Exploit 2013

Exploit 2013 - Úvod 2020 2019 2018 2017 2016 2015 2014 2013 2012 2011 2010 2009 2008 2007 2006 2005 2004 2003 2002 2001 2000

Úvod Remote Web App Local&Privilege Escalation DoS & PoC ShellCode Exploit Exploit prog. Ex. Techniky Exp. kit Typy Exploitů Exploit Articles

2013-12-30	CMS Afroditi - 'id' SQL Injection	webapps	ASP
2013-12-30	WordPress Plugin Advanced Dewplayer - 'download-file.php' Script Directory Traversal	webapps	PHP
2013-12-28	D-Link DSL-2750u ME_1.09 - Cross-Site Request Forgery	webapps	Hardware
2013-12-28	Ofilter Player 1.1 - '.wav' Integer Division by Zero	dos	Windows
2013-12-28	PoC \|\| GTFO 0x02	papers	Magazine

2013-12-26	JForum 'adminUsers' Module - Cross-Site Request Forgery	webapps	PHP
2013-12-25	AFCommerce - 'adblock.php' Remote File Inclusion	webapps	PHP
2013-12-25	AFCommerce - 'adminpassword.php' Remote File Inclusion	webapps	PHP
2013-12-25	AFCommerce - 'controlheader.php' Remote File Inclusion	webapps	PHP
2013-12-24	RedHat CloudForms Management Engine 5.1 - agent/linuxpkgs Directory Traversal (Metasploit)	remote	Linux
2013-12-24	Windows rcrypt PE EXE/DDL Packer Writeup	papers	Windows
2013-12-24	RealNetworks RealPlayer 16.0.3.51/16.0.2.32 - '.rmp' Version Attribute Buffer Overflow	local	Windows
2013-12-24	Synology DiskStation Manager - SLICEUPLOAD Remote Command Execution (Metasploit)	remote	Unix
2013-12-24	OpenSIS 'modname' - PHP Code Execution (Metasploit)	remote	Linux
2013-12-24	Zimbra Collaboration Server 7.2.2/8.0.2 - Local File Inclusion (Metasploit)	webapps	Linux
2013-12-24	HP SiteScope issueSiebelCmd - Remote Code Execution (Metasploit)	remote	Unix
2013-12-24	Synology DSM 4.3-3810 - Directory Traversal	webapps	CGI
2013-12-24	Song Exporter 2.1.1 RS iOS - Local File Inclusion	webapps	iOS
2013-12-24	Huawei Technologies du Mobile Broadband 16.0 - Local Privilege Escalation	local	Windows
2013-12-24	PHP MBB CMS 004 - Multiple Vulnerabilities	webapps	PHP
2013-12-24	xBoard 5.0/5.5/6.0 - 'view.php' Local File Inclusion	webapps	PHP
2013-12-23	WordPress Theme Persuasion 2.x - Arbitrary File Download / File Deletion	webapps	PHP
2013-12-22	Easy Karaokay Player 3.3.31 - '.wav' Integer Division by Zero	dos	Windows
2013-12-21	64-bit calc.exe Stack Overflow Root Cause Analysis	papers	Windows
2013-12-21	Cisco EPC3925 - Persistent Cross-Site Scripting	webapps	Hardware
2013-12-20	PotPlayer 1.5.40688 - '.avi' File Handling Memory Corruption	dos	Windows
2013-12-20	GOM Player 2.2.56.5158 - '.avi' File Handling Memory Corruption	dos	Windows
2013-12-19	DenyHosts - 'regex.py' Remote Denial of Service	dos	Linux
2013-12-19	Hancom Office - '.hml' File Processing Heap Buffer Overflow	remote	Windows
2013-12-18	Jenkins 1.523 - Persistent HTML Code	webapps	PHP
2013-12-18	SonarQube Jenkins Plugin - Plain Text Password	webapps	PHP
2013-12-18	Leed - 'id' SQL Injection	webapps	PHP
2013-12-17	Adobe Reader ToolButton - Use-After-Free (Metasploit)	remote	Windows
2013-12-17	Ability Mail Server 2013 3.1.1 - Web UI Persistent Cross-Site Scripting	remote	Windows
2013-12-17	Nvidia (nvsvc) Display Driver Service - Local Privilege Escalation (Metasploit)	local	Windows_x86-64
2013-12-17	Microsoft Windows - 'ndproxy.sys' Local Privilege Escalation (Metasploit)	local	Windows
2013-12-17	[Georgian] DFIRCON APT Malware Analysis - Part 2	papers	Windows
2013-12-17	FileMaster SY-IT 3.1 iOS - Multiple Web Vulnerabilities	webapps	iOS
2013-12-17	QuickHeal AntiVirus 7.0.0.1 - Local Stack Overflow	local	Windows
2013-12-17	PHP - 'openssl_x509_parse()' Memory Corruption	dos	PHP
2013-12-17	Ditto Forensic FieldStation 2013Oct15a - Multiple Vulnerabilities	webapps	PHP
2013-12-17	Microsoft Windows Kernel - 'win32k.sys' Integer Overflow (MS13-101)	dos	Windows
2013-12-17	InstantCMS 1.10.3 - Blind SQL Injection	webapps	PHP
2013-12-17	Piwigo - 'admin.php' Cross-Site Request Forgery (User Creation)	webapps	PHP
2013-12-17	WordPress 2.0.11 - '/wp-admin/options-discussion.php' Script Cross-Site Request Forgery	webapps	PHP
2013-12-16	Gitlab 6.0 - Persistent Cross-Site Scripting	webapps	PHP
2013-12-16	VUPlayer 2.49 - '.m3u' File Universal Buffer Overflow (DEP Bypass) (2)	local	Windows
2013-12-16	[Georgian] DFIRCON APT Malware Analysis	papers	Windows
2013-12-16	UPC Ireland Cisco EPC 2425 Router / Horizon Box - WPA-PSK Handshake Information	webapps	Hardware
2013-12-16	Wallpaper Script 3.5.0082 - Persistent Cross-Site Scripting	webapps	PHP
2013-12-16	iScripts MultiCart 2.4 - Persistent Cross-Site Scripting / Cross-Site Request Forgery / Cross-Site Scripting / Cross-Site Request Forgery / Mass Accounts Takeover	webapps	PHP
2013-12-16	Beetel TC1-450 Airtel Wireless Router - Multiple Cross-Site Request Forgery Vulnerabilities	webapps	Hardware
2013-12-16	Cisco EPC3925 - Cross-Site Request Forgery	webapps	Hardware
2013-12-16	Lowest Unique Bid Auction - SQL Injection	webapps	PHP
2013-12-16	Penny Auction 5 - SQL Injection	webapps	PHP
2013-12-16	C2C Forward Auction Creator 2.0 - '/auction/asp/list.asp?pa' SQL Injection	webapps	PHP
2013-12-16	C2C Forward Auction Creator - '/auction/casp/Admin.asp' SQL Injection (Admin Authentication Bypass)	webapps	PHP
2013-12-16	Icinga - cgi/config.c process_cgivars Function Off-by-One Read Remote Denial of Service	webapps	CGI
2013-12-16	Linux Kernel 2.6.10 < 2.6.31.5 - 'pipe.c' Local Privilege Escalation	local	Linux
2013-12-15	PotPlayer 1.5.42509 Beta - Integer Division by Zero Denial of Service	dos	Windows
2013-12-15	Piwigo CMS 2.5.3 - Multiple Web Vulnerabilities	webapps	PHP
2013-12-15	Phone Drive Eightythree 4.1.1 iOS - Multiple Vulnerabilities	webapps	iOS
2013-12-15	iScripts AutoHoster - 'checktransferstatus.php' SQL Injection	webapps	PHP
2013-12-15	iScripts AutoHoster - 'checktransferstatusbck.php' SQL Injection	webapps	PHP
2013-12-15	iScripts AutoHoster - 'additionalsettings.php' SQL Injection	webapps	PHP
2013-12-15	iScripts AutoHoster - 'invno' SQL Injection	webapps	PHP
2013-12-15	iScripts AutoHoster - 'main_smtp.php' Traversal	webapps	PHP
2013-12-15	iScripts AutoHoster - 'tmpid' Local File Inclusion	webapps	PHP
2013-12-15	iScripts AutoHoster - 'fname' Local File Inclusion	webapps	PHP
2013-12-15	iScripts AutoHoster - 'id' Local File Inclusion	webapps	PHP
2013-12-14	Etoshop B2B Vertical Marketplace Creator - Multiple SQL Injections	webapps	ASP
2013-12-14	Osclass - Multiple Input Validation Vulnerabilities	webapps	PHP
2013-12-13	Nagios XI - 'tfPassword' SQL Injection	remote	PHP
2013-12-13	BoastMachine - 'blog' SQL Injection	webapps	PHP
2013-12-13	Dynamic Biz Website Builder (QuickWeb) 1.0 - '/apps/news-events/newdetail.asp?id' SQL Injection	webapps	ASP
2013-12-13	Dynamic Biz Website Builder 'QuickWeb' 1.0 - '/login.asp' Multiple Field SQL Injections / Authentication Bypass	webapps	ASP
2013-12-13	Joomla! Component Projoom NovaSFH 3.0.2 - 'upload.php' Arbitrary File Upload	webapps	PHP
2013-12-12	KikChat - Local File Inclusion / Remote Code Execution	webapps	PHP
2013-12-12	Cisco Unified Communications Manager - TFTP Service	local	Hardware
2013-12-12	Cythosia 2.x Botnet (C2 Web Panel) - SQL Injection	webapps	PHP
2013-12-12	[Persian] DLL Injection & Hooking	papers	Windows
2013-12-12	Castripper 2.50.70 - '.pls' DEP Bypass	local	Windows
2013-12-12	WHMCompleteSolution (WHMCS) 4.x/5.x - Multiple Web Vulnerabilities	webapps	PHP
2013-12-12	Pentagram Cerberus P 6363 DSL Router - Multiple Vulnerabilities	webapps	Hardware
2013-12-11	IcoFX 2.5.0.0 - '.ico' Buffer Overflow (PoC)	dos	Windows
2013-12-11	HP LoadRunner EmulationAdmin - Web Service Directory Traversal (Metasploit)	remote	Windows
2013-12-11	Adobe ColdFusion 9 - Administrative Authentication Bypass (Metasploit)	remote	Multiple
2013-12-11	EMC Data Protection Advisor DPA Illuminator - EJBInvokerServlet Remote Code Execution	remote	Windows
2013-12-11	vBulletin 5 - 'index.php/ajax/api/reputation/vote?nodeid' SQL Injection (Metasploit)	remote	PHP
2013-12-11	eFront 3.6.14 (build 18012) - Multiple Persistent Cross-Site Scripting Vulnerabilities	webapps	PHP
2013-12-11	Photo Video Album Transfer 1.0 iOS - Multiple Vulnerabilities	webapps	iOS
2013-12-11	eduTrac - 'showmask' Directory Traversal	webapps	PHP
2013-12-11	Veno File Manager - 'q' Arbitrary File Download	webapps	PHP
2013-12-11	RedHat Piranha - Remote Security Bypass	remote	Linux
2013-12-10	PlaySms 0.9.9.2 - Cross-Site Request Forgery	webapps	PHP
2013-12-10	[Persian] How to Buffer Overflow and Exploiting	papers	Windows
2013-12-10	Air Gallery 1.0 Air Photo Browser - Multiple Vulnerabilities	local	Multiple
2013-12-10	Linux Kernel 3.0.5 - 'ath9k_htc_set_bssid_mask()' Information Disclosure	remote	Linux
2013-12-09	CGILua 3.0 - SQL Injection	webapps	CGI
2013-12-09	GOM Player 2.2.53.5169 - '.reg' Local Buffer Overflow (SEH)	local	Windows
2013-12-09	osCMax - Arbitrary File Upload / Full Path Information Disclosure	webapps	PHP
2013-12-08	WordPress Plugin Download Manager Free & Pro 2.5.8 - Persistent Cross-Site Scripting	webapps	PHP
2013-12-08	Ovidentia 7.9.6 - Multiple Vulnerabilities	webapps	PHP
2013-12-08	Feetan Inc WireShare 1.9.1 iOS - Persistent	webapps	iOS
2013-12-08	Print n Share 5.5 iOS - Multiple Web Vulnerabilities	webapps	iOS
2013-12-08	WordPress Plugin PhotoSmash Galleries - 'bwbps-uploader.php' Arbitrary File Upload	webapps	PHP
2013-12-07	Apple Safari For Windows - PhishingAlert Security Bypass	remote	Windows
2013-12-06	Zimbra 2009-2013 - Local File Inclusion	webapps	Linux
2013-12-06	Zine: D-Link DSR Router Series - Remote Command Execution	papers	Multiple
2013-12-06	Eaton Network Shutdown Module 3.21 - Remote PHP Code Injection	webapps	PHP
2013-12-06	D-Link DSR Router Series - Remote Command Execution	webapps	Hardware
2013-12-06	WordPress Plugin DZS Video Gallery 3.1.3 - Remote File Disclosure / Local File Disclosure	webapps	PHP
2013-12-06	BoxBilling 3.6.11 - 'mod_notification' Persistent Cross-Site Scripting	webapps	PHP
2013-12-06	WordPress Plugin page-flip-image-gallery - Arbitrary File Upload	webapps	PHP
2013-12-06	Enorth Webpublisher CMS - 'thisday' SQL Injection	webapps	PHP
2013-12-06	NeoBill - '/modules/nullregistrar/PHPwhois/example.php?query' Remote Code Execution	webapps	PHP
2013-12-06	NeoBill - '/install/include/solidstate.php' Multiple SQL Injections	webapps	PHP
2013-12-06	NeoBill 0.9-alpha - 'language' Local File Inclusion	webapps	PHP
2013-12-06	WordPress Plugin Easy Career Openings - 'jobid' SQL Injection	webapps	PHP
2013-12-05	SonicWALL Gms 7.x - Filter Bypass / Persistent	webapps	JSP
2013-12-05	Wireless Transfer App 3.7 iOS - Multiple Web Vulnerabilities	webapps	iOS
2013-12-04	[Hebrew] Digital Whisper Security Magazine #47	papers	Multiple
2013-12-04	Imagam iFiles 1.16.0 iOS - Multiple Web Vulnerabilities	webapps	iOS
2013-12-04	Steinberg MyMp3PRO 5.0 - Local Buffer Overflow (SEH) (DEP Bypass + ROP)	local	Windows
2013-12-04	MySQL 5.0.x - IF Query Handling Remote Denial of Service	dos	Linux

2013-12-03	Microsoft Windows - 'NDPROXY' SYSTEM Privilege Escalation (MS14-002)	local	Windows
2013-12-03	Notepad++ Plugin Notepad 1.5 - Local Overflow	local	Windows
2013-12-03	Cisco Prime Data Center Network Manager - Arbitrary File Upload (Metasploit)	remote	Java
2013-12-03	ABB MicroSCADA - 'wserver.exe' Remote Code Execution (Metasploit)	remote	Windows
2013-12-03	Kimai 0.9.2 - 'db_restore.php' SQL Injection (Metasploit)	remote	PHP
2013-12-03	Microsoft - Tagged Image File Format '.TIFF' Integer Overflow (Metasploit)	remote	Windows
2013-12-03	Chamilo Lms 1.9.6 - 'profile.php?password' SQL Injection	webapps	PHP
2013-12-03	Dokeos 2.2 RC2 - 'index.php?language' SQL Injection	webapps	PHP
2013-12-02	Photo Transfer Wifi 1.4.4 iOS - Multiple Web Vulnerabilities	webapps	iOS
2013-12-02	WordPress Plugin Formcraft - SQL Injection	webapps	PHP
2013-12-02	D-Link DIR-Series Routers - '/model/__show_info.php' Local File Disclosure	webapps	Hardware
2013-12-01	Multiple WordPress Orange Themes - Cross-Site Request Forgery (Arbitrary File Upload)	webapps	PHP
2013-12-01	TVT TD-2308SS-B DVR - Directory Traversal	webapps	Hardware
2013-12-01	PHPThumb - 'PHPThumb.php' Arbitrary File Upload	webapps	PHP
2013-11-30	FlashComs Chat 6.5 - Arbitrary File Upload	webapps	PHP
2013-11-30	Ametys CMS 3.5.2 - 'lang' XPath Injection	webapps	Java
2013-11-30	TP-Link TL-WR740N / TL-WR740ND 150M Wireless Lite N Router - HTTP Denial of Service	dos	Hardware
2013-11-30	Uptime Agent 5.0.1 - Stack Overflow	dos	Linux
2013-11-30	Zend-Framework - Full Information Disclosure	webapps	PHP
2013-11-30	Kingsoft Office Writer 2012 8.1.0.3385 - '.wps' Local Buffer Overflow (SEH)	local	Windows
2013-11-30	TP-Link TD-8840t - Cross-Site Request Forgery	webapps	Hardware
2013-11-30	Audacious Player 3.4.2/3.4.1 - '.mp3' Crash (PoC)	dos	Windows
2013-11-30	Scientific-Atlanta, Inc. DPR2320R2 - Multiple Cross-Site Request Forgery Vulnerabilities	webapps	Hardware
