672 commits

Author	SHA1	Message	Date
Offensive Security	b185ddf9b2	DB: 2016-04-15 ... 6 new exploits RockMongo PHP MongoDB Administrator 1.1.8 - Multiple Vulnerabilities Microsoft Office Excel Out-of-Bounds Read Remote Code Execution (MS16-042) pfSense Firewall <= 2.2.6 - Services CSRF Brickcom Corporation Network Cameras - Multiple Vulnerabilities PHPmongoDB 1.0.0 - Multiple Vulnerabilities Internet Explorer 9_ 10_ 11 - CDOMStringDataList::InitFromString Out-of-Bounds Read (MS15-112)	2016-04-15 05:03:51 +00:00
Offensive Security	95ea5e17e0	DB: 2016-04-13 ... 1 new exploits Ovidentia troubleticketsModule 7.6 - Remote File Inclusion	2016-04-13 05:03:50 +00:00
Offensive Security	921bb6b2e3	DB: 2016-04-12 ... 9 new exploits Hikvision Digital Video Recorder - Cross-Site Request Forgery WPN-XM Serverstack 0.8.6 - Cross Site Request Forgery OpenCart 2.1.0.2 to 2.2.0.0 - json_decode Function Remote Code Execution CAM UnZip 5.1 - Archive Path Traversal Axis Network Cameras - Multiple Vulnerabilities Linux/x86_64 - bindshell (PORT: 5600) - 81 bytes Android - IOMX getConfig/getParameter Information Disclosure Android - IMemory Native Interface is Insecure for IPC Use Novell Service Desk 7.1.0_ 7.0.3 and 6.5 - Multiple Vulnerabilities	2016-04-12 05:04:12 +00:00
Offensive Security	830ff3bd6a	DB: 2016-04-10	2016-04-10 05:03:48 +00:00
Offensive Security	1f79ff2236	DB: 2016-04-09 ... 3 new exploits WordPress Freshmail - Unauthenticated SQL Injection WordPress Plugin Freshmail 1.5.8 - Unauthenticated SQL Injection Express Zip <= 2.40 - Path Traversal Apple Intel HD 3000 Graphics driver 10.0.0 - Local Privilege Escalation op5 7.1.9 - Remote Command Execution	2016-04-09 05:02:52 +00:00
Offensive Security	48af7fb829	DB: 2016-04-07 ... 5 new exploits Asbru Web Content Management System 9.2.7 - Multiple Vulnerabilities SocialEngine 4.8.9 - SQL Injection Linux x86 - Disable ASLR by Setting the RLIMIT_STACK Resource to Unlimited Panda Security URL Filtering < 4.3.1.9 - Privilege Escalation Panda Endpoint Administration Agent < 7.50.00 - Privilege Escalation	2016-04-07 05:01:52 +00:00
Offensive Security	60fd0ef490	DB: 2016-04-06 ... 5 new exploits Easy File Sharing HTTP Server 7.2 SEH Overflow PCMAN FTP Server Buffer Overflow - PUT Command Internet Explorer - MSHTML!CSVGHelpers::SetAttributeStringAndPointer Use-After-Free (MS16-023) ManageEngine Password Manager Pro 8102 to 8302 - Multiple Vulnerabilities Windows Kernel Win32k.sys Privilege Escalation Exploit (MS14-058)	2016-04-06 05:04:31 +00:00
Offensive Security	5a85093c53	DB: 2016-04-04 ... 1 new exploits Microsoft Windows 2003/XP - AFD.sys Privilege Escalation Exploit (K-plugin) Microsoft Windows 2003/XP - afd.sys Privilege Escalation Exploit (K-plugin) Microsoft Windows XP - AFD.sys Local Kernel DoS Exploit Microsoft Windows XP - afd.sys Local Kernel DoS Exploit Microsoft Windows XP/2003 Afd.sys - Local Privilege Escalation Exploit (MS11-080) Microsoft Windows XP/2003 - afd.sys Local Privilege Escalation Exploit (MS11-080) Microsoft Windows - AFD.SYS Dangling Pointer Privilege Escalation (MS14-040) Microsoft Windows - afd.sys Dangling Pointer Privilege Escalation (MS14-040) Microsoft Windows 7 x64 - AFD.SYS Privilege Escalation (MS14-040) Microsoft Windows 7 x64 - afd.sys Privilege Escalation (MS14-040) WordPress Advanced Video Plugin 1.0 - Local File Inclusion (LFI)	2016-04-04 05:02:53 +00:00
Offensive Security	6290e0021e	DB: 2016-04-02 ... 8 new exploits Microsoft Windows 2000/XP - (RPC DCOM) Remote Exploit Microsoft Windows 2000/XP - (RPC DCOM) Remote Exploit (MS03-026) Microsoft Windows NT/2000/XP/2003/Vista/2008/7 - User Mode to Ring Escalation Vulnerability (KiTrap0D) Microsoft Windows NT/2000/XP/2003/Vista/2008/7 - User Mode to Ring Escalation Vulnerability (KiTrap0D) (MS10-015) PHP <= 7.0.4/5.5.33 - SNMP Format String Exploit Windows Kernel - Bitmap Use-After-Free Windows Kernel - NtGdiGetTextExtentExW Out-of-Bounds Memory Read Adobe Flash - URLStream.readObject Use-After-Free Adobe Flash - TextField.maxChars Use-After-Free Android - ih264d_process_intra_mb Memory Corruption Adobe Flash - Color.setTransform Use-After-Free PHP 5.5.33 - Invalid Memory Write	2016-04-02 05:02:51 +00:00
Offensive Security	5de0917681	DB: 2016-04-01 ... 4 new exploits Apache 1.3.x mod_mylo Remote Code Execution Exploit Apache 1.3.x mod_mylo - Remote Code Execution Exploit Apache <= 1.3.31 mod_include Local Buffer Overflow Exploit Apache <= 1.3.31 mod_include - Local Buffer Overflow Exploit Sire 2.0 (lire.php) Remote File Inclusion/Arbitary File Upload Vulnerability Sire 2.0 (lire.php) - Remote File Inclusion/Arbitrary File Upload Vulnerability HP Digital Imaging (hpqxml.dll 2.0.0.133) Arbitary Data Write Exploit HP Digital Imaging (hpqxml.dll 2.0.0.133) - Arbitrary Data Write Exploit SecureBlackbox (PGPBBox.dll 5.1.0.112) Arbitary Data Write Exploit SecureBlackbox (PGPBBox.dll 5.1.0.112) - Arbitrary Data Write Exploit Kwalbum <= 2.0.2 Arbitary File Upload Vulnerability Kwalbum <= 2.0.2 - Arbitrary File Upload Vulnerability ZaoCMS (PhpCommander) Arbitary Remote File Upload Vulnerability ZaoCMS (PhpCommander) - Arbitrary Remote File Upload Vulnerability CMS Balitbang 3.3 Arbitary File Upload Vulnerability CMS Balitbang 3.3 - Arbitrary File Upload Vulnerability CMS Lokomedia 1.5 Arbitary File Upload Vulnerability CMS Lokomedia 1.5 - Arbitrary File Upload Vulnerability Apache 1.3.12 WebDAV Directory Listings Vulnerability Apache 1.3.12 - WebDAV Directory Listings Vulnerability Apache 1.3 Web Server with Php 3 File Disclosure Vulnerability Apache 1.3 Web Server with PHP 3 - File Disclosure Vulnerability NCSA 1.3/1.4.x/1.5_Apache httpd 0.8.11/0.8.14 ScriptAlias Source Retrieval Vulnerability NCSA 1.3/1.4.x/1.5_ Apache httpd 0.8.11/0.8.14 - ScriptAlias Source Retrieval Vulnerability Apache 1.3 Artificially Long Slash Path Directory Listing Vulnerability (1) Apache 1.3 Artificially Long Slash Path Directory Listing Vulnerability (2) Apache 1.3 Artificially Long Slash Path Directory Listing Vulnerability (3) Apache 1.3 Artificially Long Slash Path Directory Listing Vulnerability (4) Apache 1.3 - Artificially Long Slash Path Directory Listing Vulnerability (1) Apache 1.3 - Artificially Long Slash Path Directory Listing Vulnerability (2) Apache 1.3 - Artificially Long Slash Path Directory Listing Vulnerability (3) Apache 1.3 - Artificially Long Slash Path Directory Listing Vulnerability (4) Shareplex 2.1.3.9/2.2.2 beta - Arbitary Local File Disclosure Vulnerability Shareplex 2.1.3.9/2.2.2 beta - Arbitrary Local File Disclosure Vulnerability Apache 1.3 Possible Directory Index Disclosure Vulnerability Apache 1.3 - Possible Directory Index Disclosure Vulnerability Apache 1.0/1.2/1.3 Server Address Disclosure Vulnerability Apache 1.0/1.2/1.3 - Server Address Disclosure Vulnerability Apache 1.3/2.0.x Server Side Include Cross-Site Scripting Vulnerability Apache 1.3/2.0.x - Server Side Include Cross-Site Scripting Vulnerability sendmail 8.11.6 Address Prescan Memory Corruption Vulnerability SendMail 8.11.6 - Address Prescan Memory Corruption Vulnerability Apache 1.3.x mod_include Local Buffer Overflow Vulnerability Apache 1.3.x mod_include - Local Buffer