3 commits

Author	SHA1	Message	Date
Offensive Security	d304cc3d3e	DB: 2017-11-24 ... 116602 new exploits Too many to list!	2017-11-24 20:56:23 +00:00
Offensive Security	4b39f0d26d	DB: 2017-11-16 ... 23 new exploits VideoLAN VLC Media Player 0.8.6a - Unspecified Denial of Service (1) VideoLAN VLC Media Player 0.8.6a - Denial of Service (1) Microsoft Windows Explorer - '.AVI' Unspecified Denial of Service Microsoft Windows Explorer - '.AVI' File Denial of Service Microsoft Windows Explorer - Unspecified '.ANI' File Denial of Service Microsoft Windows Explorer - '.ANI' File Denial of Service Microsoft Windows Explorer - Unspecified '.doc' File Denial of Service Microsoft Windows Explorer - '.doc' File Denial of Service CDBurnerXP 4.2.4.1351 - Local Crash (Denial of Service) Juniper Networks JUNOS 7.1.1 - Malformed TCP Packet Denial of Service / Unspecified Vulnerabilities Juniper Networks JUNOS 7.1.1 - Malformed TCP Packet Denial of Service / Multiple Vulnerabilities iPhone / iTouch FtpDisc 1.0 3 - ExploitsInOne Buffer Overflow Denial of Service iPhone / iTouch FtpDisc 1.0 - Buffer Overflow / Denial of Service Aladdin eToken PKI Client 4.5 - Virtual File Handling Unspecified Memory Corruption (PoC) Aladdin eToken PKI Client 4.5 - Virtual File Handling Memory Corruption (PoC) Webby WebServer - SEH Control (PoC) Webby WebServer - Overflow (SEH) (PoC) Quick 'n Easy FTP Server Lite 3.1 - Exploit Quick 'n Easy FTP Server Lite 3.1 - Denial of Service Subtitle Translation Wizard 3.0.0 - Exploit (SEH) (PoC) Subtitle Translation Wizard 3.0.0 - Overflow (SEH) (PoC) FFDshow - SEH Exception Leading to Null Pointer on Read FFDshow - Overflow (SEH) Exception Leading to Null Pointer on Read Microsoft Internet Explorer - MSHTML Findtext Processing Issue Microsoft Internet Explorer - MSHTML Findtext Processing Exploit Oreans WinLicense 2.1.8.0 - XML File Handling Unspecified Memory Corruption Oreans WinLicense 2.1.8.0 - XML File Handling Memory Corruption Debian suidmanager 0.18 - Exploit AMD K6 Processor - Exploit Apple Personal Web Sharing 1.1 - Remote Denial of Service AMD K6 Processor - Denial of Service Sun Solaris 7.0 - 'procfs' Denial of Service S.u.S.E. Linux 6.2 / Slackware Linux 3.2/3.6 - identd Denial of Service S.u.S.E. Linux 6.2 / Slackware Linux 3.2/3.6 - 'identd' Denial of Service Debian 2.1/2.2 / Mandrake 6.0/6.1/7.0 / RedHat 6.x - rpc.lockd Remote Denial of Service Debian 2.1/2.2 / Mandrake 6.0/6.1/7.0 / RedHat 6.x - 'rpc.lockd' Remote Denial of Service D-Link DIR605L - Denial of Service RedHat Linux 6.1 i386 - Tmpwatch Recursive Write Denial of Service (Linux Kernel) ReiserFS 3.5.28 - Code Execution / Denial of Service ReiserFS 3.5.28 (Linux Kernel) - Code Execution / Denial of Service IBM AIX 4.3.3/5.1/5.2 libIM - Buffer Overflow IBM AIX 4.3.3/5.1/5.2 - 'libIM' Buffer Overflow xfstt 1.2/1.4 - Unspecified Memory Disclosure xfstt 1.2/1.4 - Memory Disclosure ViRobot Linux Server 2.0 - Exploit Linux Kernel 2.4.x/2.6.x - Multiple Unspecified ISO9660 Filesystem Handling Vulnerabilities Linux Kernel 2.4.x/2.6.x - Multiple ISO9660 Filesystem Handling Vulnerabilities IBM AIX 5.x - Invscout Local Buffer Overflow IBM AIX 5.x - 'Invscout' Local Buffer Overflow Microsoft Internet Explorer 5.0.1 - '.JPEG' Image Rendering Unspecified Buffer Overflow Microsoft Internet Explorer 5.0.1 - '.JPEG' Image Rendering Buffer Overflow Microsoft Excel 95/97/2000/2002/2003/2004 - Unspecified Memory Corruption (MS06-012) Microsoft Excel 95/97/2000/2002/2003/2004 - Memory Corruption (MS06-012) IBM Tivoli Directory Server 6.0 - Unspecified LDAP Memory Corruption IBM Tivoli Directory Server 6.0 - LDAP Memory Corruption Quake 3 Engine - CL_ParseDownload Remote Buffer Overflow Quake 3 Engine - 'CL_ParseDownload' Remote Buffer Overflow Zabbix 1.1.2 - Multiple Unspecified Remote Code Execution Vulnerabilities Zabbix 1.1.2 - Multiple Remote Code Execution Vulnerabilities VideoLAN VLC Media Player 0.8.6a - Unspecified Denial of Service (2) VideoLAN VLC Media Player 0.8.6a - Denial of Service (2) Sun Solaris 10 - ICMP Unspecified Remote Denial of Service Sun Solaris 10 - ICMP Remote Denial of Service Mozilla Firefox 2.0.0.2 - Unspecified GIF Handling Denial of Service Mozilla Firefox 2.0.0.2 - '.GIF' Handling Denial of Service Progress WebSpeed 3.0/3.1 - Denial of Service GStreamer 0.10.15 - Multiple Unspecified Remote Denial of Service Vulnerabilities GStreamer 0.10.15 - Multiple Remote Denial of Service Vulnerabilities Wireshark 0.99.8 - X.509sat Dissector Unspecified Denial of Service Wireshark 0.99.8 - LDAP Dissector Unspecified Denial of Service Wireshark 0.99.8 - SCCP Dissector Decode As Feature Unspecified Denial of Service Wireshark 0.99.8 - X.509sat Dissector Denial of Service Wireshark 0.99.8 - LDAP Dissector Denial of Service Wireshark 0.99.8 - SCCP Dissector Decode As Feature Denial of Service Novell Client 4.91.5 - ActiveX Control 'nwsetup.dll' Unspecified Remote Denial of Service (1) Novell Client 4.91.5 - ActiveX Control 'nwsetup.dll' Unspecified Remote Denial of Service (2) Nokia Lotus Notes Connector - 'lnresobject.dll' Unspecified Remote Denial of Service Novell Client 4.91.5 - ActiveX Control 'nwsetup.dll' Remote Denial of Service (1) Novell Client 4.91.5 - ActiveX Control 'nwsetup.dll' Remote Denial of Service (2) Nokia Lotus Notes Connector - 'lnresobject.dll' Remote Denial of Service Wireshark 1.2.1 - OpcUa Dissector Unspecified Resource Exhaustion (Denial of Service) Wireshark 1.2.1 - TLS Dissector 1.2 Conversation Handling Unspecified Remote Denial of Service Wireshark 1.2.1 - GSM A RR Dissector packet.c Unspecified Remote Denial of Service Wireshark 1.2.1 - OpcUa Dissector Resource Exhaustion (Denial of Service) Wireshark 1.2.1 - TLS Dissector 1.2 Conversation Handling Remote Denial of Service Wireshark 1.2.1 - GSM A RR Dissector packet.c Remote Denial of Service Opera Web Browser < 11.60 - Multiple Denial of Service / Unspecified Vulnerabilities Opera Web Browser < 11.60 - Denial of Service / Multiple Vulnerabilities SmallFTPd - Unspecified Denial of Service SmallFTPd - Denial of Service Apple Mac OSX - 'IntelAccelerator::gstqConfigure' Exploitable Kernel NULL Dereference Apple Mac OSX - 'IntelAccelerator::gstqConfigure' Kernel NULL Dereference Apple Mac OSX - IOSCSIPeripheralDeviceType00 Userclient Type 12 Exploitable Kernel NULL Dereference Apple Mac OSX - IOSCSIPeripheralDeviceType00 Userclient Type 12 Kernel NULL Dereference Apple Mac OSX - OSMetaClassBase::safeMetaCast in IOAccelContext2::connectClient Exploitable NULL Dereference Apple Mac OSX - OSMetaClassBase::safeMetaCast in IOAccelContext2::connectClient NULL Dereference Microsoft Windows - 'gdi32.dll' Multiple Issues 'EMF CREATECOLORSPACEW' Record Handling (MS16-055) Microsoft Windows - 'gdi32.dll' Multiple Issues 'EMF COMMENT_MULTIFORMATS' Record Handling (MS16-055) Microsoft Windows - 'gdi32.dll' Multiple 'EMF CREATECOLORSPACEW' Record Handling (MS16-055) Microsoft Windows - 'gdi32.dll' Multiple 'EMF COMMENT_MULTIFORMATS' Record Handling (MS16-055) Apple Mac OSX Kernel - Exploitable Null Pointer Dereference in nvCommandQueue::GetHandleIndex in GeForce.kext Apple Mac OSX Kernel - Null Pointer Dereference in nvCommandQueue::GetHandleIndex in GeForce.kext Apple Mac OSX Kernel - Exploitable Null Pointer Dereference in AppleMuxControl.kext Apple Mac OSX Kernel - Exploitable Null Pointer Dereference in AppleGraphicsDeviceControl Apple Mac OSX Kernel - Exploitable NULL Dereference in IOAccelSharedUserClient2::page_off_resource Apple Mac OSX Kernel - Exploitable NULL Dereference in CoreCaptureResponder Due to Unchecked Return Value Apple Mac OSX Kernel - Exploitable Null Pointer Dereference in IOAudioEngine Apple Mac OSX Kernel - Null Pointer Dereference in AppleMuxControl.kext Apple Mac OSX Kernel - Null Pointer Dereference in AppleGraphicsDeviceControl Apple Mac OSX Kernel - NULL Dereference in IOAccelSharedUserClient2::page_off_resource Apple Mac OSX Kernel - NULL Dereference in CoreCaptureResponder Due to Unchecked Return Value Apple Mac OSX Kernel - Null Pointer Dereference in IOAudioEngine Apple OS X/iOS - mach_ports_register Multiple Memory Safety Issues Apple OS X/iOS - 'mach_ports_register' Multiple Memory Safety Exploits Linux Kernel 3.10.0-327/4.8.0-22 (Ubuntu 16.10 / RedHat) - 'keyctl' Null Pointer Dereference Linux Kernel 4.8.0-22/3.10.0-327 (Ubuntu 16.10 / RedHat) - 'keyctl' Null Pointer Dereference Microsoft MsMpEng - Remotely Exploitable Use-After-Free due to Design Issue in GC Engine Microsoft MsMpEng - Remote Use-After-Free Due to Design Issue in GC Engine Microsoft Windows Kernel - 'win32k.sys' Multiple Issues 'NtGdiGetDIBitsInternal' System Call Microsoft Windows Kernel - 'win32k.sys' Multiple 'NtGdiGetDIBitsInternal' System Call Mandrake Linux 8.2 /usr/mail - Local Exploit Mandrake Linux 8.2 - '/usr/mail' Local Exploit RedHat 6.2 /sbin/restore - Exploit RedHat 6.2 - '/sbin/restore' Privilege Escalation dump 0.4b15 (RedHat 6.2) - Exploit dump 0.4b15 (RedHat 6.2) - Privilege Escalation xsoldier 0.96 (RedHat 6.2) - Exploit Pine (Local Message Grabber) - Exploit xsoldier 0.96 (RedHat 6.2) - Buffer Overflow Pine (Local Message Grabber) - Local Message Read Seyon 2.1 rev. 4b i586-Linux - Exploit Seyon 2.1 rev. 4b