Exploits

日期	标题	类型	平台	作者
2020-01-14	Android – ashmem Readonly Bypasses via remap_file_pages() and ASHMEM_UNPIN	dos	android	Google Security Research
2020-01-14	IBM RICOH InfoPrint 6500 Printer – HTML Injection	webapps	hardware	Ismail Tasdelen
2020-01-14	VPN unlimited 6.1 – Unquoted Service Path	local	windows	Amin Rawah
2020-01-14	Redir 3.3 – Denial of Service (PoC)	dos	linux	hieubl
2020-01-14	WeChat – Memory Corruption in CAudioJBM::InputAudioFrameToJBM	dos	android	Google Security Research
2020-01-13	Chevereto 3.13.4 Core – Remote Code Execution	webapps	php	Jinny Ramsmark
2020-01-13	SpotDialup 1.6.7 – ‘Name’ Denial of Service (PoC)	dos	windows	Ismail Tasdelen
2020-01-13	Top Password Firefox Password Recovery 2.8 – Denial of Service (PoC)	dos	windows	antonio
2020-01-13	TaskCanvas 1.4.0 – ‘Registration’ Denial Of Service	dos	windows	Ismail Tasdelen
2020-01-13	Microsoft Windows 10 build 1809 – Local Privilege Escalation (UAC Bypass)	local	windows	Nassim Asrir
2020-01-13	Allok RM RMVB to AVI MPEG DVD Converter 3.6.1217 – Stack Overflow (SEH)	local	windows	antonio
2020-01-13	Top Password Software Dialup Password Recovery 1.30 – Denial of Service (PoC)	dos	windows	antonio
2020-01-13	Digi AnywhereUSB 14 – Reflective Cross-Site Scripting	webapps	php	Raspina Net Pars Group
2020-01-13	Citrix Application Delivery Controller and Gateway 10.5 – Remote Code Execution (Metasploit)	webapps	multiple	mekhalleh
2020-01-13	Allok Video Converter 4.6.1217 – Stack Overflow (SEH)	local	windows	antonio
2020-01-13	Backup Key Recovery 2.2.5 – ‘Name’ Denial of Service (PoC)	dos	windows	Ismail Tasdelen
2020-01-13	SpotOutlook 1.2.6 – ‘Name’ Denial of Service (PoC)	dos	windows	Ismail Tasdelen
2020-01-13	Advanced System Repair Pro 1.9.1.7 – Insecure File Permissions	local	windows	ZwX
2020-01-11	Citrix Application Delivery Controller and Citrix Gateway – Remote Code Execution	webapps	multiple	TrustedSec
2020-01-11	Citrix Application Delivery Controller and Citrix Gateway – Remote Code Execution (PoC)	webapps	multiple	Project Zero India
2020-01-10	ASTPP 4.0.1 VoIP Billing – Database Backup Download	webapps	linux	Fabien AUNAY
2020-01-10	PixelStor 5000 K:4.0.1580-20150629 – Remote Code Execution	webapps	php	.:UND3R:.
2020-01-10	Pandora 7.0NG – Remote Code Execution	webapps	php	Askar
2020-01-10	TotalAV 2020 4.14.31 – Privilege Escalation	local	windows	Kusol Watchara-Apanukorn
2020-01-09	MSN Password Recovery 1.30 – XML External Entity Injection	local	xml	ZwX
2020-01-09	Oracle Weblogic 10.3.6.0.0 – Remote Command Execution	webapps	java	james
2020-01-09	ZIP Password Recovery 2.30 – ‘ZIP File’ Denial of Service (PoC)	dos	windows	ZwX
2020-01-08	Tomcat proprietaryEvaluate 9.0.0.M1 – Sandbox Escape	webapps	java	hantwister
2020-01-08	JetBrains TeamCity 2018.2.4 – Remote Code Execution	remote	java	hantwister
2020-01-08	ASTPP VoIP 4.0.1 – Remote Code Execution	remote	linux	Fabien AUNAY
2020-01-08	EBBISLAND EBBSHAVE 6100-09-04-1441 – Remote Buffer Overflow	remote	hardware	hantwister
2020-01-08	Online Book Store 1.0 – Unauthenticated Remote Code Execution	webapps	php	Tib3rius
2020-01-08	Codoforum 4.8.3 – ‘input_txt’ Persistent Cross-Site Scripting	webapps	php	Vyshnav nk
2020-01-08	Cisco DCNM JBoss 10.4 – Credential Leakage	remote	java	hantwister
2020-01-07	piSignage 2.6.4 – Directory Traversal	webapps	hardware	JunYeong Ko
2020-01-07	Job Portal 1.0 – Remote Code Execution	webapps	php	Tib3rius
2020-01-07	Complaint Management System 4.0 – Remote Code Execution	webapps	php	Metin Yunus Kandemir
2020-01-07	AnyDesk 5.4.0 – Unquoted Service Path	local	windows	SajjadBnd
2020-01-07	Microsoft Windows 10 (19H1 1901 x64) – ‘ws2ifsl.sys’ Use After Free Local Privilege Escalation (kASLR kCFG SMEP)	local	windows_x86-64	bluefrostsec
2020-01-06	RemShutdown 2.9.0.0 – ‘Key’ Denial of Service (PoC)	dos	windows	Ismail Tasdelen
2020-01-06	Complaint Management System 4.0 – ‘cid’ SQL injection	webapps	php	FULLSHADE
2020-01-06	TextCrawler Pro3.1.1 – Denial of Service (PoC)	dos	windows	stresser
2020-01-06	Dairy Farm Shop Management System 1.0 – ‘username’ SQL Injection	webapps	php	Chris Inzinga
2020-01-06	Microsoft Outlook VCF cards – Denial of Service (PoC)	dos	windows	hyp3rlinx
2020-01-06	Dnss Domain Name Search Software – ‘Name’ Denial of Service (PoC)	dos	windows	Ismail Tasdelen
2020-01-06	Codoforum 4.8.3 – Persistent Cross-Site Scripting	webapps	php	Prasanth
2020-01-06	NetShareWatcher 1.5.8.0 – ‘Key’ Denial of Service (PoC)	dos	windows	Ismail Tasdelen
2020-01-06	Voyager 1.3.0 – Directory Traversal	webapps	php	NgoAnhDuc
2020-01-06	ShareAlarmPro Advanced Network Access Control – ‘Key’ Denial of Service (PoC)	dos	windows	Ismail Tasdelen
2020-01-06	Small CRM 2.0 – Authentication Bypass	webapps	php	FULLSHADE