2013-11-30	ZIP Password Recovery Professional 5.1 - '.zip' Crash (PoC)	dos	Windows
2013-11-30	MyBB 1.6.11 - Remote Code Execution	webapps	PHP
2013-11-28	Adobe Acrobat Reader - ASLR + DEP Bypass with Sandbox Bypass	local	Windows
2013-11-27	[Portuguese] Exploiting LFD Vulnerabilities	papers	PHP
2013-11-27	Microsoft Internet Explorer - CardSpaceClaimCollection ActiveX Integer Underflow (MS13-090) (Metasploit)	remote	Windows
2013-11-27	Microsoft Internet Explorer - COALineDashStyleArray Unsafe Memory Access (MS12-022) (Metasploit)	remote	Windows
2013-11-27	Apache Roller - OGNL Injection (Metasploit)	remote	Java
2013-11-27	Palo Alto Networks Pan-OS 5.0.8 - Multiple Vulnerabilities	webapps	PHP
2013-11-26	WordPress Plugin dzs-videogallery - Arbitrary File Upload	webapps	PHP
2013-11-25	DesktopCentral AgentLogUpload - Arbitrary File Upload (Metasploit)	remote	Windows
2013-11-25	TP-Link WR740N/WR740ND - Multiple Cross-Site Request Forgery Vulnerabilities	webapps	Hardware
2013-11-25	Static HTTP Server 1.0 - Denial of Service	dos	Windows
2013-11-25	NETGEAR ReadyNAS - Perl Code Evaluation (Metasploit)	remote	Hardware
2013-11-24	ALLPlayer 5.7 - '.m3u' UNICODE Buffer Overflow (SEH)	local	Windows
2013-11-24	Pirelli Discus DRG A125g - Remote Change SSID Value	webapps	Hardware
2013-11-24	Pirelli Discus DRG A125g - Local Password Disclosure	webapps	Hardware
2013-11-24	Pirelli Discus DRG A125g - Remote Change WiFi Password	webapps	Hardware
2013-11-24	MyBB Ajaxfs 2 Plugin - SQL Injection	webapps	PHP
2013-11-24	Total Video Player 1.3.1 - 'Settings.ini' Local Buffer Overflow (SEH)	local	Windows
2013-11-23	ImpressPages CMS 3.8 - Persistent Cross-Site Scripting	webapps	PHP
2013-11-23	Boilsoft RM TO MP3 Converter 1.72 - '.wav' Crash (PoC)	dos	Windows
2013-11-23	LimeSurvey 2.00+ (build 131107) - Multiple Vulnerabilities	webapps	PHP
2013-11-23	WordPress Plugin Blue Wrench Video Widget - Cross-Site Request Forgery	webapps	PHP
2013-11-22	Light Alloy 4.7.3 - '.m3u' Local Buffer Overflow (SEH Unicode)	local	Windows
2013-11-22	Thomson Reuters Velocity Analytics - Remote Code Injection	remote	Hardware
2013-11-20	[Spanish] Hashcat - Hash Type Manual	papers	Multiple
2013-11-20	PHP-Nuke 8.2.4 - Multiple Vulnerabilities	webapps	PHP
2013-11-20	PineApp MailSecure - Remote Command Execution	remote	Linux
2013-11-20	WordPress Theme Suco - 'themify-ajax.php' Arbitrary File Upload	webapps	PHP
2013-11-19	DeepOfix SMTP Server 3.3 - Authentication Bypass	remote	Linux
2013-11-19	JPEGView 1.0.29 - Crash (PoC)	dos	Windows
2013-11-19	Ruckus Wireless Zoneflex 2942 Wireless Access Point - Authentication Bypass	webapps	Hardware
2013-11-19	SKIDATA Freemotion.Gate - Web Services Multiple Command Execution Vulnerabilities	remote	Multiple
2013-11-19	Nginx 1.1.17 - URI Processing SecURIty Bypass	remote	Multiple
2013-11-18	Avira Secure Backup 1.0.0.1 Build 3616 - '.reg' Buffer Overflow	dos	Windows
2013-11-18	Supermicro Onboard IPMI - 'close_window.cgi' Remote Buffer Overflow (Metasploit)	remote	Hardware
2013-11-18	WordPress Theme Euclid 1.x - Cross-Site Request Forgery	webapps	PHP
2013-11-18	WordPress Theme Dimension - Cross-Site Request Forgery	webapps	PHP
2013-11-18	WordPress Theme Amplus - Cross-Site Request Forgery	webapps	PHP
2013-11-18	WordPress Theme Make A Statement (MaS) - Cross-Site Request Forgery	webapps	PHP
2013-11-18	LiveZilla 5.0.1.4 - Remote Code Execution	webapps	PHP
2013-11-18	Dahua DVR 2.608.0000.0/2.608.GV00.0 - Authentication Bypass (Metasploit)	webapps	Hardware
2013-11-18	ManageEngine Desktop Central 8.0.0 build < 80293 - Arbitrary File Upload	webapps	JSP
2013-11-18	Kaseya < 6.3.0.2 - Arbitrary File Upload	webapps	ASP
2013-11-18	TomatoCart 1.1.8.2 - 'class' Local File Inclusion	webapps	PHP
2013-11-17	Limonade Framework - 'limonade.php' Local File Disclosure	webapps	PHP
2013-11-16	Google Gmail IOS Mobile Application - Persistent Cross-Site Scripting	webapps	iOS
2013-11-15	WBR-3406 Wireless Broadband NAT Router - Web-Console Password Change Bypass / Cross-Site Request Forgery	webapps	Hardware
2013-11-15	CoolPlayer+ Portable 2.19.4 - Local Buffer Overflow	dos	Windows
2013-11-15	LevelOne WBR-3406TX Router - Cross-Site Request Forgery	remote	Hardware
2013-11-14	Watermark Master 2.2.23 - '.wstyle' Local Buffer Overflow (SEH)	local	Windows
2013-11-13	Symantec Altiris DS - SQL Injection (Metasploit)	remote	Windows
2013-11-13	TOSHIBA e-Studio 232/233/282/283 - Cross-Site Request Forgery (Change Admin Password)	webapps	Hardware
2013-11-13	Testa OTMS - Multiple SQL Injections	webapps	PHP
2013-11-12	VideoSpirit Pro 1.90 - Local Buffer Overflow (SEH)	local	Windows
2013-11-12	Juniper Junos J-Web - Privilege Escalation	webapps	PHP
2013-11-12	Hanso Converter 2.4.0 - 'ogg' Buffer Overflow (Denial of Service)	dos	Windows
2013-11-12	Provj 5.1.5.8 - 'm3u' Buffer Overflow (PoC)	dos	Windows
2013-11-12	VideoSpirit Lite 1.77 - Local Buffer Overflow (SEH)	local	Windows
2013-11-12	ALLPlayer 5.6.2 - '.m3u' File Local Buffer Overflow (SEH Unicode)	local	Windows
2013-11-10	WordPress Theme Highlight Premium - Cross-Site Request Forgery / Arbitrary File Upload	webapps	PHP
2013-11-08	VICIdial Manager - Send OS Command Injection (Metasploit)	remote	Linux
2013-11-08	RASPcalendar 1.01 (ASP) - Admin Login	webapps	ASP
2013-11-08	Vanilla Forums 2.0 < 2.0.18.5 - 'class.utilitycontroller.php' PHP Object Injection	webapps	PHP
2013-11-08	appRain 3.0.2 - Blind SQL Injection	webapps	PHP
2013-11-08	Flatpress 1.0 - Remote Code Execution	webapps	PHP
2013-11-08	Vivotek IP Cameras - RTSP Authentication Bypass	webapps	Hardware
2013-11-08	Project'Or RIA 3.4.0 - 'objectDetail.php?objectId' SQL Injection	webapps	PHP
2013-11-08	Sagemcom F@st 3184 2.1.11 - Multiple Vulnerabilities	webapps	Hardware
2013-11-08	Horde Groupware Web Mail Edition 5.1.2 - Cross-Site Request Forgery (2)	webapps	PHP
2013-11-07	Microweber 0.905 - Error-Based SQL Injection	webapps	PHP
2013-11-07	WordPress Theme Kernel - Arbitrary File Upload	webapps	PHP
2013-11-05	[Hebrew] Digital Whisper Security Magazine #46	papers	Multiple
2013-11-05	Hanso Player 2.5.0 - 'm3u' Buffer Overflow (Denial of Service)	dos	Windows
2013-11-04	Apache Tomcat 5.5.25 - Cross-Site Request Forgery	webapps	Multiple
2013-11-04	Linux/MIPS (Little Endian) - Reverse (192.168.1.177:31337/TCP) Shell (/bin/sh) Shellcode (200 bytes)	shellcode	Linux_MIPS
2013-11-04	Google Android - Signature Verification Security Bypass	remote	Android
2013-11-03	Plogue Sforzando 1.665 - Buffer Overflow (SEH) (PoC)	dos	Windows
2013-11-03	Practico 13.9 - Multiple Vulnerabilities	webapps	Multiple
2013-11-01	ImpressPages CMS 3.6 - Arbitrary File Deletion	webapps	PHP
2013-11-01	Watermark Master 2.2.23 - Local Buffer Overflow (SEH)	local	Windows
2013-11-01	WordPress Theme Switchblade 1.3 - Arbitrary File Upload	webapps	PHP
2013-11-01	ImpressPages CMS 3.6 - 'manage()' Remote Code Execution	webapps	PHP
2013-11-01	WordPress Theme Think Responsive 1.0 - Arbitrary File Upload	webapps	PHP
2013-11-01	pdirl PHP Directory Listing 1.0.4 - Cross-Site Scripting	webapps	PHP
2013-11-01	WordPress Theme This Way - 'upload_settings_image.php' Arbitrary File Upload	webapps	PHP
2013-10-31	Apache + PHP < 5.3.12 / < 5.4.2 - Remote Code Execution + Scanner	remote	PHP
2013-10-31	ImpressPages CMS 3.6 - Multiple Cross-Site Scripting / SQL Injection Vulnerabilities	webapps	PHP
2013-10-31	vTiger CRM 5.3.0 5.4.0 - (Authenticated) Remote Code Execution (Metasploit)	remote	PHP
2013-10-31	NAS4Free - Remote Code Execution (Metasploit)	remote	PHP
2013-10-31	Zabbix - (Authenticated) Remote Command Execution (Metasploit)	remote	Linux
2013-10-31	ISPConfig - (Authenticated) Arbitrary PHP Code Execution (Metasploit)	remote	PHP
2013-10-31	OpenMediaVault Cron - Remote Command Execution (Metasploit)	remote	Linux
2013-10-31	Moodle - Remote Command Execution (Metasploit)	remote	Linux
2013-10-31	ProcessMaker Open Source - (Authenticated) PHP Code Execution (Metasploit)	remote	PHP
2013-10-31	Opsview pre 4.4.1 - Blind SQL Injection	webapps	PHP
2013-10-30	SoftMaker Office 2012 - TextMaker Memory Corruption	dos	Windows

2013-10-30	AudioCoder 0.8.22 - '.m3u' Local Buffer Overflow (SEH)	local	Windows
2013-10-30	Unicorn Router WB-3300NR - Cross-Site Request Forgery (Factory Reset/DNS Change)	webapps	Hardware
2013-10-30	CloudFlare vs Incapsula (WAF) : Round 2 (PDF)	papers	Multiple
2013-10-30	Openbravo ERP - XML External Entity Information Disclosure	remote	Multiple
2013-10-29	Horde Groupware Web Mail Edition 5.1.2 - Cross-Site Request Forgery (1)	webapps	PHP
2013-10-29	Olat CMS 7.8.0.1 - Persistent Cross-Site Scripting	webapps	PHP
2013-10-29	Watchguard Firewall XTM 11.7.4u1 - Remote Buffer Overflow	remote	Hardware
2013-10-29	ILIAS eLearning CMS 4.3.4 < 4.4 - Persistent Cross-Site Scripting	webapps	PHP
2013-10-29	Stem Innovation - 'IZON' Hard-Coded Credentials	webapps	Hardware
2013-10-29	GTX CMS 2013 Optima - SQL Injection	webapps	PHP
2013-10-29	Apache + PHP < 5.3.12 / < 5.4.2 - cgi-bin Remote Code Execution	remote	PHP
2013-10-29	XAMPP for Windows 1.8.2 - Blind SQL Injection	webapps	Windows
2013-10-28	Pirelli Discus DRG A125g - Password Disclosure	webapps	Hardware
2013-10-28	PHP RSS Reader 2010 - SQL Injection	webapps	PHP
2013-10-28	BlazeDVD 6.2 - '.plf' Local Buffer Overflow (SEH)	local	Windows
2013-10-28	Onpub CMS 1.4/1.5 - Multiple SQL Injections	webapps	PHP
2013-10-27	Inception E-Zine #1	papers	eZine
2013-10-27	VideoCharge Studio 2.12.3.685 - Local Buffer Overflow (SEH)	local	Windows
2013-10-26	Photodex ProShow Producer 5.0.3310 - Local Buffer Overflow (SEH)	local	Windows
2013-10-26	WordPress Theme Curvo - Cross-Site Request Forgery / Arbitrary File Upload	webapps	PHP
2013-10-26	Open Flash Chart 2 - Arbitrary File Upload (Metasploit)	remote	PHP
2013-10-26	Poppler 0.14.3 - '/utils/pdfseparate.cc' Local Format String	local	Linux
2013-10-25	JReport - 'dealSchedules.jsp' Cross-Site Request Forgery	webapps	JSP
2013-10-24	WordPress Theme SAICO 1.0 < 1.0.2 - Arbitrary File Upload	webapps	PHP
2013-10-24	FortKnox Personal Firewall 9.0.305.0/10.0.305.0 - Kernel Driver 'fortknoxfw.sys' Memory Corruption	dos	Windows
2013-10-23	ASF Demux for VideoLAN VLC Media Player 2.0.x - Denial of Service (PoC)	dos	Windows
2013-10-23	The Audit DSOs of the RTLD	papers	Multiple
2013-10-23	WordPress Theme Daily Deal - Arbitrary File Upload	webapps	PHP
2013-10-22	Avira Internet Security - 'avipbb.sys' Filter Bypass / Privilege Escalation	local	Windows
2013-10-22	D-Link DIR-605L - Captcha Handling Buffer Overflow (Metasploit)	remote	Hardware
2013-10-22	Interactive Graphical SCADA System - Remote Command Injection (Metasploit)	remote	Windows
2013-10-22	HP Intelligent Management Center BIms UploadServlet - Directory Traversal (Metasploit)	remote	Windows
2013-10-22	ARRIS DG860A - NVRAM Backup Password Disclosure	webapps	Hardware
2013-10-22	WebTester 5.x - Command Execution (Metasploit)	remote	Unix
2013-10-22	Fuzzing & Software Vulnerabilities Part 1 - Turkish	papers	Multiple
2013-10-21	Apache Shindig - XML External Entity Information Disclosure	remote	Multiple
2013-10-21	Course Registration Management System - Cross-Site Scripting / SQL Injection	webapps	PHP
2013-10-20	ZonPHP 2.25 - Remote Code Execution	webapps	PHP
2013-10-20	Joomla! Component Maian15 - 'name' Arbitrary File Upload	webapps	PHP
2013-10-19	WHMCompleteSolution (WHMCS) 5.2.8 - SQL Injection	webapps	PHP
2013-10-19	WordPress Theme Area53 - Arbitrary File Upload	webapps	PHP
2013-10-18	Elite Graphix ElitCMS 1.01 / PRO - Multiple Web Vulnerabilities	webapps	Multiple
2013-10-18	SikaBoom - Remote Buffer Overflow (Metasploit)	remote	Windows
2013-10-18	PHP Point Of Sale - 'ofc_upload_image.php' Remote Code Execution	remote	PHP
2013-10-17	Zikula CMS 1.3.5 - Multiple Vulnerabilities	webapps	PHP
2013-10-17	WordPress Plugin Quick Paypal Payments 3.0 - Presistant Cross-Site Scripting	webapps	PHP
2013-10-17	WordPress Plugin Realty - Blind SQL Injection	webapps	PHP
2013-10-17	Woltlab Burning Board Regenbogenwiese 2007 Addon - SQL Injection	webapps	PHP
2013-10-16	WebTester 5.x - Multiple Vulnerabilities	webapps	PHP
2013-10-16	Windows - MessageBox + Null-Free Shellcode (113 bytes)	shellcode	Windows
2013-10-15	Aladdin Knowledge Systems Ltd. PrivAgent - ActiveX Control Overflow	remote	Windows
2013-10-15	Beetel Connection Manager PCW_BTLINDV1.0.0B04 - Local Buffer Overflow (SEH)	local	Windows
2013-10-15	WordPress Plugin Dexs PM System - (Authenticated) Persistent Cross-Site Scripting	webapps	PHP
2013-10-15	Dolibarr ERP/CRM 3.4.0 - 'exportcsv.php?sondage' SQL Injection	webapps	PHP
2013-10-15	Zabbix 2.0.8 - SQL Injection / Remote Code Execution (Metasploit)	webapps	Unix
2013-10-15	HP Data Protector - Cell Request Service Buffer Overflow (Metasploit)	remote	Windows
2013-10-15	Microsoft Internet Explorer - CDisplayPointer Use-After-Free (MS13-080) (Metasploit)	remote	Windows
