linux

日期	标题	类别	作者
2018-08-14	cgit 1.2.1 – Directory Traversal (Metasploit)	webapps	Dhiraj Mishra
2018-08-13	PostgreSQL 9.4-0.5.3 – Privilege Escalation	local	Johannes Segitz
2018-08-09	Linux Kernel 4.14.7 (Ubuntu 16.04 / CentOS 7) – (KASLR & SMEP Bypass) Arbitrary File Read	local	Andrey Konovalov
2018-08-08	LG-Ericsson iPECS NMS 30M – Directory Traversal	webapps	Safak Aslan
2018-08-03	Linux Kernel – UDP Fragmentation Offset ‘UFO’ Privilege Escalation (Metasploit)	local	Metasploit
2018-08-02	SecureSphere 12.0.0.50 – SealMode Shell Escape (Metasploit)	local	0x09AL
2018-08-02	Imperva SecureSphere 11.5 / 12.0 / 13.0 – Privilege Escalation	local	0x09AL
2018-08-01	SonicWall Global Management System – XMLRPC set_time_zone Command Injection (Metasploit)	remote	Metasploit
2018-07-31	Craft CMS SEOmatic plugin 3.1.4 – Server-Side Template Injection	webapps	0xB455
2018-07-30	fusermount – user_allow_other Restriction Bypass and SELinux Label Control	dos	Google Security Research
2018-07-30	H2 Database 1.4.197 – Information Disclosure	webapps	owodelta
2018-07-30	Responsive Filemanager 9.13.1 – Server-Side Request Forgery	webapps	GUIA BRAHIM FOUAD
2018-07-27	Axis Network Camera – .srv to parhand Remote Code Execution (Metasploit)	remote	Metasploit
2018-07-27	Online Trade 1 – Information Disclosure	webapps	Dhamotharan
2018-07-26	Kirby CMS 2.5.12 – Cross-Site Request Forgery (Delete Page)	webapps	Zaran Shaikh
2018-07-24	Nagios Core 4.4.1 – Denial of Service	dos	Fakhri Zulkifli
2018-07-23	Synology DiskStation Manager 4.1 – Directory Traversal	webapps	Berk Dusunur
2018-07-21	Inteno’s IOPSYS – (Authenticated) Local Privilege Escalation	local	neonsea
2018-07-19	Linux – BPF Sign Extension Local Privilege Escalation (Metasploit)	local	Metasploit
2018-07-17	QNAP Q’Center – ‘change_passwd’ Command Execution (Metasploit)	remote	Metasploit
2018-07-16	Linux (Ubuntu) – Other Users coredumps Can Be Read via setgid Directory and killpriv Bypass	dos	Google Security Research
2018-07-13	Hadoop YARN ResourceManager – Command Execution (Metasploit)	remote	Metasploit
2018-07-13	Apache CouchDB – Arbitrary Command Execution (Metasploit)	remote	Metasploit
2018-07-11	Awk to Perl 1.007-5 – Buffer Overflow (PoC)	local	Todor Donev