Overflow Vulnerability Apache 1.3.x HTDigest Realm Command Line Argument Buffer Overflow Vulnerability (1) Apache 1.3.x HTDigest Realm Command Line Argument Buffer Overflow Vulnerability (2) Apache 1.3.x - HTDigest Realm Command Line Argument Buffer Overflow Vulnerability (1) Apache 1.3.x - HTDigest Realm Command Line Argument Buffer Overflow Vulnerability (2) PodHawk 1.85 - Arbitary File Upload Vulnerability PodHawk 1.85 - Arbitrary File Upload Vulnerability LibrettoCMS File Manager Arbitary File Upload Vulnerability LibrettoCMS File Manager - Arbitrary File Upload Vulnerability DotNetNuke DNNspot Store 3.0.0 Arbitary File Upload DotNetNuke DNNspot Store 3.0.0 - Arbitrary File Upload Axway Secure Transport 5.1 SP2 - Arbitary File Upload via CSRF Axway Secure Transport 5.1 SP2 - Arbitrary File Upload via CSRF Apache Spark Cluster 1.3.x - Arbitary Code Execution Apache Spark Cluster 1.3.x - Arbitrary Code Execution Elastix 'graph.php' Local File Include Vulnerability Elastix 2.2.0 - 'graph.php' Local File Include Vulnerability MOBOTIX Video Security Cameras - CSRF Add Admin Exploit Apache OpenMeetings 1.9.x - 3.1.0 - ZIP File path Traversal Apache Jetspeed Arbitrary File Upload Wireshark - dissect_pktc_rekey Heap-based Out-of-Bounds Read	2016-04-01 05:03:13 +00:00
Offensive Security	5d20c14812	DB: 2016-03-31 ... 10 new exploits Wordpress Plugin IMDb Profile Widget 1.0.8 - Local File Inclusion WordPress Photocart Link Plugin 1.6 - Local File Inclusion LShell <= 0.9.15 - Remote Code Execution Apple Quicktime < 7.7.79.80.95 - FPX File Parsing Memory Corruption 1 Apple Quicktime < 7.7.79.80.95 - FPX File Parsing Memory Corruption 2 Apple Quicktime < 7.7.79.80.95 - PSD File Parsing Memory Corruption CubeCart 6.0.10 - Multiple Vulnerabilities Kamailio 4.3.4 - Heap-Based Buffer Overflow ATutor 2.2.1 Directory Traversal / Remote Code Execution Metaphor - Stagefright Exploit with ASLR Bypass	2016-03-31 05:01:58 +00:00
Offensive Security	67cc75a29b	DB: 2016-03-29 ... 9 new exploits Serv-U 3x - 5.x - Local Privilege Escalation Exploit Serv-U 3.x - 5.x - Local Privilege Escalation Exploit SHOUTcast 1.9.4 File Request Format String Remote Exploit (win) SHOUTcast 1.9.4 - File Request Format String Remote Exploit (Windows) Monstra CMS 3.0.3 - Multiple Vulnerabilities pragmaMX Module Landkarten 2.1 - Local File Inclusion Exploit (win) GeBlog 0.1 - GLOBALS[tplname] Local File Inclusion Exploit (win) pragmaMX Module Landkarten 2.1 - Local File Inclusion Exploit (Windows) GeBlog 0.1 - GLOBALS[tplname] Local File Inclusion Exploit (Windows) PicoFlat CMS 0.5.9 - Local File Inclusion Vulnerabilitty (win) PicoFlat CMS 0.5.9 - Local File Inclusion Vulnerabilitty (Windows) Tribiq CMS 5.0.10a - Local File Inclusion Vulnerability (win) Tribiq CMS 5.0.10a - Local File Inclusion Vulnerability (Windows) Apache Tomcat - runtime.getRuntime().exec() Privilege Escalation (win) Apache Tomcat - runtime.getRuntime().exec() Privilege Escalation (Windows) AJA Portal 1.2 - Local File Inclusion Vulnerabilities (win) AJA Portal 1.2 - Local File Inclusion Vulnerabilities (Windows) Microsoft Internet Explorer 7 (Windows 2003 SP2) - Memory Corruption PoC (MS09-002) Microsoft Internet Explorer 7 (Windows 2003 SP2) - Memory Corruption PoC (MS09-002) XBMC 8.10 (Get Request) Remote Buffer Overflow Exploit (win) XBMC 8.10 - (GET Request) Remote Buffer Overflow Exploit (Windows) MonGoose 2.4 Webserver Directory Traversal Vulnerability (win) MonGoose 2.4 - Webserver Directory Traversal Vulnerability (Windows) Apple iTunes 8.1.1.10 - (itms/itcp) Remote Buffer Overflow Exploit (win) Apple iTunes 8.1.1.10 - (itms/itcp) Remote Buffer Overflow Exploit (Windows) Adobe Related Service - (getPlus_HelperSvc.exe) Local Privilege Escalation Adobe 9.x Related Service - (getPlus_HelperSvc.exe) Local Privilege Escalation PulseAudio setuid - Local Privilege Escalation Exploit Adobe Acrobat 9.1.2 - NOS Local Privilege Escalation Exploit Adobe Acrobat 9.1.2 NOS - Local Privilege Escalation Exploit (C) Adobe Acrobat 9.1.2 - NOS Local Privilege Escalation Exploit (py) Adobe Acrobat 9.1.2 NOS - Local Privilege Escalation Exploit (Python) Serv-u Web client 9.0.0.5 - Buffer Overflow Serv-U Web Client 9.0.0.5 - Buffer Overflow (2) Serv-u Web client 9.0.0.5 - Buffer Overflow Serv-U Web Client 9.0.0.5 - Buffer Overflow (1) Qihoo 360 Security Guard breg device drivers Privilege Escalation Vulnerability Qihoo 360 Security Guard 6.1.5.1009 - breg device drivers Privilege Escalation Vulnerability Sysax Multi Server (SFTP module) Multiple Commands DoS Vulnerabilities Sysax Multi Server < 5.25 - (SFTP Module) Multiple Commands DoS Vulnerabilities Integard Pro 2.2.0.9026 - Windows 7 ROP-Code (Metasploit) Integard Pro 2.2.0.9026 - Windows 7 ROP-Code (Metasploit) WordPress Plugin mingle forum <= 1.0.26 - Multiple Vulnerabilities WordPress Plugin mingle forum <= 1.0.26 - Multiple Vulnerabilities Microsoft Windows Server - Service Relative Path Stack Corruption (MS08-067) Microsoft Windows Server - Service Relative Path Stack Corruption (MS08-067) WordPress Plugin ajax category dropdown 0.1.5 - Multiple Vulnerabilities WordPress Plugin ajax category dropdown 0.1.5 - Multiple Vulnerabilities Sysax Multi Server 5.50 Create Folder BOF Sysax Multi Server 5.50 - Create Folder BOF Sysax Multi Server <= 5.52 File Rename BoF RCE (Egghunter) Sysax Multi Server <= 5.52 - File Rename BoF RCE (Egghunter) Sysax Multi Server 5.53 SFTP Post Auth SEH Exploit Sysax <= 5.53 SSH Username BoF Pre Auth RCE (Egghunter) Sysax Multi Server 5.53 - SFTP Post Auth SEH Exploit Sysax <= 5.53 - SSH Username BoF Pre Auth RCE (Egghunter) Sysax 5.53 SSH Username Buffer Overflow (Metasploit) Sysax 5.53 - SSH Username Buffer Overflow (Metasploit) sysax <= 5.57 - Directory Traversal Sysax <= 5.57 - Directory Traversal Sysax <= 5.60 Create SSL Certificate Buffer Overflow Sysax <= 5.60 - Create SSL Certificate Buffer Overflow Sysax <= 5.62 Admin Interface Local Buffer Overflow Sysax <= 5.62 - Admin Interface Local Buffer Overflow Sysax Multi-Server 5.64 Create Folder Buffer Overflow Sysax Multi Server 5.64 Create Folder Buffer Overflow Sysax Multi Server 5.64 - Create Folder Buffer Overflow ActFax 4.31 - Local Privilege Escalation Exploit ActFax Server 4.31 Build 0225 - Local Privilege Escalation Exploit PHP-Nuke Search Module - Modules.PHP Remote Directory Traversal Vulnerability PHP-Nuke Search Module - Modules.PHP Remote Directory Traversal Vulnerability STHS v2 Web Portal prospects.php team Parameter SQL Injection STHS v2 Web Portal prospect.php team Parameter SQL Injection STHS v2 Web Portal team.php team Parameter SQL Injection STHS v2 Web Portal - prospects.php team Parameter SQL Injection STHS v2 Web Portal - prospect.php team Parameter SQL Injection STHS v2 Web Portal - team.php team Parameter SQL Injection WK UDID v1.0.1 iOS - Command Inject Vulnerability WK UDID 1.0.1 iOS - Command Inject Vulnerability Hawkeye-G v3.0.1.4912 CSRF Vulnerability Hawkeye-G 3.0.1.4912 - CSRF Vulnerability Hawkeye-G v3.0.1.4912 Persistent XSS & Information Leakage Hawkeye-G 3.0.1.4912 - Persistent XSS & Information Leakage Reaver Pro Local Privilege Escalation Vulnerability Reaver Pro - Local Privilege