2013-10-15	My File Explorer 1.3.1 iOS - Multiple Web Vulnerabilities	webapps	iOS
2013-10-15	OliveOffice Mobile Suite 2.0.3 iOS - Local File Inclusion	webapps	iOS
2013-10-15	UbiDisk File Manager 2.0 iOS - Multiple Web Vulnerabilities	webapps	iOS
2013-10-15	Apple iOS 7.0.2 - Sim Lock Screen Display Bypass	webapps	iOS
2013-10-15	DornCMS Application 1.4 - Multiple Web Vulnerabilities	webapps	Linux
2013-10-15	Oracle GlassFish Server 2.1.1/3.0.1 - Multiple Subcomponent Resource Identifier Traversal Arbitrary File Access	remote	Multiple
2013-10-15	Level One Enterprise Access Point (Multiple Devices) - 'backupCfg.cgi' Security Bypass	remote	Hardware
2013-10-14	Internet Haut Debit Mobile PCW_MATMARV1.0.0B03 - Local Buffer Overflow (SEH)	local	Windows
2013-10-14	StatusNet/Laconica 0.7.4/0.8.2/0.9.0beta3 - Arbitrary File Reading	webapps	PHP
2013-10-14	Android Zygote - Socket and Fork Bomb (Denial of Service)	dos	Android
2013-10-14	WordPress 3.6 - Crafted String URL Redirect Restriction Bypass	papers	PHP
2013-10-14	WordPress Plugin Cart66 1.5.1.14 - Multiple Vulnerabilities	webapps	PHP
2013-10-14	aMSN 0.98.9 Web App - Multiple Vulnerabilities	webapps	PHP
2013-10-14	VMware Hyperic HQ Groovy Script-Console - Java Execution (Metasploit)	remote	Multiple
2013-10-14	D-Link / PLANEX COMMUNICATIONS - 'RuntimeDiagnosticPing()' Remote Stack Buffer Overflow	remote	Hardware
2013-10-13	vBulletin 4.1.x - '/install/upgrade.php' Security Bypass	webapps	PHP
2013-10-12	Fortinet FortiAnalyzer - Cross-Site Request Forgery	remote	Hardware
2013-10-11	Bilboplanet - 'auth.php' SQL Injection	webapps	PHP
2013-10-11	IBM Cognos Business Intelligence - XML External Entity Information Disclosure	remote	Multiple
2013-10-10	ONO Hitron CDE-30364 Router - Denial of Service	dos	Hardware
2013-10-10	Indusoft Thin Client 7.1 - ActiveX Buffer Overflow	remote	Windows
2013-10-10	Imperva SecureSphere Web Application Firewall MX 9.5.6 - Blind SQL Injection	webapps	Multiple
2013-10-10	ALLPlayer 5.6.2 - '.m3u' Local Buffer Overflow (PoC)	dos	Windows
2013-10-10	Ziteman CMS - Login Page SQL Injection	webapps	PHP
2013-10-09	Bugzilla - 'editflagtypes.cgi' Multiple Cross-Site Scripting Vulnerabilities	webapps	CGI
2013-10-09	Bugzilla 4.2 - Tabular Reports Cross-Site Scripting	webapps	CGI
2013-10-08	davfs2 1.4.6/1.4.7 - Local Privilege Escalation	local	Linux
2013-10-08	WHMCompleteSolution (WHMCS) 5.2.7 - SQL Injection	webapps	PHP
2013-10-08	WordPress Plugin Quick Contact Form 6.0 - Persistent Cross-Site Scripting	webapps	PHP
2013-10-08	HP LoadRunner - 'magentproc.exe' Remote Overflow (Metasploit)	remote	Windows
2013-10-08	GestioIP - Remote Command Execution (Metasploit)	remote	Unix
2013-10-08	Apple Motion 5.0.7 - Integer Overflow	dos	OSX
2013-10-08	Alienvault Open Source SIEM (OSSIM) - 'Timestamp' Directory Traversal	webapps	PHP
2013-10-08	WordPress Plugin WP-Realty - 'listing_id' SQL Injection	webapps	PHP
2013-10-07	WordPress Plugin Woopra Analytics - 'ofc_upload_image.php' Arbitrary PHP Code Execution	webapps	PHP
2013-10-06	PoC \|\| GTFO 0x01	papers	Magazine
2013-10-04	elproLOG MONITOR Webaccess 2.1 - Multiple Vulnerabilities	webapps	PHP
2013-10-04	FlashChat 6.0.2 < 6.0.8 - Arbitrary File Upload	webapps	PHP
2013-10-04	CMS Formulasi 2.07 - Multiple Vulnerabilities	webapps	PHP
2013-10-04	Apache Tomcat/JBoss EJBInvokerServlet / JMXInvokerServlet (RMI over HTTP) Marshalled Object - Remote Code Execution	remote	PHP
2013-10-04	FreeBSD 9.0 - Intel SYSRET Kernel Privilege Escalation	local	FreeBSD
2013-10-04	Aanval 7.1 build 70151 - Multiple Vulnerabilities	webapps	PHP
2013-10-04	SIEMENS Solid Edge ST4 SEListCtrlX - ActiveX Remote Code Execution (Metasploit)	remote	Windows
2013-10-03	WordPress Plugin SEO Watcher - 'ofc_upload_image.php' Arbitrary PHP Code Execution	webapps	PHP
2013-10-03	SPAMINA Cloud Email Firewall - Directory Traversal	webapps	PHP
2013-10-02	[Hebrew] Digital Whisper Security Magazine #45	papers	Multiple
2013-10-02	Evince PDF Reader 2.32.0.145 (Windows) / 3.4.0 (Linux) - Denial of Service	dos	Multiple
2013-10-02	PinApp Mail-SeCure 3.70 - Access Control Failure	local	Linux
2013-10-02	freeFTPd 1.0.10 - 'PASS' Remote Buffer Overflow (Metasploit)	remote	Windows
2013-10-02	Micorosft Internet Explorer - SetMouseCapture Use-After-Free (Metasploit)	remote	Windows
2013-10-02	HylaFAX+ 5.2.4 > 5.5.3 - Buffer Overflow	dos	Linux
2013-10-02	Gnew 2013.1 - Multiple Vulnerabilities (2)	webapps	PHP
2013-10-02	GLPI 0.84.1 - Multiple Vulnerabilities	webapps	PHP
2013-10-02	Alienvault Open Source SIEM (OSSIM) 3.1 - 'date_from' Multiple SQL Injections	webapps	PHP
2013-09-30	Tenda W309R Router 5.07.46 - Configuration Disclosure	webapps	Hardware
2013-09-30	KMPlayer 3.7.0.109 - '.wav' Crash (PoC)	dos	Windows
2013-09-30	Asus RT-N66U 3.0.0.4.374_720 - Cross-Site Request Forgery	webapps	Hardware
2013-09-30	mod_accounting Module 0.5 - Blind SQL Injection	webapps	Linux
2013-09-30	XAMPP 1.8.1 - 'lang.php?WriteIntoLocalDisk method' Local Write Access	webapps	PHP
2013-09-30	Nodejs - 'js-yaml load()' Code Exec (Metasploit)	local	Multiple
2013-09-30	SimpleRisk 20130915-01 - Multiple Vulnerabilities	webapps	PHP
2013-09-30	glibc and eglibc 2.5/2.7/2.13 - Local Buffer Overflow	local	Linux
2013-09-30	Abuse HTTP Server - Remote Denial of Service	dos	Multiple

2013-09-27	FreeSMS - '/pages/crc_handler.php?scheduleid' SQL Injection	webapps	PHP
2013-09-27	FreeSMS - '/pages/crc_handler.php' Multiple Cross-Site Scripting Vulnerabilities	webapps	PHP
2013-09-26	Piwigo 2.5.2 - Cross-Site Scripting	webapps	PHP
2013-09-26	Blast XPlayer - Local Buffer Overflow (PoC)	dos	Multiple
2013-09-26	Hewlett-Packard (HP) 2620 Switch Series. Edit Admin Account - Cross-Site Request Forgery	webapps	Hardware
2013-09-26	Posnic Stock Management System 1.02 - Multiple Vulnerabilities	webapps	Multiple
2013-09-26	ArticleSetup - Multiple Vulnerabilities	webapps	PHP
2013-09-25	Understanding C Integer Boundaries (Overflows & Underflow)	papers	Multiple
2013-09-25	Linux Classic Return-to-libc & Return-to-libc Chaining Tutorial	papers	Linux
2013-09-25	Good for Enterprise 2.2.2.1611 - Cross-Site Scripting	webapps	Hardware
2013-09-25	X2CRM 3.4.1 - Multiple Vulnerabilities	webapps	PHP
2013-09-25	ZeroShell 'cgi-bin/kerbynet' - Local File Disclosure	webapps	Linux
2013-09-24	IBM AIX 6.1/7.1 - Local Privilege Escalation	local	AIX
2013-09-24	Raidsonic NAS Devices - Remote Command Execution (Metasploit)	remote	Hardware
2013-09-23	Linux/x86 - Egg Omelet (Multi-Egghunter) + Reverse (192.168.122.1:43981/TCP) Shell (/bin/sh) Shellcode	shellcode	Linux_x86
2013-09-23	Linux Stack Based Buffer Overflows	papers	Linux
2013-09-23	Linux Format String Exploitation	papers	Linux
2013-09-23	Linux Integer Overflow and Underflow	papers	Linux
2013-09-23	Linux Off By One Vulnerabilities	papers	Linux
2013-09-23	Return Oriented Programming (ROP FTW)	papers	Linux
2013-09-23	Microsoft Internet Explorer - CCaret Use-After-Free (MS13-069) (Metasploit)	remote	Windows
2013-09-23	Microsoft Windows Theme File Handling - Arbitrary Code Execution (MS13-071) (Metasploit)	remote	Windows
2013-09-23	GLPI - 'install.php' Remote Command Execution (Metasploit)	remote	PHP
2013-09-23	Linksys WRT110 - Remote Command Execution (Metasploit)	remote	Hardware
2013-09-23	WordPress Plugin NOSpamPTI - Blind SQL Injection	webapps	PHP
2013-09-23	Blue Coat ProxySG 5.x and Security Gateway OS - Denial of Service	dos	Linux
2013-09-23	SilverStripe CMS - Multiple HTML Injection Vulnerabilities	webapps	PHP
2013-09-22	SolarWinds Server and Application Monitor - ActiveX 'Pepco32c' Buffer Overflow	dos	Windows
2013-09-22	FiberHome Modem Router HG-110 - Authentication Bypass To Remote Change DNS Servers	remote	Hardware
2013-09-22	Share KM 1.0.19 - Remote Denial of Service	dos	Windows
2013-09-22	WordPress Plugin Lazy SEO 1.1.9 - Arbitrary File Upload	webapps	PHP
2013-09-22	ShareKM - Remote Denial of Service	dos	Windows
2013-09-21	Joomla! Component JVideoClip 1.5.1 - 'uid' SQL Injection	webapps	PHP
2013-09-20	Western Digital Arkeia < 10.0.10 - Remote Code Execution (Metasploit)	remote	PHP
2013-09-20	OpenEMR 4.1.1 Patch 14 - SQL Injection / Privilege Escalation / Remote Code Execution (Metasploit)	remote	PHP
2013-09-20	vTiger CRM 5.4.0 - 'index.php?onlyforuser' SQL Injection	webapps	PHP
2013-09-20	Monstra CMS 1.2.0 - 'login' SQL Injection	webapps	PHP
2013-09-20	MentalJS - Sandbox Security Bypass	webapps	PHP
2013-09-19	AspxCommerce 2.0 - Arbitrary File Upload	webapps	ASP
2013-09-19	WordPress Plugin RokIntroScroller - 'thumb.php' Multiple Vulnerabilities	webapps	PHP
2013-09-19	WordPress Plugin RokMicroNews - 'thumb.php' Multiple Vulnerabilities	webapps	PHP
2013-09-18	TeraCopy 2.3 - 'default.mo' Language File Integer Overflow	dos	Windows
2013-09-18	McKesson - ActiveX File/Environmental Variable Enumeration	remote	Windows
2013-09-18	WordPress Plugin Complete Gallery Manager 3.3.3 - Arbitrary File Upload	webapps	PHP
2013-09-18	WordPress Plugin RokNewsPager - 'thumb.php' Multiple Vulnerabilities	webapps	PHP
2013-09-17	PCMan FTP Server 2.07 - 'STOR' Remote Stack Overflow (Metasploit)	remote	Windows
2013-09-17	OpenEMR 4.1.1 Patch 14 - Multiple Vulnerabilities	webapps	PHP
2013-09-17	Western Digital Arkeia Appliance 10.0.10 - Multiple Vulnerabilities	webapps	PHP
2013-09-17	Oracle Java - 'ShortComponentRaster.verify()' Memory Corruption	remote	Windows
2013-09-17	Sophos Web Protection Appliance - clear_keys.pl Privilege Escalation (Metasploit)	local	Linux
2013-09-17	D-Link Devices - UPnP SOAP TelnetD Command Execution (Metasploit)	remote	Unix
2013-09-17	Sophos Web Protection Appliance - 'sblistpack' Arbitrary Command Execution (Metasploit)	remote	Linux
2013-09-17	Agnitum Outpost Internet Security - Local Privilege Escalation (Metasploit)	local	Windows
2013-09-17	HP ProCurve Manager - SNAC UpdateDomainControllerServlet Arbitrary File Upload (Metasploit)	remote	Windows
2013-09-17	HP ProCurve Manager SNAC - UpdateCertificatesServlet Arbitrary File Upload (Metasploit)	remote	Windows
2013-09-17	Vino VNC Server 3.7.3 - Persistent Denial of Service	dos	Linux
2013-09-17	WordPress Plugin RokStories - 'thumb.php' Multiple Vulnerabilities	webapps	PHP
2013-09-17	Mozilla Firefox 9.0.1 - Same Origin Policy Security Bypass	remote	Multiple
2013-09-15	Mitsubishi MC-WorkX 8.02 - ActiveX Control 'IcoLaunch' File Execution	remote	Windows
2013-09-14	Router ONO Hitron CDE-30364 - Cross-Site Request Forgery	webapps	Hardware
2013-09-13	Vestel TV 42pf9322 - Denial of Service	dos	Hardware
2013-09-13	Zimplit CMS 3.0 - Multiple Vulnerabilities	webapps	PHP
2013-09-13	WordPress Plugin mukioplayer4wp - 'cid' SQL Injection	webapps	PHP
2013-09-12	Talkie Bluetooth Video iFiles 2.0 iOS - Multiple Vulnerabilities	webapps	iOS
2013-09-12	Target Longlife Media Player 2.0.2.0 - '.wav' Crash (PoC)	dos	Windows
2013-09-12	Microsoft SharePoint 2013 (Cloud) - Persistent Exception Handling (MS13-067)	webapps	Windows
2013-09-12	D-Link DSL-2740B - Multiple Cross-Site Request Forgery Vulnerabilities	webapps	Hardware
2013-09-12	Synology DiskStation Manager (DSM) 4.3-3776 - Multiple Vulnerabilities	webapps	Linux
2013-09-10	eM Client e-mail client 5.0.18025.0 - Persistent Cross-Site Scripting	remote	Windows
2013-09-10	D-Link DIR-505 1.06 - Multiple Vulnerabilities	webapps	Hardware
2013-09-10	glFusion 1.3.0 - 'search.php?cat_id' SQL Injection	webapps	PHP
2013-09-10	Microsoft Internet Explorer - CAnchorElement Use-After-Free (MS13-055) (Metasploit)	remote	Windows
2013-09-10	HP SiteScope (Windows) - Remote Code Execution (Metasploit)	remote	Windows
2013-09-10	AjaXplorer 1.0 - Multiple Vulnerabilities	webapps	PHP
2013-09-10	eTransfer Lite - 'file name' HTML Injection	webapps	PHP
2013-09-09	freeFTPd 1.0.10 - 'PASS' Remote Buffer Overflow (SEH) (Metasploit)	remote	Windows
2013-09-09	Zyxware Health Monitoring System - Multiple Vulnerabilities	webapps	PHP
2013-09-09	Moodle 2.3.8/2.4.5 - Multiple Vulnerabilities	webapps	PHP
2013-09-09	Sophos Web Protection Appliance - Multiple Vulnerabilities	webapps	Linux
2013-09-08	Watchguard Server Center - Local Privilege Escalation	local	Windows
2013-09-07	WordPress Plugin Event Easy Calendar - Multiple Cross-Site Request Forgery Vulnerabilities	webapps	PHP
2013-09-06	CMS Mini 0.2.2 - Multiple Vulnerabilities	webapps	PHP
2013-09-06	Woltlab Burning Board FLVideo Addon - 'video.php?value' SQL Injection	webapps	PHP
2013-09-06	Practico CMS 13.7 - Authentication Bypass	webapps	PHP
2013-09-06	IKE and AuthIP IPsec Keyring Modules Service (IKEEXT) - Missing DLL (Metasploit)	local	Windows
2013-09-04	KingView 6.53 - 'KChartXY' ActiveX File Creation / Overwrite	local	Windows
2013-09-04	KingView 6.53 - 'SuperGrid' Insecure ActiveX Control	local	Windows
2013-09-04	jetAudio 8.0.16.2000 Plus VX - '.wav' Crash (PoC)	dos	Windows
