|
Pydio / AjaXplorer < 5.0.4 - Unauthenticated Arbitrary File Upload
|
|
2019-01-18
|
|
Microsoft Edge Chakra - 'JsBuiltInEngineInterfaceExtensionObject::InjectJsBuiltInLibraryCode' Use-After-Free
|
|
2019-01-18
|
|
Microsoft Edge Chakra - 'InitClass' Type Confusion
|
|
2019-01-18
|
|
Microsoft Edge Chakra - 'NewScObjectNoCtor' or 'InitProto' Type Confusion
|
|
2019-01-18
|
|
Microsoft Edge Chakra - 'InlineArrayPush' Type Confusion
|
|
2019-01-18
|
|
Webmin 1.900 - Remote Command Execution (Metasploit)
|
|
2019-01-18
|
|
Joomla! Core 3.9.1 - Persistent Cross-Site Scripting in Global Configuration Textfilter Settings
|
|
2019-01-18
|
|
FastTube 1.0.1.0 - Denial of Service (PoC)
|
|
2019-01-18
|
|
VPN Browser+ 1.1.0.0 - Denial of Service (PoC)
|
|
2019-01-18
|
|
7 Tik 1.0.1.0 - Denial of Service (PoC)
|
|
2019-01-18
|
|
Eco Search 1.0.2.0 - Denial of Service (PoC)
|
|
2019-01-18
|
|
One Search 1.1.0.0 - Denial of Service (PoC)
|
|
2019-01-18
|
|
Watchr 1.1.0.0 - Denial of Service (PoC)
|
|
2019-01-18
|
|
SCP Client - Multiple Vulnerabilities (SSHtranger Things)
|
|
2019-01-18
|
|
phpTransformer 2016.9 - Directory Traversal
|
|
2019-01-18
|
|
phpTransformer 2016.9 - SQL Injection
|
|
2019-01-18
|
|
SeoToaster Ecommerce / CRM / CMS 3.0.0 - Local File Inclusion
|
|
2019-01-18
|
|
Check Point ZoneAlarm 8.8.1.110 - Local Privilege Escalation
|
|
2019-01-17
|
|
Microsoft Windows CONTACT - Remote Code Execution
|
|
2019-01-17
|
|
Oracle Reports Developer Component 12.2.1.3 - Cross-site Scripting
|
|
2019-01-17
|
|
blueman - set_dhcp_handler D-Bus Privilege Escalation (Metasploit)
|
|
2019-01-16
|
|
Microsoft Windows 10 - XmlDocument Insecure Sharing Privilege Escalation
|
|
2019-01-16
|
|
Microsoft Windows 10 - 'RestrictedErrorInfo' Unmarshal Section Handle Use-After-Free
|
|
2019-01-16
|
|
WebKit JSC JIT - GetIndexedPropertyStorage Use-After-Free
|
|
2019-01-16
|
|
Blueimp's jQuery File Upload 9.22.0 - Arbitrary File Upload Exploit
|
|
2019-01-16
|
|
Google Chrome V8 JavaScript Engine 71.0.3578.98 - Out-of-Memory in Invalid Array Length
|
|
2019-01-16
|
|
Coship Wireless Router 4.0.0.48 / 4.0.0.40 / 5.0.0.54 / 5.0.0.55 / 10.0.0.49 - Unauthenticated Admin Password Reset
|
|
2019-01-16
|
|
GL-AR300M-Lite 2.27 - Authenticated Command Injection / Arbitrary File Download / Directory Traversal
|
|
2019-01-16
|
|
NTPsec 1.1.2 - 'config' Authenticated Out-of-Bounds Write Denial of Service (PoC)
|
|
2019-01-16
|
|
NTPsec 1.1.2 - 'ntp_control' Authenticated NULL Pointer Dereference (PoC)
|
|
2019-01-16
|
|
NTPsec 1.1.2 - 'ntp_control' Out-of-Bounds Read (PoC)
|
|
2019-01-16
|
|
NTPsec 1.1.2 - 'ctl_getitem' Out-of-Bounds Read (PoC)
|
|
2019-01-16
|
|