Escalation Vulnerability Sysax Multi Server 6.40 SSH Component Denial of Service Sysax Multi Server 6.40 - SSH Component Denial of Service WordPress CP Reservation Calendar Plugin 1.1.6 - SQL Injection WordPress CP Reservation Calendar Plugin 1.1.6 - SQL Injection w3tw0rk / Pitbul IRC Bot Remote Code Execution w3tw0rk / Pitbul IRC Bot - Remote Code Execution Dropbox < 3.3.x - OSX FinderLoadBundle Local Root Exploit Dropbox < 3.3.x - OSX FinderLoadBundle Local Root Exploit Hitron Router CGN3ACSMR 4.5.8.16 - Arbitrary Code Execution Hitron Router CGN3ACSMR 4.5.8.16 - Arbitrary Code Execution WordPress Plugin Advanced uploader v2.10 - Multiple Vulnerabilities WordPress Plugin Sell Download v1.0.16 - Local File Disclosure WordPress Plugin TheCartPress v1.4.7 - Multiple Vulnerabilities WordPress Plugin Advanced uploader 2.10 - Multiple Vulnerabilities WordPress Plugin Sell Download 1.0.16 - Local File Disclosure WordPress Plugin TheCartPress 1.4.7 - Multiple Vulnerabilities Cyclope Employee Surveillance <= v8.6.1- Insecure File Permissions Cyclope Employee Surveillance <= 8.6.1- Insecure File Permissions XM Easy Personal FTP Server 5.8 - (HELP) Remote DoS Vulnerability XM Easy Personal FTP Server 5.8 - (HELP) Remote DoS Vulnerability Liferay Portal 5.1.2 - Persistent XSS Trend Micro Deep Discovery Inspector 3.8_ 3.7 - CSRF Vulnerabilities Linux/x86_x64 - execve(/bin/sh) - 25 bytes Linux/x86_x64 - execve(/bin/bash) - 33 bytes TallSoft SNMP TFTP Server 1.0.0 - Denial of Service FireEye - Privilege Escalation to root from Malware Input Processor (uid=mip) Android One mt_wifi IOCTL_GET_STRUCT Privilege Escalation Cogent Datahub <= 7.3.9 Gamma Script Elevation of Privilege	2016-03-29 05:02:00 +00:00
Offensive Security	ca6eab30f8	DB: 2016-03-23 ... 6 new exploits Linux Kernel 2.2.x - 2.4.x ptrace/kmod Local Root Exploit Linux Kernel 2.2.x - 2.4.x - ptrace/kmod Local Root Exploit Apache HTTP Server 2.x Memory Leak Exploit Apache HTTP Server 2.x - Memory Leak Exploit Mac OS X <= 10.2.4 DirectoryService (PATH) Local Root Exploit Mac OS X <= 10.2.4 - DirectoryService (PATH) Local Root Exploit CommuniGate Pro Webmail 4.0.6 Session Hijacking Exploit CommuniGate Pro Webmail 4.0.6 - Session Hijacking Exploit OpenBSD (ibcs2_exec) Kernel Local Exploit OpenBSD - (ibcs2_exec) Kernel Local Exploit HP-UX B11.11 /usr/bin/ct Local Format String Root Exploit HP-UX B11.11 - /usr/bin/ct Local Format String Root Exploit traceroute Local Root Exploit traceroute - Local Root Exploit vixie-cron Local Root Exploit vixie-cron - Local Root Exploit BSDi 3.0 inc Local Root Buffer Overflow Exploit BSDi 3.0 inc - Local Root Buffer Overflow Exploit GLIBC (via /bin/su) Local Root Exploit GLIBC (via /bin/su) - Local Root Exploit Linux Kernel 2.2 (TCP/IP Weakness) Exploit Linux Kernel 2.2 - (TCP/IP Weakness) Exploit BSD chpass (pw_error(3)) Local Root Exploit BSD chpass - (pw_error(3)) Local Root Exploit Tru64 UNIX 4.0g /usr/bin/at Local Root Exploit Tru64 UNIX 4.0g - /usr/bin/at Local Root Exploit FreeBSD 3.5.1/4.2 ports package xklock Local Root Exploit FreeBSD 3.5.1/4.2 Ports Package elvrec Local Root Exploit Progress Database Server 8.3b (prodb) Local Root Exploit FreeBSD 3.5.1/4.2 - ports package xklock Local Root Exploit FreeBSD 3.5.1/4.2 - Ports Package elvrec Local Root Exploit Progress Database Server 8.3b - (prodb) Local Root Exploit Xt Library Local Root Command Execution Exploit Xt Library - Local Root Command Execution Exploit AIX lquerylv Local Root Buffer Overflow Exploit AIX lquerylv - Local Root Buffer Overflow Exploit IRIX 5.3 /usr/sbin/iwsh Local Root Buffer Overflow Solaris 5.5.1 X11R6.3 xterm (-xrm) Local Root Exploit IRIX 5.3 - /usr/sbin/iwsh Local Root Buffer Overflow Solaris 5.5.1 X11R6.3 - xterm (-xrm) Local Root Exploit Mac OS X Panther Internet Connect Local Root Exploit Mac OS X - Panther Internet Connect Local Root Exploit Linux Kernel File Offset Pointer Handling Memory Disclosure Exploit Linux Kernel - File Offset Pointer Handling Memory Disclosure Exploit SquirrelMail (chpasswd) Local Root Bruteforce Exploit SquirrelMail - (chpasswd) Local Root Bruteforce Exploit CDRDAO Local Root Exploit CDRDAO - Local Root Exploit SCO Openserver 5.0.7 (MMDF deliver) Local Root Exploit SCO Openserver 5.0.7 - (MMDF deliver) Local Root Exploit OpenText FirstClass 8.0 HTTP Daemon /Search Remote DoS OpenText FirstClass 8.0 - HTTP Daemon /Search Remote DoS Solaris 8/9 passwd circ() Local Root Exploit Solaris 8/9 - passwd circ() Local Root Exploit PaX Double-Mirrored VMA munmap Local Root Exploit PaX - Double-Mirrored VMA munmap Local Root Exploit Mac OS X <= 10.3.8 (CF_CHARSET_PATH) Local Root Buffer Overflow Mac OS X <= 10.3.8 - (CF_CHARSET_PATH) Local Root Buffer Overflow Solaris 10.x ESRI Arcgis Local Root Format String Exploit Solaris 10.x - ESRI Arcgis Local Root Format String Exploit dSMTP Mail Server 3.1b Linux Remote Root Format String Exploit dSMTP Mail Server 3.1b - Linux Remote Root Format String Exploit AIX 5.2 paginit Local Root Exploit AIX 5.2 - paginit Local Root Exploit Solaris 9 / 10 ld.so Local Root Exploit (1) Solaris 9 / 10 - ld.so Local Root Exploit (1) phpBB 2.0.15 - Remote PHP Code Execution Exploit (Metasploit phpBB 2.0.15 - Remote PHP Code Execution Exploit (Metasploit) vBulletin <= 3.0.6 (Template) Command Execution Exploit (Metasploit vBulletin <= 3.0.6 (Template) Command Execution Exploit (Metasploit) Microsoft Windows XP SP2 (rdpwd.sys) Remote Kernel DoS Exploit Microsoft Windows XP SP2 - (rdpwd.sys) Remote Kernel DoS Exploit WordPress <= 1.5.1.3 - Remote Code Execution eXploit (Metasploit WordPress <= 1.5.1.3 - Remote Code Execution exploit (Metasploit) Solaris <= 10 LPD Arbitrary File Delete Exploit (Metasploit Solaris <= 10 LPD Arbitrary File Delete Exploit (Metasploit) Debian 2.2 /usr/bin/pileup Local Root Exploit Debian 2.2 - /usr/bin/pileup Local Root Exploit Solaris 2.6/7/8/9 (ld.so.1) Local Root Exploit (sparc) Solaris 2.6/7/8/9 - (ld.so.1) Local Root Exploit (sparc) Wireless Tools 26 (iwconfig) Local Root Exploit (some setuid) Wireless Tools 26 - (iwconfig) Local Root Exploit (some setuid) Qpopper <= 4.0.8 (poppassd) Local Root Exploit (freebsd) Qpopper <= 4.0.8 - (poppassd) Local Root Exploit (freebsd) Solaris 10 DtPrintinfo/Session Local Root Exploit (x86) Solaris 10 - DtPrintinfo/Session Local Root Exploit (x86) XMail 1.21 (-t Command Line Option) Local Root Buffer Overflow Exploit XMail 1.21 - (-t Command Line Option) Local Root Buffer Overflow Exploit linux-ftpd-ssl 0.17 (MKD/CWD) Remote Root Exploit linux-ftpd-ssl 0.17 - (MKD/CWD) Remote Root Exploit QNX Neutrino 6.2.1 (phfont) Race Condition Local Root Exploit QNX Neutrino 6.2.1 - (phfont) Race Condition Local Root Exploit FreeBSD 6.0 (nfsd) Remote Kernel Panic Denial of Service Exploit FreeBSD 6.0 - (nfsd) Remote Kernel Panic Denial of Service Exploit Apple Mac OS X (/usr/bin/passwd) Custom Passwd Local Root Exploit Apple Mac OS X - (/usr/bin/passwd) Custom Passwd Local Root Exploit Horde <= 3.0.9/3.1.0 - (Help Viewer) Remote Code Execution (Metasploit Horde <= 3.0.9/3.1.0 - (Help Viewer) Remote Code Execution (Metasploit) Rocks Clusters <= 4.1 (mount-loop) Local Root Exploit Rocks Clusters <= 4.1 - (mount-loop) Local Root Exploit Solaris <= 10 sysinfo() Local Kernel Memory Disclosure Exploit Solaris <= 10 - sysinfo() Local Kernel Memory Disclosure Exploit liblesstif <= 2-0.93.94-4mdk (DEBUG_FILE) Local Root Exploit liblesstif <= 2-0.93.94-4mdk - (DEBUG_FILE) Local Root Exploit Mac OS X <= 10.4.7 Mach Exception Handling Local Root Exploit Mac OS X <= 10.4.7 - Mach Exception Handling Local Root Exploit Xcode OpenBase <= 9.1.5 (root file create) Local Root Exploit (OSX) Xcode OpenBase <= 9.1.5 - (root file create) Local Root Exploit (OSX) HP-UX 11i (swpackage) Stack Overflow Local Root Exploit HP-UX 11i (swmodify) Stack Overflow Local Root Exploit HP-UX 11i (swask) Format String Local Root Exploit HP-UX 11i (LIBC TZ enviroment variable) Local Root Exploit HP-UX 11i - (swpackage) Stack Overflow Local Root Exploit HP-UX 11i - (swmodify) Stack Overflow Local Root Exploit HP-UX 11i - (swask) Format String Local Root Exploit HP-UX 11i - (LIBC TZ enviroment variable) Local Root Exploit FreeBSD 6.1 (/dev/crypto) Local Kernel Denial of Service Exploit FreeBSD 6.1 - (/dev/crypto) Local Kernel Denial of Service Exploit Apple Airport 802.11 Probe Response Kernel Memory Corruption PoC Apple Airport - 802.11 Probe Response Kernel Memory Corruption PoC Xcode OpenBase <= 10.0.0 (symlink) Local Root Exploit (OSX) Xcode OpenBase <= 10.0.0 (unsafe system call) Local Root Exploit (OSX) Xcode OpenBase <= 10.0.0 - (symlink) Local Root Exploit (OSX) Xcode OpenBase <= 10.0.0 - (unsafe system call) Local Root Exploit (OSX) Intel 2200BG 802.11 Beacon frame Kernel Memory Corruption Exploit Intel 2200BG 802.11 - Beacon frame Kernel Memory Corruption Exploit Mac OS X 10.4.x Kernel shared_region_map_file_np() Memory Corruption Mac OS X 10.4.x Kernel - shared_region_map_file_np() Memory Corruption Intel 2200BG 802.11 disassociation packet Kernel Memory Corruption Intel 2200BG 802.11 - disassociation packet Kernel Memory Corruption Plan 9 Kernel (devenv.c OTRUNC/pwrite) Local Exploit Ubuntu/Debian Apache 1.3.33/1.3.34 (CGI TTY) Local Root Exploit Plan 9 Kernel - (devenv.c OTRUNC/pwrite) Local Exploit Ubuntu/Debian Apache 1.3.33/1.3.34 - (CGI TTY) Local Root Exploit madwifi <= 0.9.2.1 WPA/RSN IE Remote Kernel Buffer Overflow Exploit madwifi <= 0.9.2.1 - WPA/RSN IE Remote Kernel Buffer Overflow Exploit PHP FirstPost 0.1 (block.php Include) Remote File Inclusion Exploit PHP FirstPost 0.1 - (block.php Include) Remote File Inclusion Exploit IBM AIX <= 5.3 sp6 capture Terminal Sequence Local Root Exploit IBM AIX <= 5.3 sp6 pioout Arbitrary Library Loading Local Root Exploit IBM AIX <= 5.3 sp6 ftp gets() Local Root Exploit IBM AIX <= 5.3 sp6 - capture Terminal Sequence Local Root Exploit IBM AIX <= 5.3 sp6 - pioout Arbitrary Library Loading Local Root Exploit IBM AIX <= 5.3 sp6 - ftp gets() Local Root Exploit Linux Kernel 2.4/2.6 x86-64 System Call Emulation Exploit Linux Kernel 2.4/2.6 - x86-64 System Call Emulation Exploit Solaris 10 x86/sparc sysinfo Kernel Memory Disclosure Exploit Solaris fifofs I_PEEK Kernel Memory Disclosure Exploit (x86/sparc) Solaris 10 - x86/sparc sysinfo Kernel Memory Disclosure Exploit Solaris - fifofs I_PEEK Kernel Memory Disclosure Exploit (x86/sparc) Apple Mac OS X 10.4.x Kernel i386_set_ldt() Integer Overflow PoC Apple Mac OS X 10.4.x Kernel - i386_set_ldt() Integer Overflow PoC Apple Mac OS X xnu <= 1228.0 mach-o Local Kernel Denial of Service PoC Apple Mac OS X xnu <= 1228.0 - mach-o Local Kernel Denial of Service PoC Cisco VPN Client IPSec Driver Local kernel system pool Corruption PoC Cisco VPN Client - IPSec Driver Local kernel system pool Corruption PoC DESlock+ <= 3.2.6 (list) Local Kernel Memory Leak PoC DESlock+ <= 3.2.6 DLMFENC.sys Local Kernel ring0 link list zero PoC DESlock+ <= 3.2.6 - (list) Local Kernel Memory Leak PoC DESlock+ <= 3.2.6 - DLMFENC.sys Local Kernel ring0 link list zero PoC DESlock+ <= 3.2.6 DLMFDISK.sys Local kernel ring0 SYSTEM Exploit DESlock+ <= 3.2.6 - DLMFDISK.sys Local kernel ring0 SYSTEM Exploit SCO UnixWare < 7.1.4 p534589 (pkgadd) Local Root Exploit SCO UnixWare < 7.1.4 p534589 - (pkgadd) Local Root Exploit SCO UnixWare Merge mcd Local Root Exploit SCO UnixWare Merge - mcd Local Root Exploit Deterministic Network Enhancer dne2000.sys kernel ring0 SYSTEM Exploit Deterministic Network Enhancer - dne2000.sys kernel ring0 SYSTEM Exploit OpenBSD 4.0 (FIRST ANIMATED EXPLOIT) Local Root Exploit (vga) OpenBSD 4.0 - Local Root Exploit (vga) DESlock+ <= 3.2.7 (probe read) Local Kernel Denial of Service PoC DESlock+ <= 3.2.7 - (probe read) Local Kernel Denial of Service PoC QNX 6.4.0 bitflipped elf binary (id) Kernel Panic Exploit QNX 6.4.0 - bitflipped elf binary (id) Kernel Panic Exploit FreeBSD 7.x (Dumping Environment) Local Kernel Panic Exploit FreeBSD 7.x - (Dumping Environment) Local Kernel Panic Exploit FreeBSD 7.0/7.1 (ktimer) Local Kernel Root Exploit Mac OS X xnu <= 1228.3.13 (zip-notify) Remote Kernel Overflow PoC Mac OS X xnu <= 1228.3.13 (macfsstat) Local Kernel Memory Leak/DoS Mac OS X xnu <= 1228.3.13 (profil) Kernel Memory Leak/DoS PoC FreeBSD 7.0/7.1 - (ktimer) Local Kernel Root Exploit Mac OS X xnu <= 1228.3.13 - (zip-notify) Remote Kernel Overflow PoC Mac OS X xnu <= 1228.3.13 - (macfsstat) Local Kernel Memory Leak/DoS Mac OS X xnu <= 1228.3.13 - (profil) Kernel Memory Leak/DoS PoC Mac OS X xnu <= 1228.x (hfs-fcntl) Local Kernel Root Exploit Mac OS X xnu <= 1228.x - (hfs-fcntl) Local Kernel Root Exploit Solaris 10 / OpenSolaris (dtrace) Local Kernel Denial of Service PoC Solaris 10 / OpenSolaris (fasttrap) Local Kernel Denial of Service PoC Solaris 10 / OpenSolaris - (dtrace) Local Kernel Denial of Service PoC Solaris 10 / OpenSolaris - (fasttrap) Local Kernel Denial of Service PoC DESlock+ 4.0.2 dlpcrypt.sys Local Kernel ring0 Code Execution Exploit DESlock+ 4.0.2 - dlpcrypt.sys Local Kernel ring0 Code Execution Exploit FreeBSD 7.2-RELEASE SCTP Local Kernel Denial of Service Exploit FreeBSD 7.2-RELEASE - SCTP Local Kernel Denial of Service Exploit VMWare Fusion <= 2.0.5 vmx86 kext Local kernel Root Exploit VMWare Fusion <= 2.0.5 - vmx86 kext Local kernel Root Exploit Linux Kernel < 2.6.31-rc4 nfs4_proc_lock() Denial of Service Linux Kernel < 2.6.31-rc4 - nfs4_proc_lock() Denial of Service Authentium SafeCentral <= 2.6 shdrv.sys Local kernel ring0 SYSTEM Exploit Authentium SafeCentral <= 2.6 - shdrv.sys Local kernel ring0 SYSTEM Exploit Windows 2000/XP/2003 Win32k.sys SfnLOGONNOTIFY Local kernel Denial of Service Vulnerability Windows 2000/XP/2003 Win32k.sys SfnINSTRING Local kernel Denial of Service Vulnerability Windows 2000/XP/2003 - Win32k.sys SfnLOGONNOTIFY Local kernel Denial of Service Vulnerability Windows 2000/XP/2003 - Win32k.sys SfnINSTRING Local kernel Denial of Service Vulnerability linux/x86 chroot & standart 66 bytes linux/x86 - chroot & standart 66 bytes linux/x86 break chroot 34 bytes linux/x86 break chroot 46 bytes linux/x86 break chroot execve /bin/sh 80 bytes linux/x86 - break chroot 34 bytes linux/x86 - break chroot 46 bytes linux/x86 - break chroot execve /bin/sh 80 bytes linux chroot()/execve() code linux - chroot()/execve() code linux/x86 break chroot setuid(0) + /bin/sh 132 bytes linux/x86 - break chroot setuid(0) + /bin/sh 132 bytes linux/x86 break chroot 79 bytes linux/x86 - break chroot 79 bytes FreeBSD Kernel nfs_mount() Exploit FreeBSD Kernel mountnfs() Exploit FreeBSD Kernel - nfs_mount() Exploit FreeBSD Kernel - mountnfs() Exploit FreeBSD 8.1/7.3 vm.pmap Kernel Local Race Condition FreeBSD 8.1/7.3 - vm.pmap Kernel Local Race Condition Kingsoft Antivirus <= 2010.04.26.648 Kernel Buffer Overflow Exploit Kingsoft Antivirus <= 2010.04.26.648 - Kernel Buffer Overflow Exploit Linux Kernel Stack Infoleaks Vulnerability Linux Kernel - Stack Infoleaks Vulnerability Linux Kernel 'setup_arg_pages()' Denial of Service Vulnerability Linux Kernel - 'setup_arg_pages()' Denial of Service Vulnerability IBM Tivoli Storage Manager (TSM) Local Root IBM Tivoli Storage Manager (TSM) - Local Root DESlock+ <= 4.1.10 vdlptokn.sys Local Kernel ring0 SYSTEM Exploit DESlock+ <= 4.1.10 - vdlptokn.sys Local Kernel ring0 SYSTEM Exploit Linux Kernel < 2.6.37-rc2 TCP_MAXSEG Kernel Panic DoS Linux Kernel < 2.6.37-rc2 - TCP_MAXSEG Kernel Panic DoS IPComp encapsulation pre-auth kernel memory corruption IPComp - encapsulation pre-auth kernel memory corruption Linux Kernel 'perf_count_sw_cpu_clock' event Denial of Service Linux Kernel - 'perf_count_sw_cpu_clock' event Denial of Service Mac OS X < 10.6.7 Kernel Panic Exploit Mac OS X < 10.6.7 - Kernel Panic Exploit Calibre E-Book Reader Local Root Exploit Calibre E-Book Reader - Local Root Exploit (1) Calibre E-Book Reader Local Root Exploit Calibre E-Book Reader Local Root Race Condition Exploit Calibre E-Book Reader - Local Root Exploit (2) Calibre E-Book Reader - Local Root Race Condition Exploit Calibre E-Book Reader Local Root Calibre E-Book Reader - Local Root Vanilla FirstLastNames 1.3.2 Plugin Persistant XSS Vanilla FirstLastNames 1.3.2 Plugin - Persistant XSS Webspell FIRSTBORN Movie-Addon Blind SQL Injection Vulnerability Webspell FIRSTBORN Movie-Addon - Blind SQL Injection Vulnerability Linux kernel 2.0/2.1 SIGIO Vulnerability Linux kernel 2.0/2.1 - SIGIO Vulnerability Digital UNIX <= 4.0 D_FreeBSD <= 2.2.4_HP HP-UX 10.20/11.0_IBM AIX <= 3.2.5_Linux kernel 2.0/2.1_NetBSD 1.2_Solaris <= 2.5.1 Smurf Denial of Service Vulnerability Digital UNIX <= 4.0 D_FreeBSD <= 2.2.4_HP HP-UX 10.20/11.0_IBM AIX <= 3.2.5_Linux kernel 2.0/2.1_NetBSD 1.2_Solaris <= 2.5.1 - Smurf Denial of Service Vulnerability Slackware Linux <= 3.5 /etc/group missing results in Root access Vulnerability Slackware Linux <= 3.5 - /etc/group missing results in Root access Vulnerability Linux kernel 2.0/2.1/2.2 autofs Vulnerability Linux kernel 2.0/2.1/2.2 - autofs Vulnerability Linux kernel 2.0 TCP Port DoS Vulnerability Linux kernel 2.2 ldd core Vulnerability Linux kernel 2.0 - TCP Port DoS Vulnerability Linux kernel 2.2 - ldd core Vulnerability Linux kernel 2.0.33 IP Fragment Overlap Vulnerability Linux kernel 2.0.33 - IP Fragment Overlap Vulnerability Linux kernel 2.0/2.0.33 i_count Overflow Vulnerability Linux kernel 2.0/2.0.33 - i_count Overflow Vulnerability Linux kernel 2.0.37 Segment Limit Vulnerability Linux kernel 2.0.37 - Segment Limit Vulnerability BSD/OS <= 4.0_FreeBSD <= 3.2_Linux kernel <= 2.3_NetBSD <= 1.4 Shared Memory Denial of Service Vulnerability BSD/OS <= 4.0_FreeBSD <= 3.2_Linux kernel <= 2.3_NetBSD <= 1.4 - Shared Memory Denial of Service Vulnerability Linux kernel 2.2 Predictable TCP Initial Sequence Number Vulnerability Linux kernel 2.2 - Predictable TCP Initial Sequence Number Vulnerability Debian 2.1_Linux kernel 2.0.x_RedHat 5.2 Packet Length with Options Vulnerability Debian 2.1_Linux kernel 2.0.x_RedHat 5.2 - Packet Length with Options Vulnerability FreeBSD Kernel SCTP Remote NULL Ptr Dereference DoS FreeBSD Kernel - SCTP Remote NULL Ptr Dereference DoS Linux Kernel 2.2.x Non-Readable File Ptrace Vulnerability Linux Kernel 2.2.x - Non-Readable File Ptrace Vulnerability Linux kernel 2.1.89/2.2.x Zero-Length Fragment Vulnerability Linux kernel 2.1.89/2.2.x - Zero-Length Fragment Vulnerability Linux kernel 2.4 IPTables FTP Stateful Inspection Arbitrary Filter Rule Insertion Linux kernel 2.4 - IPTables FTP Stateful Inspection Arbitrary Filter Rule Insertion Microsoft Windows Kernel Intel x64 SYSRET PoC Microsoft Windows Kernel - Intel x64 SYSRET PoC Microsoft Visual Studio RAD Support Buffer Overflow Vulnerability (Metasploit Microsoft Visual Studio RAD Support Buffer Overflow Vulnerability (Metasploit) Linux kernel 2.2/2.4 procfs Stream Redirection to Process Memory Vulnerability Linux kernel 2.2/2.4 - procfs Stream Redirection to Process Memory Vulnerability CylantSecure 1.0 Kernel Module Syscall Rerouting Vulnerability CylantSecure 1.0 - Kernel Module Syscall Rerouting Vulnerability HP-UX 11_Linux kernel 2.4_Windows 2000/NT 4.0_IRIX 6.5 Small TCP MSS DoS HP-UX 11_Linux kernel 2.4_Windows 2000/NT 4.0_IRIX 6.5 - Small TCP MSS DoS Linux kernel 2.2/2.4 Deep Symbolic Link Denial of Service Vulnerability Linux kernel 2.2/2.4 - Deep Symbolic Link Denial of Service Vulnerability Linux Kernel 2.2/2.4 Ptrace/Setuid Exec Vulnerability Linux Kernel 2.2/2.4 - Ptrace/Setuid Exec Vulnerability Linux Kernel 2.2.x/2.3/2.4.x d_path() Path Truncation Vulnerability Linux Kernel 2.2.x/2.3/2.4.x - d_path() Path Truncation Vulnerability grsecurity Kernel Patch 1.9.4 Linux Kernel Memory Protection Weakness grsecurity Kernel Patch 1.9.4 - Linux Kernel Memory Protection Weakness BubbleMon 1.x Kernel Memory File Descriptor Leakage Vulnerability ASCPU 0.60 Kernel Memory File Descriptor Leakage Vulnerability BubbleMon 1.x Kernel - Memory File Descriptor Leakage Vulnerability ASCPU 0.60 Kernel - Memory File Descriptor Leakage Vulnerability Linux Kernel 2.0.x/2.2.x/2.4.x_FreeBSD 4.x Network Device Driver Frame Padding Information Disclosure Linux Kernel 2.0.x/2.2.x/2.4.x_FreeBSD 4.x - Network Device Driver Frame Padding Information Disclosure Linux kernel 2.2.x/2.4.x I/O System Call File Existence Weakness Linux kernel 2.2.x/2.4.x - I/O System Call File Existence Weakness Linux kernel 2.2./2.4.x /proc Filesystem Potential Information Disclosure Vulnerability Linux kernel 2.2./2.4.x - /proc Filesystem Potential Information Disclosure Vulnerability Centrinity FirstClass 7.1 HTTP Server Directory Disclosure Vulnerability Centrinity FirstClass 7.1 - HTTP Server Directory Disclosure Vulnerability Linux VServer Project 1.2x CHRoot Breakout Vulnerability Linux VServer Project 1.2x - CHRoot Breakout Vulnerability Sun Solaris 8/9 Unspecified Passwd Local Root Compromise Vulnerability Sun Solaris 8/9 - Unspecified Passwd Local Root Compromise Vulnerability Centrinity FirstClass HTTP Server 5/7 TargetName Parameter Cross-Site Scripting Vulnerability Centrinity FirstClass HTTP Server 5/7 - TargetName Parameter Cross-Site Scripting Vulnerability Darwin Kernel 7.1 Mach File Parsing Local Integer Overflow Vulnerability Darwin Kernel 7.1 - Mach File Parsing Local Integer Overflow Vulnerability Linux Kernel NFS and EXT3 Combination Remote Denial of Service Vulnerability Linux Kernel - NFS and EXT3 Combination Remote Denial of Service Vulnerability Campsite 2.6.1 SubscriptionSection.php g_documentRoot Parameter Remote File Inclusion Campsite 2.6.1 SystemPref.php g_documentRoot