2013-09-04	GOMPlayer 2.2.53.5169 - '.wav' Crash (PoC)	dos	Windows
2013-09-04	Apple Safari 6.0.1 for iOS 6.0 / Apple Mac OSX 10.7/8 - Heap Buffer Overflow	remote	iOS
2013-09-04	Microsoft Internet Explorer - CFlatMarkupPointer Use-After-Free (MS13-059) (Metasploit)	remote	Windows
2013-09-04	HP LoadRunner - lrFileIOService ActiveX WriteFileString Remote Code Execution (Metasploit)	remote	Windows
2013-09-04	Linux/ARM - chmod( /etc/passwd 0777) Shellcode (39 bytes)	shellcode	ARM
2013-09-04	Linux/ARM - creat("/root/pwned", 0777) Shellcode (39 bytes)	shellcode	ARM
2013-09-04	Linux/ARM - execve("/bin/sh", [], [0 vars]) Shellcode (35 bytes)	shellcode	ARM
2013-09-03	GreenBrowser 6.4.0515 - Heap Overflow	dos	Windows
2013-09-03	Oracle Java lookUpByteBI - Heap Buffer Overflow	dos	Windows
2013-09-03	PotPlayer 1.5.39036 - '.wav' Crash (PoC)	dos	Windows
2013-09-03	TP-Link TD-W8951ND - Multiple Vulnerabilities	webapps	Hardware
2013-09-03	MikroTik RouterOS - sshd (ROSSSH) Remote Heap Corruption	remote	Hardware
2013-09-03	Zoom Telephonics ADSL Modem/Router - Multiple Vulnerabilities	webapps	Hardware
2013-09-03	WordPress Plugin IndiaNIC Testimonial - Multiple Vulnerabilities	webapps	PHP
2013-09-03	[Persian] Comprehensive OllyDBG Learning	papers	Windows
2013-09-03	dBlog CMS - 'm' SQL Injection	webapps	PHP
2013-09-03	Flo CMS - 'archivem' SQL Injection	webapps	ASP
2013-08-30	Apple Mac OSX 10.8.4 - Local Privilege Escalation (Python)	local	OSX
2013-08-30	[Persian] Malware Memory Forensics	papers	Windows
2013-08-30	[Arabic] Zaiim In Exploit Discovering	papers	Windows
2013-08-29	Metasploit - The Exploit Learning Tree	papers	Multiple
2013-08-29	VMware - Setuid VMware-mount Unsafe popen(3) (Metasploit)	local	Linux
2013-08-29	HP LoadRunner - lrFileIOService ActiveX Remote Code Execution (Metasploit)	remote	Windows
2013-08-29	Mozilla Firefox - XMLSerializer Use-After-Free (Metasploit)	remote	Windows
2013-08-29	SPIP - 'connect' PHP Injection (Metasploit)	remote	PHP
2013-08-29	AVTECH DVR Firmware 1017-1003-1009-1003 - Multiple Vulnerabilities	dos	Hardware
2013-08-29	Oracle Java - ByteComponentRaster.verify() Memory Corruption	remote	Windows
2013-08-29	Apple Mac OSX - Sudo Password Bypass (Metasploit)	local	OSX
2013-08-29	appRain CMF - Multiple Cross-Site Request Forgery Vulnerabilities	webapps	PHP
2013-08-28	Aloaha PDF Suite - Remote Stack Buffer Overflow	remote	Windows
2013-08-26	mooSocial 1.3 - Multiple Vulnerabilities	webapps	PHP
2013-08-26	PhpVibe 3.1 - Multiple Vulnerabilities	webapps	PHP

2013-08-26	Belkin G Wireless Router Firmware 5.00.12 - Remote Code Execution	remote	Hardware
2013-08-26	Winamp 5.63 - 'winamp.ini' Local Overflow	local	Windows
2013-08-26	libtiff 3.9.5 - Integer Overflow	dos	Linux
2013-08-26	MusicBox 2.3.8 - Multiple Vulnerabilities	webapps	PHP
2013-08-26	Oracle Endeca Server - Remote Command Execution (Metasploit)	remote	Windows
2013-08-26	Loftek Nexus 543 IP Cameras - Multiple Vulnerabilities	webapps	Hardware
2013-08-26	Joomla! Component com_virtuemart 2.0.22a - SQL Injection	webapps	PHP
2013-08-26	cm3 Acora CMS - 'top.aspx' Information Disclosure	webapps	PHP
2013-08-23	dreamMail e-mail client 4.6.9.2 - Persistent Cross-Site Scripting	remote	Windows
2013-08-23	SearchBlox - Multiple Information Disclosure Vulnerabilities	webapps	Java
2013-08-22	Ovidentia 7.9.4 - Multiple Vulnerabilities	webapps	PHP
2013-08-22	CBHotel Hotel Software and Booking system 1.8 - Multiple Vulnerabilities	webapps	PHP
2013-08-22	NETGEAR ProSafe - Information Disclosure	webapps	Hardware
2013-08-22	NETGEAR ProSafe - Denial of Service	dos	Hardware
2013-08-22	Foreman (RedHat OpenStack/Satellite) - users/create Mass Assignment (Metasploit)	webapps	Linux
2013-08-22	DeWeS 0.4.2 - Directory Traversal	webapps	Windows
2013-08-22	Samba 3.5.22/3.6.17/4.0.8 - nttrans Reply Integer Overflow	dos	Linux
2013-08-22	VMware - Setuid VMware-mount Popen lsb_release Privilege Escalation	local	Linux
2013-08-21	freeFTPd 1.0.10 - 'PASS' Remote Buffer Overflow (SEH)	remote	Windows
2013-08-21	Win32-Worm:VBS/Jenxcus.A Malware Report	papers	Windows
2013-08-21	Schneider Electric PLC ETY Series Ethernet Controller - Denial of Service	dos	Hardware
2013-08-21	Bitbot (C2 Web Panel) - 'gate2.php' Multiple Vulnerabilities	webapps	PHP
2013-08-21	WordPress Plugin ThinkIT 0.1 - Multiple Vulnerabilities	webapps	PHP
2013-08-21	Graphite Web - Unsafe Pickle Handling (Metasploit)	remote	Unix
2013-08-21	Samsung DVR Firmware 1.10 - Authentication Bypass	webapps	Hardware
2013-08-21	Oracle Java - 'BytePackedRaster.verify()' Signed Integer Overflow	remote	Windows
2013-08-21	Adobe ColdFusion 9 - Administrative Authentication Bypass	webapps	Windows
2013-08-21	Sitecom N300/N600 Devices - Multiple Vulnerabilities	webapps	Hardware
2013-08-21	Twilight CMS - DeWeS Web Server Directory Traversal	webapps	PHP
2013-08-21	Xibo - 'layout' HTML Injection	webapps	PHP
2013-08-21	Xibo - Cross-Site Request Forgery	webapps	PHP
2013-08-20	Bo-Blog 2.1.1 - Cross-Site Scripting / SQL Injection	webapps	PHP
2013-08-19	VideoLAN VLC Media Player 2.0.8 - '.m3u' Local Crash (PoC)	dos	Windows
2013-08-19	PCMan FTP Server 2.07 - 'STOR' Remote Buffer Overflow	remote	Windows
2013-08-19	Cogent DataHub - HTTP Server Buffer Overflow (Metasploit)	remote	Windows
2013-08-19	Java - 'storeImageArray()' Invalid Array Indexing (Metasploit)	remote	Multiple
2013-08-19	IBM 1754 GCM 1.18.0.22011 - Remote Command Execution	remote	Hardware
2013-08-17	Quack Chat 1.0 - Multiple Vulnerabilities	webapps	PHP
2013-08-17	Win32-China Chopper CnC/Webshell Malware Report	papers	Windows_x86
2013-08-17	Copy to WebDAV 1.1 iOS - Multiple Vulnerabilities	webapps	iOS
2013-08-17	Photo Transfer Upload 1.0 iOS - Multiple Vulnerabilities	webapps	iOS
2013-08-17	Smashing the stack, an example from 2013	papers	Linux
2013-08-16	AlgoSec Firewall Analyzer - Cross-Site Scripting	remote	Hardware
2013-08-15	KCFinder 2.51 - Local File Disclosure	webapps	PHP
2013-08-15	Mac's CMS 1.1.4 - Multiple Vulnerabilities	webapps	PHP
2013-08-15	[Spanish] Exploting Add-Ons in Mozilla Firefox	papers	Windows
2013-08-15	Pligg CMS 2.0.0rc2 - Cross-Site Request Forgery (File Creation)	webapps	PHP
2013-08-15	Spitfire CMS 1.1.4 - Cross-Site Request Forgery	webapps	PHP
2013-08-15	DotNetNuke DNNArticle Module 10.0 - SQL Injection	webapps	PHP
2013-08-15	w-CMS 2.0.1 - Remote Code Execution	webapps	PHP
2013-08-15	Alibaba Clone Tritanium Version - 'news_desc.html' SQL Injection	webapps	PHP
2013-08-15	Intrasrv 1.0 - Remote Buffer Overflow (Metasploit)	remote	Windows
2013-08-15	MiniWeb 300 - Arbitrary File Upload (Metasploit)	remote	Windows
2013-08-15	Ultra Mini HTTPd - Remote Stack Buffer Overflow (Metasploit)	remote	Windows
2013-08-15	Chasys Draw IES - Local Buffer Overflow (Metasploit)	local	Windows
2013-08-15	Joomla! Component Media Manager - Arbitrary File Upload (Metasploit)	remote	PHP
2013-08-15	Oracle Java - 'IntegerInterleavedRaster.verify()' Signed Integer Overflow	remote	Windows
2013-08-15	ACal 2.2.6 - 'view' Local File Inclusion	webapps	PHP
2013-08-13	OneHTTPD 0.7 - Denial of Service	dos	Windows
2013-08-13	MinaliC WebServer 2.0.0 - Remote Buffer Overflow (Egghunter)	remote	Windows
2013-08-13	HP StorageWorks P4000 Virtual SAN Appliance - Login Buffer Overflow (Metasploit)	remote	Windows
2013-08-13	Open-FTPD 1.2 - Arbitrary File Upload (Metasploit)	remote	Windows
2013-08-13	CakePHP 2.2.8/2.3.7 - AssetDispatcher Class Local File Inclusion	webapps	PHP
2013-08-13	DotNetNuke 6.1.x - Cross-Site Scripting	webapps	ASP
2013-08-12	D-Link Devices - 'command.php' Remote Command Execution (Metasploit)	remote	Hardware
2013-08-12	Tribq CMS 5.2.7 - Cross-Site Request Forgery (Adding/Editing New Administrator Account)	webapps	PHP
2013-08-12	Open Real Estate CMS 1.5.1 - Multiple Vulnerabilities	webapps	PHP
2013-08-12	[Romanian] Formatul Fisierelor PE (Portable Executable)	papers	Windows
2013-08-12	Win32-Rovnix Malware Report	papers	Windows_x86
2013-08-12	MLMAuction Script - 'gallery.php?id' SQL Injection	webapps	PHP
2013-08-12	PHPVID 1.2.3 - Multiple Vulnerabilities	webapps	PHP
2013-08-12	Ajax PHP Penny Auction 1.x 2.x - Multiple Vulnerabilities	webapps	PHP
2013-08-12	Gnew 2013.1 - Multiple Vulnerabilities (1)	webapps	PHP
2013-08-12	Sami FTP Server 2.0.1 - MKD Buffer Overflow ASLR Bypass (SEH)	remote	Windows
2013-08-12	Integrated CMS 1.0 - SQL Injection	webapps	PHP
2013-08-12	Oracle Java - 'storeImageArray()' Invalid Array Indexing	remote	Windows
2013-08-12	Ruby on Rails - Known Secret Session Cookie Remote Code Execution (Metasploit)	remote	Multiple
2013-08-12	OpenX - Backdoor PHP Code Execution (Metasploit)	remote	PHP
2013-08-12	Squash - YAML Code Execution (Metasploit)	remote	Multiple
2013-08-12	WordPress Plugin Hms Testimonials 2.0.10 - Multiple Vulnerabilities	webapps	PHP
2013-08-12	Joomla! Component redSHOP 1.2 - SQL Injection	webapps	PHP
2013-08-11	HTC Sync Manager - Multiple DLL Loading Arbitrary Code Execution Vulnerabilities	remote	Windows
2013-08-08	D-Link Devices - 'tools_vct.xgi' Remote Command Execution (Metasploit)	remote	Hardware
2013-08-08	Mozilla Firefox - onreadystatechange Event DocumentViewerImpl Use-After-Free (Metasploit)	remote	Windows
2013-08-08	PHPFox 3.6.0 (build3) - Multiple SQL Injections	webapps	PHP
2013-08-08	BigTree CMS 4.0 RC2 - Multiple Vulnerabilities	webapps	PHP
2013-08-08	Advanced Guestbook - 'addentry.php' Arbitrary File Upload	webapps	PHP
2013-08-07	FTP OnConnect 1.4.11 iOS - Multiple Vulnerabilities	webapps	iOS
2013-08-07	Apache suEXEC - Information Disclosure / Privilege Escalation	remote	Linux
2013-08-07	Pluck CMS 4.7 - HTML Code Injection	webapps	PHP
2013-08-07	WordPress Plugin Booking Calendar 4.1.4 - Cross-Site Request Forgery	webapps	PHP
2013-08-07	HP Data Protector - Remote Command Execution	remote	Windows
2013-08-07	(Gabriel's FTP Server) Open & Compact FTP Server 1.2 - Authentication Bypass / Directory Traversal SAM Retrieval	remote	Windows
2013-08-07	Hikvision IP Cameras 4.1.0 b130111 - Multiple Vulnerabilities	webapps	Hardware
2013-08-07	WordPress Plugin Usernoise 3.7.8 - Persistent Cross-Site Scripting	webapps	PHP
2013-08-07	Adventures in Automotive Networks and Control Units	papers	Hardware
2013-08-07	Joomla! Component com_sectionex 2.5.96 - SQL Injection	webapps	PHP
2013-08-07	McAfee SuperScan 4.0 - Cross-Site Scripting	webapps	Windows
2013-08-07	Kwok Information Server - Multiple SQL Injections	webapps	CGI
2013-08-06	Mozilla Firefox 5.0 < 15.0.1 - __exposedProps__ XCS Code Execution (Metasploit)	local	Multiple
2013-08-06	Nmap - Arbitrary File Write	remote	Linux
2013-08-05	PoC \|\| GTFO 0x00	papers	Magazine
2013-08-03	RiteCMS 1.0.0 - Multiple Vulnerabilities	webapps	PHP
2013-08-03	Easy LAN Folder Share 3.2.0.100 - Local Buffer Overflow (SEH)	local	Windows
2013-08-03	StarUML - 'WinGraphviz.dll' ActiveX Buffer Overflow	dos	Windows
2013-08-02	HP Data Protector - CMD Install Service (Metasploit)	remote	Windows
2013-08-02	SocialEngine Timeline Plugin 4.2.5p9 - Arbitrary File Upload	webapps	PHP
2013-08-02	TEC-IT TBarCode - OCX ActiveX Control (TBarCode4.ocx 4.1.0) Crash (PoC)	dos	Windows
2013-08-02	Ginkgo CMS - 'index.php?rang' SQL Injection	webapps	PHP
2013-08-02	FunGamez - Arbitrary File Upload	webapps	PHP
2013-08-02	BigACE 2.7.8 - Cross-Site Request Forgery (Add Admin)	webapps	PHP
2013-08-02	PCMan FTP Server 2.07 - 'PASS' Remote Buffer Overflow	remote	Windows
2013-08-02	vTiger CRM 5.4.0 SOAP - Multiple Vulnerabilities	webapps	PHP
2013-08-02	[Hebrew] Digital Whisper Security Magazine #44	papers	Multiple
2013-08-02	Telmanik CMS Press 1.01b - 'pages.php?page_name' SQL Injection	webapps	PHP
2013-08-02	Agnitum Outpost Security Suite 8.1 - Local Privilege Escalation	local	Windows
2013-08-02	D-Link DIR-645 1.03B08 - Multiple Vulnerabilities	webapps	Hardware
2013-08-02	INSTEON Hub 2242-222 - Lack of Web and API Authentication	webapps	Hardware
2013-08-02	Karotz Smart Rabbit 12.07.19.00 - Multiple Vulnerabilities	local	Hardware
2013-08-02	MiCasaVerde VeraLite 1.5.408 - Multiple Vulnerabilities	webapps	Hardware

2013-08-02	Cotonti 0.9.13 - SQL Injection	webapps	PHP
2013-08-02	Western Digital My Net Wireless Routers - Password Disclosure	webapps	Hardware
2013-08-02	TP-Link TL-SC3171 IP Cameras - Multiple Vulnerabilities	webapps	Hardware
2013-08-02	WordPress Plugin Better WP Security 3.4.8/3.4.9/3.4.10/3.5.2/3.5.3 - Persistent Cross-Site Scripting	webapps	PHP
2013-08-02	Oracle Hyperion 11 - Directory Traversal	webapps	Windows
2013-08-02	EchoVNC Viewer - Remote Denial of Service	dos	Windows
2013-08-02	PineApp Mail-SeCure - 'test_li_connection.php' Arbitrary Command Execution (Metasploit)	remote	PHP
2013-08-02	PineApp Mail-SeCure - 'ldapsyncnow.php' Arbitrary Command Execution (Metasploit)	remote	PHP
2013-08-02	PineApp Mail-SeCure - 'livelog.html' Arbitrary Command Execution (Metasploit)	remote	Unix
