Commit graph

102 commits

Author SHA1 Message Date
Offensive Security
f74a7dfb7e DB: 2016-06-30
13 new exploits

Symantec Antivirus - Multiple Remote Memory Corruption Unpacking RAR
Symantec Antivirus - Remote Stack Buffer Overflow in dec2lha Library
Symantec Antivirus - Heap Overflow Modifying MIME Messages
Symantec Antivirus - Integer Overflow in TNEF Decoder
Symantec Antivirus - Missing Bounds Checks in dec2zip ALPkOldFormatDecompressor::UnShrink
Symantec Antivirus - PowerPoint Misaligned Stream-cache Remote Stack Buffer Overflow
Windows 7 SP1 x86 - Privilege Escalation (MS16-014)
Lenovo ThinkPad - System Management Mode Arbitrary Code Execution Exploit
Symantec Endpoint Protection Manager 12.1 - Multiple Vulnerabilities
WordPress Ultimate Membership Pro Plugin 3.3 - SQL Injection
Cuckoo Sandbox Guest 2.0.1 - XMLRPC Privileged Remote Code Execution
Ubiquiti Administration Portal - CSRF to Remote Command Execution
Concrete5 5.7.3.1 - (Application::dispatch) Local File Inclusion
2016-06-30 05:05:39 +00:00
Offensive Security
076ef173f9 DB: 2016-06-11
23 new exploits

Poison Ivy 2.1.x C2 Buffer Overflow (msf)
Matrix42 Remote Control Host 3.20.0031 - Unquoted Path Privilege Escalation
Dell OpenManage Server Administrator 8.3 - XML External Entity Exploit
Mobiketa 1.0 - CSRF Add Admin Exploit
miniMySQLAdmin 1.1.3 - CSRF Execute SQL Query
phpMyFAQ 2.9.0 - Stored XSS
Windows x86 system(_systeminfo_) Shellcode
Armadito Antimalware - Backdoor/Bypass
Riot Games League of Legends - Insecure File Permissions Privilege Escalation
IPFire proxy.cgi RCE
IPFire Bash Environment Variable Injection (Shellshock)
Apache Struts REST Plugin With Dynamic Method Invocation Remote Code Execution
OS X Kernel - Exploitable NULL Pointer Dereference in nvCommandQueue::GetHandleIndex in GeForce.kext
Android - /system/bin/sdcard Stack Buffer Overflow
OS X Kernel - Exploitable NULL Pointer Dereference in AppleMuxControl.kext
OS X Kernel - Exploitable NULL Pointer Dereference in AppleGraphicsDeviceControl
OS X Kernel - Exploitable NULL Dereference in IOAccelSharedUserClient2::page_off_resource
OS X Kernel - Exploitable NULL Dereference in CoreCaptureResponder Due to Unchecked Return Value
OS X Kernel - Exploitable NULL Pointer Dereference in IOAudioEngine
OS X Kernel - OOB Read of Object Pointer Due to Insufficient Checks in Raw Cast to enum Type
OS X Kernel - Use-After-Free Due to Bad Locking in IOAcceleratorFamily2
OS X/iOS Kernel - UAF Racing getProperty on IOHDIXController and testNetBootMethod on IOHDIXControllerUserClient
OS X Kernel - Stack Buffer Overflow in GeForce GPU Driver
2016-06-11 05:06:22 +00:00
Offensive Security
62962d90b0 DB: 2016-06-07
16 new exploits

Linux Kernel < 2.6.34 (Ubuntu 11.10 x86 & x64) - CAP_SYS_ADMIN Local Privilege Escalation Exploit (2)
Linux Kernel < 2.6.34 (Ubuntu 11.10 x86/x64) - CAP_SYS_ADMIN Local Privilege Escalation Exploit (2)

Linux Kernel  2.4.4 <= 2.4.37.4 / 2.6.0 <= 2.6.30.4 - Sendpage Local Privilege Escalation (Metasploit)
Linux Kernel 2.4.4 <= 2.4.37.4 / 2.6.0 <= 2.6.30.4 - Sendpage Local Privilege Escalation (Metasploit)

Linux Kernel <= 4.4.1 - REFCOUNT Overflow/Use-After-Free in Keyrings
Linux Kernel <= 4.4.1 - REFCOUNT Overflow/Use-After-Free in Keyrings Local Root

