Exploits

日期	标题	类型	平台	作者
2015-05-06	Mediacoder 0.8.34.5716 – ‘.m3u’ Local Buffer Overflow (SEH)	local	windows	evil_comrade
2015-05-06	elFinder 2 – Remote Command Execution (via File Creation)	webapps	php	TUNISIAN CYBER
2015-05-05	Invision Power Board (IP.Board) < 2.0.3 - Multiple Vulnerabilities	webapps	php	GulfTech Security
2015-05-04	RM Downloader 2.7.5.400 – Local Buffer Overflow (Metasploit)	local	windows	TUNISIAN CYBER
2015-05-04	WordPress Plugin Ultimate Product Catalogue 3.1.2 – Multiple Persistent Cross-Site Scripting / Cross-Site Request Forgery / Arbitrary File Upload Vulnerabilities	webapps	php	Felipe Molina
2015-05-04	Apache Xerces-C XML Parser < 3.1.2 - Denial of Service (PoC)	dos	linux	beford
2015-05-04	PhotoWebsite 3.1 iOS – Local File Inclusion	webapps	ios	Vulnerability-Lab
2015-05-04	Grindr 2.1.1 iOS – Denial of Service	dos	ios	Vulnerability-Lab
2015-05-01	TestDisk 6.14 – ‘Check_OS2MB’ Stack Buffer Overflow (PoC)	dos	multiple	Security-Assessment.com
2015-05-01	Adobe Flash Player – UncompressViaZlibVariant Uninitialized Memory (Metasploit)	remote	windows	Metasploit
2015-04-29	OS Solution OSProperty 2.8.0 – SQL Injection	webapps	php	Brandon Perry
2015-04-29	Wing FTP Server Admin 4.4.5 – Multiple Vulnerabilities	webapps	windows	hyp3rlinx
2015-04-29	WordPress Plugin TheCartPress 1.3.9 – Multiple Vulnerabilities	webapps	php	High-Tech Bridge SA
2015-04-29	Foxit Reader PDF 7.1.3.320 – Parsing Memory Corruption	local	windows	Francis Provencher
2015-04-29	Ninja Privilege Escalation Detection and Prevention System 0.1.3 – Race Condition Privilege Escalation	local	linux	Ben Sheppard
2015-04-28	i.FTP 2.21 – Overflow Crash (SEH) (PoC)	dos	windows	Avinash Thapa
2015-04-27	WordPress Core 4.2 – Persistent Cross-Site Scripting	webapps	php	klikki
2015-04-27	OTRS < 3.1.x / < 3.2.x / < 3.3.x - Persistent Cross-Site Scripting	webapps	php	Adam Ziaja
2015-04-27	UniPDF 1.2 – ‘xml’ Buffer Overflow Crash (PoC)	dos	windows	Avinash Thapa
2015-04-27	Wireshark 1.12.4 – Memory Corruption and Access Violation (PoC)	dos	multiple	Avinash Thapa
2015-04-27	MiniUPnPd 1.0 (MIPS) – Remote Stack Overflow Remote Code Execution for AirTies RT Series	remote	multiple	Onur Alanbel (BGA)
2015-04-27	Apple iTunes 10.6.1.7 – ‘.pls’ Title Buffer Overflow	local	windows	Fady Mohammed Osman
2015-04-27	Legend Perl IRC Bot – Remote Code Execution	remote	multiple	Jay Turla
2015-04-24	Free MP3 CD Ripper 2.6 2.8 (Windows 7) – ‘.wav’ File Buffer Overflow (SEH) (DEP Bypass)	local	windows	naxxo
2015-04-23	Free MP3 CD Ripper 2.6 2.8 – ‘.wav’ File Buffer Overflow (SEH)	local	windows	ThreatActor
2015-04-23	ZYXEL P-660HN-T1H_IPv6 – Remote Configuration Editor / Web Server Denial of Service	dos	hardware	Koorosh Ghorbani
2015-04-23	WordPress Plugin Ultimate Product Catalogue – SQL Injection (2)	webapps	php	Felipe Molina
2015-04-23	WordPress Plugin Ultimate Product Catalogue – SQL Injection (1)	webapps	php	Felipe Molina
2015-04-23	Quick Search 1.1.0.189 – search textbox Buffer Overflow (SEH Unicode) (Egghunter)	local	windows	Tomislav Paskalev
2015-04-23	WebUI 1.5b6 – Remote Code Execution	webapps	php	TUNISIAN CYBER
2015-04-23	usb-creator 0.2.x (Ubuntu 12.04/14.04/14.10) – Local Privilege Escalation	local	linux	Tavis Ormandy
2015-04-22	MooPlayer 1.3.0 – ‘m3u’ Local Buffer Overflow (SEH) (2)	local	windows	Tomislav Paskalev
2015-04-22	Wolf CMS 0.8.2 – Arbitrary File Upload	webapps	php	CWH Underground
2015-04-22	Open-Letters – Remote PHP Code Injection	webapps	php	TUNISIAN CYBER
2015-04-21	WordPress Plugin N-Media Website Contact Form – Arbitrary File Upload (Metasploit)	remote	php	Metasploit
2015-04-21	WordPress Plugin Reflex Gallery – Arbitrary File Upload (Metasploit)	remote	php	Metasploit
2015-04-21	Adobe Flash Player – copyPixelsToByteArray Integer Overflow (Metasploit)	remote	windows	Metasploit
2015-04-21	GoAutoDial CE 3.3-1406088000 – Authentication Bypass / Arbitrary File Upload / Command Injection	webapps	php	Chris McCurley
2015-04-21	WordPress Plugin Community Events 1.3.5 – SQL Injection	webapps	php	Hannes Trunde
2015-04-21	MediaSuite CMS – Artibary File Disclosure	webapps	php	KnocKout inj3ct0r
2015-04-21	ProFTPd 1.3.5 – ‘mod_copy’ Remote Command Execution	remote	linux	R-73eN
2015-04-21	WordPress Plugin Tune Library 1.5.4 – SQL Injection	webapps	php	Hannes Trunde
2015-04-21	WordPress Plugin MiwoFTP 1.0.5 – Arbitrary File Download (2)	webapps	php	dadou dz
2015-04-21	WordPress Plugin NEX-Forms < 3.0 - SQL Injection	webapps	php	Claudio Viviani
2015-04-21	OpenBSD 5.6 – Multiple Local Kernel Panics (Denial of Service)	dos	bsd	nitr0us
2015-04-21	BlueDragon CFChart Servlet 7.1.1.17759 – Arbitrary File Retrieval/Deletion	webapps	cfm	Portcullis
2015-04-21	Photo Manager Pro 4.4.0 iOS – Code Execution	webapps	ios	Vulnerability-Lab
2015-04-21	Apple Mac OSX – Local Denial of Service	dos	osx	Maxime Villard
2015-04-21	Mobile Drive HD 1.8 – Local File Inclusion	webapps	ios	Vulnerability-Lab
2015-04-21	ADB – Backup Archive File Overwrite Directory Traversal	local	hardware	Imre Rad