Exploits

日期	标题	类型	平台	作者
2020-03-25	Joomla! Component GMapFP 3.30 – Arbitrary File Upload	webapps	php	ThelastVvV
2020-03-25	LeptonCMS 4.5.0 – Persistent Cross-Site Scripting	webapps	php	SunCSR
2020-03-25	10-Strike Network Inventory Explorer 8.54 – ‘Add’ Local Buffer Overflow (SEH)	local	windows	Felipe Winsnes
2020-03-25	10-Strike Network Inventory Explorer – ‘srvInventoryWebServer’ Unquoted Service Path	local	windows	Felipe Winsnes
2020-03-25	AVAST SecureLine 5.5.522.0 – ‘SecureLine’ Unquoted Service Path	local	windows	Roberto Piña
2020-03-24	UCM6202 1.0.18.13 – Remote Command Injection	webapps	hardware	Jacob Baines
2020-03-24	Veyon 4.3.4 – ‘VeyonService’ Unquoted Service Path	local	windows	Víctor García
2020-03-24	WordPress Plugin WPForms 1.5.8.2 – Persistent Cross-Site Scripting	webapps	php	Jinson Varghese Behanan
2020-03-24	UliCMS 2020.1 – Persistent Cross-Site Scripting	webapps	php	SunCSR
2020-03-23	Google Chrome 80.0.3987.87 – Heap-Corruption Remote Denial of Service (PoC)	dos	windows	Cem Onat Karagun
2020-03-23	FIBARO System Home Center 5.021 – Remote File Include	webapps	multiple	LiquidWorm
2020-03-23	CyberArk PSMP 10.9.1 – Policy Restriction Bypass	remote	multiple	LAHBAL Said
2020-03-23	Joomla! com_hdwplayer 4.2 – ‘search.php’ SQL Injection	webapps	php	qw3rTyTy
2020-03-23	WordPress Plugin PicUploader 1.0 – Remote File Upload	webapps	php	Milad karimi
2020-03-23	rConfig 3.9.4 – ‘search.crud.php’ Remote Command Injection	webapps	php	Matthew Aberegg
2020-03-23	ProficySCADA for iOS 5.0.25920 – ‘Password’ Denial of Service (PoC)	dos	ios	Ivan Marmolejo
2020-03-21	Sony Playstation 4 (PS4) < 7.02 / FreeBSD 9 / FreeBSD 12 - 'ip6_setpktopt' Kernel Local Privilege Escalation (PoC)	local	hardware	TheFloW
2020-03-20	VMware Fusion 11.5.2 – Privilege Escalation	local	macos	Rich Mirch
2020-03-20	Exagate Sysguard 6001 – Cross-Site Request Forgery (Add Admin)	webapps	php	Metin Yunus Kandemir
2020-03-18	Broadcom Wi-Fi Devices – ‘KR00K Information Disclosure	remote	multiple	Maurizio S
2020-03-18	Joomla! Component ACYMAILING 3.9.0 – Unauthenticated Arbitrary File Upload	webapps	php	qw3rTyTy
2020-03-18	Microtik SSH Daemon 6.44.3 – Denial of Service (PoC)	dos	hardware	FarazPajohan
2020-03-18	NetBackup 7.0 – ‘NetBackup INET Daemon’ Unquoted Service Path	local	windows	El Masas
2020-03-18	Netlink GPON Router 1.0.11 – Remote Code Execution	webapps	hardware	shellord
2020-03-17	VMWare Fusion – Local Privilege Escalation	local	macos	Grimm
2020-03-17	Microsoft VSCode Python Extension – Code Execution	local	multiple	Doyensec
2020-03-17	ManageEngine Desktop Central – Java Deserialization (Metasploit)	remote	multiple	Metasploit
2020-03-17	Rconfig 3.x – Chained Remote Code Execution (Metasploit)	remote	linux	Metasploit
2020-03-17	UADMIN Botnet 1.0 – ‘link’ SQL Injection	webapps	php	n4pst3r
2020-03-16	MiladWorkShop VIP System 1.0 – ‘lang’ SQL Injection	webapps	php	AYADI Mohamed
2020-03-16	Enhanced Multimedia Router 3.0.4.27 – Cross-Site Request Forgery (Add Admin)	webapps	asp	Miguel Mendez Z
2020-03-16	PHPKB Multi-Language 9 – ‘image-upload.php’ Authenticated Remote Code Execution	webapps	php	Antonio Cannito
2020-03-16	PHPKB Multi-Language 9 – Authenticated Directory Traversal	webapps	php	Antonio Cannito
2020-03-16	PHPKB Multi-Language 9 – Authenticated Remote Code Execution	webapps	php	Antonio Cannito
2020-03-14	Microsoft Windows 10 (1903/1909) – ‘SMBGhost’ SMB3.1.1 ‘SMB2_COMPRESSION_CAPABILITIES’ Buffer Overflow (PoC)	dos	windows	eerykitty
2020-03-13	Drobo 5N2 4.1.1 – Remote Command Injection	remote	hardware	Ian Sindermann
2020-03-13	WordPress Plugin Custom Searchable Data System – Unauthenticated Data M]odification	webapps	php	Nawaf Alkeraithe
2020-03-13	Centos WebPanel 7 – ‘term’ SQL Injection	webapps	linux	Berke YILMAZ
2020-03-13	AnyBurn 4.8 – Buffer Overflow (SEH)	local	windows	Richard Davy
2020-03-12	Joomla! Component com_newsfeeds 1.0 – ‘feedid’ SQL Injection	webapps	php	Milad karimi
2020-03-12	rConfig 3.9 – ‘searchColumn’ SQL Injection	webapps	php	vikingfr
2020-03-12	rConfig 3.93 – ‘ajaxAddTemplate.php’ Authenticated Remote Code Execution	webapps	php	Engin Demirbilek
2020-03-12	ASUS AAHM 1.00.22 – ‘asHmComSvc’ Unquoted Service Path	local	windows	Roberto Piña
2020-03-12	HRSALE 1.1.8 – Cross-Site Request Forgery (Add Admin)	webapps	php	Ismail Akıcı
2020-03-12	WordPress Plugin Appointment Booking Calendar 1.3.34 – CSV Injection	webapps	php	Daniel Monzón
2020-03-12	WatchGuard Fireware AD Helper Component 5.8.5.10317 – Credential Disclosure	webapps	java	RedTeam Pentesting GmbH
2020-03-11	TeamCity Agent XML-RPC 10.0 – Remote Code Execution	webapps	php	1F98D
2020-03-11	Wing FTP Server – Authenticated CSRF (Delete Admin)	webapps	php	Dhiraj Mishra
2020-03-11	PlaySMS 1.4.3 – Template Injection / Remote Code Execution	webapps	php	Touhid M.Shaikh
2020-03-11	Joomla! 3.9.0 < 3.9.7 - CSV Injection	webapps	php	i4bdullah