WordPress Simple Backup Plugin 2.7.11 - Multiple Vulnerabilities
Dream Gallery 1.0 - CSRF Add Admin Exploit
Apache Continuum 1.4.2 - Multiple Vulnerabilities
Sun Secure Global Desktop and Oracle Global Desktop 4.61.915 - ShellShock Exploit
Valve Steam 3.42.16.13 - Local Privilege Escalation
ArticleSetup 1.00 - CSRF Change Admin Password
Electroweb Online Examination System 1.0 - SQL Injection
WordPress WP Mobile Detector Plugin 3.5 - Arbitrary File Upload
WordPress Creative Multi-Purpose Theme 9.1.3 - Stored XSS
WordPress WP PRO Advertising System Plugin 4.6.18 - SQL Injection
WordPress Newspaper Theme 6.7.1 - Privilege Escalation
WordPress Uncode Theme 1.3.1 - Arbitrary File Upload
WordPress Double Opt-In for Download Plugin 2.0.9 - SQL Injection
Notilus Travel Solution Software 2012 R3 - SQL Injection
rConfig 3.1.1 - Local File Inclusion
Nagios XI 5.2.7 - Multiple Vulnerabilities
2016-06-07 05:07:41 +00:00
Offensive Security
8164665ff7 DB: 2016-06-01
6 new exploits

FlatPress 1.0.3 - CSRF Arbitrary File Upload
AirOS NanoStation M2 5.6-beta - Multiple Vulnerabilities
ProcessMaker 3.0.1.7 - Multiple vulnerabilities
CCextractor 0.80 - Crash PoC
Data Protector A.09.00 - Encrypted Communications Arbitrary Command Execution (msf)
TCPDump 4.5.1 - Crash PoC
2016-06-01 05:01:50 +00:00
Offensive Security
c7e317d2e0 DB: 2016-05-06
1 new exploits

Baidu Spark Browser 43.23.1000.476 - Address Bar URL Spoofing
2016-05-06 05:03:00 +00:00
Offensive Security
5a82bad23d DB: 2016-05-05
14 new exploits

Alibaba Clone B2B Script - Admin Authentication Bypass
CMS Made Simple < 2.1.3 & < 1.12.1 - Web Server Cache Poisoning
Acunetix WP Security Plugin 3.0.3 - XSS
NetCommWireless HSPA 3G10WVE Wireless Router – Multiple Vulnerabilities
TRN Threaded USENET News Reader 3.6-23 - Local Stack-Based Overflow
IPFire < 2.19 Core Update 101 - Remote Command Execution
PHP Imagick 3.3.0 - disable_functions Bypass
ImageMagick < 6.9.3-9 - Multiple Vulnerabilities
OpenSSL Padding Oracle in AES-NI CBC MAC Check
Zabbix Agent 3.0.1 - mysql.size Shell Command Injection
McAfee LiveSafe 14.0 - Relocations Processing Memory Corruption
Linux (Ubuntu 14.04.3) - perf_event_open() Can Race with execve() (/etc/shadow)
Linux Kernel 4.4.x (Ubuntu 16.04) - Use-After-Free via double-fdput() in bpf(BPF_PROG_LOAD) Error Path Local Root Exploit
Linux (Ubuntu 16.04) - Reference Count Overflow Using BPF Maps
2016-05-05 05:04:38 +00:00
Offensive Security
7472667089 DB: 2016-04-30
9 new exploits

Linux x86 Reverse TCP Shellcode (ipv6)
Observium 0.16.7533 - Cross Site Request Forgery
Observium 0.16.7533 - Authenticated Arbitrary Command Execution
Merit Lilin IP Cameras - Multiple Vulnerabilities
Rough Auditing Tool for Security (RATS) 2.3 - Array Out of Block Crash
Wireshark - dissect_2008_16_security_4 Stack-Based Buffer Overflow
Wireshark - alloc_address_wmem Assertion Failure
Wireshark - ett_zbee_zcl_pwr_prof_enphases Static Out-of-Bounds Read
GLPi 0.90.2 - SQL Injection
2016-04-30 05:01:53 +00:00
Offensive Security
99627c8d04 DB: 2016-04-16
4 new exploits

