|
Smartwares HOME easy 1.0.9 - Client-Side Authentication Bypass
|
|
2019-11-06
|
|
QNAP NetBak Replicator 4.5.6.0607 - 'QVssService' Unquoted Service Path
|
|
2019-11-06
|
|
Wacom WTabletService 6.6.7-3 - 'WTabletServicePro' Unquoted Service Path
|
|
2019-11-06
|
|
macOS XNU - Missing Locking in checkdirs_callback() Enables Race with fchdir_common()
|
|
2019-11-05
|
|
WebKit - Universal XSS in JSObject::putInlineSlow and JSValue::putToPrimitive
|
|
2019-11-05
|
|
JavaScriptCore - Type Confusion During Bailout when Reconstructing Arguments Objects
|
|
2019-11-05
|
|
SD.NET RIM 4.7.3c - 'idtyp' SQL Injection
|
|
2019-11-05
|
|
html5_snmp 1.11 - 'Router_ID' SQL Injection
|
|
2019-11-05
|
|
html5_snmp 1.11 - 'Remark' Persistent Cross-Site Scripting
|
|
2019-11-05
|
|
FileOptimizer 14.00.2524 - Denial of Service (PoC)
|
|
2019-11-05
|
|
rimbalinux AhadPOS 1.11 - 'alamatCustomer' SQL Injection
|
|
2019-11-05
|
|
Network Inventory Advisor 5.0.26.0 - 'niaservice' Unquoted Service Path
|
|
2019-11-05
|
|
thrsrossi Millhouse-Project 1.414 - 'content' Persistent Cross-Site Scripting
|
|
2019-11-05
|
|
Blue Stacks App Player 2.4.44.62.57 - "BstHdLogRotatorSvc" Unquote Service Path
|
|
2019-11-05
|
|
thejshen Globitek CMS 1.4 - 'id' SQL Injection
|
|
2019-11-05
|
|
Micro Focus (HPE) Data Protector - SUID Privilege Escalation (Metasploit)
|
|
2019-11-04
|
|
Covert Channel and Data Hiding in TCP/IP
|
|
2019-11-04
|
|
Apple macOS 10.15.1 - Denial of Service (PoC)
|
|
2019-11-04
|
|
Launch Manager 6.1.7600.16385 - 'DsiWMIService' Unquoted Service Path
|
|
2019-11-04
|
|
Ayukov NFTP client 1.71 - 'SYST' Buffer Overflow
|
|
2019-11-04
|
|
OpenVPN Connect 3.0.0.272 - 'ovpnagent' Unquoted Service Path
|
|
2019-11-04
|
|
Aida64 6.10.5200 - Buffer Overflow (SEH)
|
|
2019-11-04
|
|
Nostromo - Directory Traversal Remote Command Execution (Metasploit)
|
|
2019-11-01
|
|
Apache Solr 8.2.0 - Remote Code Execution
|
|
2019-11-01
|
|
ownCloud 10.3.0 stable - Cross-Site Request Forgery
|
|
2019-11-01
|
|
OpenVPN Private Tunnel 2.8.4 - 'ovpnagent' Unquoted Service Path
|
|
2019-11-01
|
|
TheJshen contentManagementSystem 1.04 - 'id' SQL Injection
|
|
2019-11-01
|
|
WMV to AVI MPEG DVD WMV Convertor 4.6.1217 - Buffer OverFlow (SEH)
|
|
2019-10-31
|
|
Wordpress Plugin Google Review Slider 6.1 - 'tid' SQL Injection
|
|
2019-10-31
|
|
MikroTik RouterOS 6.45.6 - DNS Cache Poisoning
|
|
2019-10-31
|
|
JavaScriptCore - GetterSetter Type Confusion During DFG Compilation
|
|
2019-10-30
|
|
Linux/x86 - (NOT|ROT+8 Encoded) execve(/bin/sh) null-free Shellcode (47 bytes)
|
|
2019-10-30
|
|
WMV to AVI MPEG DVD WMV Convertor 4.6.1217 - Denial of Service
|
|
2019-10-30
|
|
iSeeQ Hybrid DVR WH-H4 2.0.0.P - (get_jpeg) Stream Disclosure
|
|
2019-10-30
|
|
Citrix StoreFront Server 7.15 - XML External Entity Injection
|
|
2019-10-30
|
|
Ajenti 2.1.31 - Remote Code Exection (Metasploit)
|
|
2019-10-30
|
|
Microsoft Windows Server 2012 - 'Group Policy' Security Feature Bypass
|
|
2019-10-29
|
|
Microsoft Windows Server 2012 - 'Group Policy' Remote Code Execution
|
|
2019-10-29
|
|
Wordpress 5.2.4 - Cross-Origin Resource Sharing
|
|
2019-10-29
|
|
Intelligent Security System SecurOS Enterprise 10.2 - 'SecurosCtrlService' Unquoted Service Path
|
|
2019-10-29
|
|
rConfig 3.9.2 - Remote Code Execution
|
|
2019-10-29
|
|
Win10 MailCarrier 2.51 - 'POP3 User' Remote Buffer Overflow
|
|
2019-10-29
|
|
PHP-FPM + Nginx - Remote Code Execution
|
|
2019-10-28
|
|
WebKit - Universal XSS in HTMLFrameElementBase::isURLAllowed
|
|
2019-10-28
|
|
ChaosPro 2.0 - Buffer Overflow (SEH)
|
|
2019-10-28
|
|
delpino73 Blue-Smiley-Organizer 1.32 - 'datetime' SQL Injection
|
|
2019-10-28
|
|
JumpStart 0.6.0.0 - 'jswpbapi' Unquoted Service Path
|
|
2019-10-28
|
|
waldronmatt FullCalendar-BS4-PHP-MySQL-JSON 1.21 - 'description' Cross-Site Scripting
|
|
2019-10-28
|
|
Part-DB 0.4 - Authentication Bypass
|
|
2019-10-28
|
|
waldronmatt FullCalendar-BS4-PHP-MySQL-JSON 1.21 - 'start' SQL Injection
|
|
2019-10-28
|