2019-02-21 |
c4g basic laboratory information system (blis) 3.4 - sql injection
|
webapps exploit |
php vulnerability |
2019-02-21 |
memu play 6.0.7 - privilege escalation
|
local exploit |
windows vulnerability |
2019-02-20 |
belkin wemo upnp - remote code execution (metasploit)
|
remote exploit |
hardware vulnerability |
2019-02-20 |
matrixssl < 4.0.2 - stack buffer overflow verifying x.509 certificates
|
dos exploit |
linux vulnerability |
2019-02-20 |
android kernel < 4.8 - ptrace seccomp filter bypass
|
dos exploit |
android vulnerability |
2019-02-20 |
facetime - texture processing memory corruption
|
dos exploit |
macos vulnerability |
2019-02-20 |
winrar 5.61 - '.lng' denial of service
|
dos exploit |
windows vulnerability |
2019-02-20 |
ftpshell server 6.83 - 'account name to ban' denial of service (poc)
|
dos exploit |
windows vulnerability |
2019-02-20 |
hoteldruid 2.3 - cross-site scripting
|
webapps exploit |
php vulnerability |
2019-02-13 |
apple macos 10.13.5 - local privilege escalation
|
local exploit |
macos vulnerability |
2019-02-19 |
jenkins plugin script security < 1.50/declarative < 1.3.4.1/groovy < 2.61.1 - remote code execution (poc)
|
webapps exploit |
java vulnerability |
2019-02-19 |
ask expert script 3.0.5 - cross site scripting / sql injection
|
webapps exploit |
php vulnerability |
2019-02-19 |
zoho manageengine netflow analyzer professional 7.0.0.2 - path traversal / cross-site scripting
|
webapps exploit |
jsp vulnerability |
2019-02-19 |
xampp 5.6.8 - sql injection / persistent cross-site scripting
|
webapps exploit |
php vulnerability |
2019-02-19 |
edirectory - sql injection
|
webapps exploit |
php vulnerability |
2019-02-19 |
bulletproof ftp server 2019.0.0.50 - 'smtp server' denial of service (poc)
|
dos exploit |
windows vulnerability |
2019-02-19 |
valentina studio 9.0.4 - 'host' denial of service (poc)
|
dos exploit |
windows vulnerability |
2019-02-19 |
zuz music 2.1 - 'zuzconsole/___contact ' persistent cross-site scripting
|
webapps exploit |
php vulnerability |
2019-02-19 |
listing hub cms 1.0 - 'pages.php id' sql injection
|
webapps exploit |
php vulnerability |
2019-02-19 |
find a place cms directory 1.5 - 'assets/external/data_2.php cate' sql injection
|
webapps exploit |
php vulnerability |
2019-02-19 |
netsetman 4.7.1 - 'workgroup' denial of service (poc)
|
dos exploit |
windows vulnerability |
2019-02-19 |
maxxaudio drivers wavessyssvc64.exe 1.6.2.0 - local privilege escalation
|
local exploit |
windows vulnerability |
2019-02-19 |
the ultimate guide for subdomain takeover with practical
|
papers exploit |
multiple vulnerability |
2019-02-18 |
wordpress plugin woocommerce - globee (cryptocurrency) payment gateway 1.1.1 - payment bypass / unauthorized order status spoofing
|
webapps exploit |
php vulnerability |
2019-02-18 |
zoho manageengine servicedesk plus (sdp) < 10.0 build 10012 - arbitrary file upload
|
webapps exploit |
jsp vulnerability |
2019-02-18 |
oracle java runtime environment - heap out-of-bounds read during ttf font rendering in alternatesubstitutionsubtable::process
|
dos exploit |
java vulnerability |
2019-02-18 |
oracle java runtime environment - heap out-of-bounds read during ttf font rendering in extractbitmap_blocclass
|
dos exploit |
java vulnerability |
2019-02-18 |
oracle java runtime environment - heap out-of-bounds read during ttf font rendering in opentypelayoutengine::adjustglyphpositions
|
dos exploit |
java vulnerability |
2019-02-18 |
oracle java runtime environment - heap out-of-bounds read during otf font rendering in glyph_closecontour
|
dos exploit |
java vulnerability |
2019-02-18 |
comodo dome firewall 2.7.0 - cross-site scripting
|
webapps exploit |
multiple vulnerability |
2019-02-18 |
arangodb community edition 3.4.2-1 - cross-site scripting
|
webapps exploit |
multiple vulnerability |
2019-02-18 |
apache couchdb 2.3.0 - cross-site scripting
|
webapps exploit |
multiple vulnerability |
2019-02-18 |
webiness inventory 2.3 - 'productmodel' arbitrary file upload
|
webapps exploit |
php vulnerability |
2019-02-18 |
m/monit 3.7.2 - privilege escalation
|
webapps exploit |
multiple vulnerability |
2019-02-18 |
nbmonitor 1.6.5.0 - 'key' denial of service (poc)
|
dos exploit |
windows vulnerability |
2019-02-18 |
cmssite 1.0 - 'post' sql injection
|
webapps exploit |
php vulnerability |
2019-02-18 |
misp 2.4.97 - sql command execution via command injection in stix module
|
webapps exploit |
php vulnerability |
2019-02-18 |
master ip cam 01 3.3.4.2103 - remote command execution
|
webapps exploit |
cgi vulnerability |
2019-02-18 |
qdpm 9.1 - 'search[keywords]' cross-site scripting
|
webapps exploit |
php vulnerability |
2019-02-18 |
qdpm 9.1 - 'type' cross-site scripting
|
webapps exploit |
php vulnerability |
2019-02-18 |
apple macos - execve(/bin/sh) + null-free shellcode (31 bytes)
|
shellcode exploit |
macos vulnerability |
2019-02-18 |
apple macos - bind (4444/tcp) shell (/bin/sh) + null-free shellcode (123 bytes)
|
shellcode exploit |
macos vulnerability |
2019-02-18 |
apple macos - reverse (127.0.0.1:4444/tcp) shell (/bin/sh) + null-free shellcode (103 bytes)
|
shellcode exploit |
macos vulnerability |
2019-02-18 |
apple macos - bind (4444/tcp) shell (/bin/sh) + ipv6 shellcode (129 bytes)
|
shellcode exploit |
macos vulnerability |
2019-02-18 |
apple macos - reverse (::1:4444/tcp) shell (/bin/sh) +ipv6 shellcode (119 bytes)
|
shellcode exploit |
macos vulnerability |
2019-02-18 |
mirc < 7.55 - 'custom uri protocol handlers' remote command execution
|
remote exploit |
windows vulnerability |
2019-02-18 |
realterm serial terminal 2.0.0.70 - local buffer overflow (seh)
|
dos exploit |
windows vulnerability |
2019-02-18 |
realterm serial terminal 2.0.0.70 - denial of service
|
dos exploit |
windows vulnerability |
2019-02-15 |
unisharp laravel file manager 2.0.0-alpha7 - arbitrary file upload
|
webapps exploit |
php vulnerability |
2019-02-15 |
linux - 'kvm_ioctl_create_device()' null pointer dereference
|
dos exploit |
linux vulnerability |