linux

日期	标题	类别	作者
2015-01-29	Exim ESMTP 4.80 – glibc gethostbyname Denial of Service	dos	1n3
2015-01-11	RedStar 3.0 Desktop – ‘Software Manager swmng.app’ Local Privilege Escalation	local	RichardG
2015-01-11	RedStar 2.0 Desktop – ‘World-writeable rc.sysinit’ Local Privilege Escalation	local	prdelka
2015-01-11	RedStar 3.0 Desktop – Enable sudo Privilege Escalation	local	prdelka & ‏sfan55
2014-12-23	Phase Botnet – Blind SQL Injection	webapps	MalwareTech
2014-12-23	GParted 0.14.1 – OS Command Execution	local	SEC Consult
2014-12-19	Varnish Cache CLI Interface – Remote Code Execution (Metasploit)	remote	Patrick Webster
2014-12-19	Ettercap 0.8.0 < 0.8.1 - Multiple Denial of Service Vulnerabilities	dos	Nick Sampanis
2014-12-10	Apache James Server 2.3.2 – Remote Command Execution	remote	Jakub Palaczynski
2014-12-03	VFU 4.10-1.1 – Local Buffer Overflow	local	Juan Sacco
2014-11-25	Linux Kernel 3.14.5 (CentOS 7 / RHEL) – ‘libfutex’ Local Privilege Escalation	local	Kaiqu Chen
2014-11-24	Hikvision DVR – RTSP Request Remote Code Execution (Metasploit)	remote	Metasploit
2014-11-19	Minix 3.3.0 – Remote TCP/IP Stack Denial of Service	dos	nitr0us
2014-11-14	OSSEC 2.8 – ‘hosts.deny’ Local Privilege Escalation	local	skynet-13
2014-11-06	Minix 3.3.0 – Local Denial of Service (PoC)	dos	nitr0us
2014-10-29	CUPS Filter – Bash Environment Variable Code Injection (Metasploit)	remote	Metasploit
2014-10-29	IBM Tivoli Monitoring 6.2.2 kbbacf1 – Local Privilege Escalation	local	Robert Jaroszuk
2014-10-27	Binary File Descriptor Library (libbfd) – Out-of-Bounds Crash	dos	Michal Zalewski
2014-10-20	Linux PolicyKit – Race Condition Privilege Escalation (Metasploit)	local	Metasploit
2014-10-20	Aireplay-ng 1.2 beta3 – ‘tcp_test’ Length Stack Overflow	remote	Nick Sampanis
2014-10-15	Centreon < 2.5.1 / Centreon Enterprise Server < 2.2 - SQL Injection / Command Injection (Metasploit)	webapps	Metasploit
2014-10-09	Linux Kernel < 3.16.1 - 'Remount FUSE' Local Privilege Escalation	local	Andy Lutomirski
2014-10-06	Apache mod_cgi – ‘Shellshock’ Remote Command Injection	remote	Federico Galatolo
2014-10-06	Postfix SMTP 4.2.x < 4.2.48 - 'Shellshock' Remote Command Injection	remote	Phil Blank