2013-08-02	Microsoft Windows - HWND_BROADCAST Low to Medium Integrity Privilege Escalation (MS13-005) (Metasploit)	local	Windows
2013-08-02	Linux Kernel 3.7.6 (RedHat x86/x64) - 'MSR' Driver Privilege Escalation	local	Linux
2013-08-01	SilverStripe CMS - 'MemberLoginForm.php' Information Disclosure	webapps	PHP
2013-07-31	Jahia xCM - '/engines/manager.jsp?site' Cross-Site Scripting	webapps	PHP
2013-07-31	Jahia xCM - '/administration/' Multiple Cross-Site Scripting Vulnerabilities	webapps	PHP
2013-07-31	Plone - 'in_portal.py' < 4.1.3 Session Hijacking	webapps	Python
2013-07-29	OpenEMM-2013 8.10.380.hf13.0.066 - SOAP SQL Injection / Persistent Cross-Site Scripting	webapps	JSP
2013-07-29	Private Photos 1.0 iOS - Persistent Cross-Site Scripting	webapps	iOS
2013-07-29	WebDisk 3.0.2 PhotoViewer iOS - Command Execution	webapps	iOS
2013-07-29	FluxBB 1.5.3 - Multiple Vulnerabilities	webapps	PHP
2013-07-29	Novell Client 2 SP3 - 'nicm.sys 3.1.11.0' Local Privilege Escalation	local	Windows
2013-07-28	TRENDnet TEW-812DRU - Cross-Site Request Forgery/Command Injection Root	webapps	Hardware
2013-07-28	Java Debugging Wire Protocol (JDWP) - Arbitrary Java Code Execution Exploitation	papers	Windows
2013-07-28	Windows/ARM (RT) - Bind (4444/TCP) Shell Shellcode	shellcode	ARM
2013-07-27	Windu CMS 2.2 - Multiple Vulnerabilities	webapps	PHP
2013-07-27	Easy Blog by JM LLC - Multiple Vulnerabilities	webapps	PHP
2013-07-27	Basic Forum by JM LLC - Multiple Vulnerabilities	webapps	PHP
2013-07-27	Galil-RIO Modbus - Denial of Service	dos	Hardware
2013-07-27	Linux/MIPS (Little Endian) - system() Shellcode (80 bytes)	shellcode	Linux_MIPS
2013-07-27	ASUS RT-AC66U - 'acsd' Remote Command Execution	remote	Linux_MIPS
2013-07-27	Broadkam PJ871 - Authentication Bypass	webapps	Hardware
2013-07-27	Apache Struts 2 - DefaultActionMapper Prefixes OGNL Code Execution (Metasploit)	remote	Multiple
2013-07-27	Symantec Web Gateway 5.1.0.x - Multiple Vulnerabilities	webapps	PHP
2013-07-26	xmonad XMonad.Hooks.DynamicLog Module - Multiple Remote Command Injection Vulnerabilities	remote	Linux
2013-07-25	Alienvault Open Source SIEM (OSSIM) - Multiple Cross-Site Scripting Vulnerabilities	webapps	PHP
2013-07-24	Nginx Exploit Documentation About a Generic Way to Exploit Linux Targets	papers	Linux
2013-07-24	FOSCAM IP-Cameras - Improper Access Restrictions	webapps	Hardware
2013-07-24	Magnolia CMS - Multiple Cross-Site Scripting Vulnerabilities	webapps	PHP
2013-07-24	WordPress Plugin Duplicator - Cross-Site Scripting	webapps	PHP
2013-07-24	vBulletin 4.0.2 - 'update_order' SQL Injection	webapps	PHP
2013-07-23	Dell Kace 1000 SMA 5.4.742 - SQL Injection	webapps	PHP
2013-07-23	Super Player 3500 - '.m3u' Local Stack Buffer Overflow	local	Windows
2013-07-23	Photo Server 2.0 iOS - Multiple Vulnerabilities	webapps	iOS
2013-07-23	Samsung PS50C7700 TV - Denial of Service	dos	Hardware
2013-07-23	D-Link Devices - UPnP SOAP Command Execution (Metasploit)	remote	Hardware
2013-07-23	Foreman (RedHat OpenStack/Satellite) - bookmarks/create Code Injection (Metasploit)	remote	Linux
2013-07-23	VMware vCenter - Chargeback Manager ImageUploadServlet Arbitrary File Upload (Metasploit)	remote	Windows
2013-07-23	Artweaver 3.1.5 - '.awd' Buffer Overflow	dos	Windows
2013-07-23	XnView 2.03 - '.pct' Buffer Overflow	dos	Windows
2013-07-23	Microsoft DirectShow - Arbitrary Memory Overwrite (MS13-056)	dos	Windows
2013-07-22	Barracuda LB / SVF / WAF / WEF - Multiple Vulnerabilities	webapps	Hardware
2013-07-22	Barracuda CudaTel 2.6.02.040 - SQL Injection	webapps	Hardware
2013-07-22	PCMan FTP Server 2.0.7 - Remote (Metasploit)	remote	Windows
2013-07-22	MLM (Multi Level Marketing) Script - Multiple Vulnerabilities	webapps	PHP
2013-07-22	VbsEdit 5.9.3 - '.smi' Buffer Overflow (PoC)	dos	Windows
2013-07-22	Sybase EAServer 6.3.1 - Multiple Vulnerabilities	webapps	JSP
2013-07-22	Apple QuickTime 7 - Invalid Atom Length Buffer Overflow (Metasploit)	remote	Windows
2013-07-22	HP Managed Printing Administration - jobAcct Remote Command Execution (Metasploit)	remote	Windows
2013-07-22	Flash JIT - Spraying info leak gadgets	papers	Windows
2013-07-22	Collabtive - Multiple Vulnerabilities	webapps	PHP
2013-07-22	WordPress Plugin FlagEm - 'cID' Cross-Site Scripting	webapps	PHP
2013-07-18	Symantec Workspace Virtualization 6.4.1895.0 - Kernel Mode Privilege Escalation	local	Windows
2013-07-18	Microsoft Windows Movie Maker 2.1.4026.0 - '.wav' Crash (PoC)	dos	Windows
2013-07-18	WiFly 1.0 Pro iOS - Multiple Vulnerabilities	webapps	iOS
2013-07-18	Flux Player 3.1.0 iOS - Multiple Vulnerabilities	webapps	iOS
2013-07-18	ePhoto Transfer 1.2.1 iOS - Multiple Vulnerabilities	webapps	iOS
2013-07-18	Xibo 1.2.2/1.4.1 - 'index.php?p' Directory Traversal	webapps	PHP
2013-07-18	Dell PacketTrap MSP RMM 6.6.x - Multiple Cross-Site Scripting Vulnerabilities	webapps	Windows
2013-07-18	Dell PacketTrap PSA 7.1 - Multiple Cross-Site Scripting Vulnerabilities	webapps	Windows
2013-07-18	Anchor CMS 0.9.1 - Persistent Cross-Site Scripting	webapps	PHP
2013-07-17	Barracuda CudaTel - Multiple Cross-Site Scripting Vulnerabilities	remote	Hardware
2013-07-16	Squid 3.3.5 - Denial of Service (PoC)	dos	Linux
2013-07-16	rpcbind - CALLIT procedure UDP Crash (PoC)	dos	Linux
2013-07-16	FTP Sprite 1.2.1 iOS - Persistent Cross-Site Scripting	webapps	iOS
2013-07-16	BlazeDVD Pro Player 6.1 - Direct RET Local Stack Buffer Overflow	local	Windows
2013-07-16	Olive File Manager 1.0.1 iOS - Multiple Vulnerabilities	webapps	iOS
2013-07-16	Light Audio Mixer 1.0.12 - '.wav' Crash (PoC)	dos	Windows
2013-07-16	Kate's Video Toolkit 7.0 - '.wav' Crash (PoC)	dos	Windows
2013-07-16	Dell Kace 1000 SMA 5.4.70402 - Persistent Cross-Site Scripting	webapps	PHP
2013-07-16	Saurus CMS 4.7.1 - Multiple Vulnerabilities	webapps	PHP
2013-07-16	Apache Struts 2.2.3 - Multiple Open Redirections	remote	Multiple
2013-07-16	MCImageManager - Multiple Vulnerabilities	webapps	PHP
2013-07-15	ReadyMedia - Remote Heap Buffer Overflow	remote	Windows
2013-07-13	Tri-PLC Nano-10 r81 - Denial of Service	dos	Hardware
2013-07-13	WordPress Plugin Spicy Blogroll - Local File Inclusion	webapps	PHP
2013-07-13	Corel PDF Fusion - Local Stack Buffer Overflow (Metasploit)	local	Windows
2013-07-13	BMC Service Desk Express 10.2.1.95 - Multiple Vulnerabilities	webapps	ASP
2013-07-13	McAfee ePO 4.6.6 - Multiple Vulnerabilities	webapps	Windows
2013-07-12	S9Y Serendipity 1.6.2 - 'serendipity_admin_image_selector.php' Cross-Site Scripting	webapps	PHP
2013-07-12	WordPress Plugin Pie Register - 'wp-login.php' Multiple Cross-Site Scripting Vulnerabilities	webapps	PHP
2013-07-12	Corda Highwire - 'Highwire.ashx' Full Path Disclosure	webapps	ASP
2013-07-12	OpenEMR 4.1 - 'note' HTML Injection	webapps	PHP
2013-07-12	Corda .NET Redirector - 'redirector.corda' Cross-Site Scripting	webapps	ASP
2013-07-11	Nginx 1.3.9/1.4.0 (x86) - Brute Force	remote	Linux_x86
2013-07-11	Atlassian Confluence 4.3.5 - Multiple Vulnerabilities	papers	Linux
2013-07-11	Ultra Mini HTTPd 1.21 - Remote Stack Buffer Overflow	remote	Windows
2013-07-11	WordPress Plugin miniBB - SQL Injection / Multiple Cross-Site Scripting Vulnerabilities	webapps	PHP
2013-07-11	PrestaShop - Multiple Cross-Site Request Forgery Vulnerabilities	webapps	PHP
2013-07-10	Jolix Media Player 1.1.0 - '.m3u' Denial of Service	dos	Windows
2013-07-10	vBulletin Advanced User Tagging Mod - Persistent Cross-Site Scripting	webapps	PHP
2013-07-10	vBulletin vBShout Mod - Persistent Cross-Site Scripting	webapps	PHP
2013-07-10	Zoom Telephonics X4/X5 ADSL Modem - Multiple Vulnerabilities	webapps	Hardware
2013-07-10	iVote - 'details.php' SQL Injection	webapps	PHP
2013-07-10	Mintboard - Multiple Cross-Site Scripting Vulnerabilities	webapps	PHP
2013-07-09	ERS Viewer 2013 - '.ERS' File Handling Buffer Overflow (Metasploit)	local	Windows
2013-07-09	Solaris Recommended Patch Cluster 6/19 (x86) - Local Privilege Escalation	local	Linux_x86
2013-07-09	Apache CXF < 2.5.10/2.6.7/2.7.4 - Denial of Service	dos	Multiple
2013-07-09	[Hebrew] Digital Whisper Security Magazine #43	papers	Multiple
2013-07-09	Zoom Telephonics (Multiple Devices) - Multiple Vulnerabilities	remote	Hardware
2013-07-09	Air Drive Plus - Multiple Input Validation Vulnerabilities	remote	iOS
2013-07-09	Cisco WebEx One-Click Client Password Encryption - Information Disclosure	local	Windows
2013-07-08	Adobe Reader X 10.1.4.38 - '.BMP'/'.RLE' Heap Corruption	local	Windows
2013-07-07	D-Link - OS-Command Injection via UPnP Interface	webapps	Hardware
2013-07-07	OpenNetAdmin 13.03.01 - Remote Code Execution	webapps	PHP
2013-07-06	phpVibe 3.1 - Information Disclosure / Remote File Inclusion	webapps	PHP
2013-07-05	Mobile Application Hacking Diary Ep.1	papers	Multiple
2013-07-05	Mobile Atlas Creator 1.9.12 - Persistent Command Injection	webapps	Multiple
2013-07-05	InstantCMS 1.6 - PHP Remote Code Execution (Metasploit)	remote	PHP
2013-07-05	Kasseler CMS 2 r1223 - Multiple Vulnerabilities	webapps	PHP
2013-07-05	OpenX 2.8.10 - Multiple Vulnerabilities	webapps	PHP
2013-07-03	Realtek Sound Manager AvRack - '.wav' Crash (PoC)	dos	Windows

2013-07-03	ABBS Audio Media Player - '.LST' Local Buffer Overflow (Metasploit)	local	Windows
2013-07-03	Google Android - 'APK' code Remote Security Bypass	remote	Android
2013-07-03	Linux/x86 - execve(/bin/sh) + Obfuscated Shellcode (30 bytes)	shellcode	Linux_x86
2013-07-03	Linux/x86 - Bind (/TCP) Shell Shellcode (112 bytes)	shellcode	Linux_x86
2013-07-02	Machform Form Maker 2 - Multiple Vulnerabilities	webapps	PHP
2013-07-02	Microsoft Windows - 'EPATHOBJ::pprFlattenRec' Local Privilege Escalation (Metasploit)	local	Windows
2013-07-02	Opera 12.15 - vtable Corruption	dos	Windows
2013-07-02	Winamp 5.63 - Invalid Pointer Dereference	dos	Windows
2013-07-02	Winamp 5.63 - Stack Buffer Overflow	dos	Windows
2013-07-02	RealNetworks RealPlayer - Denial of Service	dos	Multiple
2013-07-02	WordPress Plugin WP Feed - 'nid' SQL Injection	webapps	PHP
2013-07-02	WordPress Plugin Category Grid View Gallery - 'ID' Cross-Site Scripting	webapps	PHP
2013-07-02	Intelligent Platform Management Interface - Information Disclosure	remote	Multiple
2013-07-01	Microsoft PowerPoint 2007 - Crash (PoC)	dos	Windows
2013-07-01	AVS Media Player 4.1.11.100 - '.ac3' Denial of Service	dos	Windows
2013-07-01	Static HTTP Server 1.0 - Local Overflow (SEH)	local	Windows
2013-07-01	C.P.Sub 4.5 - Authentication Bypass	webapps	PHP
2013-07-01	[Portuguese] Simple Weevely Guide	papers	Linux
2013-07-01	AudioCoder (.lst) - Local Buffer Overflow (Metasploit)	local	Windows
2013-07-01	Adrenalin Player 2.2.5.3 - '.wvx' Local Buffer Overflow (SEH)	local	Windows
2013-07-01	VideoLAN VLC Media Player 2.0.7 - '.png' Crash (PoC)	dos	Windows
2013-07-01	Barracuda SSL VPN 680Vx 2.3.3.193 - Multiple Script Injection Vulnerabilities	webapps	Hardware
2013-07-01	Fortigate Firewalls - Cross-Site Request Forgery	webapps	Hardware
2013-07-01	Java Applet - ProviderSkeleton Insecure Invoke Method (Metasploit)	remote	Multiple
2013-07-01	GLPI 0.83.9 - 'Unserialize()' Remote Code Execution	webapps	PHP
2013-07-01	libvirt - 'virConnectListAllInterfaces' Method Denial of Service	dos	Linux
2013-07-01	FileCOPA FTP Server - Remote Denial of Service	dos	Multiple
2013-06-30	Bifrost 1.2.1 - Remote Buffer Overflow	remote	Windows
2013-06-30	Bifrost 1.2d - Remote Buffer Overflow	remote	Windows
2013-06-30	PCMan FTP Server 2.0 - Remote Buffer Overflow	remote	Windows
2013-06-30	eFile Wifi Transfer Manager 1.0 - Multiple Vulnerabilities	webapps	Hardware
2013-06-30	Atomy Maxsite - 'index.php' Arbitrary File Upload	webapps	PHP
2013-06-30	WordPress Plugin Xorbin Analog Flash Clock - 'widgetUrl' Cross-Site Scripting	webapps	PHP
2013-06-30	WordPress Plugin Xorbin Digital Flash Clock - 'widgetUrl' Cross-Site Scripting	webapps	PHP
2013-06-30	YardRadius - Multiple Local Format String Vulnerabilities	local	Windows
2013-06-29	Nameko - 'nameko.php' Cross-Site Scripting	webapps	PHP
2013-06-29	WordPress Plugin WP Private Messages - 'msgid' SQL Injection	webapps	PHP
2013-06-27	PCMan FTP Server 2.0.7 - Remote Buffer Overflow	remote	Windows
2013-06-27	[Turkish] Digital Satellite Receiver & Safety	papers	Hardware
2013-06-26	AudioCoder 0.8.22 - '.lst' Direct RETN Buffer Overflow	local	Windows
2013-06-26	e107 Advanced Medal System Plugin - SQL Injection	webapps	PHP
2013-06-26	Baby FTP Server 1.24 - Denial of Service (1)	dos	Windows
2013-06-26	ZPanel zsudo - Local Privilege Escalation (Metasploit)	local	Linux
2013-06-26	Novell Client 2 SP3 - 'nicm.sys' Local Privilege Escalation (Metasploit)	local	Windows_x86
2013-06-26	PHP-Charts 1.0 - 'index.php?type' Remote Code Execution	webapps	PHP
2013-06-26	FreeBSD 9 - Address Space Manipulation Privilege Escalation (Metasploit)	local	FreeBSD
2013-06-26	Oracle VM VirtualBox 4.0 - 'tracepath' Local Denial of Service	dos	Multiple
