2019-04-22 |
msvod 10 - cross-site request forgery (change user information)
|
webapps exploit |
php vulnerability |
2019-04-22 |
74cms 5.0.1 - cross-site request forgery (add new admin user)
|
webapps exploit |
php vulnerability |
2019-04-22 |
labf nfsaxe 3.7 ping client - 'host ip' buffer overflow (direct ret)
|
local exploit |
windows vulnerability |
2019-04-22 |
linux/arm - reverse (127.0.0.1:4444/tcp) shell (/bin/sh) + password (s59!) + null-free shellcode (100 bytes)
|
shellcode exploit |
arm vulnerability |
2019-04-22 |
google chrome 73.0.3683.103 v8 javascript engine - out-of-memory in invalid table size denial of service (poc)
|
dos exploit |
multiple vulnerability |
2019-04-22 |
wordpress plugin contact form builder 1.0.67 - cross-site request forgery / local file inclusion
|
webapps exploit |
php vulnerability |
2019-04-22 |
qnap myqnapcloud connect 1.3.4.0317 - 'username/password' denial of service
|
dos exploit |
hardware vulnerability |
2019-04-22 |
ease audio converter 5.30 - '.mp4' denial of service (poc)
|
dos exploit |
windows vulnerability |
2019-04-19 |
atlassian confluence widget connector macro - velocity template injection (metasploit)
|
remote exploit |
multiple vulnerability |
2019-04-19 |
systemtap 1.3 - modprobe_options privilege escalation (metasploit)
|
local exploit |
linux vulnerability |
2019-04-19 |
oracle business intelligence / xml publisher 11.1.1.9.0 / 12.2.1.3.0 / 12.2.1.4.0 - xml external entity injection
|
webapps exploit |
windows vulnerability |
2019-04-19 |
oracle business intelligence 11.1.1.9.0 / 12.2.1.3.0 / 12.2.1.4.0 - directory traversal
|
webapps exploit |
windows vulnerability |
2019-04-18 |
libreoffice < 6.0.7 / 6.1.3 - macro code execution (metasploit)
|
local exploit |
multiple vulnerability |
2019-04-18 |
netwide assembler (nasm) 2.14rc15 - null pointer dereference (poc)
|
dos exploit |
multiple vulnerability |
2019-04-18 |
manageengine applications manager 11.0 < 14.0 - sql injection / remote code execution (metasploit)
|
remote exploit |
windows vulnerability |
2019-04-18 |
evernote 7.9 - code execution via path traversal
|
local exploit |
macos vulnerability |
2019-04-17 |
oracle java runtime environment - heap corruption during ttf font rendering in glyphiterator::setcurrglyphid
|
dos exploit |
multiple vulnerability |
2019-04-17 |
oracle java runtime environment - heap corruption during ttf font rendering in sc_findextrema4
|
dos exploit |
multiple vulnerability |
2019-04-17 |
dhcp server 2.5.2 - denial of service (poc)
|
dos exploit |
windows vulnerability |
2019-04-17 |
asus hg100 - denial of service
|
dos exploit |
hardware vulnerability |
2019-04-17 |
mailcarrier 2.51 - pop3 'retr' seh buffer overflow
|
remote exploit |
windows vulnerability |
2019-04-16 |
microsoft windows 10 1809 - luafv postluafvpostreadwrite section_object_pointers race condition privilege escalation
|
local exploit |
windows vulnerability |
2019-04-16 |
microsoft windows 10 1809 - luafv delayed virtualization cache manager poisoning privilege escalation
|
local exploit |
windows vulnerability |
2019-04-16 |
microsoft windows 10 1809 - luafv ntsetcachedsigninglevel device guard bypass
|
local exploit |
windows vulnerability |
2019-04-16 |
microsoft windows 10 1809 - luafv luafvcopyshortname arbitrary short name privilege escalation
|
local exploit |
windows vulnerability |
2019-04-16 |
microsoft windows 10 1809 - luafv delayed virtualization cross process handle duplication privilege escalation
|
local exploit |
windows vulnerability |
2019-04-16 |
microsoft windows 10 1809 - luafv delayed virtualization maximum_access desiredaccess privilege escalation
|
local exploit |
windows vulnerability |
2019-04-16 |
microsoft windows 10 1809 / 1709 - csrss sxssrv cached manifest privilege escalation
|
local exploit |
windows vulnerability |
2019-04-16 |
adminexpress 1.2.5 - 'folder path' denial of service (poc)
|
dos exploit |
windows vulnerability |
2019-04-16 |
joomla! core 1.5.0 - 3.9.4 - directory traversal / authenticated arbitrary file deletion
|
webapps exploit |
php vulnerability |
2019-04-16 |
pchelpware v2 1.0.0.5 - 'group' denial of service (poc)
|
dos exploit |
windows vulnerability |
2019-04-16 |
pchelpware v2 1.0.0.5 - 'sc' denial of service (poc)
|
dos exploit |
windows vulnerability |
2019-04-16 |
zoho manageengine admanager plus 6.6 (build < 6659) - privilege escalation
|
local exploit |
windows vulnerability |
2019-04-16 |
zyxel zywall 310 / zywall 110 / usg1900 / atp500 / usg40 - login page cross-site scripting
|
webapps exploit |
hardware vulnerability |
2019-04-15 |
cisco rv130w routers - management interface remote command execution (metasploit)
|
remote exploit |
hardware vulnerability |
2019-04-15 |
linux/x86 - cat (.bash_history)+ base64 encode + curl data (http://localhost:8080) shellcode (125 bytes)
|
shellcode exploit |
linux_x86 vulnerability |
2019-04-15 |
ultravnc launcher 1.2.2.4 - 'path' denial of service (poc)
|
dos exploit |
windows vulnerability |
2019-04-15 |
ultravnc viewer 1.2.2.4 - 'vnc server' denial of service (poc)
|
dos exploit |
windows vulnerability |
2019-04-15 |
mailcarrier 2.51 - pop3 'top' seh buffer overflow
|
remote exploit |
windows vulnerability |
2019-04-15 |
mailcarrier 2.51 - pop3 'list' seh buffer overflow
|
remote exploit |
windows vulnerability |
2019-04-15 |
mailcarrier 2.51 - pop3 'user' buffer overflow
|
remote exploit |
windows vulnerability |
2019-04-15 |
cutenews 2.1.2 - 'avatar' remote code execution (metasploit)
|
remote exploit |
php vulnerability |
2019-04-15 |
remotemouse 3.008 - arbitrary remote command execution
|
remote exploit |
windows vulnerability |
2019-04-15 |
linux/x86 - mmx-punpcklbw encoder shellcode (61 bytes)
|
shellcode exploit |
generator vulnerability |
2019-04-15 |
mailcarrier 2.51 - 'rcpt to' buffer overflow
|
remote exploit |
windows vulnerability |
2019-04-15 |
directadmin 1.561 - multiple vulnerabilities
|
webapps exploit |
php vulnerability |
2019-04-12 |
zimbra collaboration - autodiscover servlet xxe and proxyservlet ssrf (metasploit)
|
remote exploit |
linux vulnerability |
2019-04-12 |
microsoft windows - contact file format arbitary code execution (metasploit)
|
local exploit |
windows vulnerability |
2019-04-12 |
atutor < 2.2.4 - 'file_manager' remote code execution (metasploit)
|
webapps exploit |
php vulnerability |
2019-04-12 |
microsoft internet explorer 11 - xml external entity injection
|
local exploit |
windows vulnerability |