Exploits

日期	标题	类型	平台	作者
2019-05-16	WeChat for Android 7.0.4 – ‘vcodec2_hls_filter’ Denial of Service	dos	android	Hong Nhat Pham
2019-05-16	DeepSound 1.0.4 – SQL Injection	webapps	php	Mehmet EMIROGLU
2019-05-16	Axessh 4.2 – ‘Log file name’ Denial of Service (PoC)	dos	windows	Victor Mondragón
2019-05-16	ZOC Terminal v7.23.4 – ‘Shell’ Denial of Service (PoC)	dos	windows	Victor Mondragón
2019-05-16	ZOC Terminal v7.23.4 – ‘Private key file’ Denial of Service (PoC)	dos	windows	Victor Mondragón
2019-05-15	Microsoft Windows – ‘Win32k’ Local Privilege Escalation	local	windows	Arch-Vile
2019-05-15	Tomabo MP4 Converter 3.25.22 – Denial of Service (PoC)	dos	windows	Alejandra Sánchez
2019-05-15	Legrand BTicino Driver Manager F454 1.0.51 – Cross-Site Request Forgery / Cross-Site Scripting	webapps	php	LiquidWorm
2019-05-15	CommSy 8.6.5 – SQL injection	webapps	php	Jens Regel
2019-05-14	TwistedBrush Pro Studio 24.06 – ‘.srp’ Denial of Service (PoC)	dos	windows	Alejandra Sánchez
2019-05-14	PasteShr 1.6 – Multiple SQL Injection	webapps	php	Mehmet EMIROGLU
2019-05-14	Schneider Electric U.Motion Builder 1.3.4 – ‘track_import_export.php object_id’ Unauthenticated Command Injection	webapps	php	Julien Ahrens
2019-05-14	Sales ERP 8.1 – Multiple SQL Injection	webapps	php	Mehmet EMIROGLU
2019-05-14	PHP-Fusion 9.03.00 – ‘Edit Profile’ Remote Code Execution (Metasploit)	remote	php	AkkuS
2019-05-14	TwistedBrush Pro Studio 24.06 – ‘Script Recorder’ Denial of Service (PoC)	dos	windows	Alejandra Sánchez
2019-05-14	TwistedBrush Pro Studio 24.06 – ‘Resize Image’ Denial of Service (PoC)	dos	windows	Alejandra Sánchez
2019-05-14	D-Link DWL-2600AP – Multiple OS Command Injection	webapps	hardware	Raki Ben Hamouda
2019-05-14	Selfie Studio 2.17 – ‘Resize Image’ Denial of Service (PoC)	dos	windows	Alejandra Sánchez
2019-05-13	SpotMSN 2.4.6 – Denial of Service (PoC)	dos	windows	Victor Mondragón
2019-05-13	SOCA Access Control System 180612 – Information Disclosure	webapps	php	LiquidWorm
2019-05-13	SOCA Access Control System 180612 – Cross-Site Request Forgery (Add Admin)	webapps	php	LiquidWorm
2019-05-13	Google Chrome V8 – Turbofan JSCallReducer::ReduceArrayIndexOfIncludes Out-of-Bounds Read/Write	dos	multiple	Google Security Research
2019-05-13	SOCA Access Control System 180612 – SQL Injection	webapps	php	LiquidWorm
2019-05-13	XOOPS 2.5.9 – SQL Injection	webapps	php	felipe andrian
2019-05-13	OpenProject 5.0.0 – 8.3.1 – SQL Injection	webapps	php	SEC Consult
2019-05-13	DNSS 2.1.8 – Denial of Service (PoC)	dos	windows	Victor Mondragón
2019-05-10	Cortex Unshortenlink Analyzer < 1.1 - Server-Side Request Forgery	webapps	multiple	Alexandre Basquin
2019-05-10	dotCMS 5.1.1 – HTML Injection	webapps	jsp	Ismail Tasdelen
2019-05-10	RICOH SP 4520DN Printer – HTML Injection	webapps	hardware	Ismail Tasdelen
2019-05-10	ASPRunner.NET 10.1 – Denial of Service (PoC)	dos	windows	Victor Mondragón
2019-05-10	RICOH SP 4510DN Printer – HTML Injection	webapps	hardware	Ismail Tasdelen
2019-05-10	PHPRunner 10.1 – Denial of Service (PoC)	dos	windows	Victor Mondragón
2019-05-10	SpotIM 2.2 – Denial of Service (PoC)	dos	windows	Alejandra Sánchez
2019-05-10	SpotPaltalk 1.1.5 – Denial of Service (PoC)	dos	windows	Alejandra Sánchez
2019-05-10	jetCast Server 2.0 – Denial of Service (PoC)	dos	windows	Victor Mondragón
2019-05-10	CyberArk Enterprise Password Vault 10.7 – XML External Entity Injection	webapps	multiple	Marcelo Toran
2019-05-09	Lyric Video Creator 2.1 – ‘.mp3’ Denial of Service (PoC)	dos	windows	Alejandra Sánchez
2019-05-09	Lyric Maker 2.0.1.0 – Denial of Service (PoC)	dos	windows	Alejandra Sánchez
2019-05-09	Zoho ManageEngine ADSelfService Plus 5.7 < 5702 build - Cross-Site Scripting	webapps	php	Ibrahim Raafat
2019-05-09	Convert Video jetAudio 8.1.7 – Denial of Service (PoC)	dos	windows	Alejandra Sánchez
2019-05-08	Google Chrome 72.0.3626.119 – ‘FileReader’ Use-After-Free (Metasploit)	remote	windows_x86	Metasploit
2019-05-08	MiniFtp – ‘parseconf_load_setting’ Buffer Overflow	local	linux	strider
2019-05-08	Oracle Weblogic Server – ‘AsyncResponseService’ Deserialization Remote Code Execution (Metasploit)	remote	multiple	Metasploit
2019-05-08	NetNumber Titan ENUM/DNS/NP 7.9.1 – Path Traversal / Authorization Bypass	webapps	linux	MobileNetworkSecurity
2019-05-08	jetAudio 8.1.7.20702 Basic – ‘Enter URL’ Denial of Service (PoC)	dos	windows	Victor Mondragón
2019-05-08	PostgreSQL 9.3 – COPY FROM PROGRAM Command Execution (Metasploit)	remote	multiple	Metasploit
2019-05-08	Lotus Domino 8.5.3 – ‘EXAMINE’ Stack Buffer Overflow DEP/ASLR Bypass (NSA’s EMPHASISMINE)	remote	windows	Charles Truscott
2019-05-07	Prinect Archive System 2015 Release 2.6 – Cross-Site Scripting	webapps	multiple	alt3kx
2019-05-07	Easy Chat Server 3.1 – ‘message’ Denial of Service (PoC)	dos	windows	Miguel Mendez Z
2019-05-07	Admin Express 1.2.5.485 – ‘Folder Path’ Local SEH Alphanumeric Encoded Buffer Overflow	local	windows	Connor McGarr