i586-Linux (RedHat 4.0/5.1) - Overflow glibc-2.2 / openssh-2.3.0p1 / glibc 2.1.9x - Exploit glibc-2.2 / openssh-2.3.0p1 / glibc 2.1.9x - File Read suid_perl 5.001 - Exploit suid_perl 5.001 - Command Execution Sendmail 8.11.x (Linux/i386) - Exploit Sendmail 8.11.x (Linux/i386) - Privilege Escalation Microsoft Excel - Unspecified Remote Code Execution Microsoft Excel - Remote Code Execution Microsoft Word 2000 - Unspecified Code Execution Microsoft Word 2000 - Code Execution IBM AIX 5.3 sp6 - capture Terminal Sequence Privilege Escalation IBM AIX 5.3 sp6 - pioout Arbitrary Library Loading Privilege Escalation IBM AIX 5.3 SP6 - Capture Terminal Sequence Privilege Escalation IBM AIX 5.3 SP6 - 'pioout' Arbitrary Library Loading Privilege Escalation IBM AIX 5.3 libc - MALLOCDEBUG File Overwrite IBM AIX 5.3 - 'libc' MALLOCDEBUG File Overwrite Easy RM to MP3 Converter 2.7.3.700 - Exploit Easy RM to MP3 Converter 2.7.3.700 - Buffer Overflow Easy RM to MP3 27.3.700 (Windows XP SP3) - Exploit Easy RM to MP3 27.3.700 (Windows XP SP3) - Overflow Adobe Reader and Acrobat - Exploit Adobe Reader / Acrobat - '.PDF' File Overflow Mini-stream Ripper (Windows XP SP2/SP3) - Exploit Mini-stream Ripper (Windows XP SP2/SP3) - Local Overflow DJ Studio Pro 5.1.6.5.2 - Exploit (SEH) DJ Studio Pro 5.1.6.5.2 - Overflow (SEH) Winamp 5.572 - Exploit (SEH) Winamp 5.572 - Overflow (SEH) ZipScan 2.2c - Exploit (SEH) ZipScan 2.2c - Overflow (SEH) Local Glibc shared library (.so) 2.11.1 - Exploit (Linux Kernel 2.6.34-rc3) ReiserFS (RedHat / Ubuntu 9.10) - 'xattr' Privilege Escalation Local Glibc Shared Library (.so) 2.11.1 - Code Execution ReiserFS (Linux Kernel 2.6.34-rc3 / RedHat / Ubuntu 9.10) - 'xattr' Privilege Escalation SyncBack Freeware 3.2.20.0 - Exploit SyncBack Freeware 3.2.20.0 - Overflow (SEH) Mediacoder 0.7.3.4672 - Exploit (SEH) Mediacoder 0.7.3.4672 - Overflow (SEH) MP3 Workstation 9.2.1.1.2 - Exploit (SEH) MP3 Workstation 9.2.1.1.2 - Overflow (SEH) DJ Studio Pro 8.1.3.2.1 - Exploit (SEH) DJ Studio Pro 8.1.3.2.1 - Overflow (SEH) MP3 Workstation 9.2.1.1.2 - Exploit (SEH) (Metasploit) MP3 Workstation 9.2.1.1.2 - Overflow (SEH) (Metasploit) iworkstation 9.3.2.1.4 - Exploit (SEH) iworkstation 9.3.2.1.4 - Overflow (SEH) Nokia MultiMedia Player 1.0 - Exploit (SEH Unicode) Nokia MultiMedia Player 1.0 - Overflow (SEH Unicode) POP Peeper 3.7 - Exploit (SEH) POP Peeper 3.7 - Overflow (SEH) DVD X Player 5.5 Pro - SEH + ASLR + DEP Bypass DVD X Player 5.5 Pro - Overflow (SEH + ASLR + DEP Bypass) DJ Studio Pro 5.1.6.5.2 - Exploit (SEH) (Metasploit) DJ Studio Pro 5.1.6.5.2 - Overflow (SEH) (Metasploit) BlazeVideo HDTV Player 6.6 Professional - SEH + ASLR + DEP Bypass BlazeVideo HDTV Player 6.6 Professional - Overflow (SEH + ASLR + DEP Bypass) Slackware Linux 3.4 - 'liloconfig-color' Temporary file Slackware Linux 3.4 - 'makebootdisk' Temporary file Slackware Linux 3.4 - 'liloconfig-color' Temporary File Slackware Linux 3.4 - 'makebootdisk' Temporary File Slackware Linux 3.4 - 'netconfig' Temporary file Slackware Linux 3.4 - 'pkgtool' Temporary file Slackware Linux 3.4 - 'netconfig' Temporary File Slackware Linux 3.4 - 'pkgtool' Temporary File Debian suidmanager 0.18 - Command Execution BSDI BSD/OS 2.1 / FreeBSD 2.1 / IBM AIX 4.2 / SGI IRIX 6.4 / Sun SunOS 4.1.3 - Exploit HP HP-UX 10.20/11.0 / IBM AIX 4.3 / SCO Unixware 7.0 / Sun Solaris 2.6 - Exploit Slackware Linux 3.5 - Missing /etc/group Privilege Escalation BSDI BSD/OS 2.1 / FreeBSD 2.1 / IBM AIX 4.2 / SGI IRIX 6.4 / Sun SunOS 4.1.3 - Buffer Overrun HP HP-UX 10.20/11.0 / IBM AIX 4.3 / SCO Unixware 7.0 / Sun Solaris 2.6 - Change File Permission Slackware Linux 3.5 - '/etc/group' Privilege Escalation Sun Solaris 2.6 power management - Exploit Sun Solaris 2.6 - power management Exploit DataLynx suGuard 1.0 - Exploit Sun Solaris 2.5.1 PAM & unix_scheme - Exploit Solaris 2.5.1 ffbconfig - Exploit Solaris 2.5.1 chkey - Exploit Solaris 2.5.1 Ping - Exploit SGI IRIX 6.4 ioconfig - Exploit DataLynx suGuard 1.0 - Privilege Escalation Sun Solaris 2.5.1 PAM / unix_scheme - 'passwd' Privilege Escalation Solaris 2.5.1 - 'ffbconfig' Exploit Solaris 2.5.1 - 'chkey' Exploit Solaris 2.5.1 - 'Ping' Exploit SGI IRIX 6.4 - 'ioconfig' Exploit BSD/OS 2.1 / DG/UX 7.0 / Debian 1.3 / HP-UX 10.34 / IBM AIX 4.2 / SGI IRIX 6.4 / Solaris 2.5.1 - xlock Exploit (1) BSD/OS 2.1 / DG/UX 7.0 / Debian 1.3 / HP-UX 10.34 / IBM AIX 4.2 / SGI IRIX 6.4 / Solaris 2.5.1 - xlock Exploit (2) BSD/OS 2.1 / DG/UX 7.0 / Debian 1.3 / HP-UX 10.34 / IBM AIX 4.2 / SGI IRIX 6.4 / Solaris 2.5.1 - 'xlock' Exploit (1) BSD/OS 2.1 / DG/UX 7.0 / Debian 1.3 / HP-UX 10.34 / IBM AIX 4.2 / SGI IRIX 6.4 / Solaris 2.5.1 - '/usr/bin/X11/xlock' Privilege Escalation (2) Solaris 2.5.1 automount - Exploit Solaris 2.5.1 - 'automount' Exploit BSD/OS 2.1 / DG/UX 4.0 / Debian 0.93 / Digital UNIX 4.0 B / FreeBSD 2.1.5 / HP-UX 10.34 / IBM AIX 4.1.5 / NetBSD 1.0/1.1 / NeXTstep 4.0 / SGI IRIX 6.3 / SunOS 4.1.4 - 'rlogin' Exploit Sun Solaris 7.0 dtprintinfo - Buffer Overflow Sun Solaris 7.0 lpset - Buffer Overflow BSD/OS 2.1 / DG/UX 4.0 / Debian 0.93 / Digital UNIX 4.0 B / FreeBSD 2.1.5 / HP-UX 10.34 / IBM AIX 4.1.5 / NetBSD 1.0/1.1 / NeXTstep 4.0 / SGI IRIX 6.3 / SunOS 4.1.4 - 'rlogin' Privilege Escalation Sun Solaris 7.0 - '/usr/dt/bin/dtprintinfo' Buffer Overflow Sun Solaris 7.0 - '/usr/bin/lpset' Buffer Overflow IBM Remote Control Software 1.0 - Exploit IBM Remote Control Software 1.0 - Code Execution Xcmail 0.99.6 - Exploit Xcmail 0.99.6 - Buffer Overflow Sun Solaris 7.0 ff.core - Exploit S.u.S.E. 5.2 lpc - Exploit Sun Solaris 7.0 - 'ff.core' Exploit S.u.S.E. 5.2 - 'lpc' Exploit SGI IRIX 6.2 cdplayer - Exploit SGI IRIX 6.2 - 'cdplayer' Exploit SGI IRIX 5.3 Cadmin - Exploit SGI IRIX 6.0.1 colorview - Exploit SGI IRIX 5.3 - 'Cadmin' Exploit SGI IRIX 6.0.1 - 'colorview' Exploit SGI IRIX 6.3 df - Exploit SGI IRIX 6.4 - datman/cdman Exploit SGI IRIX 6.3 - 'df' Exploit SGI IRIX 6.4 - datman/cdman Exploit RedHat Linux 2.1 - abuse.console Exploit SGI IRIX 6.2 fsdump - Exploit RedHat Linux 5.1 xosview - Exploit Slackware Linux 3.1 - Buffer Overflow RedHat Linux 2.1 - 'abuse.console' Exploit SGI IRIX 6.2 - 'fsdump' Exploit RedHat Linux 5.1 - xosview Slackware Linux 3.1 - '/usr/X11/bin/SuperProbe' Buffer Overflow IBM AIX 4.3 infod - Exploit IBM AIX 4.3 - 'infod' Exploit IBM AIX 4.2.1 snap - Insecure Temporary File Creation IBM AIX 4.2.1 - 'snap' Insecure Temporary File Creation SGI IRIX 6.4 inpview - Exploit RedHat Linux 5.0 msgchk - Exploit IBM AIX 4.2.1 portmir - Buffer Overflow / Insecure Temporary File Creation IBM AIX 4.2 ping - Buffer Overflow IBM AIX 4.2 lchangelv - Buffer Overflow SGI IRIX 6.4 - 'inpview' Exploit RedHat Linux 5.0 - 'msgchk' Exploit IBM AIX 4.2.1 - '/usr/bin/portmir' Buffer Overflow / Insecure Temporary File Creation IBM AIX 4.2 - 'ping' Buffer Overflow IBM AIX 4.2 - '/usr/sbin/lchangelv' Buffer Overflow RedHat Linux 4.2 / SGI IRIX 6.3 / Solaris 2.6 mailx - Exploit (1) RedHat Linux 4.2 / SGI IRIX 6.3 / Solaris 2.6 - 'mailx' Exploit (1) SGI IRIX 6.4 netprint - Exploit SGI IRIX 6.4 - 'netprint' Exploit SGI IRIX 5.3/6.2 ordist - Exploit SGI IRIX 5.3/6.2 - 'ordist' Exploit SGI IRIX 5.3 pkgadjust - Exploit SGI IRIX 5.3 - 'pkgadjust' Exploit Sun Solaris 7.0 procfs - Exploit IBM AIX 3.2.5 - IFS Exploit IBM AIX 4.2.1 lquerypv - Exploit IBM AIX 3.2.5 - 'IFS' Exploit IBM AIX 4.2.1 - 'lquerypv' File Read SGI IRIX 6.3 pset - Exploit SGI IRIX 6.4 rmail - Exploit SGI IRIX 6.3 - 'pset' Exploit SGI IRIX 6.4 - 'rmail' Exploit SGI IRIX 5.2/5.3 serial_ports - Exploit SGI IRIX 6.4 suid_exec - Exploit SGI IRIX 5.1/5.2 sgihelp - Exploit SGI IRIX 6.4 startmidi - Exploit SGI IRIX 5.2/5.3 - 'serial_ports' Exploit SGI IRIX 6.4 - 'suid_exec' Exploit SGI IRIX 5.1/5.2- 'sgihelp' Exploit SGI IRIX 6.4 - 'startmidi' Exploit SGI IRIX 6.4 xfsdump - Exploit SGI IRIX 6.4 - 'xfsdump' Exploit IBM AIX 4.3.1 adb - Exploit IBM AIX 4.3.1 - 'adb' Denial of Service Apple At Ease 5.0 - Exploit Samba < 2.0.5 - Exploit Apple At Ease 5.0 - Information Disclosure Samba < 2.0.5 - Overflow NetBSD 1.4 / OpenBSD 2.5 /Solaris 7.0 profil(2) - Exploit NetBSD 1.4 / OpenBSD 2.5 / Solaris 7.0 - 'profil(2)' Modify The Internal Data Space Mandriva Linux Mandrake 6.0 / Gnome Libs 1.0.8 espeaker - Local Buffer Overflow Mandriva Linux Mandrake 6.0 / Gnome Libs 1.0.8 - 'espeaker' Local Buffer Overflow HP-UX 10.20 newgrp - Exploit HP-UX 10.20 newgrp - Privilege Escalation BSD/OS 2.1 / FreeBSD 2.1.5 / NeXTstep 4.x / IRIX 6.4 / SunOS 4.1.3/4.1.4 - 'lpr' Buffer Overrun (2) BSD/OS 2.1 / FreeBSD 2.1.5 / NeXTstep 4.x / IRIX 6.4 / SunOS 4.1.3/4.1.4 - '/usr/bin/lpr' Buffer Overrun Privilege Escalation (2) BSD 2 / CND 1 / Sendmail 8.x / FreeBSD 2.1.x / HP-UX 10.x / AIX 4 / RedHat 4 - Sendmail Daemon Exploit BSD 2 / CND 1 / Sendmail 8.x / FreeBSD 2.1.x / HP-UX 10.x / AIX 4 / RedHat 4 - Sendmail Daemon FreeBSD 3.3/Linux Mandrake 7.0 - 'xsoldier' Buffer Overflow (1) FreeBSD 3.3/Linux Mandrake 7.0 - 'xsoldier' Buffer Overflow (2) xsoldier (FreeBSD 3.3/Linux Mandrake 7.0) - Buffer Overflow (1) xsoldier (FreeBSD 3.3/Linux Mandrake 7.0) - Buffer Overflow (2) Solaris 7.0 kcms_configure - Exploit Solaris 7.0 - 'kcms_configure Exploit Windowmaker wmmon 1.0 b2 - Exploit Windowmaker wmmon 1.0 b2 - Command