Exploits

日期	标题	类型	平台	作者
2019-11-25	Waves MaxxAudio Drivers 1.1.6.0 – ‘WavesSysSvc64’ Unquoted Service Path	local	windows	Luis Martínez
2019-11-25	InTouch Machine Edition 8.1 SP1 – ‘Atributos’ Denial of Service (PoC)	dos	windows	chuyreds
2019-11-25	Easy-Hide-IP 5.0.0.3 – ‘EasyRedirect’ Unquoted Service Path	local	windows	Rene Cortes S
2019-11-22	Internet Explorer – Use-After-Free in JScript Arguments During toJSON Callback	dos	windows	Google Security Research
2019-11-22	LiteManager 4.5.0 – Insecure File Permissions	local	windows	ZwX
2019-11-22	ProShow Producer 9.0.3797 – (‘ScsiAccess’) Unquoted Service Path	local	windows	ZwX
2019-11-22	macOS 10.14.6 – root->kernel Privilege Escalation via update_dyld_shared_cache	local	macos	Google Security Research
2019-11-21	TestLink 1.9.19 – Persistent Cross-Site Scripting	webapps	hardware	Milad Khoshdel
2019-11-21	Network Management Card 6.2.0 – Host Header Injection	webapps	hardware	Amal E Thamban
2019-11-21	GNU Mailutils 3.7 – Privilege Escalation	local	linux	Mike Gualtieri
2019-11-20	Pulse Secure VPN – Arbitrary Command Execution (Metasploit)	remote	multiple	Metasploit
2019-11-20	Microsoft Windows – Escalate UAC Protection Bypass (Via dot net profiler) (Metasploit)	local	windows	Metasploit
2019-11-20	Ubuntu 19.10 – ubuntu-aufs-modified mmap_region() Breaks Refcounting in overlayfs/shiftfs Error Path	dos	linux	Google Security Research
2019-11-20	Ubuntu 19.10 – Refcount Underflow and Type Confusion in shiftfs	dos	linux	Google Security Research
2019-11-20	FreeSWITCH – Event Socket Command Execution (Metasploit)	remote	multiple	Metasploit
2019-11-20	iOS 12.4 – Sandbox Escape due to Integer Overflow in mediaserverd	dos	ios	Google Security Research
2019-11-20	FusionPBX – Operator Panel exec.php Command Execution (Metasploit)	remote	multiple	Metasploit
2019-11-20	Microsoft Windows – Escalate UAC Protection Bypass (Via Shell Open Registry Key) (Metasploit)	local	windows	Metasploit
2019-11-20	OpenNetAdmin 18.1.1 – Remote Code Execution	webapps	php	mattpascoe
2019-11-20	Xorg X11 Server – Local Privilege Escalation (Metasploit)	local	unix	Metasploit
2019-11-20	Bludit – Directory Traversal Image File Upload (Metasploit)	remote	php	Metasploit
2019-11-19	ipPulse 1.92 – ‘Enter Key’ Denial of Service (PoC)	dos	windows	Diego Armando Buztamante Rico
2019-11-19	scadaApp for iOS 1.1.4.0 – ‘Servername’ Denial of Service (PoC)	dos	ios	Luis Martínez
2019-11-19	BartVPN 1.2.2 – ‘BartVPNService’ Unquoted Service Path	local	windows	ZwX
2019-11-19	Microsoft Windows 7 (x86) – ‘BlueKeep’ Remote Desktop Protocol (RDP) Remote Windows Kernel Use After Free	remote	windows_x86	0xeb-bp
2019-11-19	XMedia Recode 3.4.8.6 – ‘.m3u’ Denial Of Service	dos	windows	ZwX
2019-11-19	Centova Cast 3.2.12 – Denial of Service (PoC)	dos	hardware	DroidU
2019-11-19	Studio 5000 Logix Designer 30.01.00 – ‘FactoryTalk Activation Service’ Unquoted Service Path	local	windows	Luis Martínez
2019-11-18	Foscam Video Management System 1.1.4.9 – ‘Username’ Denial of Service (PoC)	dos	windows	chuyreds
2019-11-18	Crystal Live HTTP Server 6.01 – Directory Traversal	webapps	asp	numan türle
2019-11-18	nipper-ng 0.11.10 – Remote Buffer Overflow (PoC)	remote	linux	Guy Levin
2019-11-18	TemaTres 3.0 – ‘value’ Persistent Cross-site Scripting	webapps	php	Pablo Santiago
2019-11-18	MobileGo 8.5.0 – Insecure File Permissions	local	windows	ZwX
2019-11-18	NCP_Secure_Entry_Client 9.2 – Unquoted Service Paths	local	windows	Akif Mohamed Ik
2019-11-18	TemaTres 3.0 – Cross-Site Request Forgery (Add Admin)	webapps	php	Pablo Santiago
2019-11-18	Emerson PAC Machine Edition 9.70 Build 8595 – ‘FxControlRuntime’ Unquoted Service Path	local	windows	Luis Martínez
2019-11-18	Centova Cast 3.2.11 – Arbitrary File Download	webapps	hardware	DroidU
2019-11-18	iSmartViewPro 1.3.34 – Denial of Service (PoC)	dos	windows	Ivan Marmolejo
2019-11-18	Open Proficy HMI-SCADA 5.0.0.25920 – ‘Password’ Denial of Service (PoC)	dos	ios	Luis Martínez
2019-11-18	ASUS HM Com Service 1.00.31 – ‘asHMComSvc’ Unquoted Service Path	local	windows	Olimpia Saucedo
2019-11-18	Lexmark Services Monitor 2.27.4.0.39 – Directory Traversal	webapps	hardware	Kevin Randall
2019-11-15	Shrew Soft VPN Client 2.2.2 – ‘iked’ Unquoted Service Path	local	windows	D.Goedecke
2019-11-14	Siemens Desigo PX 6.00 – Denial of Service (PoC)	dos	hardware	LiquidWorm
2019-11-14	Xfilesharing 2.5.1 – Arbitrary File Upload	webapps	php	Noman Riffat
2019-11-14	oXygen XML Editor 21.1.1 – XML External Entity Injection	local	windows	Pablo Santiago
2019-11-14	Microsoft Windows 10 Build 1803 < 1903 - 'COMahawk' Local Privilege Escalation	local	windows	TomahawkAPT69
2019-11-13	FUDForum 3.0.9 – Remote Code Execution	webapps	php	liquidsky
2019-11-13	Linear eMerge E3 1.00-06 – Remote Code Execution	webapps	hardware	LiquidWorm
2019-11-13	gSOAP 2.8 – Directory Traversal	webapps	php	numan türle
2019-11-13	ScanGuard Antivirus 2020 – Insecure Folder Permissions	local	windows	hyp3rlinx