Commit graph

2 commits

Author SHA1 Message Date
Offensive Security
d304cc3d3e DB: 2017-11-24
116602 new exploits

Too many to list!
2017-11-24 20:56:23 +00:00
Offensive Security
4df0e06052 DB: 2017-10-04
22 new exploits

All browsers - Crash
Microsoft Windows Kernel win32k.sys TTF Font Processing - Out-of-Bounds Reads/Writes with Malformed 'fpgm' table (win32k!bGeneratePath)
Microsoft Windows Kernel win32k.sys TTF Font Processing - Out-of-Bounds Read with Malformed _glyf_ Table (win32k!fsc_CalcGrayRow)
Microsoft Windows Kernel - win32k.sys .TTF Font Processing - Out-of-Bounds Reads/Writes with Malformed 'fpgm' table (win32k!bGeneratePath)
Microsoft Windows Kernel - .win32k.sys TTF Font Processing Out-of-Bounds Read with Malformed 'glyf' Table (win32k!fsc_CalcGrayRow)

NoMachine 5.3.9 - Privilege Escalation

Microsoft Word 2007 (x86) - Information Disclosure

Apple Mac OS X + Safari - Local Javascript Quarantine Bypass

Australian Education App - Remote Code Execution

CenturyLink ZyXEL PK5001Z Router - Root Remote Code Execution

Trend Micro OfficeScan 11.0/XG (12.0) - MITM Remote Code Execution

UCOPIA Wireless Appliance < 5.1 (Captive Portal) - Unauthenticated Root Remote Code Execution

Web interface for DNSmasq / Mikrotik - SQL Injection
Web Interface for DNSmasq / Mikrotik - SQL Injection

Zyxel P-660HW-61 Firmware < 3.40(PE.11)C0 Router - Local File Inclusion

Uniview NVR - Password Disclosure

Nuevomailer < 6.0 - SQL Injection

IBM Informix Dynamic Server - Code Injection / Remote Code Execution

WordPress Plugin Sabai Discuss - Cross-Site Scripting

Tilde CMS 1.01 - Multiple Vulnerabilities

VACRON VIG-US731VE 1.0.18-09-B727 IP Camera - Authentication Bypass

JoySale 2.2.1 - Arbitrary File Upload
AirMaster 3000M - Multiple Vulnerabilities
RPi Cam Control < 6.3.14 - Remote Command Execution

iTech Movie Script 7.51 - SQL Injection

CMS Web-Gooroo < 1.141 - Multiple Vulnerabilities

PHP-SecureArea < 2.7 - Multiple Vulnerabilities

Humax Wi-Fi Router HG100R 2.0.6 - Authentication Bypass

Fiberhome AN5506-04-F - Command Injection
2017-10-04 05:01:32 +00:00