Execution Oracle8i Standard Edition 8.1.5 for Linux Installer - Exploit Oracle8i Standard Edition 8.1.5 for Linux Installer - Privilege Escalation Standard & Poors ComStock 4.2.4 - Exploit Standard & Poors ComStock 4.2.4 - Command Execution KDE 1.1.2 KApplication configfile - Exploit (1) KDE 1.1.2 KApplication configfile - Exploit (2) KDE 1.1.2 KApplication configfile - Exploit (3) KDE 1.1.2 KApplication configfile - Privilege Escalation (1) KDE 1.1.2 KApplication configfile - Privilege Escalation (2) KDE 1.1.2 KApplication configfile - Privilege Escalation (3) BSD 'mailx' 8.1.1-10 - Buffer Overflow (2) mailx 8.1.1-10 (BSD/Slackware) - Buffer Overflow (2) Mandrake 7.0/7.1 / RedHat Kon2 0.3.9 - fld Input File Overflow Mandrake 7.0/7.1 / RedHat Kon2 0.3.9 - '/usr/bin/fld' Input File Overflow IRIX 6.5.x - GR_OSView Buffer Overflow SGI IRIX 6.2 libgl.so - Buffer Overflow IRIX 6.5.x - dmplay Buffer Overflow IRIX 6.2/6.3 lpstat - Buffer Overflow IRIX 6.5.x - inpview Race Condition IRIX 6.5.x - '/usr/sbin/gr_osview' Buffer Overflow SGI IRIX 6.2 - 'libgl.so' Buffer Overflow IRIX 6.5.x - '/usr/sbin/dmplay' Buffer Overflow IRIX 6.2/6.3 - '/bin/lpstat' Buffer Overflow IRIX 6.5.x - '/usr/lib/InPerson/inpview' Race Condition IRIX 5.3/6.x - mail Exploit IRIX 5.3/6.x - '/usr/bin/mail' Buffer Overflow Libc locale - Exploit (1) Libc locale - Exploit (2) Libc locale - Privilege Escalation (1) Libc locale - Privilege Escalation (2) GNOME esound 0.2.19 - Unix Domain Socket Race Condition Apple Mac OSX 10 / HP-UX 9/10/11 / Mandriva 6/7 / RedHat 5/6 / SCO 5 / IRIX 6 - Shell redirection Race Condition Apple Mac OSX 10 / HP-UX 9/10/11 / Mandriva 6/7 / RedHat 5/6 / SCO 5 / IRIX 6 - Shell Redirection Race Condition IBM AIX 4.x - setsenv Buffer Overflow IBM AIX 4.3 digest - Buffer Overflow IBM AIX 4.x - enq Buffer Overflow IBM AIX 4.3.x - piobe Buffer Overflow IBM AIX 4.x - '/usr/bin/setsenv' Buffer Overflow IBM AIX 4.3 - '/usr/lib/lpd/digest' Buffer Overflow IBM AIX 4.x - 'enq' Buffer Overflow IBM AIX 4.3.x - '/usr/lib/lpd/piobe' Buffer Overflow SGI IRIX 6.5 / Solaris 7.0/8 - CDE dtsession Buffer Overflow SGI IRIX 6.5 / Solaris 7.0/8 CDE - '/usr/dt/bin/dtsession' Buffer Overflow AIX 4.2/4.3 - piomkapqd Buffer Overflow AIX 4.2/4.3 - '/usr/lib/lpd/pio/etc/piomkapqd' Buffer Overflow (Linux Kernel 2.4.17-8) User-Mode Linux - Memory Access Privilege Escalation User-Mode Linux (Linux Kernel 2.4.17-8) - Memory Access Privilege Escalation (Linux Kernel) Grsecurity Kernel Patch 1.9.4 - Memory Protection Grsecurity Kernel Patch 1.9.4 (Linux Kernel) - Memory Protection QNX RTOS 6.1 - phlocale Environment Variable Buffer Overflow QNX RTOS 6.1 - PKG-Installer Buffer Overflow QNX RTOS 6.1 - '/usr/photon/bin/phlocale' Environment Variable Buffer Overflow QNX RTOS 6.1 - 'PKG-Installer' Buffer Overflow NCMedia Sound Editor Pro 7.5.1 - SEH + DEP Bypass NCMedia Sound Editor Pro 7.5.1 - Overflow (SEH + DEP Bypass) AFD 1.2.x - Working Directory Local Buffer Overflow AFD 1.2.x - Working Directory Local Buffer Overflow Privilege Escalation IBM AIX 4.3.x/5.1 - ERRPT Local Buffer Overflow IBM AIX 4.3.x/5.1 - 'ERRPT' Local Buffer Overflow HP-UX 10.x - rs.F3000 Unspecified Unauthorized Access HP-UX 10.x - rs.F3000 Unauthorized Access Leksbot 1.2 - Multiple Unspecified Vulnerabilities Leksbot 1.2 - Multiple Vulnerabilities IBM AIX 4.3.x/5.1 - LSMCODE Environment Variable Local Buffer Overflow IBM AIX 4.3.x/5.1 - 'LSMCODE' Environment Variable Local Buffer Overflow IBM UniVerse 10.0.0.9 - uvadmsh Privilege Escalation IBM UniVerse 10.0.0.9 - 'uvadmsh' Privilege Escalation ViRobot Linux Server 2.0 - Overflow (Linux Kernel 2.6) Samba 2.2.8 (Debian / Mandrake) - Share Privilege Escalation Samba 2.2.8 (Linux Kernel 2.6 / Debian / Mandrake) - Share Privilege Escalation Veritas NetBackup 3.5/4.5/5.0 - Multiple Unspecified Local Memory Corruption Vulnerabilities (1) Veritas NetBackup 3.5/4.5/5.0 - Multiple Unspecified Local Memory Corruption Vulnerabilities (2) Veritas NetBackup 3.5/4.5/5.0 - Multiple Unspecified Local Memory Corruption Vulnerabilities (3) Veritas NetBackup 3.5/4.5/5.0 - Multiple Local Memory Corruption Vulnerabilities (1) Veritas NetBackup 3.5/4.5/5.0 - Multiple Local Memory Corruption Vulnerabilities (2) Veritas NetBackup 3.5/4.5/5.0 - Multiple Local Memory Corruption Vulnerabilities (3) Nvidia Display Driver Service (Nsvr) - Exploit Nvidia Display Driver Service (Nsvr) - Buffer Overflow IBM AIX 5.3 - GetShell and GetCommand File Enumeration IBM AIX 5.3 - GetShell and GetCommand Partial File Disclosure IBM AIX 5.3 - 'GetShell' / 'GetCommand' File Enumeration IBM AIX 5.3 - 'GetShell' / 'GetCommand' File Disclosure Apple 2.0.4 - Safari Unspecified Local Apple 2.0.4 - Safari Local Exploit Systrace - Multiple System Call Wrappers Concurrency Vulnerabilities IBM AIX 6.1.8 libodm - Arbitrary File Write IBM AIX 6.1.8 - 'libodm' Arbitrary File Write Apple iOS 4.0.2 - Networking Packet Filter Rules Privilege Escalation VeryPDF HTML Converter 2.0 - SEH/ToLower() Bypass Buffer Overflow VeryPDF HTML Converter 2.0 - Buffer Overflow (SEH/ToLower() Bypass) Symantec Encryption Desktop 10 - Buffer Overflow Privilege Escalation QEMU (Gentoo) - Local Priv Escalation QEMU (Gentoo) - Privilege Escalation Apache Tomcat 8/7/6 (RedHat-Based Distros) - Privilege Escalation Apache Tomcat 8/7/6 (RedHat Based Distros) - Privilege Escalation RedStar 3.0 Server - 'BEAM & RSSMON' Command Execution (Shellshock) RedStar 3.0 Server - 'BEAM' / 'RSSMON' Command Injection (Shellshock) Microsoft WordPerfect Document Converter - Exploit (MS03-036) Microsoft WordPerfect Document Converter (Windows NT4 Workstation SP5/SP6 French) - File Template Buffer Overflow (MS03-036) CA BrightStor ARCserve Backup - Exploiter Tool CA BrightStor ARCserve Backup - Overflow NCTAudioEditor2 ActiveX DLL 'NCTWMAFile2.dll 2.6.2.157' - Exploit NCTAudioEditor2 ActiveX DLL 'NCTWMAFile2.dll 2.6.2.157' - File Write CDBurnerXP 4.2.4.1351 - Exploit PeerCast 0.1216 - Exploit (Metasploit) PeerCast 0.1216 - Stack Overflow (Metasploit) BigAnt Server 2.52 - Exploit (SEH) BigAnt Server 2.52 - Overflow (SEH) NetTransport Download Manager 2.90.510 - Exploit NetTransport Download Manager 2.90.510 - Overflow (SEH) File Sharing Wizard 1.5.0 - Exploit (SEH) File Sharing Wizard 1.5.0 - Overflow (SEH) Real Player 12.0.0.879 - Exploit Sun Java Web Server 7.0 u7 - Exploit (DEP Bypass) Real Player 12.0.0.879 - Code Execution Sun Java Web Server 7.0 u7 - Overflow (DEP Bypass) IBM AIX 5l FTPd - Remote DES Hash Exploit IBM AIX 5l - 'FTPd' Remote DES Hash Exploit Microsoft Data Access Components - Exploit (MS11-002) Microsoft Data Access Components - Overflow (PoC) (MS11-002) FileCOPA FTP Server (Pre 18 Jul Version) - Exploit (Metasploit) FileCOPA FTP Server (Pre 18 Jul Version) - 'LIST' Buffer Overflow (Metasploit) Viscom Software Movie Player Pro SDK ActiveX 6.8 - Exploit (Metasploit) Viscom Software Movie Player Pro SDK ActiveX 6.8 - Stack-Based Buffer Overflow (Metasploit) Apple Personal Web Sharing 1.1 - Exploit id Software Solaris Quake II 3.13/3.14 / QuakeWorld 2.0/2.1 / Quake 1.9/3.13/3.14 - Exploit id Software Solaris Quake II 3.13/3.14 / QuakeWorld 2.0/2.1 / Quake 1.9/3.13/3.14 - Command Execution Metainfo Sendmail 2.0/2.5 & MetaIP 3.1 - Exploit Metainfo Sendmail 2.0/2.5 / MetaIP 3.1 - Upload / Execute Read Scripts IBM AIX 3.2/4.1 & SCO Unixware 7.1.1 & SGI IRIX 5.3 & Sun Solaris 2.5.1 - Exploit IBM AIX 3.2/4.1 / SCO Unixware 7.1.1 / SGI IRIX 5.3 / Sun Solaris 2.5.1 - Privilege Escalation HP HP-UX 10.34 rlpdaemon - Exploit HP HP-UX 10.34 rlpdaemon - Remote Overflow Ray Chan WWW Authorization Gateway 0.1 - Exploit Ray Chan WWW Authorization Gateway 0.1 - Command Execution Solaris 7.0 Coredump - Exploit Solaris 7.0 - 'Coredump' File Write IBM Scalable POWERparallel (SP) 2.0 sdrd - Exploit SGI IRIX 6.2 cgi-bin wrap - Exploit IBM Scalable POWERparallel (SP) 2.0 - 'sdrd' File Read SGI IRIX 6.2 - cgi-bin wrap Exploit SGI IRIX 6.5.2 nsd - Exploit SGI IRIX 6.5.2 - 'nsd'' Exploit IBM AIX 3.2.5 - login(1) Exploit IBM AIX 3.2.5 - 'login(1)' Exploit Compaq Java Applet for Presario SpawnApp - Exploit Compaq Java Applet for Presario SpawnApp - Code Execution Network Security Wizards Dragon-Fire IDS 1.0 - Exploit Network Security Wizards Dragon-Fire IDS 1.0 - Command Execution Hughes Technologies Mini SQL (mSQL) 2.0/2.0.10 - Exploit Hughes Technologies Mini SQL (mSQL) 2.0/2.0.10 - Information Disclosure IBM AIX 4.3.2 ftpd - Remote Buffer Overflow IBM AIX 4.3.2 - 'ftpd' Remote Buffer Overflow glFTPd 1.17.2 - Exploit glFTPd 1.17.2 - Code Execution Netopia R-series routers 4.6.2 - Exploit Netopia R-series Routers 4.6.2 - Modifying SNMP Tables Sun Java Web Server 1.1.3/2.0 Servlets - Exploit Sun Java Web Server 1.1.3/2.0 Servlets - information Disclosure IPFilter 3.x - Fragment Rule Bypass CGIWrap 2.x/3.x - Cross-Site Scripting AIX 4.1/4.2 - pdnsd Buffer Overflow AIX 4.1/4.2 - 'pdnsd' Buffer Overflow RedHat Linux 7.0 Apache - Remote 'Username' Enumeration RedHat Linux 7.0 Apache - Remote Username Enumeration Hylafax 4.1.x - HFaxD Unspecified Format String Hylafax 4.1.x - HFaxD Format String EZMeeting 3.x - 'EZNet.exe' Long HTTP Request Remote Buffer Overflow LHA 1.x - Multiple extract_one Buffer Overflow