|
WebIncorp ERP - SQL injection
|
|
2019-08-02
|
|
Ultimate Loan Manager 2.0 - Cross-Site Scripting
|
|
2019-08-02
|
|
Oracle Hyperion Planning 11.1.2.3 - XML External Entity
|
|
2019-07-31
|
|
Redis 4.x / 5.x - Unauthenticated Code Execution (Metasploit)
|
|
2019-07-31
|
|
iMessage - NSKeyedUnarchiver Deserialization Allows file Backed NSData Objects
|
|
2019-07-31
|
|
iMessage - Memory Corruption when Decoding NSKnownKeysDictionary1
|
|
2019-07-31
|
|
iMessage - NSArray Deserialization can Invoke Subclass that does not Retain References
|
|
2019-07-31
|
|
macOS / iOS JavaScriptCore - JSValue Use-After-Free in ValueProfiles
|
|
2019-07-31
|
|
macOS / iOS JavaScriptCore - Loop-Invariant Code Motion (LICM) Leaves Object Property Access Unguarded
|
|
2019-07-31
|
|
macOS / iOS NSKeyedUnarchiver - Use-After-Free of ObjC Objects when Unarchiving OITSUIntDictionary Instances
|
|
2019-07-31
|
|
Amcrest Cameras 2.520.AC00.18.R - Unauthenticated Audio Streaming
|
|
2019-07-31
|
|
phpMyFAQ 2.9.8 - Cross-Site Scripting (2)
|
|
2019-07-30
|
|
Trend Micro InterScan Messaging Security (Virtual Appliance) - 'Proxy.php' Remote Code Execution (Metasploit)
|
|
2019-07-30
|
|
Linux/x64 - Reverse (192.168.1.45:4444/TCP) Shell Shellcode (84 bytes)
|
|
2019-07-30
|
|
WP Database Backup < 5.2 - Remote Code Execution (Metasploit)
|
|
2019-07-29
|
|
Schneider Electric Pelco Endura NET55XX Encoder - Authentication Bypass (Metasploit)
|
|
2019-07-29
|
|
GigToDo 1.3 - Cross-Site Scripting
|
|
2019-07-29
|
|
WordPress Theme Real Estate 2.8.9 - Cross-Site Scripting
|
|
2019-07-29
|
|
Linux/x86 - NOT +SHIFT-N+ XOR-N Encoded /bin/sh Shellcode
|
|
2019-07-29
|
|
WordPress Plugin Simple Membership < 3.8.5 - Cross-Site Request Forgery
|
|
2019-07-29
|
|
Ahsay Backup 7.x - 8.1.1.50 - XML External Entity Injection
|
|
2019-07-26
|
|
Ahsay Backup 7.x - 8.1.1.50 - Authenticated Arbitrary File Upload / Remote Code Execution (Metasploit)
|
|
2019-07-26
|
|
Ahsay Backup 7.x - 8.1.1.50 - Authenticated Arbitrary File Upload / Remote Code Execution
|
|
2019-07-26
|
|
pdfresurrect 0.15 - Buffer Overflow
|
|
2019-07-26
|
|
Moodle Filepicker 3.5.2 - Server Side Request Forgery
|
|
2019-07-26
|
|
Microsoft Windows 7 build 7601 (x86) - Local Privilege Escalation
|
|
2019-07-26
|
|
Deepin Linux 15 - 'lastore-daemon' Local Privilege Escalation
|
|
2019-07-26
|
|
ASAN/SUID - Local Privilege Escalation
|
|
2019-07-26
|
|
Serv-U FTP Server < 15.1.7 - Local Privilege Escalation (2)
|
|
2019-07-26
|
|
S-nail < 14.8.16 - Local Privilege Escalation
|
|
2019-07-26
|
|
VMware Workstation/Player < 12.5.5 - Local Privilege Escalation
|
|
2019-07-26
|
|
Linux Kernel 4.4.0-21 < 4.4.0-51 (Ubuntu 14.04/16.04 x86-64) - 'AF_PACKET' Race Condition Privilege Escalation
|
|
2019-07-26
|
|
Linux Kernel < 4.4.0/ < 4.8.0 (Ubuntu 14.04/16.04 / Linux Mint 17/18 / Zorin) - Local Privilege Escalation (KASLR / SMEP)
|
|
2019-07-26
|
|
Linux Kernel 4.8.0-34 < 4.8.0-45 (Ubuntu / Linux Mint) - Packet Socket Local Privilege Escalation
|
|
2019-07-26
|
|
Linux Kernel 4.15.x < 4.19.2 - 'map_write() CAP_SYS_ADMIN' Local Privilege Escalation (polkit Method)
|
|
2019-07-26
|
|
Linux Kernel 4.15.x < 4.19.2 - 'map_write() CAP_SYS_ADMIN' Local Privilege Escalation (ldpreload Method)
|
|
2019-07-26
|
|
Linux Kernel 4.15.x < 4.19.2 - 'map_write() CAP_SYS_ADMIN' Local Privilege Escalation (dbus Method)
|
|
2019-07-26
|
|
Linux Kernel 4.15.x < 4.19.2 - 'map_write() CAP_SYS_ADMIN' Local Privilege Escalation (cron Method)
|
|
2019-07-26
|
|
Linux Kernel 4.10 < 5.1.17 - 'PTRACE_TRACEME' pkexec Local Privilege Escalation
|
|
2019-07-26
|
|
WebKit - Universal Cross-Site Scripting due to Synchronous Page Loads
|
|
2019-07-25
|
|
Ovidentia 8.4.3 - SQL Injection
|
|
2019-07-25
|
|
Ovidentia 8.4.3 - Cross-Site Scripting
|
|
2019-07-25
|
|
Apple iMessage - DigitalTouch tap Message Processing Out-of-Bounds Read
|
|
2019-07-24
|
|
Trend Micro Deep Discovery Inspector IDS - Security Bypass
|
|
2019-07-24
|
|
WordPress Plugin Hybrid Composer 1.4.6 - Improper Access Restrictions
|
|
2019-07-24
|
|
Cisco Wireless Controller 3.6.10E - Cross-Site Request Forgery
|
|
2019-07-24
|
|
NoviSmart CMS - SQL injection
|
|
2019-07-24
|
|
Linux/x86_64 - Wget Linux Enumeration Script Shellcode (155 Bytes)
|
|
2019-07-23
|
|
Axway SecureTransport 5 - Unauthenticated XML Injection
|
|
2019-07-22
|
|
Comtrend-AR-5310 - Restricted Shell Escape
|
|
2019-07-22
|