Exploits

日期	标题	类型	平台	作者
2015-06-16	Linux Kernel 3.13.0 < 3.19 (Ubuntu 12.04/14.04/14.10/15.04) - 'overlayfs' Local Privilege Escalation	local	linux	rebel
2015-06-16	Ruby on Rails 4.0.x/4.1.x/4.2.x (Web Console v2) – Whitelist Bypass Code Execution (Metasploit)	remote	multiple	Metasploit
2015-06-15	Putty 0.64 – Denial of Service	dos	windows	3unnym00n
2015-06-15	Milw0rm Clone Script 1.0 – ‘/admin/login.php’ Authentication Bypass	webapps	php	walid naceri
2015-06-15	Cisco AnyConnect Secure Mobility 2.x/3.x/4.x – Client Denial of Service (PoC)	dos	windows	LiquidWorm
2015-06-15	FileZilla 3.11.0.2 SFTP Module – Denial of Service	dos	windows	3unnym00n
2015-06-12	Opsview 4.6.2 – Multiple Cross-Site Scripting Vulnerabilities	webapps	multiple	Dolev Farhi
2015-06-12	Nakid CMS – Multiple Vulnerabilities	webapps	php	hyp3rlinx
2015-06-12	GoldWave 6.1.2 – Local Crash (PoC)	dos	windows	0neb1n
2015-06-12	foobar2000 1.3.8 – ‘.m3u’ Local Crash (PoC)	dos	windows	0neb1n
2015-06-12	ClickHeat 1.14 – Cross-Site Request Forgery (Change Admin Password)	webapps	php	David Shanahan
2015-06-12	WordPress Plugin Aviary Image Editor Addon For Gravity Forms 3.0 Beta – Arbitrary File Upload	webapps	php	Larry W. Cashdollar
2015-06-12	WordPress Plugin SE HTML5 Album Audio Player 1.1.0 – Directory Traversal	webapps	php	Larry W. Cashdollar
2015-06-12	ZCMS 1.1 – Multiple Vulnerabilities	webapps	jsp	hyp3rlinx
2015-06-11	OSSEC 2.7 < 2.8.1 - 'diff' Local Privilege Escalation	local	linux	Andrew Widdersheim
2015-06-10	WordPress Plugin Paypal Currency Converter Basic For WooCommerce – File Read	webapps	php	Kuroi'SH
2015-06-10	WordPress Plugin RobotCPA V5 – Local File Inclusion	webapps	php	T3N38R15
2015-06-10	ICU library 52 < 54 - Multiple Vulnerabilities	local	multiple	Pedro Ribeiro
2015-06-10	HP WebInspect 10.4 – XML External Entity Injection	webapps	xml	Jakub Palaczynski
2015-06-10	Libmimedir – ‘.VCF’ Memory Corruption (PoC)	dos	linux	Jeremy Brown
2015-06-10	SysAid Help Desk 14.4 – Multiple Vulnerabilities	webapps	hardware	Pedro Ribeiro
2015-06-10	WordPress Plugin Encrypted Contact Form 1.0.4 – Cross-Site Request Forgery	webapps	php	Nitin Venkatesh
2015-06-10	AnimaGallery 2.6 – Local File Inclusion	webapps	php	d4rkr0id
2015-06-10	ProFTPd 1.3.5 – ‘mod_copy’ Command Execution (Metasploit)	remote	linux	Metasploit
2015-06-10	Alcatel-Lucent OmniSwitch – Cross-Site Request Forgery	webapps	hardware	RedTeam Pentesting
2015-06-10	Bonita BPM 6.5.1 – Multiple Vulnerabilities	webapps	jsp	High-Tech Bridge SA
2015-06-10	ISPConfig 3.0.5.4p6 – Multiple Vulnerabilities	webapps	php	High-Tech Bridge SA
2015-06-10	GeoVision (GeoHttpServer) Webcams – Remote File Disclosure	webapps	hardware	Viktor Minin
2015-06-10	FiverrScript – Cross-Site Request Forgery (Add Admin)	webapps	php	Mahmoud Gamal
2015-06-10	Pandora FMS 5.0/5.1 – Authentication Bypass	webapps	php	Manuel Mancera
2015-06-10	WordPress Plugin History Collection 1.1.1 – Arbitrary File Download	webapps	php	Kuroi'SH
2015-06-09	Milw0rm Clone Script 1.0 – ‘related.php?program’ Blind SQL Injection	webapps	php	Pancaker
2015-06-08	Pasworld – ‘detail.php’ Blind SQL Injection	webapps	php	Sebastian khan
2015-06-08	WordPress Plugin WP Mobile Edition – Local File Inclusion	webapps	php	Ali Khalil
2015-06-08	WordPress Plugin Wp-ImageZoom 1.1.0 – Multiple Vulnerabilities	webapps	php	T3N38R15
2015-06-08	D-Link DSL-526B ADSL2+ AU_2.01 – Remote DNS Change	webapps	hardware	Todor Donev
2015-06-08	D-Link DSL-2730B AU_2.01 – Authentication Bypass DNS Change	webapps	hardware	Todor Donev
2015-06-08	Microsoft Internet Explorer 11 – Crash (PoC) (2)	dos	windows	Pawel Wylecial
2015-06-08	TP-Link TD-W8950ND ADSL2+ – Remote DNS Change	webapps	hardware	Todor Donev
2015-06-08	D-Link DSL-2780B DLink_1.01.14 – Remote DNS Change	webapps	hardware	Todor Donev
2015-06-06	Broadlight Residential Gateway DI3124 – Remote DNS Change	webapps	hardware	Todor Donev
2015-06-06	WiFi HD 8.1 – Directory Traversal / Denial of Service	webapps	ios	Wh1t3Rh1n0 (Michael Allen)
2015-06-05	WordPress Plugin Nmedia WordPress Member Conversation 1.35.0 – ‘doupload.php’ Arbitrary File Upload	webapps	php	Sammy FORGIT
2015-06-05	1 Click Extract Audio 2.3.6 – Activex Buffer Overflow	local	windows	metacom
2015-06-05	1 Click Audio Converter 2.3.6 – Activex Local Buffer Overflow	local	windows	metacom
2015-06-05	WordPress Plugin Really Simple Guest Post 1.0.6 – Local File Inclusion	webapps	php	Kuroi'SH
2015-06-04	WordPress Plugin zM Ajax Login & Register 1.0.9 – Local File Inclusion	webapps	php	Panagiotis Vagenas
2015-06-04	ZTE AC 3633R USB Modem – Multiple Vulnerabilities	dos	hardware	Vishnu
2015-06-04	JDownloader 2 Beta – Directory Traversal	remote	multiple	PizzaHatHacker
2015-06-04	Jildi FTP Client 1.5.6 – Local Buffer Overflow (SEH)	local	windows	Zahid Adeel