Vulnerabilities LHA 1.x - 'extract_one' Multiple Buffer Overflow Vulnerabilities Ethereal 0.x - Multiple Unspecified iSNS / SMB / SNMP Protocol Dissector Vulnerabilities Ethereal 0.x - Multiple iSNS / SMB / SNMP Protocol Dissector Vulnerabilities Oracle 9i - Multiple Unspecified Vulnerabilities Oracle 9i - Multiple Vulnerabilities File ELF 4.x - Header Unspecified Buffer Overflow File ELF 4.x - Header Buffer Overflow Microsoft PowerPoint 2003 - 'mso.dll' .PPT Processing Unspecified Code Execution Microsoft PowerPoint 2003 - 'powerpnt.exe' Unspecified Issue Microsoft PowerPoint 2003 - 'mso.dll' '.PPT' Processing Code Execution Microsoft PowerPoint 2003 - 'powerpnt.exe' Exploit CA eSCC r8/1.0 / eTrust Audit r8/1.5 - Unspecified Arbitrary File Manipulation CA eSCC r8/1.0 / eTrust Audit r8/1.5 - Audit Event System Unspecified Replay Attack CA eSCC r8/1.0 / eTrust Audit r8/1.5 - Arbitrary File Manipulation CA eSCC r8/1.0 / eTrust Audit r8/1.5 - Audit Event System Replay Attack Microsoft Internet Explorer 6 - Unspecified Code Execution (1) Microsoft Internet Explorer 6 - Unspecified Code Execution (2) Microsoft Internet Explorer 6 - Code Execution (1) Microsoft Internet Explorer 6 - Code Execution (2) GNU Tar 1.1x - GNUTYPE_NAMES Directory Traversal GNU Tar 1.1x - 'GNUTYPE_NAMES' Directory Traversal TFTP Server TFTPDWin 0.4.2 - Unspecified Directory Traversal TFTP Server TFTPDWin 0.4.2 - Directory Traversal Novell eDirectory 8.x - eMBox Utility 'edirutil' Command Unspecified Novell eDirectory 8.x - eMBox Utility 'edirutil' Command Exploit Multiple CA Service Management Products - Unspecified Remote Command Execution Multiple CA Service Management Products - Remote Command Execution NovaStor NovaNET 12 - 'DtbClsLogin()' Remote Stack Buffer Overflow Bash - Environment Variables Code Injection (Shellshock) Bash - Environment Variables Command Injection (Shellshock) OpenVPN 2.2.29 - Remote Exploit (Shellshock) OpenVPN 2.2.29 - Remote Command Injection (Shellshock) Postfix SMTP 4.2.x < 4.2.48 - Remote Exploit (Shellshock) Apache mod_cgi - Remote Exploit (Shellshock) Postfix SMTP 4.2.x < 4.2.48 - Remote Command Injection (Shellshock) Apache mod_cgi - Remote Command Injection (Shellshock) Poison Ivy 2.3.2 - Unspecified Remote Buffer Overflow Poison Ivy 2.3.2 - Remote Buffer Overflow Samba 3.5.11/3.6.3 - Unspecified Remote Code Execution Samba 3.5.11/3.6.3 - Remote Code Execution Advantech Switch - Bash Environment Variable Code Injection (Shellshock) (Metasploit) Advantech Switch - Bash Environment Variable Command Injection (Shellshock) (Metasploit) Cisco UCS Manager 2.1(1b) - Remote Exploit (Shellshock) Cisco UCS Manager 2.1(1b) - Remote Command Injection (Shellshock) IPFire - Bash Environment Variable Injection (Shellshock) (Metasploit) IPFire - Bash Environment Variable Command Injection (Shellshock) (Metasploit) TrendMicro InterScan Web Security Virtual Appliance - Remote Code Execution (Shellshock) TrendMicro InterScan Web Security Virtual Appliance - Remote Command Injection (Shellshock) Microsoft Security Essentials / SCEP (Microsoft Windows 8/8.1/10 / Windows Server) - 'MsMpEng' Remotely Exploitable Type Confusion Microsoft Security Essentials / SCEP (Microsoft Windows 8/8.1/10 / Windows Server) - 'MsMpEng' Remote Type Confusion Poll It CGI 2.0 - Exploit Poll It CGI 2.0 - Multiple Vulnerabilities DreamPoll 3.1 - Exploit DreamPoll 3.1 - SQL Injection WordPress Plugin WP-Cumulus 1.20 - Exploit WordPress Plugin WP-Cumulus 1.20 - Full Path Disclosure / Cross-Site Scripting Public Media Manager - Exploit Public Media Manager - Remote File Inclusion Joomla! Component com_adagency - Exploit Joomla! Component com_adagency - Local File Inclusion File Upload Manager 1.3 - Exploit File Upload Manager 1.3 - Web Shell File Upload Joomla! Component com_caddy - Exploit Renista CMS - Exploit Renista CMS - SQL Injection BtiTracker 1.3.x < 1.4.x - Exploit BtiTracker 1.3.x < 1.4.x - SQL Injection WordPress Plugin Cimy Counter - Exploit WordPress Plugin Cimy Counter - Full Path Disclosure / Redirector / Cross-Site Scripting / HTTP Response Spitting Belkin F5D7234-4 v5 G Wireless Router - Exploit Belkin F5D7234-4 v5 G Wireless Router - Remote Hash Exposed WhatsApp Status Changer 0.2 - Exploit WhatsApp - Remote Change Status MySimpleNews 1.0 - Remotely Readable Administrator Password MySimpleNews 1.0 - Remote Readable Administrator Password SquirrelMail 1.2.11 - Exploit SquirrelMail 1.2.11 - Multiple Vulnerabilities D-Link DCS-936L Network Camera - Cross-Site Request Forgery Yappa-ng 1.x/2.x - Unspecified Remote File Inclusion Yappa-ng 1.x/2.x - Unspecified Cross-Site Scripting Yappa-ng 1.x/2.x - Remote File Inclusion Yappa-ng 1.x/2.x - Cross-Site Scripting Aenovo - Multiple Unspecified Cross-Site Scripting Vulnerabilities Aenovo - Multiple Cross-Site Scripting Vulnerabilities Codegrrl - 'Protection.php' Unspecified Code Execution Codegrrl - 'Protection.php' Code Execution Red Mombin 0.7 - 'index.php' Unspecified Cross-Site Scripting Red Mombin 0.7 - 'process_login.php' Unspecified Cross-Site Scripting Red Mombin 0.7 - 'index.php' Cross-Site Scripting Red Mombin 0.7 - 'process_login.php' Cross-Site Scripting A-Blog 1.0 - Unspecified Cross-Site Scripting A-Blog 1.0 - Cross-Site Scripting Liens_Dynamiques 2.1 - Multiple Unspecified Cross-Site Scripting Vulnerabilities Liens_Dynamiques 2.1 - Multiple Cross-Site Scripting Vulnerabilities WordPress Plugin Akismet 2.1.3 - Unspecified WordPress Plugin Akismet 2.1.3 - Exploit SquirrelMail G/PGP Encryption Plugin 2.0/2.1 - Multiple Unspecified Remote Command Execution Vulnerabilities SquirrelMail G/PGP Encryption Plugin 2.0/2.1 - Multiple Remote Command Execution Vulnerabilities UPC Ireland Cisco EPC 2425 Router / Horizon Box - Exploit UPC Ireland Cisco EPC 2425 Router / Horizon Box - WPA-PSK Handshake Information Korean GHBoard - 'Component/upload.jsp' Unspecified Arbitrary File Upload Korean GHBoard - 'Component/upload.jsp' Arbitrary File Upload MyPHP Forum 3.0 - 'search.php' Multiple Unspecified SQL Injections MyPHP Forum 3.0 - 'search.php' Multiple SQL Injections Zoph 0.7.2.1 - Unspecified SQL Injection Zoph 0.7.2.1 - SQL Injection Joomla! Component FreiChat 1.0/2.x - Unspecified HTML Injection Joomla! Component FreiChat 1.0/2.x - HTML Injection Bash CGI - Remote Code Execution (Shellshock) (Metasploit) Bash CGI - Remote Command Injection (Shellshock) (Metasploit) PHP < 5.6.2 - 'disable_functions()' Bypass Exploit (Shellshock) PHP < 5.6.2 - 'disable_functions()' Bypass Command Injection (Shellshock) Hyperic HQ Enterprise 4.5.1 - Cross-Site Scripting / Multiple Unspecified Security Vulnerabilities Hyperic HQ Enterprise 4.5.1 - Cross-Site Scripting / Multiple Security Vulnerabilities Atlassian JIRA FishEye 2.5.7 / Crucible 2.5.7 Plugins - XML Parsing Unspecified Security Atlassian JIRA FishEye 2.5.7 / Crucible 2.5.7 Plugins - XML Parsing Security Exploit Netsweeper 4.0.8 - Authentication Bypass Issue Netsweeper 4.0.8 - Authentication Bypass SimpleInvoices invoices Module - Unspecified Customer Field Cross-Site Scripting SimpleInvoices invoices Module - Customer Field Cross-Site Scripting Bugzilla 4.2 - Tabular Reports Unspecified Cross-Site Scripting Bugzilla 4.2 - Tabular Reports Cross-Site Scripting iScripts AutoHoster - 'main_smtp.php' Unspecified Traversal iScripts AutoHoster - 'main_smtp.php' Traversal Exploit Trend Micro - 'CoreServiceShell.exe' Multiple HTTP Issues Trend Micro - 'CoreServiceShell.exe' Multiple HTTP Exploits Sun Secure Global Desktop and Oracle Global Desktop 4.61.915 - Exploit (Shellshock) Sun Secure Global Desktop and Oracle Global Desktop 4.61.915 - Command Injection (Shellshock) NUUO NVRmini 2 3.0.8 - Remote Code Execution (Shellshock) NUUO NVRmini 2 3.0.8 - Remote Command Injection (Shellshock) Squid Analysis Report Generator 2.3.10 - Remote Code Execution	2017-11-16 10:02:26 +00:00
