office 2007 – OLESSDirectyEntry.CreateTime Type Confusion	dos	windows	Google Security Research
2015-09-16	Microsoft Office 2007 – BIFFRecord Length Use-After-Free	dos	windows	Google Security Research
2015-09-16	Microsoft Excel 2007/2010/2013 – BIFFRecord Use-After-Free	dos	windows	Google Security Research
2015-09-16	FAROL – SQL Injection	webapps	php	Thierry Fernandes Faria
2015-09-15	Microsoft Windows – CreateObjectTask SettingsSyncDiagnostics Privilege Escalation	local	windows	Google Security Research
2015-09-15	Microsoft Windows – CreateObjectTask TileUserBroker Privilege Escalation	local	windows	Google Security Research
2015-09-15	Microsoft Windows Task Scheduler – ‘DeleteExpiredTaskAfter’ File Deletion Privilege Escalation	local	windows	Google Security Research
2015-09-15	Microsoft Windows – NtUserGetClipboardAccessToken Token Leak (MS15-023)	local	windows	Google Security Research
2015-09-15	Microsoft Windows 10 (Build 10130) – User Mode Font Driver Thread Permissions Privilege Escalation	local	windows	Google Security Research
2015-09-15	Silver Peak VXOA < 6.2.11 - Multiple Vulnerabilities	webapps	php	Security-Assessment.com