ShoreTel / Mitel Connect ONSITE 19.49.5200.0 - Remote Code Execution
|
|
2019-01-16
|
|
doorGets CMS 7.0 - Arbitrary File Download
|
|
2019-01-16
|
|
Roxy Fileman 1.4.5 - Arbitrary File Download
|
|
2019-01-16
|
|
FortiGate FortiOS < 6.0.3 - LDAP Credential Disclosure
|
|
2019-01-16
|
|
Spotify 1.0.96.181 - 'Proxy configuration' Denial of Service (PoC)
|
|
2019-01-16
|
|
Windows Debugging 101
|
|
2019-01-15
|
|
[Portuguese] Reverse Engineering 101 using Radare2
|
|
2019-01-15
|
|
Windows Privilege Escalations
|
|
2019-01-15
|
|
An Internal Pentest Audit Against Active Directory
|
|
2019-01-15
|
|
PHP Source Code Analysis
|
|
2019-01-15
|
|
PoC || GTFO 0x16
|
|
2019-01-15
|
|
PoC || GTFO 0x15
|
|
2019-01-15
|
|
PoC || GTFO 0x14
|
|
2019-01-15
|
|
PoC || GTFO 0x13
|
|
2019-01-15
|
|
PoC || GTFO 0x12
|
|
2019-01-15
|
|
PoC || GTFO 0x11
|
|
2019-01-15
|
|
PoC || GTFO 0x10
|
|
2019-01-15
|
|
ownDMS 4.7 - SQL Injection
|
|
2019-01-15
|
|
Microsoft Windows VCF - Remote Code Execution
|
|
2019-01-15
|
|
Linux/x86 - Bind (4444/TCP) Shell (/bin/sh) Shellcode (100 bytes)
|
|
2019-01-15
|
|
1Password < 7.0 - Denial of Service
|
|
2019-01-15
|
|
AudioCode 400HD - Command Injection
|
|
2019-01-14
|
|
Portier Vision 4.4.4.2 / 4.4.4.6 - SQL Injection
|
|
2019-01-14
|
|
Microsoft Windows 10 - COM Desktop Broker Privilege Escalation
|
|
2019-01-14
|
|
Microsoft Windows 10 - Browser Broker Cross Session Privilege Escalation
|
|
2019-01-14
|
|
Microsoft Windows 10 - DSSVC MoveFileInheritSecurity Privilege Escalation
|
|
2019-01-14
|
|
Microsoft Windows 10 - DSSVC CanonicalAndValidateFilePath Security Feature Bypass
|
|
2019-01-14
|
|
Microsoft Windows 10 - DSSVC DSOpenSharedFile Arbitrary File Delete Privilege Escalation
|
|
2019-01-14
|
|
Microsoft Windows 10 - DSSVC DSOpenSharedFile Arbitrary File Open Privilege Escalation
|
|
2019-01-14
|
|
Microsoft Windows 10 - SSPI Network Authentication Session 0 Privilege Escalation
|
|
2019-01-14
|
|
Dokany 1.2.0.1000 - Stack-Based Buffer Overflow Privilege Escalation
|
|
2019-01-14
|
|
Bigcart - Ecommerce Multivendor System 1.0 - SQL Injection
|
|
2019-01-14
|
|
Umbraco CMS 7.12.4 - Authenticated Remote Code Execution
|
|
2019-01-14
|
|
Job Portal Platform 1.0 - SQL Injection
|
|
2019-01-14
|
|
Real Estate Custom Script 2.0 - SQL Injection
|
|
2019-01-14
|
|
ThinkPHP 5.X - Remote Command Execution
|
|
2019-01-14
|
|
Hucart CMS 5.7.4 - Cross-Site Request Forgery (Add Administrator Account)
|
|
2019-01-14
|
|
HealthNode Hospital Management System 1.0 - SQL Injection
|
|
2019-01-14
|
|
Lenovo R2105 - Cross-Site Request Forgery (Command Execution)
|
|
2019-01-14
|
|
Cleanto 5.0 - SQL Injection
|
|
2019-01-14
|
|
Find a Place CMS Directory 1.5 - SQL Injection
|
|
2019-01-14
|
|
