|
Linux/ARM64 - Reverse (::1:4444/TCP) Shell (/bin/sh) +IPv6 Shellcode (140 bytes)
|
|
2019-07-01
|
|
Linux/ARM64 - Bind (4444/TCP) Shell (/bin/sh) + IPv6 Shellcode (176 bytes)
|
|
2019-07-01
|
|
Linux/ARM64 - Reverse (127.0.0.1:4444/TCP) Shell (/bin/sh) + Null-Free Shellcode (128 bytes)
|
|
2019-07-01
|
|
Linux/ARM64 - Bind (4444/TCP) Shell (/bin/sh) + Null-Free Shellcode (164 bytes)
|
|
2019-07-01
|
|
Linux/ARM64 - execve("/bin/sh", NULL, NULL) Shellcode (40 Bytes)
|
|
2019-07-01
|
|
Linux Mint 18.3-19.1 - 'yelp' Command Injection
|
|
2019-07-01
|
|
CiuisCRM 1.6 - 'eventType' SQL Injection
|
|
2019-07-01
|
|
WorkSuite PRM 2.4 - 'password' SQL Injection
|
|
2019-07-01
|
|
LibreNMS 1.46 - 'addhost' Remote Code Execution
|
|
2019-06-28
|
|
Linux/x86 - chmod + execute + hide output via /usr/bin/wget Shellcode (129 bytes)
|
|
2019-06-28
|
|
Windows/x86 - Start iexplore.exe Shellcode (191 Bytes)
|
|
2019-06-28
|
|
Windows/x86 - bitsadmin Download and Execute (http://192.168.10.10/evil.exe "c:\evil.exe") Shellcode (210 Bytes)
|
|
2019-06-27
|
|
Linux/x86 - ASCII AND, SUB, PUSH, POPAD Encoder Shellcode
|
|
2019-06-27
|
|
Nagios XI 5.5.6 - Magpie_debug.php Root Remote Code Execution (Metasploit)
|
|
2019-06-26
|
|
Mozilla Spidermonkey - IonMonkey 'Array.prototype.pop' Type Confusion
|
|
2019-06-26
|
|
WordPress Plugin Live Chat Unlimited 2.8.3 - Cross-Site Scripting
|
|
2019-06-25
|
|
WordPress Plugin iLive 1.0.4 - Cross-Site Scripting
|
|
2019-06-25
|
|
BlogEngine.NET 3.3.6/3.3.7 - 'path' Directory Traversal
|
|
2019-06-25
|
|
AZADMIN CMS 1.0 - SQL Injection
|
|
2019-06-25
|
|
Fortinet FCM-MB40 - Cross-Site Request Forgery / Remote Command Execution
|
|
2019-06-25
|
|
SAPIDO RB-1732 - Remote Command Execution
|
|
2019-06-25
|
|
SuperDoctor5 - 'NRPE' Remote Code Execution
|
|
2019-06-25
|
|
Microsoft Windows Font Cache Service - Insecure Sections Privilege Escalation
|
|
2019-06-24
|
|
Microsoft Windows - 'CmpAddRemoveContainerToCLFSLog' Arbitrary File/Directory Creation
|
|
2019-06-24
|
|
GrandNode 4.40 - Path Traversal / Arbitrary File Download
|
|
2019-06-24
|
|
GSearch 1.0.1.0 - Denial of Service (PoC)
|
|
2019-06-24
|
|
Linux/x86_64 - Reverse(0.0.0.0:4444/TCP) Shell (/bin/sh) Shellcode
|
|
2019-06-24
|
|
SeedDMS < 5.1.11 - 'out.GroupMgr.php' Cross-Site Scripting
|
|
2019-06-24
|
|
SeedDMS < 5.1.11 - 'out.UsrMgr.php' Cross-Site Scripting
|
|
2019-06-24
|
|
SeedDMS versions < 5.1.11 - Remote Command Execution
|
|
2019-06-24
|
|
EA Origin < 10.5.36 - Remote Code Execution
|
|
2019-06-24
|
|
Sony PlayStation Vita (PS Vita) - Trinity: PSP Emulator Escape
|
|
2019-06-22
|
|
EA Origin < 10.5.38 - Remote Code Execution
|
|
2019-06-21
|
|
Cisco Prime Infrastructure - Runrshell Privilege Escalation (Metasploit)
|
|
2019-06-20
|
|
Cisco Prime Infrastructure Health Monitor - TarArchive Directory Traversal (Metasploit)
|
|
2019-06-20
|
|
Linux - Use-After-Free via race Between modify_ldt() and #BR Exception
|
|
2019-06-20
|
|
BlogEngine.NET 3.3.6/3.3.7 - XML External Entity Injection
|
|
2019-06-20
|
|
WebERP 4.15 - SQL injection
|
|
2019-06-20
|
|
Tuneclone 2.20 - Local SEH Buffer Overflow
|
|
2019-06-20
|
|
BlogEngine.NET 3.3.6/3.3.7 - 'theme Cookie' Directory Traversal / Remote Code Execution
|
|
2019-06-19
|
|
BlogEngine.NET 3.3.6/3.3.7 - 'dirPath' Directory Traversal / Remote Code Execution
|
|
2019-06-19
|
|
Serv-U FTP Server < 15.1.7 - Local Privilege Escalation
|
|
2019-06-18
|
|
Linux/x86_64 - execve(/bin/sh) Shellcode (22 bytes)
|
|
2019-06-18
|
|
Sahi pro 8.x - Cross-Site Scripting
|
|
2019-06-18
|
|
Sahi pro 8.x - SQL Injection
|
|
2019-06-18
|
|
Sahi pro 7.x/8.x - Directory Traversal
|
|
2019-06-18
|
|
Thunderbird ESR < 60.7.XXX - 'icalrecur_add_bydayrules' Stack-Based Buffer Overflow
|
|
2019-06-17
|
|
Thunderbird ESR < 60.7.XXX - 'parser_get_next_char' Heap-Based Buffer Overflow
|
|
2019-06-17
|
|
Thunderbird ESR < 60.7.XXX - 'icalmemorystrdupanddequote' Heap-Based Buffer Overflow
|
|
2019-06-17
|
|
Thunderbird ESR < 60.7.XXX - Type Confusion
|
|
2019-06-17
|