Exploits

日期	标题	类型	平台	作者
2015-01-26	Barracuda Networks Cloud Series – Filter Bypass	webapps	cgi	Vulnerability-Lab
2015-01-26	Mangallam CMS – SQL Injection	webapps	php	Vulnerability-Lab
2015-01-26	Symantec Data Center Security – Multiple Vulnerabilities	webapps	multiple	SEC Consult
2015-01-26	ferretCMS 1.0.4-alpha – Multiple Vulnerabilities	webapps	php	Steffen Rösemann
2015-01-26	Android WiFi-Direct – Denial of Service	dos	android	Core Security
2015-01-26	jclassifiedsmanager – Multiple Vulnerabilities	webapps	multiple	Sarath Nair
2015-01-26	ManageEngine EventLog Analyzer 9.0 – Directory Traversal / Cross-Site Scripting	webapps	jsp	Ertebat Gostar Co
2015-01-26	SWFupload 2.5.0 – Cross Frame Scripting (XFS)	webapps	multiple	MindCracker
2015-01-26	PHP Webquest 2.6 – SQL Injection	webapps	php	jordan root
2015-01-25	OP5 5.3.5/5.4.0/5.4.2/5.5.0/5.5.1 – ‘license.php’ Remote Command Execution (Metasploit)	webapps	multiple	Metasploit
2015-01-24	NPDS CMS REvolution-13 – SQL Injection	webapps	php	Narendra Bhati
2015-01-23	IceCream Ebook Reader 1.41 – Crash (PoC)	dos	windows	Kapil Soni
2015-01-22	Cisco Ironport Appliances – Privilege Escalation	remote	hardware	Glafkos Charalambous
2015-01-22	Exif Pilot 4.7.2 – Buffer Overflow (SEH)	dos	windows	Osanda Malith Jayathissa
2015-01-22	ecommerceMajor – SQL Injection / Authentication Bypass	webapps	php	Manish Tanwar
2015-01-22	ManageEngine ServiceDesk Plus 9.0 – User Enumeration	webapps	jsp	Muhammad Ahmed Siddiqui
2015-01-22	ManageEngine ServiceDesk Plus 9.0 – SQL Injection	webapps	jsp	Muhammad Ahmed Siddiqui
2015-01-21	Crystal Player 1.99 – Memory Corruption	dos	windows	Kapil Soni
2015-01-21	Zhone GPON 2520 R4.0.2.566b – Crash (PoC)	dos	hardware	Kaczinski Ramirez
2015-01-21	ArticleFR CMS 3.0.5 – Arbitrary File Upload	webapps	php	TranDinhTien
2015-01-21	ArticleFR CMS 3.0.5 – SQL Injection	webapps	php	TranDinhTien
2015-01-20	Apple Mac OSX 10.10 – IOKit IntelAccelerator Null Pointer Dereference	dos	osx	Google Security Research
2015-01-20	Apple Mac OSX 10.9.5 – IOKit IntelAccelerator Null Pointer Dereference	local	osx	Google Security Research
2015-01-20	Apple Mac OSX networkd – ‘effective_audit_token’ XPC Type Confusion Sandbox Escape	local	osx	Google Security Research
2015-01-20	WordPress Plugin Pixarbay Images 2.3 – Multiple Vulnerabilities	webapps	php	Hans-Martin Muench
2015-01-20	ManageEngine (Multiple Products) – (Authenticated) Arbitrary File Upload (Metasploit)	remote	java	Metasploit
2015-01-20	vBulletin vBSSO Single Sign-On 1.4.14 – SQL Injection	webapps	php	Technidev
2015-01-20	Malwarebytes Anti-Exploit 1.03.1.1220/1.04.1.1012 – Out-of-Bounds Read Denial of Service	dos	windows	Parvez Anwar
2015-01-20	RedaxScript 2.1.0 – Privilege Escalation	webapps	php	shyamkumar somana
2015-01-19	WordPress Plugin Cforms 14.7 – Remote Code Execution	webapps	php	Zakhar
2015-01-19	Samsung SmartViewer BackupToAvi 3.0 – Remote Code Execution	remote	windows	Praveen Darshanam
2015-01-18	Congstar Internet Manager – Local Buffer Overflow (SEH)	local	windows	metacom
2015-01-18	T-Mobile Internet Manager – Local Buffer Overflow (SEH)	local	windows	metacom
2015-01-18	Microsoft Windows < 8.1 (x86/x64) - User Profile Service Privilege Escalation (MS15-003)	local	windows	Google Security Research
2015-01-18	Lorex LH300 Series – ActiveX Buffer Overflow (PoC)	dos	hardware	Pedro Ribeiro
2015-01-16	WordPress Plugin Pie Register 2.0.13 – Privilege Escalation	webapps	php	Kacper Szurek
2015-01-16	Sim Editor 6.6 – Local Stack Buffer Overflow	local	windows	Osanda Malith Jayathissa
2015-01-15	ManageEngine Desktop Central – Create Administrator	webapps	multiple	Pedro Ribeiro
2015-01-14	Ansible Tower 2.0.2 – Multiple Vulnerabilities	webapps	multiple	SEC Consult
2015-01-13	WordPress Plugin WP Symposium 14.11 – Arbitrary File Upload (Metasploit)	remote	php	Metasploit
2015-01-13	Oracle MySQL (Windows) – FILE Privilege Abuse (Metasploit)	remote	windows	Metasploit
2015-01-13	Lexmark MarkVision Enterprise – Arbitrary File Upload (Metasploit)	remote	java	Metasploit
2015-01-13	Foxit MobilePDF 4.4.0 iOS – Multiple Vulnerabilities	webapps	ios	Vulnerability-Lab
2015-01-13	Apple Mac OSX 10.10 – BlueTooth DispatchHCIWriteStoredLinkKey Crash (PoC)	dos	osx	rpaleari & joystick
2015-01-13	Apple Mac OSX 10.10 – BlueTooth TransferACLPacketToHW Crash (PoC)	dos	osx	rpaleari & joystick
2015-01-13	Apple Mac OSX 10.10 – BlueTooth BlueToothHCIChangeLocalName Crash (PoC)	dos	osx	rpaleari & joystick
2015-01-13	Apple Mac OSX 10.10 – BlueTooth DispatchHCICreateConnection Crash (PoC)	dos	osx	rpaleari & joystick
2015-01-13	Dell iDRAC IPMI 1.5 – Insufficient Session ID Randomness	webapps	hardware	Yong Chuan, Koh
2015-01-13	Gecko CMS 2.3 – Multiple Vulnerabilities	webapps	php	LiquidWorm
2015-01-11	RedStar 3.0 Desktop – ‘Software Manager swmng.app’ Local Privilege Escalation	local	linux	RichardG