Craigs Classified Ads CMS Theme 1.0.2 - SQL Injection
|
|
2019-01-14
|
|
Hootoo HT-05 - Remote Code Execution (Metasploit)
|
|
2019-01-14
|
|
xorg-x11-server < 1.20.3 - Local Privilege Escalation (Solaris 11 inittab)
|
|
2019-01-14
|
|
Live Call Support Widget 1.5 - Remote Code Execution / SQL Injection
|
|
2019-01-14
|
|
Live Call Support Widget 1.5 - Cross-Site Request Forgery (Add Admin)
|
|
2019-01-14
|
|
Twilio WEB To Fax Machine System Application 1.0 - SQL Injection
|
|
2019-01-14
|
|
Modern POS 1.3 - SQL Injection
|
|
2019-01-14
|
|
Modern POS 1.3 - Arbitrary File Download
|
|
2019-01-14
|
|
Horde Imp - 'imap_open' Remote Command Execution
|
|
2019-01-14
|
|
i-doit CMDB 1.12 - SQL Injection
|
|
2019-01-14
|
|
i-doit CMDB 1.12 - Arbitrary File Download
|
|
2019-01-14
|
|
Across DR-810 ROM-0 - Backup File Disclosure
|
|
2019-01-14
|
|
Luminance Studio 2.17 - Denial of Service (PoC)
|
|
2019-01-11
|
|
Blob Studio 2.17 - Denial of Service (PoC)
|
|
2019-01-11
|
|
Liquid Studio 2.17 - Denial of Service (PoC)
|
|
2019-01-11
|
|
Pixel Studio 2.17 - Denial of Service (PoC)
|
|
2019-01-11
|
|
Paint Studio 2.17 - Denial of Service (PoC)
|
|
2019-01-11
|
|
Tree Studio 2.17 - Denial of Service (PoC)
|
|
2019-01-11
|
|
Selfie Studio 2.17 - Denial of Service (PoC)
|
|
2019-01-11
|
|
Windows/x86 - Download With Tftp And Execute Shellcode (51-60 bytes)(msvcrt.system)(Generator)
|
|
2019-01-11
|
|
Joomla! Component JoomCRM 1.1.1 - SQL Injection
|
|
2019-01-11
|
|
Joomla! Component JoomProject 1.1.3.2 - Information Disclosure
|
|
2019-01-11
|
|
Code Blocks 17.12 - Local Buffer Overflow (SEH) (Unicode)
|
|
2019-01-11
|
|
Adapt Inventory Management System 1.0 - SQL Injection
|
|
2019-01-11
|
|
OpenSource ERP 6.3.1. - SQL Injection
|
|
2019-01-10
|
|
eBrigade ERP 4.5 - SQL Injection
|
|
2019-01-10
|
|
Event Locations 1.0.1 - 'id' SQL Injection
|
|
2019-01-10
|
|
Event Calendar 3.7.4 - 'id' SQL Injection
|
|
2019-01-10
|
|
MLMPro 1.0 - SQL Injection
|
|
2019-01-10
|
|
Architectural 1.0 - 'email' SQL Injection
|
|
2019-01-10
|
|
Shield CMS 2.2 - 'email' SQL Injection
|
|
2019-01-10
|
|
doitX 1.0 - 'search' SQL Injection
|
|
2019-01-10
|
|
Matrix MLM Script 1.0 - Information Disclosure
|
|
2019-01-10
|
|
eBrigade ERP 4.5 - Arbitrary File Download
|
|
2019-01-10
|
|
PEAR Archive_Tar < 1.4.4 - PHP Object Injection
|
|
2019-01-10
|
|
RGui 3.5.0 - Local Buffer Overflow (SEH)(DEP Bypass)
|
|
2019-01-10
|
|
BlogEngine 3.3 - XML External Entity Injection
|
|
2019-01-09
|
|
polkit - Temporary auth Hijacking via PID Reuse and Non-atomic Fork
|
|
2019-01-09
|
|
Microsoft Windows - DSSVC CheckFilePermission Arbitrary File Deletion
|
|
2019-01-09
|
|
Linux/x86 - wget chmod execute over execve /bin/sh -c Shellcode (119 bytes)