2013-06-26	Xaraya - Multiple Cross-Site Scripting Vulnerabilities	webapps	PHP
2013-06-26	Motion - Multiple Vulnerabilities	remote	Multiple
2013-06-25	Barnraiser Prairie - 'get_file.php' Directory Traversal	webapps	PHP
2013-06-24	TRENDnet TE100-P1U Print Server Firmware 4.11 - Authentication Bypass	webapps	Hardware
2013-06-24	Mediacoder (.lst) - Local Buffer Overflow (SEH)	local	Windows
2013-06-24	Mediacoder - '.m3u' Local Buffer Overflow (SEH)	local	Windows
2013-06-24	Mediacoder PMP Edition 0.8.17 - '.m3u' Local Buffer Overflow	local	Windows
2013-06-24	Top Games Script 1.2 - 'play.php?gid' SQL Injection	webapps	PHP
2013-06-24	Alienvault Open Source SIEM (OSSIM) 4.1 - Multiple SQL Injection Vulnerabilities	webapps	PHP
2013-06-24	phpEventCalendar 0.2.3 - Multiple Vulnerabilities	webapps	PHP
2013-06-24	aSc Timetables 2013 - Local Stack Buffer Overflow	local	Windows
2013-06-24	Collabtive 1.0 - 'manageuser.php' SQL Injection	webapps	PHP
2013-06-24	AudioCoder 0.8.22 - '.m3u' Direct RETN Buffer Overflow	local	Windows
2013-06-24	Seowonintech Devices - Remote Command Execution	remote	Hardware
2013-06-24	PEiD 0.95 - Memory Corruption (PoC)	dos	Windows
2013-06-24	PodHawk 1.85 - Arbitrary File Upload	webapps	PHP
2013-06-24	Linksys X3000 1.0.03 build 001 - Multiple Vulnerabilities	webapps	Hardware
2013-06-24	Elemata CMS RC3.0 - 'global.php?id' SQL Injection	webapps	PHP
2013-06-24	Novell Client 4.91 SP4 - 'nwfs.sys' Local Privilege Escalation (Metasploit)	local	Windows
2013-06-24	ZPanel 10.0.0.2 htpasswd Module - 'Username' Command Execution (Metasploit)	remote	Linux
2013-06-24	HP System Management Homepage - JustGetSNMPQueue Command Injection (Metasploit)	remote	Windows
2013-06-24	LibrettoCMS File Manager - Arbitrary File Upload (Metasploit)	remote	PHP
2013-06-24	MoinMoin - twikidraw Action Traversal Arbitrary File Upload (Metasploit)	remote	Linux
2013-06-24	FtpLocate - HTML Injection	webapps	CGI
2013-06-24	McAfee Data Loss Prevention - Multiple Information Disclosure Vulnerabilities	local	Windows
2013-06-21	GLPI 0.83.8 - Multiple Vulnerabilities	webapps	PHP
2013-06-21	Adrenalin Player 2.2.5.3 - '.asx' Local Buffer Overflow (SEH)	local	Windows
2013-06-21	FreeBSD 9.0 < 9.1 - 'mmap/ptrace' Local Privilege Escalation	local	FreeBSD
2013-06-19	[Turkish] Source Code Analysis at Web Applications - II	papers	Multiple
2013-06-19	imacs CMS 0.3.0 - Unrestricted Arbitrary File Upload	webapps	PHP
2013-06-19	TP-Link PS110U Print Server TL - Sensitive Information Enumeration	remote	Hardware
2013-06-19	Monkey CMS - Multiple Vulnerabilities	webapps	PHP
2013-06-19	MusicBee 2.0.4663 - '.m3u' Denial of Service	dos	Windows
2013-06-19	TP-Link TL-PS110U Print Server - 'tplink-enum.py' Security Bypass	remote	Hardware
2013-06-19	Joomla! Component com_rokdownloads - Arbitrary File Upload	webapps	PHP
2013-06-18	et-chat - Privilege Escalation / Arbitrary File Upload	webapps	PHP
2013-06-17	[Persian] Emperor Magazine #2	papers	Multiple
2013-06-17	[Persian] Emperor Magazine #3	papers	Multiple
2013-06-17	WordPress Plugin Ultimate WordPress Auction Plugin 1.0 - Cross-Site Request Forgery	webapps	PHP
2013-06-17	Fly-High CMS 2012-07-08 - Unrestricted Arbitrary File Upload	webapps	PHP
2013-06-17	Adrenalin Player 2.2.5.3 - '.wax' Local Buffer Overflow (SEH)	local	Windows
2013-06-17	Havalite CMS 1.1.7 - Unrestricted Arbitrary File Upload	webapps	PHP
2013-06-17	SPBAS Business Automation Software 2012 - Multiple Vulnerabilities	webapps	PHP
2013-06-17	Winamp 5.12 - '.m3u' Local Stack Buffer Overflow	local	Windows
2013-06-17	Simple File Manager 024 - Authentication Bypass	webapps	PHP
2013-06-17	BloofoxCMS - 'index.php' Arbitrary File Upload	webapps	PHP
2013-06-15	TaxiMonger for Android - 'name' HTML Injection	remote	Android
2013-06-15	ZamFoo - 'date' Remote Command Injection	webapps	PHP
2013-06-14	LibrettoCMS 2.2.2 - Arbitrary File Upload	webapps	PHP
2013-06-14	Easy LAN Folder Share 3.2.0.100 - Buffer Overflow	dos	Windows
2013-06-14	Monkey HTTP Daemon Mandril Security Plugin - Security Bypass	remote	Multiple
2013-06-13	AXIS Media Control 6.2.10.11 - Unsafe ActiveX Method	dos	Windows
2013-06-13	Airlive IP Cameras - Multiple Vulnerabilities	webapps	Hardware
2013-06-13	Microsoft Internet Explorer - COALineDashStyleArray Integer Overflow (MS13-009) (Metasploit)	remote	Windows
2013-06-12	Syslog Server 1.2.3 - Crash (PoC)	dos	Windows
2013-06-12	Ubiquiti airCam RTSP Service 1.1.5 - Buffer Overflow (PoC)	dos	Hardware
2013-06-12	Brickcom Multiple IP Cameras - Cross-Site Request Forgery	remote	Hardware
2013-06-12	Sony CH / DH Series IP Cameras - Multiple Cross-Site Request Forgery Vulnerabilities	remote	Hardware
2013-06-12	Grandstream Multiple IP Cameras - Cross-Site Request Forgery	remote	Hardware
2013-06-12	WordPress Plugin NextGEN Gallery - 'upload.php' Arbitrary File Upload	webapps	PHP
2013-06-11	Java - Web Start Double Quote Injection Remote Code Execution (Metasploit)	remote	Multiple
2013-06-11	WordPress Plugin WP-SendSms 1.0 - Multiple Vulnerabilities	webapps	PHP
2013-06-11	Weathermap 0.97c - 'mapname' Local File Inclusion	webapps	PHP
2013-06-11	NanoBB 0.7 - Multiple Vulnerabilities	webapps	PHP
2013-06-11	Buffalo WZR-HP-G300NH2 - Cross-Site Request Forgery	webapps	Hardware
2013-06-11	WinRadius 2.11 - Denial of Service	dos	Windows
2013-06-11	Linux Kernel < 3.8.9 (x86-64) - 'perf_swevent_init' Local Privilege Escalation (2)	local	Linux_x86-64
2013-06-11	Fobuc Guestbook 0.9 - SQL Injection	webapps	PHP
2013-06-11	Sami FTP Server 2.0.1 - RETR Denial of Service	dos	Windows
2013-06-11	Synactis PDF In-The-Box - ConnectToSynactic Stack Buffer Overflow (Metasploit)	remote	Windows
2013-06-11	Java Applet - Driver Manager Privileged 'toString()' Remote Code Execution (Metasploit)	remote	Multiple
2013-06-11	Simple PHP Agenda 2.2.8 - 'edit_event.php?eventid' SQL Injection	webapps	PHP
2013-06-11	mkCMS - 'index.php' Arbitrary PHP Code Execution	webapps	PHP

2013-06-10	Resin Application Server 4.0.36 - Source Code Disclosure	webapps	JSP
2013-06-10	MobileIron Virtual Smartphone Platform - Privilege Escalation	remote	Hardware
2013-06-10	Cisco ASA < 8.4.4.6 < 8.2.5.32 - Ethernet Information Leak	dos	Hardware
2013-06-10	Concrete5 CMS 5.6.1.2 - Multiple Vulnerabilities	webapps	PHP
2013-06-10	HP Insight Diagnostics - Remote Code Injection	webapps	PHP
2013-06-10	HP Insight Diagnostics 9.4.0.4710 - Local File Inclusion	webapps	PHP
2013-06-10	Lokboard - 'index_4.php' PHP Code Injection	webapps	PHP
2013-06-10	ScriptCase - 'scelta_categoria.php' SQL Injection	webapps	PHP
2013-06-09	Max Forum - Multiple Vulnerabilities	webapps	PHP
2013-06-09	WordPress Theme Ambience - 'src' Cross-Site Scripting	webapps	PHP
2013-06-07	Ruubikcms 1.1.1 - Persistent Cross-Site Scripting	webapps	PHP
2013-06-07	Asus RT56U 3.0.0.4.360 - Remote Command Injection	webapps	Hardware
2013-06-07	Microsoft Internet Explorer - textNode Use-After-Free (MS13-037) (Metasploit)	remote	Windows
2013-06-07	Windows 'Meterpreter'less Post Exploitation	papers	Windows
2013-06-07	PHP Ticket System Beta 1 - Cross-Site Request Forgery	webapps	PHP
2013-06-07	AfterLogic WebMail Lite PHP 7.0.1 - Cross-Site Request Forgery	webapps	PHP
2013-06-07	Quick TFTP Server Pro 2.2 - Denial of Service	dos	Windows
2013-06-07	[Hebrew] Digital Whisper Security Magazine #42	papers	Multiple
2013-06-07	Novell ZENworks Mobile Device Managment 2.6.1/2.7.0 - Local File Inclusion (Metasploit)	webapps	Windows
2013-06-07	Linux Kernel 3.3.5 - 'b43' Wireless Driver Privilege Escalation	local	Linux
2013-06-07	Caucho Resin - '/resin-admin/' URI Cross-Site Scripting	webapps	PHP
2013-06-07	Caucho Resin - 'index.php?logout' Cross-Site Scripting	webapps	PHP
2013-06-05	Seowonintech Routers fw: 2.3.9 - File Disclosure	webapps	Hardware
2013-06-05	NETGEAR WPN824v3 - Unauthorized Configuration Download	webapps	Hardware
2013-06-05	Exim - 'sender_address' Remote Code Execution	remote	Linux
2013-06-05	Cuppa CMS - '/alertConfigField.php' Local/Remote File Inclusion	webapps	PHP
2013-06-05	PEStudio 3.69 - Denial of Service	dos	Windows
2013-06-05	Ruubikcms 1.1.1 - 'tinybrowser.php?folder' Directory Traversal	webapps	PHP
2013-06-05	Apple Mac OSX Server - DirectoryService Buffer Overflow	dos	OSX
2013-06-05	MiniUPnPd 1.0 - Remote Stack Buffer Overflow Remote Code Execution (Metasploit)	remote	Linux
2013-06-05	DS3 Authentication Server - Multiple Vulnerabilities	webapps	Hardware
2013-06-05	Imperva SecureSphere Operations Manager 9.0.0.5 - Multiple Vulnerabilities	webapps	JSP
2013-06-05	NETGEAR DGN1000 / DGN2200 - Multiple Vulnerabilities	webapps	Hardware
2013-06-05	Oracle WebCenter Content - 'CheckOutAndOpen.dll' ActiveX Remote Code Execution (Metasploit)	remote	Windows
2013-06-05	Apache Struts - includeParams Remote Code Execution (Metasploit)	remote	Multiple
2013-06-05	Plesk < 9.5.4 - Remote Command Execution	remote	PHP
2013-06-05	Xpient - Cash Drawer Operation	remote	Hardware
2013-06-05	Apache Struts - OGNL Expression Injection	remote	Multiple
2013-06-05	QNAP VioStor NVR / QNAP NAS - Remote Code Execution	webapps	CGI
2013-06-05	Linux Kernel 3.0.5 - 'test_root()' Local Denial of Service	dos	Linux
2013-06-04	Telaen 2.7.x - Cross-Site Scripting	webapps	PHP
2013-06-04	Telaen 2.7.x - Open Redirection	webapps	PHP
2013-06-04	CMS Gratis Indonesia - 'config.php' PHP Code Injection	webapps	PHP
2013-06-04	MongoDB - 'conn' Mongo Object Remote Code Execution	remote	Multiple
2013-06-03	Microsoft Windows NT/2000/2003/2008/XP/Vista/7/8 - 'EPATHOBJ' Local Ring	local	Windows
2013-06-03	PHD Help Desk 2.12 - SQL Injection	webapps	PHP
2013-06-03	Telaen - Information Disclosure	webapps	PHP
2013-06-02	BOINC Manager (Seti@home) 7.0.64 - Field Buffer Overflow (SEH)	local	Windows
2013-05-31	PhpTax 0.8 - File Manipulation 'newvalue' / Remote Code Execution	webapps	PHP
2013-05-31	Lianja SQL 1.0.0RC5.1 - db_netserver Stack Buffer Overflow (Metasploit)	remote	Windows
2013-05-31	ModSecurity - Remote Null Pointer Dereference	dos	Multiple
2013-05-30	Logic Print 2013 - vTable Overwrite Stack Overflow	remote	Windows
2013-05-30	Intrasrv Simple Web Server 1.0 - Remote Code Execution (SEH)	remote	Windows
2013-05-30	Monkey HTTPd 1.1.1 - Crash (PoC)	dos	Linux
2013-05-29	CodeBlocks 12.11 (OSX) - Crash (PoC)	dos	OSX
2013-05-29	TP-Link WR842ND - Remote Multiple SSID Directory Traversals	webapps	Hardware
2013-05-29	YeaLink IP Phone Firmware 9.70.0.100 - Phone Call	webapps	Hardware
2013-05-29	TP-Link IP Cameras Firmware 1.6.18P12 - Multiple Vulnerabilities	webapps	Hardware
2013-05-29	MayGion IP Cameras Firmware 09.27 - Multiple Vulnerabilities	webapps	Hardware
2013-05-29	IBM SPSS SamplePower C1Tab - ActiveX Heap Overflow (Metasploit)	remote	Windows
2013-05-29	Zavio IP Cameras Firmware 1.6.03 - Multiple Vulnerabilities	webapps	Hardware
2013-05-29	Code::Blocks - Denial of Service	dos	Multiple
2013-05-29	HostBill - 'cpupdate.php' Authentication Bypass	webapps	PHP
2013-05-28	Nginx 1.3.9 < 1.4.0 - Chuncked Encoding Stack Buffer Overflow (Metasploit)	remote	Linux
2013-05-28	Elastix - Multiple Cross-Site Scripting Vulnerabilities	webapps	PHP
2013-05-28	Linux/x86 - Egghunter (0x5090) Shellcode (38 bytes)	shellcode	Linux_x86
2013-05-27	Barracuda SSL VPN 680 - 'returnTo' Open Redirection	remote	Hardware
2013-05-27	WordPress Plugin ADIF Log Search Widget - 'logbook_search.php' Cross-Site Scripting	webapps	PHP
2013-05-26	Vanilla Forums 2.0.18.8 - Multiple Vulnerabilities	webapps	PHP
2013-05-26	SIEMENS Solid Edge ST4/ST5 SEListCtrlX - ActiveX SetItemReadOnly Arbitrary Memory Rewrite Remote Code Execution	dos	Windows
2013-05-26	SIEMENS Solid Edge ST4/ST5 WebPartHelper - ActiveX RFMSsvs!JShellExecuteEx Remote Code Execution	remote	Windows
2013-05-26	SAS Integration Technologies Client 9.31_M1 'SASspk.dll' - Stack Overflow	dos	Windows
2013-05-26	HP LaserJet Pro P1606dn - Webadmin Password Reset	webapps	Hardware
2013-05-26	AVE.CMS 2.09 - 'index.php?module' Blind SQL Injection	webapps	PHP
2013-05-26	Fuzzing: An introduction to Sulley Framework	papers	Multiple
2013-05-26	Sony Playstation 3 (PS3) 4.31 - Save Game Preview '.SFO' Handling Local Command Execution	local	Hardware
2013-05-26	Trend Micro DirectPass 1.5.0.1060 - Multiple Software Vulnerabilities	dos	Windows
2013-05-26	WordPress Plugin User Role Editor 3.12 - Cross-Site Request Forgery	webapps	PHP
2013-05-26	Blackberry Z10 Research Primer - Dissecting Blackberry 10 - An Initial Analysis	papers	Hardware
2013-05-26	WordPress Plugin Spider Event Calendar 1.3.0 - Multiple Vulnerabilities	webapps	PHP
2013-05-26	WordPress Plugin Spider Catalog 1.4.6 - Multiple Vulnerabilities	webapps	PHP
2013-05-26	AdobeCollabSync - Local Buffer Overflow / Adobe Reader X Sandbox Bypass (Metasploit)	local	Windows
2013-05-26	RadioCMS 2.2 - 'menager.php?playlist_id' SQL Injection	webapps	PHP