Offensive Security	13a6e2baaf	DB: 2017-09-20 ... 8 new exploits McAfee E-Business Server 8.5.2 - Remote Unauthenticated Code Execution / Denial of Service (PoC) McAfee E-Business Server 8.5.2 - Unauthenticated Remote Code Execution / Denial of Service (PoC) Apple macOS - Local Privilege Escalation Due to Lack of Bounds Checking in HIServices Custom CFObject Serialization Apple macOS - Privilege Escalation Due to Lack of Bounds Checking in HIServices Custom CFObject Serialization Microsoft Edge 38.14393.1066.0 - Memory Corruption with Partial Page Loading Microsoft Edge 38.14393.1066.0 - 'COptionsCollectionCacheItem::GetAt' Out-of-Bounds Read Xcode OpenBase 9.1.5 (OSX) - (root file create) Privilege Escalation Xcode OpenBase 9.1.5 (OSX) - (Root File Create) Privilege Escalation Xcode OpenBase 10.0.0 (OSX) - (unsafe system call) Privilege Escalation Xcode OpenBase 10.0.0 (OSX) - (Unsafe System Call) Privilege Escalation eTrust AntiVirus Agent r8 - Local Privilege Escalation eTrust AntiVirus Agent r8 - Privilege Escalation WICD 1.7.1 - Local Privilege Escalation WICD 1.7.1 - Privilege Escalation Novell Client 4.91 SP4 - Local Privilege Escalation Novell Client 4.91 SP4 - Privilege Escalation H-Sphere Webshell 2.4 - Privilege Escalation H-Sphere WebShell 2.4 - Privilege Escalation Zend Platform 2.2.1 - PHP.INI File Modification Zend Platform 2.2.1 - 'PHP.INI' File Modification AIX 7.1 - lquerylv Privilege Escalation AIX 7.1 - 'lquerylv' Privilege Escalation sheed AntiVirus 2.3 - Unquoted Service Path Privilege Escalation Sheed AntiVirus 2.3 - Unquoted Service Path Privilege Escalation Serviio PRO 1.8 DLNA Media Streaming Server - Local Privilege Escalation Serviio PRO 1.8 DLNA Media Streaming Server - Privilege Escalation Automated Logic WebCTRL 6.5 - Local Privilege Escalation Automated Logic WebCTRL 6.5 - Privilege Escalation Netdecision 5.8.2 - Local Privilege Escalation Netdecision 5.8.2 - Privilege Escalation H-Sphere Webshell 2.4 - Remote Command Execution H-Sphere WebShell 2.4 - Remote Command Execution NetIQ Privileged User Manager 2.3.1 - 'ldapagnt_eval()' Remote Perl Code Execution (Metasploit) NetIQ Privileged User Manager 2.3.1 - 'ldapagnt_eval()' Perl Remote Code Execution (Metasploit) STUNSHELL Web Shell - Remote PHP Code Execution (Metasploit) STUNSHELL Web Shell - PHP Remote Code Execution (Metasploit) v0pCr3w Web Shell - Remote Code Execution (Metasploit) v0pCr3w (Web Shell) - Remote Code Execution (Metasploit) InstantCMS 1.6 - Remote PHP Code Execution (Metasploit) InstantCMS 1.6 - PHP Remote Code Execution (Metasploit) Drupal Module RESTWS 7.x - Remote PHP Code Execution (Metasploit) Drupal Module RESTWS 7.x - PHP Remote Code Execution (Metasploit) HPE < 7.2 - Java Deserialization Tecnovision DLX Spot - SSH Backdoor phpBB 2.0.15 - (highlight) Remote PHP Code Execution phpBB 2.0.15 - 'highlight' PHP Remote Code Execution phpBB 2.0.15 - Remote PHP Code Execution (Metasploit) phpBB 2.0.15 - PHP Remote Code Execution (Metasploit) versatileBulletinBoard 1.00 RC2 - (board takeover) SQL Injection versatileBulletinBoard 1.00 RC2 - 'board takeover' SQL Injection VuBB Forum RC1 - (m) SQL Injection VuBB Forum RC1 - 'm' SQL Injection Wizz Forum 1.20 - (TopicID) SQL Injection PHPWebThings 1.4 - (msg/forum) SQL Injection Wizz Forum 1.20 - 'TopicID' SQL Injection PHPWebThings 1.4 - 'msg'/'forum' SQL Injection webSPELL 4.01 - (title_op) SQL Injection webSPELL 4.01 - 'title_op' SQL Injection YapBB 1.2 - (cfgIncludeDirectory) Remote Command Execution YapBB 1.2 - 'cfgIncludeDirectory' Remote Command Execution TopList 1.3.8 - (phpBB Hack) Remote File Inclusion (1) Advanced Guestbook 2.4.0 - (phpBB) File Inclusion TopList 1.3.8 - (phpBB Hack) Remote File Inclusion (2) Advanced Guestbook 2.4.0 - (phpBB) Remote File Inclusion TopList 1.3.8 - 'phpBB Hack' Remote File Inclusion (1) Advanced Guestbook 2.4.0 - 'phpBB' File Inclusion TopList 1.3.8 - 'phpBB Hack' Remote File Inclusion (2) Advanced Guestbook 2.4.0 - 'phpBB' Remote File Inclusion Knowledge Base Mod 2.0.2 - (phpBB) Remote File Inclusion Knowledge Base Mod 2.0.2 - 'phpBB' Remote File Inclusion phpRaid 3.0.b3 - (phpBB/SMF) Remote File Inclusion pafileDB 2.0.1 - (mxBB/phpBB) Remote File Inclusion phpRaid 3.0.b3 - 'phpBB'/'SMF' Remote File Inclusion pafileDB 2.0.1 - 'mxBB'/'phpBB' Remote File Inclusion Foing 0.7.0 - (phpBB) Remote File Inclusion Foing 0.7.0 - 'phpBB' Remote File Inclusion Activity MOD Plus 1.1.0 - (phpBB Mod) File Inclusion Activity MOD Plus 1.1.0 - 'phpBB Mod' File Inclusion Blend Portal 1.2.0 - (phpBB Mod) Remote File Inclusion Blend Portal 1.2.0 - 'phpBB Mod' Remote File Inclusion XMB 1.9.6 - (u2uid) SQL Injection (mq=off) XMB 1.9.6 - (mq=off) 'u2uid' SQL Injection Web3news 0.95 - (PHPSECURITYADMIN_PATH) Remote File Inclusion Web3news 0.95 - 'PHPSECURITYADMIN_PATH' Remote File Inclusion Yappa-ng 2.3.1 - (admin_modules) Remote File Inclusion Yappa-ng 2.3.1 - 'admin_modules' Remote File Inclusion TualBLOG 1.0 - (icerikno) SQL Injection TualBLOG 1.0 - 'icerikno' SQL Injection Tekman Portal 1.0 - (tr) SQL Injection Tekman Portal 1.0 - 'tr' SQL Injection MyReview 1.9.4 - (email) SQL Injection / Code Execution MyReview 1.9.4 - 'email' SQL Injection / Code Execution phpQuestionnaire 3.12 - (phpQRootDir) Remote File Inclusion phpQuestionnaire 3.12 - 'phpQRootDir' Remote File Inclusion phpBB Static Topics 1.0 - phpbb_root_path File Inclusion phpBB Static Topics 1.0 - 'phpbb_root_path' File Inclusion CentiPaid 1.4.2 - centipaid_class.php Remote File Inclusion CentiPaid 1.4.2 - 'centipaid_class.php' Remote File Inclusion webSPELL 4.01.01 - (getsquad) SQL Injection webSPELL 4.01.01 - 'getsquad' SQL Injection Osprey 1.0 - GetRecord.php Remote File Inclusion Osprey 1.0 - 'GetRecord.php' Remote File Inclusion Techno Dreams Announcement - (key) SQL Injection Techno Dreams Guestbook 1.0 - (key) SQL Injection Techno Dreams Announcement - 'key' SQL Injection Techno Dreams Guestbook 1.0 - 'key' SQL Injection GEPI 1.4.0 - gestion/savebackup.php Remote File Inclusion GEPI 1.4.0 - 'gestion/savebackup.php' Remote File Inclusion PHPGiggle 12.08 - (CFG_PHPGIGGLE_ROOT) File Inclusion PHPGiggle 12.08 - 'CFG_PHPGIGGLE_ROOT' File Inclusion mxBB Module Meeting 1.1.2 - Remote FileInclusion mxBB Module Meeting 1.1.2 - Remote File Inclusion Uploader & Downloader 3.0 - (id_user) SQL Injection Uploader & Downloader 3.0 - 'id_user' SQL Injection The Classified Ad System 1.0 - (main) SQL Injection The Classified Ad System 1.0 - 'main' SQL Injection VisoHotlink 1.01 - functions.visohotlink.php Remote File Inclusion VisoHotlink 1.01 - 'functions.visohotlink.php' Remote File Inclusion vhostadmin 0.1 - (MODULES_DIR) Remote File Inclusion vhostadmin 0.1 - 'MODULES_DIR' Remote File Inclusion XLAtunes 0.1 - (album) SQL Injection XLAtunes 0.1 - 'album' SQL Injection webSPELL 4.01.02 - (topic) SQL Injection webSPELL 4.01.02 - 'topic' SQL Injection webSPELL 4.01.02 - Remote PHP Code Execution webSPELL 4.01.02 - PHP Remote Code Execution PHP-Nuke - iFrame (iframe.php) Remote File Inclusion PHP-Nuke - 'iframe.php' Remote File Inclusion XOOPS Module Camportail 1.1 - (camid) SQL Injection XOOPS Module Camportail 1.1 - 'camid' SQL Injection Mutant 0.9.2 - mutant_functions.php Remote File Inclusion Mutant 0.9.2 - 'mutant_functions.php' Remote File Inclusion Original 0.11 - config.inc.php x[1] Remote File Inclusion Original 0.11 - 'config.inc.php' 'x[1]' Remote File Inclusion Glossword 1.8.1 - custom_vars.php Remote File Inclusion Glossword 1.8.1 - 'custom_vars.php' Remote File Inclusion GeekLog 2.x - ImageImageMagick.php Remote File Inclusion GeekLog 2.x - 'ImageImageMagick.php' Remote File Inclusion Vizayn Urun Tanitim Sistemi 0.2 - (tr) SQL Injection Vizayn Urun Tanitim Sistemi 0.2 - 'tr' SQL Injection WBB2-Addon: Acrotxt 1.0 - (show) SQL Injection WBB2-Addon: Acrotxt 1.0 - 'show' SQL Injection STPHPLibrary - (STPHPLIB_DIR) Remote File Inclusion STPHPLibrary - 'STPHPLIB_DIR' Remote File Inclusion phpFFL 1.24 - PHPFFL_FILE_ROOT Remote File Inclusion phpFFL 1.24 - 'PHPFFL_FILE_ROOT' Remote File Inclusion phpBB Mod OpenID 0.2.0 - BBStore.php Remote File Inclusion phpBB Mod OpenID 0.2.0 - 'BBStore.php' Remote File Inclusion LiveAlbum 0.9.0 - common.php Remote File Inclusion LiveAlbum 0.9.0 - 'common.php' Remote File Inclusion Pindorama 0.1 - client.php Remote File Inclusion Pindorama 0.1 - 'client.php' Remote File Inclusion Socketmail 2.2.8 - fnc-readmail3.php Remote File Inclusion TOWeLS 0.1 - scripture.php Remote File Inclusion Socketmail 2.2.8 - 'fnc-readmail3.php' Remote File Inclusion TOWeLS 0.1 - 'scripture.php' Remote File Inclusion Sige 0.1 - sige_init.php Remote File Inclusion Sige 0.1 - 'sige_init.php' Remote File Inclusion Scribe 0.2 - Remote PHP Code Execution Scribe 0.2 - PHP Remote Code Execution patBBcode 1.0 - bbcodeSource.php Remote File Inclusion patBBcode 1.0 - 'bbcodeSource.php' Remote File Inclusion Tilde CMS 4.x - (aarstal) SQL Injection Tilde CMS 4.x - 'aarstal' SQL Injection CityWriter 0.9.7 - head.php Remote File Inclusion CityWriter 0.9.7 - 'head.php' Remote File Inclusion PhpMyDesktop/Arcade 1.0 Final - (phpdns_basedir) Remote File Inclusion PhpMyDesktop/Arcade 1.0 Final - 'phpdns_basedir' Remote File Inclusion WebSihirbazi 5.1.1 - (pageid) SQL Injection WebSihirbazi 5.1.1 - 'pageid' SQL Injection Blakord Portal Beta 1.3.A - (all modules) SQL Injection Blakord Portal Beta 1.3.A - (All Modules) SQL Injection PHP Links 1.3 - smarty.php Remote File Inclusion PHP Links 1.3 - 'smarty.php' Remote File Inclusion Aterr 0.9.1 - Local File Inclusion (PHP5) Aterr 0.9.1 - PHP5 Local File Inclusion phpEmployment - (PHP upload) Arbitrary File Upload phpEmployment - 'PHP Upload' Arbitrary File Upload XOOPS 2.3.2 - 'mydirname' Remote PHP Code Execution XOOPS 2.3.2 - 'mydirname' PHP Remote Code Execution Xplode CMS - (wrap_script) SQL Injection Xplode CMS - 'wrap_script' SQL Injection VS PANEL 7.3.6 - (Cat_ID) SQL Injection VS PANEL 7.3.6 - 'Cat_ID' SQL Injection WebMember 1.0 - (formID) SQL Injection WebMember 1.0 - 'formID' SQL Injection Dokuwiki 2009-02-14 - Remote/Temporary File Inclusion Dokuwiki 2009-02-14 - Temporary/Remote File Inclusion Kjtechforce mailman b1 - (code) SQL Injection Delete Row Kjtechforce mailman b1 - (Delete Row) 'code' SQL Injection Virtue Classifieds - (category) SQL Injection Virtue Classifieds - 'category' SQL Injection XOOPS Celepar Module Qas - (codigo) SQL Injection XOOPS Celepar Module Qas - 'codigo' SQL Injection URA 3.0 - (cat) SQL Injection URA 3.0 - 'cat' SQL Injection TYPO3 CMS 4.0 - (showUid) SQL Injection TYPO3 CMS 4.0 - 'showUid' SQL Injection Typing Pal 1.0 - (idTableProduit) SQL Injection Typing Pal 1.0 - 'idTableProduit' SQL Injection Videos Broadcast Yourself 2 - (UploadID) SQL Injection Videos Broadcast Yourself 2 - 'UploadID' SQL Injection Uiga Church Portal - (year) SQL Injection Uiga Church Portal - 'year' SQL Injection Network Management/Inventory System - header.php Remote File Inclusion Network Management/Inventory System - 'header.php' Remote File Inclusion BASE 1.2.4 - base_qry_common.php Remote File Inclusion (Metasploit) BASE 1.2.4 - 'base_qry_common.php' Remote File Inclusion (Metasploit) PHP-Nuke 8.0 - ' News Module Cross-Site Scripting / HTML Code Injection PHP-Nuke 8.0 - (News Module) Cross-Site Scripting / HTML Code Injection Vivid Ads Shopping Cart - (prodid) SQL Injection Vivid Ads Shopping Cart - 'prodid' SQL Injection WorldPay Script Shop - (productdetail) SQL Injection WorldPay Script Shop - 'productdetail' SQL Injection tincan ltd - (section) SQL Injection tincan ltd - 'section' SQL Injection Template Seller Pro 3.25 - (tempid) SQL Injection Template Seller Pro 3.25 - 'tempid' SQL Injection Webloader 7 < 8 - (vid) SQL Injection Webloader 7 < 8 - 'vid' SQL Injection web5000 - (page_show) SQL Injection web5000 - 'page_show' SQL Injection Cosmos Solutions CMS - (id= / page=) SQL Injection Cosmos Solutions CMS - 'id=' / 'page=' SQL Injection iBoutique - (page) SQL Injection / Cross-Site Scripting iBoutique - 'page' SQL Injection / Cross-Site Scripting OpenX - (phpAdsNew) Remote File Inclusion OpenX - 'phpAdsNew' Remote File Inclusion System Shop - (Module aktka) SQL Injection System Shop - 'Module aktka' SQL Injection TikiWiki tiki-graph_formula - Remote PHP Code Execution (Metasploit) TikiWiki tiki-graph_formula - PHP Remote Code Execution (Metasploit) vBulletin 4.0.x 4.1.3 - (messagegroupid) SQL Injection vBulletin 4.0.x 4.1.3 - 'messagegroupid' SQL Injection PmWiki 2.2.34 - (pagelist) Remote PHP Code Injection (1) PmWiki 2.2.34 - 'pagelist' Remote PHP Code Injection (1) YABB SE 0.8/1.4/1.5 - Packages.php Remote File Inclusion YABB SE 0.8/1.4/1.5 - 'Packages.php' Remote File Inclusion Invision Board 1.1.1 - ipchat.php Remote File Inclusion Invision Board 1.1.1 - 'ipchat.php' Remote File Inclusion Typo3 3.5 b5 - Translations.php Remote File Inclusion Typo3 3.5 b5 - 'Translations.php' Remote File Inclusion Webchat 0.77 - Defines.php Remote File Inclusion Webchat 0.77 - 'Defines.php' Remote File Inclusion PHP-Nuke 6.5 - Multiple Downloads Module SQL Injection PHP-Nuke 6.5 - (Multiple Downloads Module) SQL Injection ttCMS 2.2/2.3 - header.php Remote File Inclusion ttCMS 2.2/2.3 - 'header.php' Remote File Inclusion PMachine 2.2.1 - Lib.Inc.php Remote File Inclusion Command Execution PMachine 2.2.1 - 'Lib.Inc.php' Remote File Inclusion / Command Execution HolaCMS 1.2.x - HTMLtags.php Local File Inclusion HolaCMS 1.2.x - 'HTMLtags.php' Local File Inclusion WebCalendar 0.9.x - Multiple Module SQL Injection WebCalendar 0.9.x - (Multiple Modules) SQL Injection PHP-Nuke 6.x - Multiple Module SQL Injection PHP-Nuke 6.x - (Multiple Modules) SQL Injection EasyDynamicPages 1.0 - 'config_page.php' Remote PHP File Inclusion EasyDynamicPages 1.0 - 'config_page.php' PHP Remote File Inclusion VisualShapers EZContents 1.4/2.0 - module.php Remote Command Execution VisualShapers EZContents 1.4/2.0 - 'module.php' Remote Command Execution Mambo Open Source 4.5/4.6 - mod_mainmenu.php Remote File Inclusion Mambo Open Source 4.5/4.6 - 'mod_mainmenu.php' Remote File Inclusion PHPGedView 2.x - [GED_File]_conf.php Remote File Inclusion PHPGedView 2.x - '[GED_File]_conf.php' Remote File Inclusion Laurent Adda Les Commentaires 2.0 - PHP Script fonctions.lib.php Remote File Inclusion Laurent Adda Les Commentaires 2.0 - PHP Script derniers_commentaires.php Remote File Inclusion Laurent Adda Les Commentaires 2.0 - PHP Script admin.php Remote File Inclusion Laurent Adda Les Commentaires 2.0 - PHP Script 'fonctions.lib.php' Remote File Inclusion Laurent Adda Les Commentaires 2.0 - PHP Script 'derniers_commentaires.php' Remote File Inclusion Laurent Adda Les Commentaires 2.0 - PHP Script 'admin.php' Remote File Inclusion VisualShapers EZContents 1.x/2.0 - db.php Arbitrary File Inclusion VisualShapers EZContents 1.x/2.0 - archivednews.php Arbitrary File Inclusion VisualShapers EZContents 1.x/2.0 - 'db.php' Arbitrary File Inclusion VisualShapers EZContents 1.x/2.0 - 'archivednews.php' Arbitrary File Inclusion VirtuaSystems VirtuaNews 1.0.x - Multiple Module Cross-Site Scripting Vulnerabilities VirtuaSystems VirtuaNews 1.0.x - (Multiple Modules) Cross-Site Scripting Vulnerabilities WarpSpeed 4nAlbum Module 0.92 - displaycategory.php basepath Parameter Remote File Inclusion WarpSpeed 4nAlbum Module 0.92 - 'displaycategory.php' 'basepath' Parameter Remote File Inclusion Gemitel 3.50 - affich.php Remote File Inclusion Command Injection Gemitel 3.50 - 'affich.php' Remote File Inclusion / Command Injection phpBB 2.0.x - album_portal.php Remote File Inclusion phpBB 2.0.x - 'album_portal.php' Remote File Inclusion Mail Manage EX 3.1.8 MMEX - Script Settings Parameter Remote PHP File Inclusion Mail Manage EX 3.1.8 MMEX - Script Settings Parameter PHP Remote File Inclusion Nucleus CMS 3.0 / Blog:CMS 3 / PunBB 1.x - Common.php Remote File Inclusion Nucleus CMS 3.0 / Blog:CMS 3 / PunBB 1.x - 'Common.php' Remote File Inclusion @lexPHPTeam @lex Guestbook 3.12 - Remote PHP File Inclusion @lexPHPTeam @lex Guestbook 3.12 - PHP Remote File Inclusion phpBB 2.0.x - 'admin_cash.php' Remote PHP File Inclusion phpBB 2.0.x - 'admin_cash.php' PHP Remote File Inclusion Stadtaus.Com Download Center Lite 1.5 - Remote PHP File Inclusion Stadtaus.Com Download Center Lite 1.5 - PHP Remote File Inclusion Work System eCommerce 3.0.3/3.0.4 - forum.php Remote File Inclusion Work System eCommerce 3.0.3/3.0.4 - 'forum.php' Remote File Inclusion phpGroupWare 0.9.14 - Tables_Update.Inc.php Remote File Inclusion phpGroupWare 0.9.14 - 'Tables_Update.Inc.php' Remote File Inclusion PANews 2.0 - Remote PHP Script Code Execution PANews 2.0 - PHP Remote Code Execution VoteBox 2.0 - Votebox.php Remote File Inclusion VoteBox 2.0 - 'Votebox.php' Remote File Inclusion McNews 1.x - install.php Arbitrary File Inclusion McNews 1.x - 'install.php' Arbitrary File Inclusion Vortex Portal 2.0 - content.php act Parameter Remote File Inclusion Vortex Portal 2.0 - 'content.php' act Parameter Remote File Inclusion phpBB 1.x/2.0.x - Knowledge Base Module KB.php SQL Injection phpBB 1.x/2.0.x - (Knowledge Base Module) 'KB.php' SQL Injection GrayCMS 1.1 - error.php Remote File Inclusion GrayCMS 1.1 - 'error.php' Remote File Inclusion PHP Poll Creator 1.0.1 - Poll_Vote.php Remote File Inclusion PHP Poll Creator 1.0.1 - 'Poll_Vote.php' Remote File Inclusion MWChat 6.7 - Start_Lobby.php Remote File Inclusion MWChat 6.7 - 'Start_Lobby.php' Remote File Inclusion Popper Webmail 1.41 - ChildWindow.Inc.php Remote File Inclusion Popper Webmail 1.41 - 'ChildWindow.Inc.php' Remote File Inclusion RaXnet Cacti 0.5/0.6/0.8 - Config_Settings.php Remote File Inclusion RaXnet Cacti 0.5/0.6/0.8 - 'Config_Settings.php' Remote File Inclusion RaXnet Cacti 0.5/0.6/0.8 - Top_Graph_Header.php Remote File Inclusion RaXnet Cacti 0.5/0.6/0.8 - 'Top_Graph_Header.php' Remote File Inclusion MyGuestbook 0.6.1 - Form.Inc.php3 Remote File Inclusion MyGuestbook 0.6.1 - 'Form.Inc.php3' Remote File Inclusion Comdev eCommerce 3.0 - config.php Remote File Inclusion Comdev eCommerce 3.0 - 'config.php' Remote File Inclusion PHPWebNotes 2.0 - Api.php Remote File Inclusion PHPWebNotes 2.0 - 'Api.php' Remote File Inclusion Autolinks 2.1 Pro - Al_initialize.php Remote File Inclusion Autolinks 2.1 Pro - 'Al_initialize.php' Remote File Inclusion MySource 2.14 - Socket.php PEAR_PATH Remote File Inclusion MySource 2.14 - Request.php PEAR_PATH Remote File Inclusion MySource 2.14 - 'Socket.php' 'PEAR_PATH' Remote File Inclusion MySource 2.14 - 'Request.php' 'PEAR_PATH' Remote File Inclusion MySource 2.14 - mail.php PEAR_PATH Remote File Inclusion MySource 2.14 - Date.php PEAR_PATH Remote File Inclusion MySource 2.14 - Span.php PEAR_PATH Remote File Inclusion MySource 2.14 - mimeDecode.php PEAR_PATH Remote File Inclusion MySource 2.14 - mime.php PEAR_PATH Remote File Inclusion MySource 2.14 - 'mail.php' 'PEAR_PATH' Remote File Inclusion MySource 2.14 - 'Date.php' 'PEAR_PATH' Remote File Inclusion MySource 2.14 - 'Span.php' 'PEAR_PATH' Remote File Inclusion MySource 2.14 - 'mimeDecode.php' 'PEAR_PATH' Remote File Inclusion MySource 2.14 - 'mime.php' 'PEAR_PATH' Remote File Inclusion Help Center Live 1.0/1.2/2.0 - module.php Local File Inclusion Help Center Live 1.0/1.2/2.0 - 'module.php' Local File Inclusion Tru-Zone Nuke ET 3.x - Search Module SQL Injection Tru-Zone Nuke ET 3.x - (Search Module) SQL Injection vtiger CRM 4.2 - RSS Aggregation Module Feed Cross-Site Scripting vtiger CRM 4.2 - (RSS Aggregation Module Feed) Cross-Site Scripting CF_Nuke 4.6 - index.cfm Local File Inclusion CF_Nuke 4.6 - 'index.cfm' Local File Inclusion Tolva 0.1 - Usermods.php Remote File Inclusion Tolva 0.1 - 'Usermods.php' Remote File Inclusion SPiD 1.3.1 - Scan_Lang_Insert.php Local File Inclusion SPiD 1.3.1 - 'Scan_Lang_Insert.php' Local File Inclusion PHORUM 3.x/5.x - Common.php