|
|
2019-01-09
|
|
ZTE MF65 BD_HDV6MF65V1.0.0B05 - Cross-Site Scripting
|
|
2019-01-09
|
|
Microsoft Office SharePoint Server 2016 - Denial of Service (Metasploit)
|
|
2019-01-09
|
|
Heatmiser Wifi Thermostat 1.7 - Cross-Site Request Forgery (Update Admin)
|
|
2019-01-09
|
|
Google Chrome V8 JavaScript Engine 71.0.3578.98 - Out-of-Memory. Denial of Service (PoC)
|
|
2019-01-09
|
|
Microsoft Windows - Windows Error Reporting Local Privilege Escalation
|
|
2019-01-09
|
|
MDwiki < 0.6.2 - Cross-Site Scripting
|
|
2019-01-09
|
|
Wireshark - 'get_t61_string' Heap Out-of-Bounds Read
|
|
2019-01-08
|
|
Dolibarr ERP-CRM 8.0.4 - 'rowid' SQL Injection
|
|
2019-01-08
|
|
CF Image Hosting Script 1.6.5 - (Delete all Pictures) Privilege Escalation
|
|
2019-01-08
|
|
KioWare Server Version 4.9.6 - Weak Folder Permissions Privilege Escalation
|
|
2019-01-07
|
|
Huawei E5330 21.210.09.00.158 - Cross-Site Request Forgery (Send SMS)
|
|
2019-01-07
|
|
Leica Geosystems GR10/GR25/GR30/GR50 GNSS 4.30.063 - JS/HTML Code Injection
|
|
2019-01-07
|
|
Leica Geosystems GR10/GR25/GR30/GR50 GNSS 4.30.063 - Cross-Site Request Forgery
|
|
2019-01-07
|
|
Foscam Video Management System 1.1.4.9 - 'Username' Denial of Service (PoC)
|
|
2019-01-07
|
|
SpotFTP Password Recover 2.4.2 - 'Name' Denial of Service (PoC)
|
|
2019-01-07
|
|
BlueAuditor 1.7.2.0 - 'Key' Denial of Service (PoC)
|
|
2019-01-07
|
|
Ajera Timesheets 9.10.16 - Deserialization of Untrusted Data
|
|
2019-01-07
|
|
Roxy Fileman 1.4.5 - Unrestricted File Upload / Directory Traversal
|
|
2019-01-07
|
|
MyT Project Management 1.5.1 - 'Charge[group_total]' SQL Injection
|
|
2019-01-07
|
|
Wordpress Plugin UserPro < 4.9.21 - User Registration Privilege Escalation
|
|
2019-01-07
|
|
phpMoAdmin MongoDB GUI 1.1.5 - Cross-Site Request Forgery / Cross-Site Scripting
|
|
2019-01-07
|
|
PLC Wireless Router GPN2.4P21-C-CN - Cross-Site Scripting
|
|
2019-01-07
|
|
MyBB OUGC Awards Plugin 1.8.3 - Persistent Cross-Site Scripting
|
|
2019-01-07
|
|
LayerBB 1.1.1 - Persistent Cross-Site Scripting
|
|
2019-01-07
|
|
Microsoft Edge 44.17763.1.0 - NULL Pointer Dereference
|
|
2019-01-07
|
|
All in One Video Downloader 1.2 - Authenticated SQL Injection
|
|
2019-01-07
|
|
Embed Video Scripts - Persistent Cross-Site Scripting
|
|
2019-01-07
|
|
Mailcleaner - Authenticated Remote Code Execution (Metasploit)
|
|
2019-01-07
|
|
Hashicorp Consul - Remote Command Execution via Services API (Metasploit)
|
|
2019-01-02
|
|
Hashicorp Consul - Remote Command Execution via Rexec (Metasploit)
|
|
2019-01-02
|
|
WebKit JSC - 'JSArray::shiftCountWithArrayStorage' Out-of-Bounds Read/Write
|
|
2019-01-02
|
|
WebKit JSC - 'AbstractValue::set' Use-After-Free