Parameter Remote File Inclusion Campsite 2.6.1 - SubscriptionSection.php g_documentRoot Parameter Remote File Inclusion Campsite 2.6.1 - SystemPref.php g_documentRoot Parameter Remote File Inclusion Campsite 2.6.1 Template.php g_documentRoot Parameter Remote File Inclusion Campsite 2.6.1 TimeUnit.php g_documentRoot Parameter Remote File Inclusion Campsite 2.6.1 - Template.php g_documentRoot Parameter Remote File Inclusion Campsite 2.6.1 - TimeUnit.php g_documentRoot Parameter Remote File Inclusion Sienzo Digital Music Mentor DSKernel2.DLL ActiveX Control Stack Buffer Overflow Vulnerabilities Sienzo Digital Music Mentor - DSKernel2.DLL ActiveX Control Stack Buffer Overflow Vulnerabilities Campsite 2.6.1 Alias.php g_documentRoot Parameter Remote File Inclusion Campsite 2.6.1 Article.php g_documentRoot Parameter Remote File Inclusion Campsite 2.6.1 ArticleAttachment.php g_documentRoot Parameter Remote File Inclusion Campsite 2.6.1 ArticleComment.php g_documentRoot Parameter Remote File Inclusion Campsite 2.6.1 ArticleData.php g_documentRoot Parameter Remote File Inclusion Campsite 2.6.1 ArticleImage.php g_documentRoot Parameter Remote File Inclusion Campsite 2.6.1 ArticleIndex.php g_documentRoot Parameter Remote File Inclusion Campsite 2.6.1 ArticlePublish.php g_documentRoot Parameter Remote File Inclusion Campsite 2.6.1 ArticleTopic.php g_documentRoot Parameter Remote File Inclusion Campsite 2.6.1 ArticleType.php g_documentRoot Parameter Remote File Inclusion Campsite 2.6.1 ArticleTypeField.php g_documentRoot Parameter Remote File Inclusion Campsite 2.6.1 Country.php g_documentRoot Parameter Remote File Inclusion Campsite 2.6.1 DatabaseObject.php g_documentRoot Parameter Remote File Inclusion Campsite 2.6.1 - Alias.php g_documentRoot Parameter Remote File Inclusion Campsite 2.6.1 - Article.php g_documentRoot Parameter Remote File Inclusion Campsite 2.6.1 - ArticleAttachment.php g_documentRoot Parameter Remote File Inclusion Campsite 2.6.1 - ArticleComment.php g_documentRoot Parameter Remote File Inclusion Campsite 2.6.1 - ArticleData.php g_documentRoot Parameter Remote File Inclusion Campsite 2.6.1 - ArticleImage.php g_documentRoot Parameter Remote File Inclusion Campsite 2.6.1 - ArticleIndex.php g_documentRoot Parameter Remote File Inclusion Campsite 2.6.1 - ArticlePublish.php g_documentRoot Parameter Remote File Inclusion Campsite 2.6.1 - ArticleTopic.php g_documentRoot Parameter Remote File Inclusion Campsite 2.6.1 - ArticleType.php g_documentRoot Parameter Remote File Inclusion Campsite 2.6.1 - ArticleTypeField.php g_documentRoot Parameter Remote File Inclusion Campsite 2.6.1 - Country.php g_documentRoot Parameter Remote File Inclusion Campsite 2.6.1 - DatabaseObject.php g_documentRoot Parameter Remote File Inclusion Campsite 2.6.1 Event.php g_documentRoot Parameter Remote File Inclusion Campsite 2.6.1 IPAccess.php g_documentRoot Parameter Remote File Inclusion Campsite 2.6.1 Image.php g_documentRoot Parameter Remote File Inclusion Campsite 2.6.1 Issue.php g_documentRoot Parameter Remote File Inclusion Campsite 2.6.1 IssuePublish.php g_documentRoot Parameter Remote File Inclusion Campsite 2.6.1 Language.php g_documentRoot Parameter Remote File Inclusion Campsite 2.6.1 Log.php g_documentRoot Parameter Remote File Inclusion Campsite 2.6.1 LoginAttempts.php g_documentRoot Parameter Remote File Inclusion Campsite 2.6.1 Publication.php g_documentRoot Parameter Remote File Inclusion Campsite 2.6.1 Section.php g_documentRoot Parameter Remote File Inclusion Campsite 2.6.1 ShortURL.php g_documentRoot Parameter Remote File Inclusion Campsite 2.6.1 Subscription.php g_documentRoot Parameter Remote File Inclusion Campsite 2.6.1 SubscriptionDefaultTime.php g_documentRoot Parameter Remote File Inclusion Campsite 2.6.1 Topic.php g_documentRoot Parameter Remote File Inclusion Campsite 2.6.1 UrlType.php g_documentRoot Parameter Remote File Inclusion Campsite 2.6.1 User.php g_documentRoot Parameter Remote File Inclusion Campsite 2.6.1 UserType.php g_documentRoot Parameter Remote File Inclusion Campsite 2.6.1 - Event.php g_documentRoot Parameter Remote File Inclusion Campsite 2.6.1 - IPAccess.php g_documentRoot Parameter Remote File Inclusion Campsite 2.6.1 - Image.php g_documentRoot Parameter Remote File Inclusion Campsite 2.6.1 - Issue.php g_documentRoot Parameter Remote File Inclusion Campsite 2.6.1 - IssuePublish.php g_documentRoot Parameter Remote File Inclusion Campsite 2.6.1 - Language.php g_documentRoot Parameter Remote File Inclusion Campsite 2.6.1 - Log.php g_documentRoot Parameter Remote File Inclusion Campsite 2.6.1 - LoginAttempts.php g_documentRoot Parameter Remote File Inclusion Campsite 2.6.1 - Publication.php g_documentRoot Parameter Remote File Inclusion Campsite 2.6.1 - Section.php g_documentRoot Parameter Remote File Inclusion Campsite 2.6.1 - ShortURL.php g_documentRoot Parameter Remote File Inclusion Campsite 2.6.1 - Subscription.php g_documentRoot Parameter Remote File Inclusion Campsite 2.6.1 - SubscriptionDefaultTime.php g_documentRoot Parameter Remote File Inclusion Campsite 2.6.1 - Topic.php g_documentRoot Parameter Remote File Inclusion Campsite 2.6.1 - UrlType.php g_documentRoot Parameter Remote File Inclusion Campsite 2.6.1 - User.php g_documentRoot Parameter Remote File Inclusion Campsite 2.6.1 - UserType.php g_documentRoot Parameter Remote File Inclusion Campsite 2.6.1 implementation/management/configuration.php g_documentRoot Parameter Remote File Inclusion Campsite 2.6.1 implementation/management/db_connect.php g_documentRoot Parameter Remote File Inclusion Campsite 2.6.1 - implementation/management/configuration.php g_documentRoot Parameter Remote File Inclusion Campsite 2.6.1 - implementation/management/db_connect.php g_documentRoot Parameter Remote File Inclusion Linux Kernel 2.6.22 IPv6 Hop-By-Hop Header Remote Denial of Service Vulnerability Linux Kernel 2.6.22 - IPv6 Hop-By-Hop Header Remote Denial of Service Vulnerability CORE FORCE Firewall 0.95.167 and Registry Modules Multiple Local Kernel Buffer Overflow Vulnerabilities CORE FORCE Firewall 0.95.167 and Registry Modules - Multiple Local Kernel Buffer Overflow Vulnerabilities Fedora 8/9 Linux Kernel 'utrace_control' NULL Pointer Dereference Denial of Service Vulnerability Fedora 8/9 Linux Kernel - 'utrace_control' NULL Pointer Dereference Denial of Service Vulnerability MySQL <= 6.0.9 GeomFromWKB() Function First Argument Geometry Value Handling DoS MySQL <= 6.0.9 - GeomFromWKB() Function First Argument Geometry Value Handling DoS VMware Workstations 10.0.0.40273 vmx86.sys Arbitrary Kernel Read VMware Workstations 10.0.0.40273 - vmx86.sys Arbitrary Kernel Read Linux Kernel <= 3.0.4 '/proc/interrupts' Password Length Local Information Disclosure Weakness Linux Kernel <= 3.0.4 - '/proc/interrupts' Password Length Local Information Disclosure Weakness Linux Kernel Network Namespace Remote Denial of Service Vulnerability Linux Kernel - Network Namespace Remote Denial of Service Vulnerability Linux Kernel <= 3.1.8 KVM Local Denial of Service Vulnerability Linux Kernel <= 3.1.8 - KVM Local Denial of Service Vulnerability Linux Kernel 2.6.x 'rds_recvmsg()' Function Local Information Disclosure