Remote File Inclusion PHORUM 3.x/5.x - 'Common.php' Remote File Inclusion SPIP 1.8.3 - Spip_login.php Remote File Inclusion SPIP 1.8.3 - 'Spip_login.php' Remote File Inclusion CyBoards PHP Lite 1.21/1.25 - Common.php Remote File Inclusion CyBoards PHP Lite 1.21/1.25 - 'Common.php' Remote File Inclusion Monster Top List 1.4 - functions.php Remote File Inclusion Monster Top List 1.4 - 'functions.php' Remote File Inclusion I-RATER Platinum - Common.php Remote File Inclusion I-RATER Platinum - 'Common.php' Remote File Inclusion I-RATER Platinum - Config_settings.TPL.php Remote File Inclusion I-RATER Platinum - 'Config_settings.TPL.php' Remote File Inclusion Advanced Guestbook 2.x - Addentry.php Remote File Inclusion Advanced Guestbook 2.x - 'Addentry.php' Remote File Inclusion DMCounter 0.9.2 -b - Kopf.php Remote File Inclusion phpBB Knowledge Base 2.0.2 - Mod KB_constants.php Remote File Inclusion DMCounter 0.9.2 -b - 'Kopf.php' Remote File Inclusion phpBB Knowledge Base 2.0.2 - 'Mod KB_constants.php' Remote File Inclusion ISPConfig 2.2.2/2.2.3 - Session.INC.php Remote File Inclusion ISPConfig 2.2.2/2.2.3 - 'Session.INC.php' Remote File Inclusion RadScripts RadLance 7.0 - popup.php Local File Inclusion RadScripts RadLance 7.0 - 'popup.php' Local File Inclusion osTicket 1.x - Open_form.php Remote File Inclusion osTicket 1.x - 'Open_form.php' Remote File Inclusion Squirrelmail 1.4.x - Redirect.php Local File Inclusion Squirrelmail 1.4.x - 'Redirect.php' Local File Inclusion phpBB 2.0.x - template.php Remote File Inclusion phpBB 2.0.x - 'template.php' Remote File Inclusion phpBB - BBRSS.php Remote File Inclusion phpBB - 'BBRSS.php' Remote File Inclusion eNpaper1 - Root_Header.php Remote File Inclusion eNpaper1 - 'Root_Header.php' Remote File Inclusion CrisoftRicette 1.0 - Cookbook.php Remote File Inclusion CrisoftRicette 1.0 - 'Cookbook.php' Remote File Inclusion MF Piadas 1.0 - admin.php Remote File Inclusion MF Piadas 1.0 - 'admin.php' Remote File Inclusion SiteBuilder-FX - top.php Remote File Inclusion SiteBuilder-FX - 'top.php' Remote File Inclusion Blog:CMS 4.1 - Thumb.php Remote File Inclusion Blog:CMS 4.1 - 'Thumb.php' Remote File Inclusion Extcalendar 2.0 - Extcalendar.php Remote File Inclusion Extcalendar 2.0 - 'Extcalendar.php' Remote File Inclusion RW::Download - stats.php Remote File Inclusion RW::Download - 'stats.php' Remote File Inclusion PHP Event Calendar 1.4 - calendar.php Remote File Inclusion PHP Event Calendar 1.4 - 'calendar.php' Remote File Inclusion Forum 5 - pm.php Local File Inclusion Forum 5 - 'pm.php' Local File Inclusion Advanced Poll 2.0.2 - common.inc.php Remote File Inclusion Advanced Poll 2.0.2 - 'common.inc.php' Remote File Inclusion Prince Clan Chess Club 0.8 - Include.PCchess.php Remote File Inclusion Prince Clan Chess Club 0.8 - 'Include.PCchess.php' Remote File Inclusion Bosdates 3.x/4.0 - Payment.php Remote File Inclusion Bosdates 3.x/4.0 - 'Payment.php' Remote File Inclusion Moskool 1.5 Component - Admin.Moskool.php Remote File Inclusion Moskool 1.5 Component - 'Admin.Moskool.php' Remote File Inclusion WoW Roster 1.5 - hsList.php subdir Parameter Remote File Inclusion WoW Roster 1.5 - 'hsList.php' 'subdir' Parameter Remote File Inclusion VWar 1.5 - war.php vwar_root Parameter Remote File Inclusion VWar 1.5 - member.php vwar_root Parameter Remote File Inclusion VWar 1.5 - calendar.php vwar_root Parameter Remote File Inclusion VWar 1.5 - challenge.php vwar_root Parameter Remote File Inclusion VWar 1.5 - joinus.php vwar_root Parameter Remote File Inclusion VWar 1.5 - news.php vwar_root Parameter Remote File Inclusion VWar 1.5 - stats.php vwar_root Parameter Remote File Inclusion VWar 1.5 - 'war.php' vwar_root Parameter Remote File Inclusion VWar 1.5 - 'member.php' vwar_root Parameter Remote File Inclusion VWar 1.5 - 'calendar.php' vwar_root Parameter Remote File Inclusion VWar 1.5 - 'challenge.php' vwar_root Parameter Remote File Inclusion VWar 1.5 - 'joinus.php' vwar_root Parameter Remote File Inclusion VWar 1.5 - 'news.php' vwar_root Parameter Remote File Inclusion VWar 1.5 - 'stats.php' vwar_root Parameter Remote File Inclusion Mafia Moblog 6 - Big.php Remote File Inclusion Mafia Moblog 6 - 'Big.php' Remote File Inclusion WEBinsta Mailing List Manager 1.3 - Install3.php Remote File Inclusion WEBinsta Mailing List Manager 1.3 - 'Install3.php' Remote File Inclusion Zen Cart Web Shopping Cart 1.x - autoload_func.php autoLoadConfig[999][0][loadFile] Parameter Remote File Inclusion Zen Cart Web Shopping Cart 1.x - 'autoload_func.php' 'autoLoadConfig[999][0][loadFile]' Parameter Remote File Inclusion Jetbox CMS 2.1 - Search_function.php Remote File Inclusion Jetbox CMS 2.1 - 'Search_function.php' Remote File Inclusion In-portal In-Link 2.3.4 - ADODB_DIR.php Remote File Inclusion In-portal In-Link 2.3.4 - 'ADODB_DIR.php' Remote File Inclusion PHP-Proxima 6.0 - BB_Smilies.php Local File Inclusion PHP-Proxima 6.0 - 'BB_Smilies.php' Local File Inclusion WM-News 0.5 - print.php Local File Inclusion Ractive Popper 1.41 - Childwindow.Inc.php Remote File Inclusion WM-News 0.5 - 'print.php' Local File Inclusion Ractive Popper 1.41 - 'Childwindow.Inc.php' Remote File Inclusion Exporia 0.3 - Common.php Remote File Inclusion Exporia 0.3 - 'Common.php' Remote File Inclusion My-BIC 0.6.5 - Mybic_Server.php Remote File Inclusion My-BIC 0.6.5 - 'Mybic_Server.php' Remote File Inclusion Geotarget - script.php Remote File Inclusion Geotarget - 'script.php' Remote File Inclusion PHPSelect Web Development - index.php3 Remote File Inclusion PHPSelect Web Development - 'index.php3' Remote File Inclusion PHP Web Scripts Easy Banner - functions.php Remote File Inclusion PHP Web Scripts Easy Banner - 'functions.php' Remote File Inclusion PHP Polling Creator 1.03 - functions.inc.php Remote File Inclusion PHP Polling Creator 1.03 - 'functions.inc.php' Remote File Inclusion Softerra PHP Developer Library 1.5.3 - Grid3.lib.php Remote File Inclusion BlueShoes Framework 4.6 - GoogleSearch.php Remote File Inclusion Tagit2b - DelTagUser.php Remote File Inclusion Softerra PHP Developer Library 1.5.3 - 'Grid3.lib.php' Remote File Inclusion BlueShoes Framework 4.6 - 'GoogleSearch.php' Remote File Inclusion Tagit2b - 'DelTagUser.php' Remote File Inclusion CommunityPortals 1.0 - bug.php Remote File Inclusion CommunityPortals 1.0 - 'bug.php' Remote File Inclusion PHP TopSites FREE 1.022b - config.php Remote File Inclusion PHP TopSites FREE 1.022b - 'config.php' Remote File Inclusion Buzlas 2006-1 Full - Archive_Topic.php Remote File Inclusion Buzlas 2006-1 Full - 'Archive_Topic.php' Remote File Inclusion phpBB Add Name Module - Not_Mem.php Remote File Inclusion phpBB Add Name Module - 'Not_Mem.php' Remote File Inclusion RamaCMS - ADODB.Inc.php Remote File Inclusion H-Sphere Webshell 2.x - 'login.php' Cross-Site Scripting Mambo Module MOStlyCE 4.5.4 - HTMLTemplate.php Remote File Inclusion Lodel CMS 0.7.3 - Calcul-page.php Remote File Inclusion RamaCMS - 'ADODB.Inc.php' Remote File Inclusion H-Sphere WebShell 2.x - 'login.php' Cross-Site Scripting Mambo Module MOStlyCE 4.5.4 - 'HTMLTemplate.php' Remote File Inclusion Lodel CMS 0.7.3 - 'Calcul-page.php' Remote File Inclusion Maintain 3.0.0-RC2 - Example6.php Remote File Inclusion Maintain 3.0.0-RC2 - 'Example6.php' Remote File Inclusion Zorum 3.5 - DBProperty.php Remote File Inclusion Zorum 3.5 - 'DBProperty.php' Remote File Inclusion PHPMyConferences 8.0.2 - Init.php Remote File Inclusion PHPMyConferences 8.0.2 - 'Init.php' Remote File Inclusion PHPTreeView 1.0 - TreeViewClass.php Remote File Inclusion PHPTreeView 1.0 - 'TreeViewClass.php' Remote File Inclusion PLS-Bannieres 1.21 - Bannieres.php Remote File Inclusion PLS-Bannieres 1.21 - 'Bannieres.php' Remote File Inclusion The Search Engine Project 0.942 - Configfunction.php Remote File Inclusion The Search Engine Project 0.942 - 'Configfunction.php' Remote File Inclusion KnowledgeBuilder 2.2 - visEdit_Control.Class.php Remote File Inclusion KnowledgeBuilder 2.2 - 'visEdit_Control.Class.php' Remote File Inclusion NewP News Publishing System 1.0 - Class.Database.php Remote File Inclusion NewP News Publishing System 1.0 - 'Class.Database.php' Remote File Inclusion Advanced Guestbook 2.3.1 - admin.php Remote File Inclusion Advanced Guestbook 2.3.1 - 'admin.php' Remote File Inclusion @cid Stats 2.3 - Install.php3 Remote File Inclusion @cid Stats 2.3 - 'Install.php3' Remote File Inclusion PHPMyChat 0.14/0.15 - Languages.Lib.php Local File Inclusion PHPMyChat 0.14/0.15 - 'Languages.Lib.php' Local File Inclusion PHPdebug 1.1 - Debug_test.php Remote File Inclusion PHPdebug 1.1 - 'Debug_test.php' Remote File Inclusion eXtreme-fusion 4.02 - Fusion_Forum_View.php Local File Inclusion eXtreme-fusion 4.02 - 'Fusion_Forum_View.php' Local File Inclusion Easy Banner Pro 2.8 - info.php Remote File Inclusion Edit-X - Edit_Address.php Remote File Inclusion Easy Banner Pro 2.8 - 'info.php' Remote File Inclusion Edit-X - 'Edit_Address.php' Remote File Inclusion OpenEMR 2.8.2 - Import_XML.php Remote File Inclusion OpenEMR 2.8.2 - 'Import_XML.php' Remote File Inclusion PHPProbid 5.24 - Lang.php Remote File Inclusion PHPProbid 5.24 - 'Lang.php' Remote File Inclusion MySQLNewsEngine - Affichearticles.php3 