Exploits

日期	标题	类型	平台	作者
2020-01-06	Hostel Management System 2.0 – ‘id’ SQL Injection	webapps	php	FULLSHADE
2020-01-06	SpotMSN 2.4.6 – ‘Name’ Denial of Service (PoC)	dos	windows	Ismail Tasdelen
2020-01-06	NetworkSleuth 3.0.0.0 – ‘Key’ Denial of Service (PoC)	dos	windows	Ismail Tasdelen
2020-01-06	SpotFTP FTP Password Recovery 3.0.0.0 – ‘Name’ Denial of Service (PoC)	dos	windows	Ismail Tasdelen
2020-01-06	Adaware Web Companion 4.9.2159 – ‘WCAssistantService’ Unquoted Service Path	local	windows	ZwX
2020-01-06	Office Product Key Finder 1.5.4 – Denial of Service (PoC)	dos	windows	Gokkulraj
2020-01-06	Subrion CMS 4.0.5 – Cross-Site Request Forgery (Add Admin)	webapps	php	Ismail Tasdelen
2020-01-06	NBMonitor 1.6.6.0 – ‘Key’ Denial of Service (PoC)	dos	windows	Ismail Tasdelen
2020-01-06	IBM RICOH Infoprint 1532 Printer – Persistent Cross-Site Scripting	webapps	hardware	Ismail Tasdelen
2020-01-06	RemShutdown 2.9.0.0 – ‘Name’ Denial of Service (PoC)	dos	windows	Ismail Tasdelen
2020-01-06	SpotFTP FTP Password Recovery 3.0.0.0 – ‘Key’ Denial of Service (PoC)	dos	windows	Ismail Tasdelen
2020-01-06	Backup Key Recovery Recover Keys Crashed Hard Disk Drive 2.2.5 – ‘Key’ Denial of Service (PoC)	dos	windows	Ismail Tasdelen
2020-01-06	NetShareWatcher 1.5.8.0 – ‘Name’ Denial Of Service	dos	windows	Ismail Tasdelen
2020-01-06	RemShutdown 2.9.0.0 – ‘Key’ Denial of Service (PoC)	dos	windows	Ismail Tasdelen
2020-01-06	Complaint Management System 4.0 – ‘cid’ SQL injection	webapps	php	FULLSHADE
2020-01-06	TextCrawler Pro3.1.1 – Denial of Service (PoC)	dos	windows	stresser
2020-01-06	Dairy Farm Shop Management System 1.0 – ‘username’ SQL Injection	webapps	php	Chris Inzinga
2020-01-06	Microsoft Outlook VCF cards – Denial of Service (PoC)	dos	windows	hyp3rlinx
2020-01-06	Dnss Domain Name Search Software – ‘Name’ Denial of Service (PoC)	dos	windows	Ismail Tasdelen
2020-01-06	Codoforum 4.8.3 – Persistent Cross-Site Scripting	webapps	php	Prasanth
2020-01-06	NetShareWatcher 1.5.8.0 – ‘Key’ Denial of Service (PoC)	dos	windows	Ismail Tasdelen
2020-01-03	Online Course Registration 2.0 – Remote Code Execution	webapps	php	Metin Yunus Kandemir
2020-01-03	Plantronics Hub 3.13.2 – Local Privilege Escalation	local	windows	Markus
2020-01-03	Karakuzu ERP Management Web 5.7.0 – ‘k_adi_duz’ SQL Injection	webapps	php	Hakan TAŞKÖPRÜ
2020-01-02	BloodX 1.0 – Authentication Bypass	webapps	php	riamloo
2020-01-02	Hospital Management System 4.0 – Persistent Cross-Site Scripting	webapps	php	FULLSHADE
2020-01-02	Hospital Management System 4.0 – ‘searchdata’ SQL Injection	webapps	php	FULLSHADE
2020-01-02	MSN Password Recovery 1.30 – Denial of Service (PoC)	dos	windows	Gokkulraj
2020-01-02	Microsoft Windows – Shell COM Server Registrar Local Privilege Escalation	local	windows	0vercl0k
2020-01-01	Microsoft Windows .Group File – Code Execution	local	windows	hyp3rlinx
2020-01-01	nostromo 1.9.6 – Remote Code Execution	remote	multiple	Kr0ff
2020-01-01	Hospital Management System 4.0 – Authentication Bypass	webapps	php	Metin Yunus Kandemir
2020-01-01	IBM InfoPrint 4247-Z03 Impact Matrix Printer – Directory Traversal	webapps	hardware	Raif Berkay Dincel
2020-01-01	Shopping Portal ProVersion 3.0 – Authentication Bypass	webapps	php	Metin Yunus Kandemir
2019-12-31	WordPress Plugin Ultimate Addons for Beaver Builder 1.2.4.1 – Authentication Bypass	webapps	php	Raphael Karger
2019-12-31	NextVPN v4.10 – Insecure File Permissions	local	windows	SajjadBnd
2019-12-31	Sony Playstation 4 (PS4) < 6.72 - WebKit Code Execution (PoC)	webapps	hardware	TJ Corley
2019-12-30	AVE DOMINAplus 1.10.x – Authentication Bypass	webapps	hardware	LiquidWorm
2019-12-30	HomeAutomation 3.3.2 – Persistent Cross-Site Scripting	webapps	hardware	LiquidWorm
2019-12-30	AVE DOMINAplus 1.10.x – Cross-Site Request Forgery (enable/disable alarm)	webapps	hardware	LiquidWorm
2019-12-30	Microsoft UPnP – Local Privilege Elevation (Metasploit)	local	windows	Metasploit
2019-12-30	AVE DOMINAplus 1.10.x – Unauthenticated Remote Reboot	webapps	hardware	LiquidWorm
2019-12-30	Reptile Rootkit – reptile_cmd Privilege Escalation (Metasploit)	local	linux	Metasploit
2019-12-30	AVE DOMINAplus 1.10.x – Credential Disclosure	webapps	hardware	LiquidWorm
2019-12-30	OpenBSD – Dynamic Loader chpass Privilege Escalation (Metasploit)	local	openbsd	Metasploit
2019-12-30	Wing FTP Server 6.0.7 – Unquoted Service Path	local	windows	Nawaf Alkeraithe
2019-12-30	WEMS BEMS 21.3.1 – Undocumented Backdoor Account	webapps	hardware	LiquidWorm
2019-12-30	XEROX WorkCentre 7830 Printer – Cross-Site Request Forgery (Add Admin)	webapps	hardware	Ismail Tasdelen
2019-12-30	XEROX WorkCentre 7855 Printer – Cross-Site Request Forgery (Add Admin)	webapps	hardware	Ismail Tasdelen
2019-12-30	Thrive Smart Home 1.1 – Authentication Bypass	webapps	php	LiquidWorm