Exploits

日期	标题	类型	平台	作者
2015-05-18	BulletProof FTP Client 2010 – Local Buffer Overflow (DEP Bypass)	local	windows	Gabor Seljan
2015-05-18	Forma LMS 1.3 – Multiple PHP Object Injection Vulnerabilities	webapps	php	Filippo Roncari
2015-05-18	ElasticSearch < 1.4.5 / < 1.5.2 - Directory Traversal	webapps	php	pandujar
2015-05-18	QEMU – Floppy Disk Controller (FDC) (PoC)	dos	multiple	Marcus Meissner
2015-05-18	Microsoft Windows – ‘CNG.SYS’ Kernel Security Feature Bypass (MS15-052)	local	windows	4B5F5F4B
2015-05-18	OpenLitespeed 1.3.9 – Use-After-Free (Denial of Service)	dos	linux	Denis Andzakovic
2015-05-18	Chronosite 5.12 – SQL Injection	webapps	php	Wadeek
2015-05-18	Microsoft Windows – Local Privilege Escalation (MS15-051)	local	windows	hfiref0x
2015-05-16	Burning Board < 2.3.1 - SQL Injection	webapps	php	GulfTech Security
2015-05-14	iFTP 2.21 – Buffer Overflow Crash (PoC)	dos	windows	dogo h@ck
2015-05-13	PHPCollab 2.5 – ‘deletetopics.php’ SQL Injection	webapps	php	Wadeek
2015-05-13	WordPress Plugin Booking Calendar Contact Form 1.0.2 – Multiple Vulnerabilities	webapps	php	i0akiN SEC-LABORATORY
2015-05-12	SixApart MovableType – Storable Perl Code Execution (Metasploit)	remote	unix	Metasploit
2015-05-11	ZTE F660 – Remote Configuration Download	webapps	hardware	Daniel Cisa
2015-05-11	SQLBuddy 1.3.3 – Directory Traversal	webapps	php	hyp3rlinx
2015-05-11	Wing FTP Server Admin 4.4.5 – Cross-Site Request Forgery (Add User)	webapps	php	hyp3rlinx
2015-05-11	eFront 3.6.15 – PHP Object Injection	webapps	php	Filippo Roncari
2015-05-11	eFront 3.6.15 – Directory Traversal	webapps	php	Filippo Roncari
2015-05-11	eFront 3.6.15 – Multiple SQL Injections	webapps	php	Filippo Roncari
2015-05-11	D-Link DSL-500B Gen 2 – URL Filter Configuration Panel Persistent Cross-Site Scripting	webapps	hardware	XLabs Security
2015-05-11	D-Link DSL-500B Gen 2 – Parental Control Configuration Panel Persistent Cross-Site Scripting	webapps	hardware	XLabs Security
2015-05-11	Pluck CMS 4.7 – Directory Traversal	webapps	php	Wadeek
2015-05-11	i.FTP 2.21 – Time Field (SEH)	remote	windows	Revin Hadi Saputra
2015-05-11	VideoCharge Vanilla 3.16.4.06 – Local Buffer Overflow	local	windows	evil_comrade
2015-05-11	VideoCharge Professional + Express Vanilla 3.18.4.04 – Local Buffer Overflow	local	windows	evil_comrade
2015-05-11	VideoCharge Express 3.16.3.04 – Local Buffer Overflow	local	windows	evil_comrade
2015-05-11	WordPress Plugin N-Media Website Contact Form with File Upload 1.3.4 – Arbitrary File Upload (2)	webapps	php	Claudio Viviani & F17.c0de
2015-05-08	Adobe Flash Player – NetConnection Type Confusion (Metasploit)	remote	windows	Metasploit
2015-05-08	WordPress Plugin Ad Inserter 1.5.2 – Cross-Site Request Forgery	webapps	php	Kaustubh G. Padwad
2015-05-08	Manage Engine Asset Explorer 6.1.0 Build: 6110 – Cross-Site Request Forgery	webapps	windows	Kaustubh G. Padwad
2015-05-08	WordPress Plugin ClickBank Ads 1.7 – Cross-Site Request Forgery	webapps	php	Kaustubh G. Padwad
2015-05-08	WordPress Plugin Ultimate Profile Builder 2.3.3 – Cross-Site Request Forgery	webapps	php	Kaustubh G. Padwad
2015-05-08	WordPress Plugin RevSlider 3.0.95 – Arbitrary File Upload / Execution (Metasploit)	remote	php	Metasploit
2015-05-08	Adobe Flash Player – domainMemory ByteArray Use-After-Free (Metasploit)	remote	windows	Metasploit
2015-05-08	MacKeeper – URL Handler Remote Code Execution	remote	osx	Braden Thomas
2015-05-08	WordPress Plugin Yet Another Related Posts 4.2.4 – Cross-Site Request Forgery	webapps	php	Evex
2015-05-08	SynTail 1.5 Build 566 – Multiple Vulnerabilities	webapps	php	Marlow Tannhauser
2015-05-08	WordPress Plugin N-Media Website Contact Form with File Upload 1.5 – Local File Inclusion	webapps	php	T3N38R15
2015-05-08	SynaMan 3.4 Build 1436 – Multiple Vulnerabilities	webapps	php	Marlow Tannhauser
2015-05-08	Syncrify Server 3.6 Build 833 – Multiple Vulnerabilities	webapps	php	Marlow Tannhauser
2015-05-08	Xeams 4.5 Build 5755 – Multiple Vulnerabilities	webapps	php	Marlow Tannhauser
2015-05-08	Novell ZENworks Configuration Management – Arbitrary File Upload (Metasploit)	remote	java	Metasploit
2015-05-08	Alienvault OSSIM/USM 4.14/4.15/5.0 – Multiple Vulnerabilities	webapps	linux	Peter Lapp
2015-05-07	WordPress Plugin Freshmail 1.5.8 – SQL Injection	webapps	multiple	Felipe Molina
2015-05-07	Album Streamer 2.0 iOS – Directory Traversal	webapps	ios	Vulnerability-Lab
2015-05-07	WordPress Plugin Freshmail 1.5.8 – ‘shortcode.php’ SQL Injection	webapps	php	Felipe Molina
2015-05-07	IBM Websphere Portal – Persistent Cross-Site Scripting	webapps	xml	Filippo Roncari
2015-05-07	Dell SonicWALL Secure Remote Access (SRA) Appliance – Cross-Site Request Forgery	webapps	cgi	Veit Hailperin
2015-05-06	elFinder 2 – Remote Command Execution (via File Creation)	webapps	php	TUNISIAN CYBER
2015-05-06	PDF Converter & Editor 2.1 iOS – Local File Inclusion	webapps	ios	Vulnerability-Lab