|
|
2019-01-02
|
|
Ayukov NFTP FTP Client 2.0 - Buffer Overflow
|
|
2019-01-02
|
|
NetworkSleuth 3.0.0.0 - 'Key' Denial of Service (PoC)
|
|
2019-01-02
|
|
EZ CD Audio Converter 8.0.7 - Denial of Service (PoC)
|
|
2019-01-02
|
|
Frog CMS 0.9.5 - Cross-Site Scripting
|
|
2019-01-02
|
|
WordPress Plugin Adicon Server 1.2 - 'selectedPlace' SQL Injection
|
|
2019-01-02
|
|
Vtiger CRM 7.1.0 - Remote Code Execution
|
|
2019-01-02
|
|
NBMonitor Network Bandwidth Monitor 1.6.5.0 - 'Name' Denial of Service (PoC)
|
|
2019-01-02
|
|
PLC Wireless Router GPN2.4P21-C-CN Cross Site Scripting Vulnerability
|
|
2018-12-27
|
|
Terminal Services Manager 3.1 - Local Buffer Overflow (SEH) Exploit
|
|
2018-12-27
|
|
bludit Pages Editor 3.0.0 - Arbitrary File Upload Vulnerability
|
|
2018-12-27
|
|
Craft CMS 3.0.25 - Cross-Site Scripting Vulnerability
|
|
2018-12-27
|
|
MAGIX Music Editor 3.1 - Buffer Overflow (SEH) Exploit
|
|
2018-12-27
|
|
ShareAlarmPro 2.1.4 - Denial of Service Exploit
|
|
2018-12-27
|
|
NetShareWatcher 1.5.8 - Denial of Service Exploit
|
|
2018-12-27
|
|
Product Key Explorer 4.0.9 - Denial of Service Exploit
|
|
2018-12-27
|
|
WordPress Audio Record 1.0 Plugin - Arbitrary File Upload Vulnerability
|
|
2018-12-27
|
|
WordPress Baggage Freight Shipping Australia 0.1.0 Plugin - Arbitrary File Upload
|
|
2018-12-27
|
|
Iperius Backup 5.8.1 - Buffer Overflow (SEH) Exploit
|
|
2018-12-27
|
|
Linux/x64 - Disable ASLR Security Shellcode (93 Bytes)
|
|
2018-12-27
|
|
Linux/x86 - Kill All Processes Shellcode (14 bytes)
|
|
2018-12-27
|
|
Google Chrome 70 - SQLite Magellan Crash Exploit
|
|
2018-12-27
|
|
Microsoft Windows - MsiAdvertiseProduct Arbitrary File Copy/Read Exploit
|
|
2018-12-27
|
|
FrontAccounting 2.4.5 - SubmitUser SQL Injection Vulnerability
|
|
2018-12-27
|
|
WSTMart 2.0.8 - Cross-Site Scripting Vulnerability
|
|
2018-12-27
|
|
WSTMart 2.0.8 - Cross-Site Request Forgery (Add Admin) Vulnerability
|
|
2018-12-27
|
|
PhpSpreadsheet < 1.5.0 - XML External Entity (XXE) Vulnerability
|
|
2018-12-27
|
|
Kubernetes - (Unauthenticated) Arbitrary Requests Exploit
|
|
2018-12-27
|
|
Kubernetes - (Authenticated) Arbitrary Requests Exploit
|
|
2018-12-27
|
|
Adobe Flash ActiveX Plugin 28.0.0.137 - Remote Code Execution Exploit
|
|
2018-12-27
|
|
phpMyAdmin 4.8.4 - AllowArbitraryServer Arbitrary File Read Exploit
|
|
2018-12-27
|
|
Keybase keybase-redirector - ($PATH) Local Privilege Escalation Exploit
|
|
2018-12-27
|
|
ASUS Aura Sync versions 1.07.22 Driver Privilege Escalation Exploit
|
|
2018-12-27
|
|
Juniper Secure Access SSL VPN Privilege Escalation Vulnerability
|
|
2018-12-27
|
|
ZeusCart 4.0 - Cross-Site Request Forgery (Deactivate Customer Accounts) Vulnerability
