windows

日期	标题	类别	作者
2017-06-05	Subsonic 6.1.1 – Server-Side Request Forgery	webapps	hyp3rlinx
2017-06-05	Subsonic 6.1.1 – Cross-Site Request Forgery	webapps	hyp3rlinx
2017-06-05	Parallels Desktop – Virtual Machine Escape	local	Mohammad Reza Espargham
2017-06-02	Disk Sorter 9.7.14 – ‘Input Directory’ Local Buffer Overflow (PoC)	dos	n3ckD_
2017-05-30	Microsoft MsMpEng – Remote Use-After-Free Due to Design Issue in GC Engine	dos	Google Security Research
2017-05-30	TiEmu 2.08 – Local Buffer Overflow	local	Juan Sacco
2017-05-30	Microsoft MsMpEng – Use-After-Free via Saved Callers	dos	Google Security Research
2017-05-30	IBM Informix Dynamic Server / Informix Open Admin Tool – DLL Injection / Remote Code Execution / Heap Buffer Overflow	webapps	SecuriTeam
2017-05-29	Octopus Deploy – (Authenticated) Code Execution (Metasploit)	remote	Metasploit
2017-05-29	Microsoft MsMpEng – Multiple Crashes While Scanning Malformed Files	dos	Google Security Research
2017-05-26	Microsoft MsMpEng – Multiple Problems Handling ntdll!NtControlChannel Commands	local	Google Security Research
2017-05-26	Home Web Server 1.9.1 (build 164) – Remote Code Execution	remote	Guillaume Kaddouch
2017-05-25	Sandboxie 5.18 – Local Denial of Service	dos	ScrR1pTK1dd13
2017-05-24	Dup Scout Enterprise 9.7.18 – ‘.xml’ Local Buffer Overflow	local	ScrR1pTK1dd13
2017-05-23	VX Search Enterprise 9.5.12 – GET Buffer Overflow (Metasploit)	remote	Metasploit
2017-05-20	Secure Auditor 3.0 – Directory Traversal	remote	hyp3rlinx
2017-05-19	Sure Thing Disc Labeler 6.2.138.0 – Buffer Overflow (PoC)	dos	Chance Johnson
2017-05-17	Microsoft Windows 7/2008 R2 – ‘EternalBlue’ SMB Remote Code Execution (MS17-010)	remote	sleepya
2017-05-17	Serviio Media Server – checkStreamUrl Command Execution (Metasploit)	remote	Metasploit
2017-05-17	Dup Scout Enterprise 9.5.14 – GET Buffer Overflow (Metasploit)	remote	Metasploit
2017-05-17	Microsoft Windows – Running Object Table Register ROTFLAGS_ALLOWANYCLIENT Privilege Escalation	dos	Google Security Research
2017-05-17	Microsoft Windows – COM Aggregate Marshaler/IRemUnknown2 Type Confusion Privilege Escalation	local	Google Security Research
2017-05-15	Microsoft Windows 7 Kernel – Pool-Based Out-of-Bounds Reads Due to bind() Implementation Bugs in afd.sys / tcpip.sys	dos	Google Security Research
2017-05-15	Microsoft Windows 7 Kernel – ‘win32k!xxxClientLpkDrawTextEx’ Stack Memory Disclosure	dos	Google Security Research