Exploits

日期	标题	类型	平台	作者
2015-08-07	Python IDLE 2.7.8 – Crash (PoC)	dos	windows	Hadi Zomorodi Monavar
2015-08-07	PHP News Script 4.0.0 – SQL Injection	webapps	php	Meisam Monsef
2015-08-07	Froxlor Server Management Panel 0.9.33.1 – MySQL Login Information Disclosure	webapps	php	Dustin Dörr
2015-08-07	Linux Kernel (x86) – Memory Sinkhole Privilege Escalation	local	linux_x86	Christopher Domas
2015-08-07	Dell Netvault Backup 10.0.1.24 – Denial of Service	dos	windows	Josep Pi Rodriguez
2015-08-07	WordPress Plugin Job Manager 0.7.22 – Persistent Cross-Site Scripting	webapps	php	Owais Mehtab
2015-08-05	ISC BIND 9 – TKEY Remote Denial of Service (PoC)	dos	multiple	elceef
2015-08-05	Linux Kernel – ‘espfix64’ Nested NMIs Interrupting Privilege Escalation	local	linux_x86-64	Andrew Lutomirski
2015-08-01	ISC BIND 9 – TKEY (PoC)	dos	multiple	Errata Security
2015-07-31	Acunetix Web Vulnerability Scanner 9.5 – Crash (PoC)	dos	windows	Hadi Zomorodi Monavar
2015-07-31	T-Mobile Internet Manager – Contact Name Crash (PoC)	dos	windows	SATHISH ARTHAR
2015-07-31	KMPlayer 3.9.x – ‘.srt’ Crash (PoC)	dos	windows	Peyman Motevalli Manesh
2015-07-31	Netgear ReadyNAS LAN /dbbroker 6.2.4 – Credential Disclosure	webapps	hardware	St0rn
2015-07-29	Heroes of Might and Magic III – Map Parsing Arbitrary Code Execution	local	windows	John AAkerblom
2015-07-29	Tendoo CMS 1.3 – Cross-Site Scripting	webapps	php	Arash Khazaei
2015-07-29	JoomShopping – Blind SQL Injection	webapps	php	Mormoroth
2015-07-29	2Moons – Multiple Vulnerabilities	webapps	php	bRpsd
2015-07-29	phpFileManager 0.9.8 – Cross-Site Request Forgery	webapps	php	hyp3rlinx
2015-07-28	Classic FTP 2.36 – CWD Reconnection Denial of Service	dos	windows	St0rn
2015-07-28	Sudo 1.8.14 (RHEL 5/6/7 / Ubuntu) – ‘Sudoedit’ Unauthorized Privilege Escalation	local	linux	daniel svartman
2015-07-28	phpFileManager 0.9.8 – Remote Command Execution	webapps	php	hyp3rlinx
2015-07-27	Foxit Reader – ‘.png’ Conversion Parsing tEXt Chunk Arbitrary Code Execution	local	windows	Sascha Schirra
2015-07-27	Xceedium Xsuite – Multiple Vulnerabilities	webapps	php	modzero
2015-07-27	WordPress Plugin Count Per Day 3.4 – SQL Injection	webapps	php	High-Tech Bridge SA
2015-07-27	Libuser Library – Multiple Vulnerabilities	dos	linux	Qualys Corporation
2015-07-27	WordPress Plugin Unite Gallery Lite 1.4.6 – Multiple Vulnerabilities	webapps	php	Nitin Venkatesh
2015-07-27	Hawkeye-G 3.0.1.4912 – Persistent Cross-Site Scripting / Information Leakage	webapps	multiple	hyp3rlinx
2015-07-24	Hawkeye-G 3.0.1.4912 – Cross-Site Request Forgery	webapps	multiple	hyp3rlinx
2015-07-22	Apple Mac OSX 10.10 – ‘DYLD_PRINT_TO_FILE’ Local Privilege Escalation	local	osx	Stefan Esser
2015-07-22	Counter-Strike 1.6 – ‘GameInfo’ Query Reflection Denial of Service (PoC)	dos	windows	Todor Donev
2015-07-21	Joomla! Component Helpdesk Pro < 1.4.0 - Multiple Vulnerabilities	webapps	php	Simon Rawet
2015-07-21	XPCOM – Race Condition	webapps	php	GulfTech Security
2015-07-21	Internet Download Manager – OLE Automation Array Remote Code Execution	remote	windows	Mohammad Reza Espargham
2015-07-21	SysAid Help Desk ‘rdslogs’ – Arbitrary File Upload (Metasploit)	remote	java	Metasploit
2015-07-20	TcpDump – rpki_rtr_pdu_print Out-of-Bounds Denial of Service	dos	linux	Luke Arntson
2015-07-20	AirDroid iOS / Android / Win 3.1.3 – Persistent	webapps	multiple	Vulnerability-Lab
2015-07-20	Image Transfer IOS – Remote Crash (PoC)	dos	ios	Mohammad Reza Espargham
2015-07-20	phpVibe < 4.20 - Persistent Cross-Site Scripting	webapps	php	Filippos Mastrogiannis
2015-07-20	Microsoft Word – Local Machine Zone Code Execution (MS15-022)	local	windows	Eduardo Braun Prado
2015-07-17	WordPress Plugin BuddyPress Activity Plus 1.5 – Cross-Site Request Forgery	webapps	php	Tom Adams
2015-07-17	D-Link Devices – Cookie Command Execution (Metasploit)	remote	hardware	Metasploit
2015-07-16	8 TOTOLINK Router Models – Backdoor Access / Remote Code Execution	webapps	hardware	Pierre Kim
2015-07-16	4 TOTOLINK Router Models – Backdoor Credentials	webapps	hardware	Pierre Kim
2015-07-16	4 TOTOLINK Router Models – Cross-Site Request Forgery / Cross-Site Scripting	webapps	hardware	Pierre Kim
2015-07-16	15 TOTOLINK Router Models – Multiple Remote Code Execution Vulnerabilities	webapps	hardware	Pierre Kim
2015-07-16	WordPress Plugin Download Manager Free 2.7.94 & Pro 4 – (Authenticated) Persistent Cross-Site Scripting	webapps	php	Filippos Mastrogiannis
2015-07-15	Kaseya Virtual System Administrator (VSA) – Multiple Vulnerabilities (1)	webapps	windows	Pedro Ribeiro
2015-07-15	Joomla! Component com_docman – Multiple Vulnerabilities	webapps	php	Hugo Santiago
2015-07-14	Impero Education Pro – System Remote Command Execution	remote	windows	slipstream
2015-07-14	sysPass 1.0.9 – SQL Injection	webapps	php	SySS GmbH