|
|
2018-12-27
|
|
Microsoft Windows - MsiAdvertiseProduct Arbitrary File Read Exploit
|
|
2018-12-27
|
|
Microsoft Edge 42.17134.1.0 - Tree::ANode::DocumentLayout Denial of Service Exploit
|
|
2018-12-27
|
|
VBScript - MSXML Execution Policy Bypass Exploit
|
|
2018-12-27
|
|
VBScript - VbsErase Reference Leak Use-After-Free Exploit
|
|
2018-12-27
|
|
XMPlay 3.8.3 - .m3u Local Stack Overflow Code Execution Exploit
|
|
2018-12-27
|
|
AnyBurn 4.3 - Local Buffer Overflow (SEH) Exploit
|
|
2018-12-27
|
|
Base64 Decoder 1.1.2 - Local Buffer Overflow (SEH) Exploit
|
|
2018-12-27
|
|
Netatalk < 3.1.12 - Authentication Bypass Exploit
|
|
2018-12-27
|
|
SQLScan 1.0 - Denial of Service Exploit
|
|
2018-12-27
|
|
Erlang Port Mapper Daemon Cookie Remote Code Execution Exploit
|
|
2018-12-27
|
|
IBM Operational Decision Manager 8.x - XML External Entity Injection
|
|
2018-12-27
|
|
Linux Kernel 4.4 - rtnetlink Stack Memory Disclosure Exploit
|
|
2018-12-27
|
|
Rukovoditel Project Management CRM 2.3.1 - Remote Code Execution Exploit
|
|
2018-12-27
|
|
LanSpy 2.0.1.159 - Local Buffer Overflow Exploit
|
|
2018-12-27
|
|
Yeswiki Cercopitheque - id SQL Injection Vulnerability
|
|
2018-12-27
|
|
Bolt CMS < 3.6.2 - Cross-Site Scripting Vulnerability
|
|
2018-12-27
|
|
Integria IMS 5.0.83 - search_string Cross-Site Scripting Vulnerability
|
|
2018-12-27
|
|
Integria IMS 5.0.83 - Cross-Site Request Forgery Vulnerability
|
|
2018-12-27
|
|
Hotel Booking Script 3.4 - CSRF (Change Admin Password) Vulnerability
|
|
2018-12-27
|
|
Nsauditor 3.0.28.0 - Local SEH Buffer Overflow Exploit
|
|
2018-12-27
|
|
Excel Password Recovery 8.2.0.0 - Local Buffer Overflow Denial of Service Exploit
|
|
2018-12-27
|
|
Microsoft Windows - jscript!JsArrayFunctionHeapSort Out-of-Bounds Write Exploit
|
|
2018-12-27
|
|
MiniShare 1.4.1 - Remote Buffer Overflow HEAD and POST Method Exploit
|
|
2018-12-27
|
|
SDL Web Content Manager 8.5.0 - XML External Entity Injection Vulnerability
|
|
2018-12-27
|
|
PDF Explorer 1.5.66.2 - SEH Local Exploit
|
|
2018-12-27
|
|
GNU inetutils < 1.9.4 - (telnet.c) Multiple Overflows Exploit
|
|
2018-12-27
|
|
Windows Persistent Service Installer Exploit
|
|
2018-12-27
|
|
Zoho ManageEngine OpManager 12.3 SQL Injection Vulnerability
|
|
2018-12-27
|
|
Razer Cortex Debugger Remote Command Execution Vulnerability
|
|
2018-12-27
|
|
KARMA 6.0.0 SQL Injection Vulnerability
|
|
2018-12-27
|
|
Transcend Wi-Fi SD Card Cross Site Request Forgery / Traversal Vulnerabilities
|
|
2018-12-27
|
|
ShareAlarmPro 2.1.4 - Denial of Service (PoC)
|
|
2018-12-27
|
|
NetShareWatcher 1.5.8 - Denial of Service (PoC)
|
|
2018-12-27
|
|
WordPress Plugin Baggage Freight Shipping Australia 0.1.0 - Arbitrary File Upload