Remote File Inclusion MySQLNewsEngine - 'Affichearticles.php3' Remote File Inclusion Meganoide's News 1.1.1 - Include.php Remote File Inclusion Meganoide's News 1.1.1 - 'Include.php' Remote File Inclusion Shop Kit Plus - StyleCSS.php Local File Inclusion Shop Kit Plus - 'StyleCSS.php' Local File Inclusion Pickle 0.3 - download.php Local File Inclusion Active Calendar 1.2 - showcode.php Local File Inclusion Pickle 0.3 - 'download.php' Local File Inclusion Active Calendar 1.2 - 'showcode.php' Local File Inclusion JCCorp URLShrink Free 1.3.1 - CreateURL.php Remote File Inclusion JCCorp URLShrink Free 1.3.1 - 'CreateURL.php' Remote File Inclusion Weekly Drawing Contest 0.0.1 - Check_Vote.php Local File Inclusion Weekly Drawing Contest 0.0.1 - 'Check_Vote.php' Local File Inclusion WordPress < 2.1.2 - PHP_Self Cross-Site Scripting WordPress < 2.1.2 - 'PHP_Self' Cross-Site Scripting Satel Lite - Satellite.php Local File Inclusion Satel Lite - 'Satellite.php' Local File Inclusion eCardMAX HotEditor 4.0 - Keyboard.php Local File Inclusion eCardMAX HotEditor 4.0 - 'Keyboard.php' Local File Inclusion MyNews 4.2.2 - Week_Events.php Remote File Inclusion MyNews 4.2.2 - 'Week_Events.php' Remote File Inclusion Web Service Deluxe News Manager 1.0.1 Deluxe - footer.php Local File Inclusion Actionpoll 1.1 - Actionpoll.php Remote File Inclusion Web Service Deluxe News Manager 1.0.1 Deluxe - 'footer.php' Local File Inclusion Actionpoll 1.1 - 'Actionpoll.php' Remote File Inclusion Fully Modded PHPBB2 - phpbb_root_path Remote File Inclusion Fully Modded PHPBB2 - 'phpbb_root_path' Remote File Inclusion PHP Turbulence 0.0.1 - Turbulence.php Remote File Inclusion PHP Turbulence 0.0.1 - 'Turbulence.php' Remote File Inclusion Allfaclassifieds 6.04 - Level2.php Remote File Inclusion PHPMyBibli 1.32 - Init.Inc.php Remote File Inclusion Allfaclassifieds 6.04 - 'Level2.php' Remote File Inclusion PHPMyBibli 1.32 - 'Init.Inc.php' Remote File Inclusion ACVSWS - Transport.php Remote File Inclusion ACVSWS - 'Transport.php' Remote File Inclusion Lms 1.5.x - RTMessageAdd.php Remote File Inclusion Lms 1.5.x - 'RTMessageAdd.php' Remote File Inclusion MyNewsGroups 0.6 - Include.php Remote File Inclusion PHPMyTGP 1.4 - AddVIP.php Remote File Inclusion MyNewsGroups 0.6 - 'Include.php' Remote File Inclusion PHPMyTGP 1.4 - 'AddVIP.php' Remote File Inclusion Comus 2.0 - Accept.php Remote File Inclusion Comus 2.0 - 'Accept.php' Remote File Inclusion HTMLEditBox 2.2 - config.php Remote File Inclusion DynaTracker 1.5.1 - includes_handler.php base_path Remote File Inclusion DynaTracker 1.5.1 - action.php base_path Remote File Inclusion HTMLEditBox 2.2 - 'config.php' Remote File Inclusion DynaTracker 1.5.1 - 'includes_handler.php' 'base_path' Remote File Inclusion DynaTracker 1.5.1 - 'action.php' 'base_path' Remote File Inclusion Doruk100Net - Info.php Remote File Inclusion Doruk100Net - 'Info.php' Remote File Inclusion PHPSecurityAdmin 4.0.2 - Logout.php Remote File Inclusion PHPSecurityAdmin 4.0.2 - 'Logout.php' Remote File Inclusion PHP Content Architect 0.9 pre 1.2 - MFA_Theme.php Remote File Inclusion PHP Content Architect 0.9 pre 1.2 - 'MFA_Theme.php' Remote File Inclusion PHPHostBot 1.05 - Authorize.php Remote File Inclusion PHPHostBot 1.05 - 'Authorize.php' Remote File Inclusion PHMe 0.0.2 - Function_List.php Local File Inclusion PHMe 0.0.2 - 'Function_List.php' Local File Inclusion VietPHP - _functions.php dirpath Parameter Remote File Inclusion VietPHP - admin/index.php language Parameter Remote File Inclusion VietPHP - '_functions.php' dirpath Parameter Remote File Inclusion VietPHP - 'admin/index.php' language Parameter Remote File Inclusion Coppermine Photo Gallery 1.3/1.4 - YABBSE.INC.php Remote File Inclusion Coppermine Photo Gallery 1.3/1.4 - 'YABBSE.INC.php' Remote File Inclusion Shoutbox 1.0 - Shoutbox.php Remote File Inclusion Shoutbox 1.0 - 'Shoutbox.php' Remote File Inclusion Web News 1.1 - feed.php config[root_ordner] Parameter Remote File Inclusion Web News 1.1 - news.php config[root_ordner] Parameter Remote File Inclusion Lib2 PHP Library 0.2 - My_Statistics.php Remote File Inclusion Web News 1.1 - 'feed.php' 'config[root_ordner]' Parameter Remote File Inclusion Web News 1.1 - 'news.php' 'config[root_ordner]' Parameter Remote File Inclusion Lib2 PHP Library 0.2 - 'My_Statistics.php' Remote File Inclusion Dalai Forum 1.1 - forumreply.php Local File Inclusion Firesoft - Class_TPL.php Remote File Inclusion Dalai Forum 1.1 - 'forumreply.php' Local File Inclusion Firesoft - 'Class_TPL.php' Remote File Inclusion PHP-Nuke 8.0 - autohtml.php Local File Inclusion PHP-Nuke 8.0 - 'autohtml.php' Local File Inclusion Content Builder 0.7.5 - postComment.php Remote File Inclusion Content Builder 0.7.5 - 'postComment.php' Remote File Inclusion Jeebles Technology Jeebles Directory 2.9.60 - download.php Local File Inclusion Jeebles Technology Jeebles Directory 2.9.60 - 'download.php' Local File Inclusion PHPbasic basicFramework 1.0 - Includes.php Remote File Inclusion PHPbasic basicFramework 1.0 - 'Includes.php' Remote File Inclusion Galmeta Post 0.2 - Upload_Config.php Remote File Inclusion Galmeta Post 0.2 - 'Upload_Config.php' Remote File Inclusion MyBlog 1.x - Games.php ID Remote File Inclusion MyBlog 1.x - 'Games.php' 'ID' Remote File Inclusion PHPMyTourney 2 - tourney/index.php Remote File Inclusion PHPMyTourney 2 - 'tourney/index.php' Remote File Inclusion W-Agora 4.0 - add_user.php bn_dir_default Parameter Remote File Inclusion W-Agora 4.0 - create_forum.php bn_dir_default Parameter Remote File Inclusion W-Agora 4.0 - create_user.php bn_dir_default Parameter Remote File Inclusion W-Agora 4.0 - delete_notes.php bn_dir_default Parameter Remote File Inclusion W-Agora 4.0 - delete_user.php bn_dir_default Parameter Remote File Inclusion W-Agora 4.0 - edit_forum.php bn_dir_default Parameter Remote File Inclusion W-Agora 4.0 - mail_users.php bn_dir_default Parameter Remote File Inclusion W-Agora 4.0 - moderate_notes.php bn_dir_default Parameter Remote File Inclusion W-Agora 4.0 - reorder_forums.php bn_dir_default Parameter Remote File Inclusion W-Agora 4.0 - 'add_user.php' bn_dir_default Parameter Remote File Inclusion W-Agora 4.0 - 'create_forum.php' bn_dir_default Parameter Remote File Inclusion W-Agora 4.0 - 'create_user.php' bn_dir_default Parameter Remote File Inclusion W-Agora 4.0 - 'delete_notes.php' bn_dir_default Parameter Remote File Inclusion W-Agora 4.0 - 'delete_user.php' bn_dir_default Parameter Remote File Inclusion W-Agora 4.0 - 'edit_forum.php' bn_dir_default Parameter Remote File Inclusion W-Agora 4.0 - 'mail_users.php' bn_dir_default Parameter Remote File Inclusion W-Agora 4.0 - 'moderate_notes.php' bn_dir_default Parameter Remote File Inclusion W-Agora 4.0 - 'reorder_forums.php' bn_dir_default Parameter Remote File Inclusion XOOPS 2.0.18 - modules/system/admin.php fct Parameter Traversal Local File Inclusion XOOPS 2.0.18 - 'modules/system/admin.php' 'fct' Parameter Traversal Local File Inclusion Allied Telesis AT-RG634A ADSL Broadband Router - Unauthenticated Webshell Allied Telesis AT-RG634A ADSL Broadband Router - Unauthenticated Web Shell C99Shell 1.0 Pre-Release build 16 - 'ch99.php' Cross-Site Scripting C99Shell 1.0 Pre-Release build 16 (Web Shell) - 'ch99.php' Cross-Site Scripting C99 Shell - 'c99.php' Authentication Bypass C99Shell (Web Shell) - 'c99.php' Authentication Bypass W-Agora 4.2.1 - search.php3 bn Parameter Traversal Local File Inclusion W-Agora 4.2.1 - 'search.php3' 'bn' Parameter Traversal Local File Inclusion Andy's PHP KnowledgeBase 0.95.4 - 'step5.php' Remote PHP Code Execution Andy's PHP KnowledgeBase 0.95.4 - 'step5.php' PHP Remote Code Execution MySQLDumper 1.24.4 - 'menu.php' Remote PHP Code Execution MySQLDumper 1.24.4 - 'menu.php' PHP Remote Code Execution Microweber 1.0.3 - Arbitrary File Upload / Filter Bypass / Remote PHP Code Execution Microweber 1.0.3 - Arbitrary File Upload / Filter Bypass / PHP Remote Code Execution Zend Framework 2.4.2 - XML eXternal Entity Injection (XXE) on PHP FPM Zend Framework 2.4.2 - PHP FPM XML eXternal Entity Injection Nuts CMS - Remote PHP Code Injection / Execution Nuts CMS - PHP Remote Code Injection / Execution WordPress Plugin WP Super Cache - Remote PHP Code Execution WordPress Plugin WP Super Cache - PHP Remote Code Execution b374k Web Shell 3.2.3/2.8 - Cross-Site Request Forgery / Command Injection b374k 3.2.3/2.8 (Web Shell) - Cross-Site Request Forgery / Command Injection Ovidentia online Module 2.8 - GLOBALS[babAddonPhpPath] Remote File Inclusion Ovidentia online Module 2.8 - 'GLOBALS[babAddonPhpPath]' Remote File Inclusion XOOPS Glossaire Module- '/modules/glossaire/glossaire-aff.php' SQL Injection XOOPS Glossaire Module - '/modules/glossaire/glossaire-aff.php' SQL Injection ZKTeco ZKBioSecurity 3.0 - Hard-Coded Credentials Remote SYSTEM Code Execution ZKTeco ZKBioSecurity 3.0 - Hard-Coded Credentials SYSTEM Remote Code Execution Apache - HTTP OPTIONS Memory Leak Apache < 2.2.34 / < 2.4.27 - HTTP OPTIONS Memory Leak Foodspotting Clone 1.0 - SQL Injection iTech Gigs Script 1.20 - 'cat' Parameter SQL Injection Tecnovision DLX Spot - Authentication Bypass Tecnovision DLX Spot - Arbitrary File Upload	2017-09-20 05:01:20 +00:00