2013-05-24	Matterdaddy Market - Multiple Vulnerabilities	webapps	PHP
2013-05-23	Weyal CMS - Multiple SQL Injections	webapps	PHP
2013-05-21	WordPress Plugin ProPlayer 4.7.9.1 - SQL Injection	webapps	PHP
2013-05-21	Kimai 0.9.2.1306-3 - SQL Injection	webapps	PHP
2013-05-21	Ophcrack 3.5.0 - Code Execution Local Buffer Overflow	local	Windows
2013-05-21	Linksys WRT160N v2 - 'apply.cgi' Remote Command Injection (Metasploit)	remote	Hardware
2013-05-21	D-Link DIR-615H - OS Command Injection (Metasploit)	remote	Hardware
2013-05-21	GAME ENGINES: A 0DAY’S TALE	papers	Windows
2013-05-21	Microsoft Windows - Win32k!EPATHOBJ::pprFlattenRec Uninitialized Next Pointer Testcase	dos	Windows
2013-05-19	Acme thttpd HTTP Server - Directory Traversal	remote	Linux
2013-05-18	Python RRDtool Module - Function Format String	remote	Multiple
2013-05-17	Drupal Module CKEditor < 4.1WYSIWYG (Drupal 6.x/7.x) - Persistent Cross-Site Scripting	webapps	PHP
2013-05-17	PHP-Charts 1.0 - Code Execution	webapps	PHP
2013-05-17	Linux/x86 - Reverse (192.168.1.10:31337/TCP) Shell Shellcode (92 bytes)	shellcode	Linux_x86
2013-05-17	Nginx 1.3.9 < 1.4.0 - Denial of Service (PoC)	dos	Linux
2013-05-17	Mutiny 5 - Arbitrary File Upload (Metasploit)	remote	Linux
2013-05-17	Exponent CMS 2.2.0 Beta 3 - Multiple Vulnerabilities	webapps	PHP
2013-05-16	WordPress Plugin Mail On Update - Cross-Site Request Forgery	webapps	PHP
2013-05-16	WordPress Plugin WP Cleanfix - Cross-Site Request Forgery	webapps	PHP
2013-05-15	Serva 32 TFTP 2.1.0 - Buffer Overflow (Denial of Service) (PoC)	dos	Windows
2013-05-15	WordPress Plugin wp-FileManager - 'path' Arbitrary File Download	webapps	PHP
2013-05-15	Jojo CMS - 'search' Cross-Site Scripting	webapps	PHP
2013-05-15	Jojo CMS - 'x-forwarded-for' HTTP header SQL Injection	webapps	PHP
2013-05-14	WordPress Plugin wp-FileManager - Arbitrary File Download	webapps	PHP
2013-05-14	Invision Power Board 1.x?/2.x/3.x - Admin Takeover	webapps	PHP
2013-05-14	WHMCS 4.x - 'invoicefunctions.php?id' SQL Injection	webapps	PHP
2013-05-14	Quick Search 1.1.0.189 - Buffer Overflow (SEH)	dos	Windows
2013-05-14	Linux Kernel 2.6.32 < 3.x (CentOS 5/6) - 'PERF_EVENTS' Local Privilege Escalation (1)	local	Linux
2013-05-14	SAP SOAP RFC - SXPG_CALL_SYSTEM Remote Command Execution (Metasploit)	remote	Multiple
2013-05-14	SAP SOAP RFC - SXPG_COMMAND_EXECUTE Remote Command Execution (Metasploit)	remote	Multiple
2013-05-14	Alienvault Open Source SIEM (OSSIM) 4.1.2 - Multiple SQL Injections	webapps	PHP
2013-05-14	ERS Viewer 2011 - '.ERS' File Handling Buffer Overflow (Metasploit)	local	Windows
2013-05-14	UMI CMS 2.9 - Cross-Site Request Forgery	webapps	PHP
2013-05-14	Linux Kernel < 3.8.x - open-time Capability 'file_ns_capable()' Local Privilege Escalation	local	Linux
2013-05-14	Gallery Server Pro - Arbitrary File Upload	webapps	PHP
2013-05-14	Open Flash Chart - 'get-data' Cross-Site Scripting	webapps	PHP
2013-05-13	Getsimple CMS 3.2.1 - Arbitrary File Upload	webapps	PHP

2013-05-13	Kloxo 6.1.6 - Local Privilege Escalation	local	Linux
2013-05-13	Microsoft Windows Media Player 11.0.0 - '.wav' Crash (PoC)	dos	Windows
2013-05-13	Ajax Availability Calendar 3.x - Multiple Vulnerabilities	webapps	PHP
2013-05-13	Joomla! Component com_s5clanroster - 'id' SQL Injection	webapps	PHP
2013-05-13	No-IP Dynamic Update Client (DUC) 2.1.9 - Local IP Address Stack Overflow	local	Linux
2013-05-13	Wireless Disk PRO 2.3 iOS - Multiple Vulnerabilities	webapps	iOS
2013-05-13	Wifi Photo Transfer 2.1/1.1 PRO - Multiple Vulnerabilities	webapps	Hardware
2013-05-13	Wifi Album 1.47 iOS - Command Injection	webapps	iOS
2013-05-13	Wireless Photo Access 1.0.10 iOS - Multiple Vulnerabilities	webapps	iOS
2013-05-13	SimpleTransfer 2.2.1 - Command Injection	webapps	Hardware
2013-05-13	File Lite 3.3/3.5 PRO iOS - Multiple Vulnerabilities	webapps	iOS
2013-05-13	MiniWeb HTTP Server 300 - Crash (PoC)	dos	Windows
2013-05-13	Adrenalin Player 2.2.5.3 - '.m3u' Local Buffer Overflow (SEH)	local	Windows
2013-05-11	Lan Messenger - sending PM 'UNICODE' Overwrite Buffer Overflow (SEH)	dos	Windows
2013-05-11	WordPress Plugin Securimage-WP - 'siwp_test.php' Cross-Site Scripting	webapps	PHP
2013-05-10	Securimage - 'example_form.php' Cross-Site Scripting	webapps	PHP
2013-05-08	MoinMoin - Arbitrary Command Execution	webapps	PHP
2013-05-08	ColdFusion 9-10 - Credential Disclosure	webapps	Multiple
2013-05-08	Hack The Planet (HTP) Zine 5	papers	eZine
2013-05-07	Microsoft Internet Explorer - CGenericElement Object Use-After-Free (Metasploit)	remote	Windows
2013-05-07	Cisco Linksys E4200 - Multiple Vulnerabilities	webapps	Hardware
2013-05-07	Huawei SNMPv3 Service - Multiple Buffer Overflow Vulnerabilities (PoC)	dos	Hardware
2013-05-07	AudioCoder - '.m3u' Local Buffer Overflow (Metasploit)	local	Windows
2013-05-07	Dovecot with Exim - 'sender_address' Remote Command Execution	remote	Linux
2013-05-07	b2evolution 4.1.6 - Multiple Vulnerabilities	webapps	PHP
2013-05-07	NetApp OnCommand System Manager - '/zapiServlet' CIFS Configuration Management Interface Multiple Cross-Site Scripting Vulnerabilities	webapps	PHP
2013-05-07	NetApp OnCommand System Manager - '/zapiServlet' User Management Interface Multiple Cross-Site Scripting Vulnerabilities	webapps	PHP
2013-05-07	MyBB Game Section Plugin - 'games.php' Multiple Cross-Site Scripting Vulnerabilities	webapps	PHP
2013-05-06	Social Site Generator 2.2 - Cross-Site Request Forgery (Add Admin)	webapps	PHP
2013-05-06	[Hebrew] Digital Whisper Security Magazine #41	papers	Multiple
2013-05-06	Craigslist Gold - SQL Injection	webapps	PHP
2013-05-06	Joomla! Component dj-classifieds 2.0 - Blind SQL Injection	webapps	PHP
2013-05-06	WeBid 1.0.6 - Multiple Vulnerabilities	webapps	PHP
2013-05-06	OpenDocMan 1.2.6.5 - Persistent Cross-Site Scripting	webapps	PHP
2013-05-06	D-Link DSL-320B - Multiple Vulnerabilities	webapps	Hardware
2013-05-04	ABBS Audio Media Player 3.1 - '.lst' Local Buffer Overflow	local	Windows
2013-05-02	AudioCoder 0.8.18 - Local Buffer Overflow (SEH)	local	Windows
2013-05-02	D-Link DNS-323 - Multiple Vulnerabilities	webapps	Hardware
2013-05-01	EggBlog 4.1.2 - Arbitrary File Upload	webapps	PHP
2013-05-01	Easy Icon Maker 5.01 - Crash (PoC)	dos	Windows
2013-05-01	FuzeZip 1.0.0.131625 - Local Buffer Overflow (SEH)	local	Windows
2013-05-01	WinArchiver 3.2 - Local Buffer Overflow (SEH)	local	Windows
2013-05-01	sudo 1.8.0 < 1.8.3p1 - 'sudo_debug' glibc FORTIFY_SOURCE Bypass + Privilege Escalation	local	Linux
2013-05-01	Syslog Watcher Pro 2.8.0.812 - 'Date' Cross-Site Scripting	dos	Windows
2013-05-01	phpMyAdmin - 'preg_replace' (Authenticated) Remote Code Execution (Metasploit)	remote	PHP
2013-05-01	WordPress Plugin W3 Total Cache - PHP Code Execution (Metasploit)	remote	PHP
2013-05-01	D-Link IP Cameras - Multiple Vulnerabilities	webapps	Hardware
2013-05-01	Vivotek IP Cameras - Multiple Vulnerabilities	webapps	Hardware
2013-05-01	WPS Office - 'Wpsio.dll' Stack Buffer Overflow	dos	Windows
2013-04-29	Ipswitch IMail 11.01 - Cross-Site Scripting	webapps	Windows
2013-04-29	Foe CMS 1.6.5 - Multiple Vulnerabilities	webapps	PHP
2013-04-27	Elecard MPEG Player - '.m3u' File Buffer Overflow	dos	Windows
2013-04-27	PHPValley Micro Jobs Site Script - Spoofing	webapps	PHP
2013-04-27	Cisco Linksys E4200 - '/apply.cgi' Multiple Cross-Site Scripting Vulnerabilities	remote	Hardware
2013-04-26	D-Link DIR-635 - Multiple Vulnerabilities	webapps	Hardware
2013-04-26	Joomla! 3.0.3 - 'remember.php' PHP Object Injection	webapps	PHP
2013-04-25	SAP ConfigServlet - Remote Payload Execution (Metasploit)	remote	Windows
2013-04-25	Light HTTPd 0.1 (Windows) - Remote Buffer Overflow	remote	Windows
2013-04-25	GroundWork - 'monarch_scan.cgi' OS Command Injection (Metasploit)	remote	Linux
2013-04-25	Hornbill Supportworks ITSM 1.0.0 - SQL Injection	webapps	PHP
2013-04-25	phpMyAdmin 3.5.8/4.0.0-RC2 - Multiple Vulnerabilities	webapps	PHP
2013-04-25	Belkin F5D8236-4 Router - Cross-Site Request Forgery	remote	Hardware
2013-04-24	TP-Link TL-WR1043N Router - Cross-Site Request Forgery	remote	Hardware
2013-04-24	WordPress Plugin WP Super Cache - PHP Remote Code Execution	webapps	PHP
2013-04-23	D-Link DIR-615 Rev D3 / DIR-300 Rev A - Multiple Vulnerabilities	webapps	Hardware
2013-04-23	Java Applet - Reflection Type Confusion Remote Code Execution (Metasploit)	remote	Multiple
2013-04-23	SMF - '/index.php' HTML Injection / Multiple PHP Code Injection Vulnerabilities	webapps	PHP
2013-04-23	Cisco Linksys WRT310N Router - Multiple Denial of Service Vulnerabilities	dos	Hardware
2013-04-22	Mikrotik Syslog Server for Windows 1.15 - Denial of Service (Metasploit)	dos	Windows
2013-04-22	Joomla! Component com_civicrm 4.2.2 - Remote Code Injection	webapps	PHP
2013-04-22	Flightgear 2.0/2.4 - Remote Format String	dos	Windows
2013-04-22	VoipNow 2.5 - Local File Inclusion	webapps	PHP
2013-04-22	NETGEAR DGN2200B - 'pppoe.cgi' Remote Command Execution (Metasploit)	remote	Hardware
2013-04-21	WordPress Theme Colormix - Multiple Vulnerabilities	webapps	PHP
2013-04-19	Nginx 0.6.x - Arbitrary Code Execution NullByte Injection	webapps	Multiple
2013-04-19	D-Link DIR-865L - Cross-Site Request Forgery	remote	Hardware
2013-04-19	Crafty Syntax Live Help 3.1.2 - Remote File Inclusion / Full Path Disclosure	webapps	PHP
2013-04-19	TP-Link TL-WR741N / TL-WR741ND Routers - Multiple Denial of Service Vulnerabilities	dos	Hardware
2013-04-18	Foxit Reader 5.4.3.x < 5.4.5.0124 - PDF XREF Parsing Denial of Service	dos	Windows
2013-04-18	SAP ConfigServlet - OS Command Execution (Metasploit)	remote	Multiple
2013-04-18	Oracle WebCenter Sites Satellite Server - HTTP Header Injection	webapps	Windows
2013-04-18	KrisonAV CMS 3.0.1 - Multiple Vulnerabilities	webapps	PHP
2013-04-18	Java Web Start Launcher ActiveX Control - Memory Corruption	dos	Windows
2013-04-18	Fork CMS - 'js.php' Local File Inclusion	webapps	PHP
2013-04-17	FirePHP Firefox Plugin 0.7.1 - Remote Command Execution	remote	Windows
2013-04-17	Sosci Survey - Multiple Vulnerabilities	webapps	PHP
2013-04-16	ZPanel - 'templateparser.class.php' Crafted Template Remote Command Execution	webapps	PHP
2013-04-16	Pwstore - Denial of Service	dos	Windows
2013-04-15	Vanilla Forums Van2Shout Plugin 1.0.51 - Multiple Cross-Site Request Forgery Vulnerabilities	webapps	PHP
2013-04-15	MinaliC WebServer 2.0.0 - Remote Buffer Overflow	remote	Windows
2013-04-15	CMSLogik 1.2.1 - Multiple Vulnerabilities	webapps	PHP
2013-04-15	phpVms Virtual Airline Administration 2.1.934/2.1.935 - SQL Injection	webapps	PHP
2013-04-15	Cisco Linksys EA2700 Router - Multiple Vulnerabilities	remote	Hardware
2013-04-15	Linux Kernel 3.2.1 - Tracing Multiple Local Denial of Service Vulnerabilities	dos	Linux
2013-04-14	Todoo Forum 2.0 - 'todooforum.php' Multiple Cross-Site Scripting Vulnerabilities	webapps	PHP
2013-04-14	Todoo Forum 2.0 - 'todooforum.php' Multiple SQL Injections	webapps	PHP
2013-04-13	Aibolit - Information Disclosure	webapps	Multiple
2013-04-12	Nagios Remote Plugin Executor - Arbitrary Command Execution (Metasploit)	remote	Linux
2013-04-12	KNet Web Server 1.04b - Stack Corruption Buffer Overflow	remote	Windows
2013-04-12	ircd-hybrid 8.0.5 - Denial of Service	dos	Linux
2013-04-12	Allied Telesyn TFTP (AT-TFTP) Server/Daemon 2.0 - Stack Buffer Overflow (Denial of Service) (PoC)	dos	Windows
2013-04-12	Free Monthly Websites 2.0 - Admin Password Change	webapps	PHP
2013-04-12	Simple HRM System 2.3 - Multiple Vulnerabilities	webapps	PHP
2013-04-12	D-Link DIR-645 / DIR-815 - 'diagnostic.php' Command Execution (Metasploit)	remote	Hardware
2013-04-11	WordPress Plugin Spider Video Player - 'theme' SQL Injection	webapps	PHP
2013-04-11	Request Tracker - 'ShowPending' SQL Injection	webapps	PHP
2013-04-10	BigAnt Server 2.97 - DDNF 'Username' Remote Buffer Overflow	remote	Windows
2013-04-10	Freefloat FTP Server 1.0 - DEP Bypass with ROP	remote	Windows
2013-04-10	Linksys WRT54GL - 'apply.cgi' Command Execution (Metasploit)	remote	Hardware
2013-04-10	Adobe ColdFusion APSB13-03 - Remote Multiple Vulnerabilities (Metasploit)	remote	Multiple
2013-04-10	WordPress Plugin Spiffy XSPF Player - 'playlist_id' SQL Injection	webapps	PHP
2013-04-10	Hero Framework - '/users/login?Username' Cross-Site Scripting	webapps	Java
2013-04-10	Hero Framework - '/users/forgot_password?error' Cross-Site Scripting	webapps	Java
2013-04-09	Sysax Multi Server 6.10 - SSH Denial of Service	dos	Windows
2013-04-09	ZAPms 1.41 - SQL Injection	webapps	PHP
2013-04-09	Foscam IP (Multiple Cameras) - Multiple Cross-Site Request Forgery Vulnerabilities	remote	Hardware
2013-04-09	EasyPHP - '/index.php' Authentication Bypass / Remote PHP Code Injection	webapps	PHP
2013-04-09	WordPress Plugin Traffic Analyzer - 'aoid' Cross-Site Scripting	webapps	PHP
2013-04-09	phpMyAdmin - 'tbl_gis_visualization.php' Multiple Cross-Site Scripting Vulnerabilities	webapps	PHP
