2018-11-30 |
apache spark - (unauthenticated) command execution (metasploit)
|
remote exploit |
java vulnerability |
2018-11-30 |
vbscript - 'rtfilter' out-of-bounds read
|
dos exploit |
windows vulnerability |
2018-11-30 |
vbscript - 'oleaut32!variantclear' and 'scrrun!vbadictionary::put_item' use-after-free
|
dos exploit |
windows vulnerability |
2018-11-30 |
xorg-x11-server < 1.20.3 - 'modulepath' local privilege escalation
|
local exploit |
multiple vulnerability |
2018-11-30 |
html5 video player 1.2.5 - buffer overflow (metasploit)
|
local exploit |
windows vulnerability |
2018-11-30 |
synaccess netbooter np-02x/np-08x 6.8 - authentication bypass
|
webapps exploit |
cgi vulnerability |
2018-11-30 |
linux kernel 4.8 (ubuntu 16.04) - leak sctp kernel pointer
|
dos exploit |
linux vulnerability |
2018-11-30 |
schneider electric plc - session calculation authentication bypass
|
webapps exploit |
hardware vulnerability |
2018-11-29 |
teamcity agent - xml-rpc command execution (metasploit)
|
remote exploit |
multiple vulnerability |
2018-11-29 |
mac os x - libxpc mitm privilege escalation (metasploit)
|
local exploit |
macos vulnerability |
2018-11-29 |
linux - nested user namespace idmap limit local privilege escalation (metasploit)
|
local exploit |
linux vulnerability |
2018-11-29 |
php imap_open - remote code execution (metasploit)
|
remote exploit |
linux vulnerability |
2018-11-29 |
unitrends enterprise backup - bpserverd privilege escalation (metasploit)
|
local exploit |
linux vulnerability |
2018-11-29 |
webkit jsc - bytecodegenerator::hoistsloppymodefunctionifnecessary does not invalidate the 'forincontext' object
|
dos exploit |
multiple vulnerability |
2018-11-29 |
webkit jit - 'bytecodeparser::handleintrinsiccall' type confusion
|
dos exploit |
multiple vulnerability |
2018-11-29 |
webkit jsc jit - 'jspropertynameenumerator' type confusion
|
dos exploit |
multiple vulnerability |
2018-11-27 |
netgear devices - (unauthenticated) remote command execution (metasploit)
|
remote exploit |
hardware vulnerability |
2018-11-26 |
xorg x11 server - suid privilege escalation (metasploit)
|
local exploit |
multiple vulnerability |
2018-11-26 |
arm whois 3.11 - buffer overflow (aslr)
|
local exploit |
windows_x86 vulnerability |
2018-11-26 |
cors attacks
|
papers exploit |
xml vulnerability |
2018-11-26 |
elba5 5.8.0 - remote code execution
|
remote exploit |
windows vulnerability |
2018-11-26 |
zyxel vmg1312-b10d 5.13aaxa.8 - directory traversal
|
webapps exploit |
hardware vulnerability |
2018-11-26 |
no-cms 1.0 - 'order_by' sql injection
|
webapps exploit |
php vulnerability |
2018-11-26 |
ticketly 1.0 - 'kind_id' sql injection
|
webapps exploit |
php vulnerability |
2018-11-26 |
mariadb client 10.1.26 - denial of service (poc)
|
dos exploit |
linux vulnerability |
2018-11-26 |
wordpress plugin easy testimonials 3.2 - cross-site scripting
|
webapps exploit |
php vulnerability |
2018-11-26 |
ricoh myprint 2.9.2.4 - hard-coded credentials
|
webapps exploit |
hardware vulnerability |
2018-11-02 |
flying under the radar
|
papers exploit |
multiple vulnerability |
2018-11-21 |
webofisi e-ticaret v4 - 'urun' sql injection
|
webapps exploit |
php vulnerability |
2018-11-21 |
wordpress theme cherryframework 3.1.4 - backup file download
|
webapps exploit |
php vulnerability |
2018-11-21 |
ticketly 1.0 - 'name' sql injection
|
webapps exploit |
php vulnerability |
2018-11-21 |
synaccess netbooter np-0801du 7.4 - cross-site request forgery (add admin)
|
webapps exploit |
hardware vulnerability |
2018-11-20 |
microsoft windows - dfmarshal unsafe unmarshaling privilege escalation
|
local exploit |
windows vulnerability |
2018-11-20 |
ticketly 1.0 - cross-site request forgery (add admin)
|
webapps exploit |
php vulnerability |
2018-11-20 |
apple macos 10.13 - 'workq_kernreturn' denial of service (poc)
|
dos exploit |
macos vulnerability |
2018-11-19 |
imagemagick - memory leak
|
local exploit |
multiple vulnerability |
2018-11-19 |
microsoft edge chakra - op_memset type confusion
|
dos exploit |
windows vulnerability |
2018-11-19 |
html video player 1.2.5 - buffer-overflow (seh)
|
local exploit |
windows_x86 vulnerability |
2018-11-19 |
xmplay 3.8.3 - '.m3u' denial of service (poc)
|
dos exploit |
windows vulnerability |
2018-11-16 |
linux - broken uid/gid mapping for nested user namespaces
|
local exploit |
linux vulnerability |
2018-11-16 |
easy outlook express recovery 2.0 - denial of service (poc)
|
dos exploit |
windows_x86-64 vulnerability |
2018-11-16 |
mumsoft easy software 2.0 - denial of service (poc)
|
dos exploit |
windows_x86-64 vulnerability |
2018-11-16 |
domainmod 4.11.01 - 'raid' cross-site scripting
|
webapps exploit |
php vulnerability |
2018-11-16 |
helpdezk 1.1.1 - arbitrary file upload
|
webapps exploit |
php vulnerability |
2018-11-16 |
warranty tracking system 11.06.3 - 'txtcustomercode' sql injection
|
webapps exploit |
php vulnerability |
2018-11-15 |
wordpress plugin ninja forms 3.3.17 - cross-site scripting
|
webapps exploit |
php vulnerability |
2018-11-15 |
php mass mail 1.0 - arbitrary file upload
|
webapps exploit |
php vulnerability |
2018-11-15 |
2-plan team 1.0.4 - arbitrary file upload
|
webapps exploit |
php vulnerability |
2018-11-15 |
simple e-document 1.31 - 'username' sql injection
|
webapps exploit |
php vulnerability |
2018-11-15 |
kordil edms 2.2.60rc3 - arbitrary file upload
|
webapps exploit |
php vulnerability |