Internet Explorer 11 - MSHTML!CMarkupPointer::UnEmbed Use After Free
Linux/x86_64 - Read /etc/passwd - 65 bytes
AirOS 6.x - Arbitrary File Upload
Exim _perl_startup_ Privilege Escalation
2016-04-16 05:02:22 +00:00
Offensive Security
1f79ff2236 DB: 2016-04-09
3 new exploits

WordPress Freshmail - Unauthenticated SQL Injection
WordPress Plugin Freshmail 1.5.8 - Unauthenticated SQL Injection
Express Zip <= 2.40 - Path Traversal
Apple Intel HD 3000 Graphics driver 10.0.0 - Local Privilege Escalation
op5 7.1.9 - Remote Command Execution
2016-04-09 05:02:52 +00:00
Offensive Security
477bcbdcc0 DB: 2016-03-17
5 new exploits

phpMyNewsletter <= 0.8 (beta5) - Multiple Vulnerability Exploit
phpMyNewsletter <= 0.8 (beta5) - Multiple Vulnerabilities

My Book World Edition NAS Multiple Vulnerability
My Book World Edition NAS - Multiple Vulnerabilities

Katalog Stron Hurricane 1.3.5 - Multiple Vulnerability RFI / SQL
Katalog Stron Hurricane 1.3.5 - (RFI / SQL) Multiple Vulnerabilities

cmsfaethon-2.2.0-ultimate.7z Multiple Vulnerability
cmsfaethon-2.2.0-ultimate.7z - Multiple Vulnerabilities

DynPG CMS 4.1.0 - Multiple Vulnerability (popup.php and counter.php)
DynPG CMS 4.1.0 - (popup.php and counter.php) Multiple Vulnerabilities

Nucleus CMS 3.51 (DIR_LIBS) - Multiple Vulnerability
Nucleus CMS 3.51 (DIR_LIBS) - Multiple Vulnerabilities

N/X - Web CMS (N/X WCMS 4.5) Multiple Vulnerability
N/X - Web CMS (N/X WCMS 4.5) - Multiple Vulnerabilities

New-CMS - Multiple Vulnerability
New-CMS - Multiple Vulnerabilities

Edgephp Clickbank Affiliate Marketplace Script Multiple Vulnerability
Edgephp Clickbank Affiliate Marketplace Script - Multiple Vulnerabilities

JV2 Folder Gallery 3.1.1 - (popup_slideshow.php) Multiple Vulnerability
JV2 Folder Gallery 3.1.1 - (popup_slideshow.php) Multiple Vulnerabilities

i-Gallery - Multiple Vulnerability
i-Gallery - Multiple Vulnerabilities

My Kazaam Notes Management System Multiple Vulnerability
My Kazaam Notes Management System - Multiple Vulnerabilities

Omnidocs - Multiple Vulnerability
Omnidocs - Multiple Vulnerabilities

Web Cookbook Multiple Vulnerability
Web Cookbook - Multiple Vulnerabilities

KikChat - (LFI/RCE) Multiple Vulnerability
KikChat - (LFI/RCE) Multiple Vulnerabilities

Webformatique Reservation Manager - 'index.php' Cross-Site Scripting Vulnerability
Webformatique Reservation Manager 2.4 - 'index.php' Cross-Site Scripting Vulnerability