Vulnerability Linux Kernel 2.6.x - 'rds_recvmsg()' Function Local Information Disclosure Vulnerability Linux Kernel 3.2.x 'uname()' System Call Local Information Disclosure Vulnerability Linux Kernel 3.2.x - 'uname()' System Call Local Information Disclosure Vulnerability Linux Kernel <= 3.3.5 Btrfs CRC32C feature Infinite Loop Local Denial of Service Vulnerability Linux Kernel <= 3.3.5 - Btrfs CRC32C feature Infinite Loop Local Denial of Service Vulnerability Linux Kernel 3.3.5 'CLONE_NEWUSER|CLONE_FS' Local Privilege Escalation Vulnerability Linux Kernel 3.3.5 - 'CLONE_NEWUSER|CLONE_FS' Local Privilege Escalation Vulnerability Linux Kernel <= 3.2.1 Tracing Mutiple Local Denial of Service Vulnerabilities Linux Kernel <= 3.2.1 - Tracing Mutiple Local Denial of Service Vulnerabilities Win10Pcap - Local Privilege Escalation Vulnerability Samsung m2m1shot Kernel Driver Buffer Overflow Samsung seiren Kernel Driver Buffer Overflow Samsung - m2m1shot Kernel Driver Buffer Overflow Samsung - seiren Kernel Driver Buffer Overflow Linux Kernel <= 3.3.5 'b43' Wireless Driver Local Privilege Escalation Vulnerability Linux Kernel <= 3.3.5 - 'b43' Wireless Driver Local Privilege Escalation Vulnerability NetUSB Kernel Stack Buffer Overflow NetUSB - Kernel Stack Buffer Overflow Linux Kernel <= 3.0.5 'test_root()' Function Local Denial of Service Vulnerability Linux Kernel <= 3.0.5 - 'test_root()' Function Local Denial of Service Vulnerability Windows Kernel win32k.sys Malformed TrueType Program TTF Font Processing Pool-Based Buffer Overflow (MS15-115) Windows Kernel win32k.sys Malformed OS/2 Table TTF Font Processing Pool-Based Buffer Overflow (MS15-115) Windows Kernel - win32k.sys Malformed TrueType Program TTF Font Processing Pool-Based Buffer Overflow (MS15-115) Windows Kernel - win32k.sys Malformed OS/2 Table TTF Font Processing Pool-Based Buffer Overflow (MS15-115) Chkrootkit Local Privilege Escalation Chkrootkit - Local Privilege Escalation Windows Kernel Device Contexts and NtGdiSelectBitmap Use-After-Free (MS15-115) Windows Kernel - Device Contexts and NtGdiSelectBitmap Use-After-Free (MS15-115) Linux Kernel <= 3.0.5 'ath9k_htc_set_bssid_mask()' Function Information Disclosure Vulnerability Linux Kernel <= 3.0.5 - 'ath9k_htc_set_bssid_mask()' Function Information Disclosure Vulnerability Acunetix WVS 10 - Local Privilege escalation Acunetix WVS 10 - Local Privilege Escalation Linux Kernel <= 3.3.5 '/drivers/media/media-device.c' Local Information Disclosure Vulnerability Linux Kernel <= 3.3.5 - '/drivers/media/media-device.c' Local Information Disclosure Vulnerability Linux Kernel REFCOUNT Overflow/Use-After-Free in Keyrings Linux Kernel - REFCOUNT Overflow/Use-After-Free in Keyrings Android sensord Local Root Exploit Android - sensord Local Root Exploit OS X and iOS Unsandboxable Kernel Use-After-Free in Mach Vouchers OS X and iOS - Unsandboxable Kernel Use-After-Free in Mach Vouchers Microsoft Windows WebDAV - Privilege Escalation (MS16-016) Microsoft Windows WebDAV - (BSoD) Privilege Escalation (MS16-016) Proxmox VE 3/4 Insecure Hostname Checking Remote Root Exploit Proxmox VE 3/4 - Insecure Hostname Checking Remote Root Exploit Windows Kernel ATMFD.DLL OTF Font Processing Pool-Based Buffer Overflow (MS16-026) Windows Kernel ATMFD.DLL OTF Font Processing Stack Corruption (MS16-026) Windows Kernel - ATMFD.DLL OTF Font Processing Pool-Based Buffer Overflow (MS16-026) Windows Kernel - ATMFD.DLL OTF Font Processing Stack Corruption (MS16-026) WordPress HB Audio Gallery Lite Plugin 1.0.0 - Arbitrary File Download Joomla Easy Youtube Gallery 1.0.2 - SQL Injection Vulnerability WordPress Brandfolder Plugin 3.0 - RFI / LFI Vulnerability WordPress Dharma booking Plugin 2.38.3 - File Inclusion Vulnerability WordPress Memphis Document Library Plugin 3.1.5 - Arbitrary File Download	2016-03-23 05:03:34 +00:00
Offensive Security	2c01698aec	DB: 2016-03-22 ... 14 new exploits Drupal <= 4.5.3 & <= 4.6.1 Comments PHP Injection Exploit Drupal <= 4.5.3 & <= 4.6.1 - Comments PHP Injection Exploit phpBB 2.0.15 - Remote PHP Code Execution Exploit (metasploit) phpBB 2.0.15 - Remote PHP Code Execution Exploit (Metasploit vBulletin <= 3.0.6 (Template) Command Execution Exploit (metasploit) vBulletin <= 3.0.6 (Template) Command Execution Exploit (Metasploit WordPress <= 1.5.1.3 - Remote Code Execution eXploit (metasploit) WordPress <= 1.5.1.3 - Remote Code Execution eXploit (Metasploit Solaris <= 10 LPD Arbitrary File Delete Exploit (metasploit) Solaris <= 10 LPD Arbitrary File Delete Exploit (Metasploit Horde <= 3.0.9/3.1.0 - (Help Viewer) Remote Code Execution (metasploit) Horde <= 3.0.9/3.1.0 - (Help Viewer) Remote Code Execution (Metasploit Softerra PHP Developer Library <= 1.5.3 File Include Vulnerabilities Softerra PHP Developer Library <= 1.5.3 - File Include Vulnerabilities IDEAL Administration 2009 9.7 - Buffer Overflow - Metasploit Universal IDEAL Administration 2009 9.7 - Buffer Overflow (Metasploit) PHP RapidKill Pro 5.x Shell Upload Vulnerability PHP RapidKill Pro 5.x - Shell Upload Vulnerability Shellcode - Win32 MessageBox (Metasploit module) Shellcode - Win32 MessageBox (Metasploit) Php Nuke 8.x.x - BlindSQL Injection Vulnerability PHP-Nuke 8.x.x - BlindSQL Injection Vulnerability Integard Pro 2.2.0.9026 - (Win7 ROP-Code Metasploit Module) Integard Pro 2.2.0.9026 - Windows 7 ROP-Code (Metasploit) Digital Music Pad 8.2.3.3.4 - SEH Overflow Metasploit Module Digital Music Pad 8.2.3.3.4 - SEH Overflow (Metasploit) MaticMarket 2.02 for PHP Nuke LFI Vulnerability MaticMarket 2.02 for PHP-Nuke - LFI Vulnerability Microsoft Word 2003 - Record Parsing Buffer Overflow (Metasploit) (MS09-027) Microsoft Word 2003 - Record Parsing Buffer Overflow (MS09-027) (Metasploit) Actfax FTP Server <= 4.27 - USER Command Stack Buffer Overflow (Metasploit) (0day) Actfax FTP Server <= 4.27 - USER Command Stack Buffer Overflow (0day) (Metasploit) Metasploit 4.1.0 Web UI stored XSS Vulnerability Metasploit 4.1.0 Web UI - Stored XSS Vulnerability PHP Nuke 1.0/2.5/3.0/4.x - Remote Ad Banner URL Change Vulnerability PHP-Nuke 1.0/2.5/3.0/4.x - Remote Ad Banner URL Change Vulnerability Microsoft Visual Studio RAD Support Buffer Overflow Vulnerability (metasploit) Microsoft Visual Studio RAD Support Buffer Overflow Vulnerability (Metasploit PHP Nuke 5.0 - 'user.php' Form Element Substitution Vulnerabilty PHP-Nuke 5.0 - 'user.php' Form Element Substitution Vulnerabilty PHP Nuke 5.x Error Message Web Root Disclosure Vulnerability PHP-Nuke 5.x - Error Message Web Root Disclosure Vulnerability PHP Nuke 8.2.4 - CSRF Vulnerability PHP-Nuke 8.2.4 - CSRF Vulnerability DCP-Portal 3.7/4.x/5.x Calendar.PHP HTTP Response Splitting Vulnerability DCP-Portal 3.7/4.x/5.x - Calendar.PHP HTTP Response Splitting Vulnerability PHP Nuke 0-7 Double Hex Encoded Input Validation Vulnerability PHP-Nuke 0-7 - Double Hex Encoded Input Validation Vulnerability PHP 4.x/5.x Html_Entity_Decode() Information Disclosure Vulnerability PHP 4.x/5.x - Html_Entity_Decode() Information Disclosure Vulnerability Western Digital Arkeia Remote Code Execution (Metasploit) Western Digital Arkeia - Remote Code Execution (Metasploit) Apache + PHP 5.x (< 5.3.12 & < 5.4.2) - cgi-bin Remote Code Execution Exploit Apache + PHP 5.x (< 5.3.12 / < 5.4.2) - Remote Code Execution (Multithreaded Scanner) Apache + PHP 5.x (< 5.3.12 & < 5.4.2) - Remote Code Execution (Multithreaded Scanner) PHP PEAR <= 1.5.3 INSTALL-AS Attribute Arbitrary File Overwrite Vulnerability PHP PEAR <= 1.5.3 - INSTALL-AS Attribute Arbitrary File Overwrite Vulnerability GNU bash Environment Variable Command Injection (Metasploit) GNU Bash - Environment Variable Command Injection (Metasploit) Bash - CGI RCE (Metasploit) Shellshock Exploit Bash - CGI RCE Shellshock Exploit (Metasploit) Endian Firewall < 3.0.0 - OS Command Injection (Metasploit Module) Endian Firewall < 3.0.0 - OS Command Injection (Metasploit) Windows - Secondary Logon Standard Handles Missing Sanitization Privilege Escalation (MS16-032) WordPress eBook Download Plugin 1.1 - Directory Traversal WordPress Import CSV Plugin 1.0 - Directory Traversal WordPress Abtest Plugin - Local File Inclusion Internet Download Manager 6.25 Build 14 - 'Find file' Unicode SEH Exploit Disc ORGanizer - DORG - Multiple Vulnerabilities D-Link DWR-932 Firmware 4.00 - Authentication Bypass Xoops 2.5.7.2 - Arbitrary User Deletions CSRF Xoops 2.5.7.2 - Directory Traversal Bypass WordPress Image Export Plugin 1.1.0 - Arbitrary File Disclosure Sysax Multi Server 6.50 - HTTP File Share SEH Overflow RCE Exploit Dating Pro Genie 2015.7 - CSRF Vulnerabilities iTop 2.2.1 - CSRF Vulnerability ProjectSend r582 - Multiple XSS Vulnerabilities	2016-03-22 05:02:50 +00:00
Offensive Security	49a8e7debd	DB: 2016-03-18 ... 2 new exploits file Zenphoto 1.4.11 - Remote File Inclusion Synology Photo Station 5 DSM 3.2 'photo_one.php' Script Cross Site Scripting Vulnerability Synology Photo Station 5 DSM 3.2 - 'photo_one.php' Script Cross Site Scripting Vulnerability file PivotX 2.3.11 - Directory Traversal	2016-03-18 05:03:26 +00:00
Offensive Security	9deb7ec89d	DB: 2016-03-17	2016-03-17 14:19:33 +00:00
Offensive Security	477bcbdcc0	DB: 2016-03-17 ... 5 new exploits phpMyNewsletter <= 0.8 (beta5) - Multiple Vulnerability Exploit phpMyNewsletter <= 0.8 (beta5) - Multiple Vulnerabilities My Book World Edition NAS Multiple Vulnerability My Book World Edition NAS - Multiple Vulnerabilities Katalog Stron Hurricane 1.3.5 - Multiple Vulnerability RFI / SQL Katalog Stron Hurricane 1.3.5 - (RFI / SQL) Multiple Vulnerabilities cmsfaethon-2.2.0-ultimate.7z Multiple Vulnerability cmsfaethon-2.2.0-ultimate.7z - Multiple Vulnerabilities DynPG CMS 4.1.0 - Multiple Vulnerability (popup.php and counter.php) DynPG CMS 4.1.0 - (popup.php and counter.php) Multiple Vulnerabilities Nucleus CMS 3.51 (DIR_LIBS) - Multiple Vulnerability Nucleus CMS 3.51 (DIR_LIBS) - Multiple Vulnerabilities N/X - Web CMS (N/X WCMS 4.5) Multiple Vulnerability N/X - Web CMS (N/X WCMS 4.5) - Multiple Vulnerabilities New-CMS - Multiple Vulnerability New-CMS - Multiple Vulnerabilities Edgephp Clickbank Affiliate Marketplace Script Multiple Vulnerability Edgephp Clickbank Affiliate Marketplace Script - Multiple Vulnerabilities JV2 Folder Gallery 3.1.1 - (popup_slideshow.php) Multiple Vulnerability JV2 Folder Gallery 3.1.1 - (popup_slideshow.php) Multiple Vulnerabilities i-Gallery - Multiple Vulnerability i-Gallery - Multiple Vulnerabilities My Kazaam Notes Management System Multiple Vulnerability My Kazaam Notes Management System - Multiple Vulnerabilities Omnidocs - Multiple Vulnerability Omnidocs - Multiple Vulnerabilities Web Cookbook Multiple Vulnerability Web Cookbook - Multiple Vulnerabilities KikChat - (LFI/RCE) Multiple Vulnerability KikChat - (LFI/RCE) Multiple Vulnerabilities Webformatique Reservation Manager - 'index.php' Cross-Site Scripting Vulnerability Webformatique Reservation Manager 2.4 - 'index.php' Cross-Site Scripting Vulnerability xEpan 1.0.4 - Multiple Vulnerability xEpan 1.0.4 - Multiple Vulnerabilities AKIPS Network Monitor 15.37 through 16.5 - OS Command Injection Netwrix Auditor 7.1.322.0 - ActiveX (sourceFile) Stack Buffer Overflow Cisco UCS Manager 2.1(1b) - Shellshock Exploit OpenSSH <= 7.2p1 - xauth Injection FreeBSD 10.2 amd64 Kernel - amd64_set_ldt Heap Overflow	2016-03-17 07:07:56 +00:00
Offensive Security	406c75cd13	DB: 2016-03-16 ... 1 new exploits	2016-03-16 05:02:50 +00:00
Offensive Security	214a99ac52	DB: 2016-03-15 ... 8 new exploits	2016-03-15 05:02:46 +00:00
Offensive Security	fe74e95fff	DB: 2016-03-12 ... 3 new exploits	2016-03-12 05:03:14 +00:00
Offensive Security	d1a9542b86	DB: 2016-03-11 ... 7 new exploits	2016-03-11 05:02:50 +00:00
Offensive Security	da08dab2c6	DB: 2016-03-10 ... 16 new exploits	2016-03-10 05:03:17 +00:00
Offensive Security	a7c11413af	DB: 2016-03-09 ... 1 new exploits	2016-03-09 05:02:46 +00:00
Offensive Security	4cae1b12fc	DB: 2016-03-08 ... 3 new exploits	2016-03-08 05:02:45 +00:00
Offensive Security	b761aa35c0	DB: 2016-03-04 ... 3 new exploits	2016-03-04 05:02:58 +00:00
Offensive Security	7f6ad99482	DB: 2016-03-02 ... 6 new exploits	2016-03-02 05:02:47 +00:00
Offensive Security	a4526e0949	DB: 2016-03-01 ... 2 new exploits	2016-03-01 05:02:23 +00:00
Offensive Security	62a54b60c6	DB: 2016-02-27 ... 12 new exploits	2016-02-27 05:02:14 +00:00
Offensive Security	5f28d68611	DB: 2016-02-25 ... 6 new exploits	2016-02-25 05:01:57 +00:00
Offensive Security	897e728c20	DB: 2016-02-21 ... 1 new exploits	2016-02-21 05:02:13 +00:00
Offensive Security	e149b72761	DB: 2016-02-20 ... 16 new exploits	2016-02-20 05:01:54 +00:00
Offensive Security	f48dc1ccea	DB: 2016-02-19 ... 3 new exploits	2016-02-19 05:01:53 +00:00
Offensive Security	207c9bac9b	DB: 2016-02-18 ... 2 new exploits	2016-02-18 05:01:30 +00:00
Offensive Security	cc8580757a	DB: 2016-02-17 ... 7 new exploits	2016-02-17 05:01:40 +00:00
Offensive Security	8ad60260b2	DB: 2016-02-16 ... 7 new exploits	2016-02-16 05:03:28 +00:00
Offensive Security	a9d446b65b	DB: 2016-02-14 ... 1 new exploits	2016-02-14 05:02:40 +00:00
Offensive Security	3b34885ebf	DB: 2016-02-11 ... 7 new exploits	2016-02-11 05:03:33 +00:00
Offensive Security	a97b3361e6	DB: 2016-02-10 ... 4 new exploits	2016-02-10 05:02:26 +00:00
Offensive Security	2a3eb85737	DB: 2016-02-09 ... 5 new exploits	2016-02-09 05:03:34 +00:00
Offensive Security	363cbde9cc	DB: 2016-02-05 ... 10 new exploits	2016-02-05 05:02:27 +00:00
Offensive Security	1221dcb78e	DB: 2016-02-04 ... 6 new exploits	2016-02-04 05:01:40 +00:00
Offensive Security	2ec2bcdde4	DB: 2016-02-02 ... 11 new exploits	2016-02-02 05:02:47 +00:00
Offensive Security	bf22eb1691	DB: 2016-01-30 ... 2 new exploits	2016-01-30 05:03:32 +00:00
Offensive Security	958f5c3f9d	DB: 2016-01-29 ... 40 new exploits	2016-01-29 05:03:51 +00:00
Offensive Security	a5b96c2067	DB: 2016-01-28 ... 11 new exploits	2016-01-28 05:02:01 +00:00
Offensive Security	67dd87a6f5	DB: 2016-01-27 ... 15 new exploits	2016-01-27 05:03:06 +00:00
Offensive Security	386bdfe50d	DB: 2016-01-26 ... 13 new exploits	2016-01-26 05:03:56 +00:00
Offensive Security	5f07a690c4	DB: 2016-01-25 ... 6 new exploits	2016-01-25 05:02:02 +00:00
Offensive Security	73e749c845	DB: 2016-01-24 ... 4 new exploits	2016-01-24 05:02:48 +00:00
Offensive Security	65e7008d6b	DB: 2016-01-23 ... 8 new exploits	2016-01-23 05:02:05 +00:00