linux

日期	标题	类别	作者
2018-10-29	systemd – ‘reexec’ State Injection	dos	Google Security Research
2018-10-25	libtiff 4.0.9 – Decodes Arbitrarily Sized JBIG into a Target Buffer	dos	Google Security Research
2018-10-24	exim 4.90 – Remote Code Execution	remote	hackk.gr
2018-10-22	Keybase keybase-redirector – ‘$PATH’ Local Privilege Escalation	local	mirchr
2018-10-20	LibSSH 0.7.6 / 0.8.4 – Unauthorized Access	remote	jas502n
2018-10-18	libSSH – Authentication Bypass	remote	Dayanç Soyadlı
2018-10-16	Git Submodule – Arbitrary Code Execution	local	joernchen
2018-10-10	FileZilla 3.33 – Buffer Overflow (PoC)	dos	Kağan Çapar
2018-10-09	ifwatchd – Privilege Escalation (Metasploit)	local	Metasploit
2018-10-09	ghostscript – executeonly Bypass with errorhandler Setup	local	Google Security Research
2018-10-08	Unitrends UEB – HTTP API Remote Code Execution (Metasploit)	remote	Metasploit
2018-10-08	Linux – Kernel Pointer Leak via BPF	dos	Google Security Research
2018-10-08	net-snmp 5.7.3 – (Authenticated) Denial of Service (PoC)	dos	Magnus Klaaborg Stubman
2018-10-08	net-snmp 5.7.3 – (Unauthenticated) Denial of Service (PoC)	dos	Magnus Klaaborg Stubman
2018-10-08	Imperva SecureSphere 13 – Remote Command Execution	webapps	rsp3ar
2018-10-05	Git Submodule – Arbitrary Code Execution (PoC)	local	Junio C Hamano
2018-10-04	virtualenv 16.0.0 – Sandbox Escape	local	vr_system
2018-10-02	Linux Kernel < 4.11.8 - 'mq_notify: double sock_put()' Local Privilege Escalation	local	Lexfo
2018-09-26	Linux Kernel – VMA Use-After-Free via Buggy vmacache_flush_all() Fastpath Local Privilege Escalation	local	Google Security Research
2018-09-24	udisks2 2.8.0 – Denial of Service (PoC)	dos	Marshall Whittaker
2018-09-19	Roundcube rcfilters plugin 2.1.6 – Cross-Site Scripting	webapps	Fahimeh Rezaei
2018-09-14	Watchguard AP100 AP102 AP200 1.2.9.15 – Remote Code Execution (Metasploit)	webapps	Stephen Shkardoon
2018-09-13	Chrome OS 10820.0.0 dev-channel – app->VM via garcon TCP Command Socket	local	Google Security Research
2018-09-13	Linux 4.18 – Arbitrary Kernel Read into dmesg via Missing Address Check in segfault Handler	dos	Google Security Research