|
|
2018-12-27
|
|
bludit Pages Editor 3.0.0 - Arbitrary File Upload
|
|
2018-12-27
|
|
Iperius Backup 5.8.1 - Buffer Overflow (SEH)
|
|
2018-12-27
|
|
Terminal Services Manager 3.1 - Local Buffer Overflow (SEH)
|
|
2018-12-27
|
|
Product Key Explorer 4.0.9 - Denial of Service (PoC)
|
|
2018-12-27
|
|
MAGIX Music Editor 3.1 - Buffer Overflow (SEH)
|
|
2018-12-27
|
|
WordPress Plugin Audio Record 1.0 - Arbitrary File Upload
|
|
2018-12-27
|
|
Craft CMS 3.0.25 - Cross-Site Scripting
|
|
2018-12-27
|
|
Kubernetes - (Authenticated) Arbitrary Requests
|
|
2018-12-24
|
|
Kubernetes - (Unauthenticated) Arbitrary Requests
|
|
2018-12-24
|
|
Adobe Flash ActiveX Plugin 28.0.0.137 - Remote Code Execution (PoC)
|
|
2018-12-24
|
|
PhpSpreadsheet < 1.5.0 - XML External Entity (XXE)
|
|
2018-12-24
|
|
Netatalk - Bypass Authentication
|
|
2018-12-24
|
|
Searching systematically for PHP disable_functions bypasses
|
|
2018-12-24
|
|
Keybase keybase-redirector - '$PATH' Local Privilege Escalation
|
|
2018-12-24
|
|
Pure In-Memory (Shell)Code Injection In Linux Userland
|
|
2018-12-24
|
|
Google Chrome 70 - SQLite Magellan Crash (PoC)
|
|
2018-12-24
|
|
phpMyAdmin 4.8.4 - 'AllowArbitraryServer' Arbitrary File Read
|
|
2018-12-24
|
|
Microsoft Windows - 'MsiAdvertiseProduct' Arbitrary File Copy/Read
|
|
2018-12-24
|
|
Linux/x86 - Kill All Processes Shellcode (14 bytes)
|
|
2018-12-24
|
|
Angry IP Scanner for Linux 3.5.3 - Denial of Service (PoC)
|
|
2018-12-24
|
|
FrontAccounting 2.4.5 - 'SubmitUser' SQL Injection
|
|
2018-12-24
|
|
WSTMart 2.0.8 - Cross-Site Request Forgery (Add Admin)
|
|
2018-12-24
|
|
WSTMart 2.0.8 - Cross-Site Scripting
|
|
2018-12-24
|
|
Netatalk < 3.1.12 - Authentication Bypass
|
|
2018-12-21
|
|
SQLScan 1.0 - Denial of Service (PoC)
|
|
2018-12-21
|
|
Microsoft Windows - 'MsiAdvertiseProduct' Arbitrary File Read
|
|
2018-12-21
|
|
ZeusCart 4.0 - Cross-Site Request Forgery (Deactivate Customer Accounts)
|
|
2018-12-21
|
|
Microsoft Edge 42.17134.1.0 - 'Tree::ANode::DocumentLayout' Denial of Service
|
|
2018-12-21
|
|
AnyBurn 4.3 - Local Buffer Overflow (SEH)
|
|
2018-12-21
|
|
Erlang - Port Mapper Daemon Cookie RCE (Metasploit)
|
|
2018-12-20
|
|
VBScript - MSXML Execution Policy Bypass
|
|
2018-12-20
|
|
VBScript - VbsErase Reference Leak Use-After-Free
|
|
2018-12-20
|
|
Base64 Decoder 1.1.2 - Local Buffer Overflow (SEH)
|
|
2018-12-20
|
|
XMPlay 3.8.3 - '.m3u' Local Stack Overflow Code Execution
|
|
2018-12-20
|
|
LanSpy 2.0.1.159 - Buffer Overflow (SEH) (Egghunter)
|
|
2018-12-20
|
|
IBM Operational Decision Manager 8.x - XML External Entity Injection
|
|
2018-12-19
|
|
PDF Explorer 1.5.66.2 - Buffer Overflow (SEH)
|
|
2018-12-19
|