xEpan 1.0.4 - Multiple Vulnerability
xEpan 1.0.4 - Multiple Vulnerabilities
AKIPS Network Monitor 15.37 through 16.5 - OS Command Injection
Netwrix Auditor 7.1.322.0 - ActiveX (sourceFile) Stack Buffer Overflow
Cisco UCS Manager 2.1(1b) - Shellshock Exploit
OpenSSH <= 7.2p1 - xauth Injection
FreeBSD 10.2 amd64 Kernel - amd64_set_ldt Heap Overflow
2016-03-17 07:07:56 +00:00
Offensive Security
cf77140802 DB: 2016-01-10
4 new exploits
2016-01-10 05:01:46 +00:00
Offensive Security
86d0c5fe16 DB: 2016-01-09
10 new exploits
2016-01-09 05:02:44 +00:00
Offensive Security
5aeeaef0a2 DB: 2016-01-04
9 new exploits
2016-01-04 05:02:55 +00:00
Offensive Security
cf0225763f DB: 2016-01-02
3 new exploits
2016-01-02 05:02:02 +00:00
Offensive Security
f89cce16df DB: 2016-01-01
9 new exploits
2016-01-01 05:03:26 +00:00
Offensive Security
ae8b3fb122 DB: 2015-12-31
5 new exploits
2015-12-31 05:02:01 +00:00
Offensive Security
2f4bedf752 DB: 2015-12-30
10 new exploits
2015-12-30 05:02:54 +00:00
Offensive Security
216678b9be DB: 2015-12-22
12 new exploits
2015-12-22 05:03:05 +00:00
Offensive Security
04598bf305 DB: 2015-12-07
10 new exploits
2015-12-07 05:03:07 +00:00
Offensive Security
46fa0dc772 DB: 2015-12-03
9 new exploits
2015-12-03 05:03:25 +00:00
Offensive Security
672c4d0b8c DB: 2015-11-26
14 new exploits
2015-11-26 05:02:03 +00:00
Offensive Security
1871e649f0 DB: 2015-11-21
10 new exploits
2015-11-21 05:01:59 +00:00
Offensive Security
41bf68ffcd DB: 2015-11-16
9 new exploits
2015-11-16 05:02:02 +00:00
Offensive Security
c559949c05 DB: 2015-11-02
3 new exploits
2015-11-02 05:03:00 +00:00
Offensive Security
9005d315b8 DB: 2015-10-29
12 new exploits
2015-10-29 05:02:34 +00:00
Offensive Security
c14ed0e3ce DB: 2015-09-26
11 new exploits
2015-09-26 05:01:39 +00:00
Offensive Security
42b241205e DB: 2015-09-11
20 new exploits
2015-09-11 05:01:46 +00:00
Offensive Security
229204741f DB: 2015-09-10
15 new exploits
2015-09-10 05:04:12 +00:00
Offensive Security
1ef6c23cb9 DB: 2015-08-20
62 new exploits
2015-08-20 05:03:36 +00:00
Offensive Security
4377b18056 DB: 2015-08-18
11 new exploits
2015-08-18 05:03:02 +00:00
Offensive Security
9569f264ec DB: 2015-08-14
191 new exploits
2015-08-14 05:02:47 +00:00
Offensive Security
a732415255 DB: 2015-08-13
1 new exploits
2015-08-13 05:06:40 +00:00
Offensive Security
8762b868bf DB: 2015-07-19
10 new exploits
2015-07-19 05:01:52 +00:00
Offensive Security
e8f22fe4b6 DB: 2015-07-11
26 new exploits
2015-07-11 05:03:28 +00:00
Offensive Security
b22d6ae97a DB: 2015-07-03
13 new exploits
2015-07-03 05:03:11 +00:00
Offensive Security
a959c54c79 DB: 2015-05-23
7 new exploits
2015-05-23 05:01:32 +00:00
Offensive Security
d35a443cc5 DB: 2015-05-13
4 new exploits
2015-05-13 05:02:11 +00:00
Offensive Security
f4931a16fc DB: 2015-05-12
18 new exploits
2015-05-12 05:03:20 +00:00
Offensive Security
01ba689949 DB: 2015-05-08
19 new exploits
2015-05-08 05:02:43 +00:00
Offensive Security
029eaafec5 DB: 2015-04-27
2 new exploits
2015-04-27 05:02:03 +00:00
Offensive Security
cc553d1147 DB: 2015-04-20
11 new exploits
2015-04-20 12:44:13 +00:00
Offensive Security
02af60276e DB: 2015-04-17
5 new exploits
2015-04-17 08:36:07 +00:00
Offensive Security
b3e4367446 DB: 2015-03-21
19 new exploits
2015-03-21 08:36:28 +00:00
Offensive Security
a828258c67 Update: 2015-02-15
15 new exploits
2015-02-15 08:35:27 +00:00
Offensive Security
06f9de32a2 Update: 2015-02-13
7 new exploits
2015-02-13 08:36:33 +00:00
Offensive Security
cdf0a2fade Update: 2015-02-12
11 new exploits
2015-02-12 08:36:52 +00:00
Offensive Security
7bb980404f Update: 2015-01-18
14 new exploits
2015-01-18 08:36:34 +00:00
Offensive Security
c263b4d439 Update: 2015-01-07
13 new exploits
2015-01-07 08:36:08 +00:00
Offensive Security
e60ec300be Update: 2015-01-04
8 new exploits
2015-01-04 08:36:28 +00:00
Offensive Security
bf02311241 Updated 12_06_2014 2014-12-06 04:50:34 +00:00