2013-04-08	OTRS 3.x - FAQ Module Persistent Cross-Site Scripting	webapps	Multiple

2013-04-08	OpenCart - Cross-Site Request Forgery (Change User Password)	webapps	PHP
2013-04-08	Google AD Sync Tool - Exposure of Sensitive Information	local	Multiple
2013-04-08	Belkin Wemo - Arbitrary Firmware Upload	webapps	Hardware
2013-04-08	Novell GroupWise Untrusted Pointer Dereference Exploitation	papers	Windows
2013-04-08	D-Link - Multiple Vulnerabilities	webapps	Hardware
2013-04-08	Vanilla Forums 2-0-18-4 - SQL Injection	webapps	PHP
2013-04-08	TP-Link TD-8817 6.0.1 Build 111128 Rel.26763 - Cross-Site Request Forgery	webapps	Hardware
2013-04-08	HP System Management Homepage - Local Privilege Escalation (Metasploit)	local	Linux
2013-04-08	Groovy Media Player 3.2.0 - '.mp3' Buffer Overflow	dos	Windows
2013-04-08	NETGEAR DGN1000B - 'setup.cgi' Remote Command Execution (Metasploit)	remote	Hardware
2013-04-08	Sophos Web Protection Appliance 3.7.8.1 - Multiple Vulnerabilities	webapps	Linux
2013-04-08	PonyOS 0.4.99-mlp - Multiple Vulnerabilities	local	Linux
2013-04-08	WHMCompleteSolution (WHMCS) Group Pay Plugin 1.5 - 'grouppay.php?hash' SQL Injection	webapps	PHP
2013-04-08	MongoDB - nativeHelper.apply Remote Code Execution (Metasploit)	remote	Linux
2013-04-08	Linksys E1500/E2500 - 'apply.cgi' Remote Command Injection (Metasploit)	remote	Hardware
2013-04-08	HP System Management - Anonymous Access Code Execution (Metasploit)	remote	Linux
2013-04-08	Novell ZENworks Configuration Management 10 SP3/11 SP2 - Remote Execution (Metasploit)	remote	Multiple
2013-04-08	MongoDB 2.2.3 - nativeHelper.apply Remote Code Execution	remote	Linux
2013-04-07	HexChat 2.9.4 - Local Overflow	local	Windows
2013-04-05	Easy DVD Player 3.5.1 - libav 'libavcodec_plugin.dll' Denial of Service	dos	Windows
2013-04-05	Personal File Share 1.0 - Denial of Service	dos	Windows
2013-04-05	Apache Subversion 1.6.x - 'mod_dav_svn/lock.c' Remote Denial of Service	dos	Linux
2013-04-05	Apache Subversion - Remote Denial of Service	dos	Linux
2013-04-05	PHP Address Book - '/addressbook/register/delete_user.php?id' SQL Injection	webapps	PHP
2013-04-05	PHP Address Book - '/addressbook/register/edit_user.php?id' SQL Injection	webapps	PHP
2013-04-05	PHP Address Book - '/addressbook/register/edit_user_save.php' Multiple SQL Injections	webapps	PHP
2013-04-05	PHP Address Book - '/addressbook/register/linktick.php?site' SQL Injection	webapps	PHP
2013-04-05	PHP Address Book - '/addressbook/register/reset_password.php' Multiple SQL Injections	webapps	PHP
2013-04-05	PHP Address Book - '/addressbook/register/reset_password_save.php' Multiple SQL Injections	webapps	PHP
2013-04-05	PHP Address Book - '/addressbook/register/router.php?BasicLogin' Cookie SQL Injection	webapps	PHP
2013-04-05	PHP Address Book - '/addressbook/register/traffic.php?var' SQL Injection	webapps	PHP
2013-04-05	PHP Address Book - '/addressbook/register/user_add_save.php?email' SQL Injection	webapps	PHP
2013-04-05	PHP Address Book - '/addressbook/register/checklogin.php?Username' SQL Injection	webapps	PHP
2013-04-05	PHP Address Book - '/addressbook/register/admin_index.php?q' SQL Injection	webapps	PHP
2013-04-05	Zimbra - 'aspell.php' Cross-Site Scripting	webapps	PHP
2013-04-04	Google Chrome - Cookie Verification Denial of Service	dos	Multiple
2013-04-04	Mozilla Firefox - Cookie Verification Denial of Service	dos	Multiple
2013-04-04	Google Chrome 26.0.1410.43 (Webkit) - OBJECT Element Use-After-Free (PoC)	dos	OSX
2013-04-03	C2 WebResource - 'File' Cross-Site Scripting	webapps	ASP
2013-04-03	e107 - 'content_preset.php' Cross-Site Scripting	webapps	PHP
2013-04-03	Symphony - 'sort' SQL Injection	webapps	PHP
2013-04-03	FUDforum - Multiple Remote PHP Code Injection Vulnerabilities	webapps	PHP
2013-04-03	SmallFTPd - Denial of Service	dos	Windows
2013-04-02	CUDA Cracking	papers	Multiple
2013-04-02	VirtualDJ Pro/Home 7.3 - Local Buffer Overflow	local	Windows
2013-04-02	Pollen CMS 0.6 - 'index.php?p' Paramete' Local File Disclosure	webapps	PHP
2013-04-02	Network Weathermap 0.97a - 'editor.php' Persistent Cross-Site Scripting	webapps	PHP
2013-04-02	WordPress Plugin FuneralPress 1.1.6 - Persistent Cross-Site Scripting	webapps	PHP
2013-04-02	Aspen 0.8 - Directory Traversal	webapps	Multiple
2013-04-02	NETGEAR WNR1000 - Authentication Bypass	webapps	Hardware
2013-03-30	WordPress Plugin Feedweb - 'wp_post_id' Cross-Site Scripting	webapps	PHP
2013-03-29	Konftel 300IP SIP-based Conference Phone 2.1.2 - Remote Bypass Reboot	dos	Hardware
2013-03-29	KNet Web Server 1.04b - Remote Buffer Overflow (SEH)	remote	Windows
2013-03-29	SynConnect Pms - 'index.php?loginid' SQL Injection	webapps	PHP
2013-03-29	Draytek Vigor 3900 1.06 - Local Privilege Escalation	local	Hardware
2013-03-29	MailOrderWorks 5.907 - Multiple Vulnerabilities	webapps	Windows
2013-03-29	STUNSHELL (Web Shell) - PHP Remote Code Execution (Metasploit)	remote	PHP
2013-03-29	STUNSHELL (Web Shell) - Remote Code Execution (Metasploit)	remote	PHP
2013-03-29	Java CMM - Remote Code Execution (Metasploit)	remote	Windows
2013-03-29	v0pCr3w (Web Shell) - Remote Code Execution (Metasploit)	remote	Multiple
2013-03-29	AWS Xms 2.5 - 'importer.php?what' Directory Traversal	webapps	PHP
2013-03-29	McAfee Virtual Technician (MVT) 6.5.0.2101 - Insecure ActiveX Method	remote	Windows
2013-03-29	jPlayer - 'Jplayer.swf' Script Cross-Site Scripting	webapps	JSP
2013-03-28	[Spanish] Wireless Network Security	papers	Multiple
2013-03-27	PsychoStats 3.2.2b - 'awards.php' Blind SQL Injection	webapps	PHP
2013-03-27	ClipShare 4.1.1 - Multiples Vulnerabilities	webapps	PHP
2013-03-27	MyBB 1.6.6 - 'index.php?conditions[usergroup][]' SQL Injection	webapps	PHP
2013-03-27	MyBB 1.6.6 - 'index.php?conditions[usergroup][]' Cross-Site Scripting	webapps	PHP
2013-03-27	OrionDB Web Directory - Multiple Cross-Site Scripting Vulnerabilities	webapps	PHP
2013-03-26	WordPress Plugin Mathjax Latex 1.1 - Cross-Site Request Forgery	webapps	PHP
2013-03-26	ActFax 5.01 - RAW Server Buffer Overflow (Metasploit)	remote	Windows
2013-03-26	HP Intelligent Management Center - Arbitrary File Upload (Metasploit)	remote	Windows
2013-03-26	Rosewill RSVA11001 - Remote Command Injection	remote	Hardware
2013-03-26	IBM Lotus Domino 8.5.x - 'x.nsf' Multiple Cross-Site Scripting Vulnerabilities	remote	Multiple
2013-03-25	Hacking Trust Relationships Between SIP Gateways	papers	Multiple
2013-03-25	Free Hosting Manager 2.0.2 - Multiple SQL Injections	webapps	PHP
2013-03-25	IconCool MP3 WAV Converter 3.00 Build 120518 - Stack Buffer Overflow	dos	Windows
2013-03-25	ClipShare 4.1.1 - 'gid' Blind SQL Injection	webapps	PHP
2013-03-25	vBulletin 5.0.0 Beta 11 < 5.0.0 Beta 28 - SQL Injection	webapps	PHP
2013-03-25	Ra1NX PHP Bot - pubcall Authentication Bypass Remote Code Execution (Metasploit)	webapps	PHP
2013-03-25	LiquidXML Studio 2012 - ActiveX Insecure Method Executable File Creation	local	Windows
2013-03-25	LiquidXML Studio 2010 - ActiveX Code Execution	local	Windows
2013-03-25	Mitsubishi MX ActiveX Component 3 - 'ActUWzd.dll' 'WzTitle' Remote Heap Spray	remote	Windows
2013-03-25	KingView - Log File Parsing Buffer Overflow (Metasploit)	remote	Windows
2013-03-25	Mutiny - Remote Command Execution (Metasploit)	remote	Linux
2013-03-25	WordPress Plugin Banners Lite - 'wpbanners_show.php' HTML Injection	webapps	PHP
2013-03-25	Atmail WebMail - Message Attachment File Name Reflected Cross-Site Scripting	webapps	PHP
2013-03-25	Atmail WebMail - 'searchResultsTab5?filter' Reflected Cross-Site Scripting	webapps	PHP
2013-03-25	Atmail WebMail - 'INBOX.Trash?mailId' Reflected Cross-Site Scripting	webapps	PHP
2013-03-23	Jaow CMS - 'add_ons' Cross-Site Scripting	webapps	PHP
2013-03-22	StarVedia IPCamera IC502w IC502w+ v020313 - 'Username'/Password Disclosure	webapps	Hardware
2013-03-22	GnuTLS libgnutls - Double-Free Certificate List Parsing Remote Denial of Service	dos	Linux
2013-03-22	TP-Link TL-WR740N Wireless Router - Denial of Service	dos	Hardware
2013-03-22	WordPress Plugin IndiaNIC FAQs Manager 1.0 - Multiple Vulnerabilities	webapps	PHP
2013-03-22	WordPress Plugin IndiaNIC FAQs Manager 1.0 - Blind SQL Injection	webapps	PHP
2013-03-22	AContent 1.3 - Local File Inclusion	webapps	PHP
2013-03-22	Flatnux CMS 2013-01.17 - 'index.php' Local File Inclusion	webapps	PHP
2013-03-22	Slash CMS - Multiple Vulnerabilities	webapps	PHP
2013-03-22	Photodex ProShow Gold/Producer 5.0.3310/6.0.3410 - 'ScsiAccess.exe' Local Privilege Escalation	local	Windows
2013-03-22	Stradus CMS 1.0beta4 - Multiple Vulnerabilities	webapps	PHP
2013-03-22	Apache Struts - 'ParametersInterceptor' Remote Code Execution (Metasploit)	remote	Multiple
2013-03-22	Sami FTP Server - 'LIST' Buffer Overflow (Metasploit)	remote	Windows
2013-03-22	Cool PDF Image Stream - Remote Buffer Overflow (Metasploit)	remote	Windows
2013-03-22	OpenCart 1.5.5.1 - 'FileManager.php' Directory Traversal Arbitrary File Access	webapps	PHP
2013-03-20	EastFTP 4.6.02 - ActiveX Control	local	Windows
2013-03-19	WordPress Plugin Occasions 1.0.4 - Cross-Site Request Forgery	webapps	PHP
2013-03-19	WordPress Plugin Count Per Day 3.2.5 - 'counter.php' Cross-Site Scripting	webapps	PHP
2013-03-19	Verizon Fios Router MI424WR-GEN3I - Cross-Site Request Forgery	webapps	Hardware
2013-03-19	Rebus:list - 'list.php?list_id' SQL Injection	webapps	PHP
2013-03-19	ViewGit 0.0.6 - Multiple Cross-Site Scripting Vulnerabilities	webapps	PHP
2013-03-19	WordPress Plugin Occasions - Cross-Site Request Forgery	webapps	PHP
2013-03-19	BlazeVideo HDTV Player Standard - '.plf' File Remote Buffer Overflow	remote	Windows
2013-03-18	DaloRadius - Multiple Vulnerabilities	webapps	PHP
2013-03-18	WordPress Plugin Simply Poll 1.4.1 - Multiple Vulnerabilities	webapps	PHP
2013-03-18	Joomla! Component com_rsfiles - 'cid' SQL Injection	webapps	PHP
2013-03-15	aktiv-player 2.9.0 - Crash (PoC)	dos	Windows
2013-03-15	Cisco Video Surveillance Operations Manager 6.3.2 - Multiple Vulnerabilities	webapps	JSP
2013-03-15	Nitro Pro 8.0.3.1 - Crash (PoC)	dos	Windows
2013-03-15	WordPress Plugin LeagueManager 3.8 - SQL Injection	webapps	PHP
2013-03-15	ClipShare 4.1.4 - Multiple Vulnerabilities	webapps	PHP

2013-03-15	Open-Xchange Server 6 - Multiple Vulnerabilities	webapps	Java
2013-03-14	Petite Annonce - Cross-Site Scripting	webapps	PHP
2013-03-13	TagScanner 5.1 - Stack Buffer Overflow (PoC)	dos	Windows
2013-03-13	Web Cookbook - Multiple SQL Injections	webapps	PHP
2013-03-13	Cam2pc 4.6.2 - '.BMP' Image Processing Integer Overflow	dos	Windows
2013-03-13	Apache Rave 0.11 < 0.20 - User Information Disclosure	webapps	Multiple
2013-03-13	Honeywell HSC Remote Deployer - ActiveX Remote Code Execution (Metasploit)	remote	Windows
2013-03-13	Linux Kernel 3.7.10 (Ubuntu 12.10 x64) - 'sock_diag_handlers' Local Privilege Escalation (2)	local	Linux_x86-64
2013-03-13	Linux Kernel - 'SCTP_GET_ASSOC_STATS()' Stack Buffer Overflow (PoC)	dos	Linux
2013-03-13	QlikView - '.qvw' File Remote Integer Overflow	remote	Windows
2013-03-13	Cisco Video Surveillance Operations Manager - Multiple Vulnerabilities	remote	Hardware
2013-03-13	Linux Kernel 3.0 < 3.3.5 - 'CLONE_NEWUSER\|CLONE_FS' Local Privilege Escalation	local	Linux
2013-03-12	RubyGems fastreader - 'entry_controller.rb' Remote Command Execution	remote	Multiple
2013-03-12	Microsoft Silverlight - ScriptObject Unsafe Memory Access (MS13-022/MS13-087) (Metasploit)	local	Windows
2013-03-11	WordPress Plugin podPress - 'playerID' Cross-Site Scripting	webapps	PHP
2013-03-11	Privoxy Proxy - Authentication Information Disclosure	webapps	PHP
2013-03-11	KindEditor - Multiple Arbitrary File Upload Vulnerabilities	webapps	PHP
2013-03-11	PHPBoost - Arbitrary File Upload / Information Disclosure	webapps	PHP
2013-03-10	SWFupload - Multiple Content Spoofing / Cross-Site Scripting Vulnerabilities	webapps	PHP
2013-03-10	Asteriskguru Queue Statistics - 'warning' Cross-Site Scripting	webapps	PHP
2013-03-08	Your Own Classifieds - Cross-Site Scripting	webapps	PHP
2013-03-08	McAfee Vulnerability Manager - 'cert_cn' Cross-Site Scripting	remote	Multiple
2013-03-08	WordPress Plugin Terillion Reviews - Profile Id HTML Injection	webapps	PHP
2013-03-07	Qool CMS 2.0 RC2 - Multiple Vulnerabilities	webapps	PHP
2013-03-07	[Turkish] - Local File inclusion	papers	PHP
2013-03-07	CosCMS 1.721 - OS Command Injection	webapps	PHP
2013-03-07	mnoGoSearch 3.3.12 (search.cgi) - Arbitrary File Read	webapps	CGI
2013-03-07	MySQL / MariaDB - Geometry Query Denial of Service	dos	Linux
2013-03-06	Remote File Manager 1.2 iOS - Multiple Vulnerabilities	webapps	iOS
2013-03-06	Matrix42 Service Store - 'default.aspx' Cross-Site Scripting	webapps	ASP
2013-03-06	VMware Virtual Machine Communication Interface (VMCI) - 'vmci.sys'	local	Multiple
2013-03-05	Tunnelblick - Setuid Privilege Escalation (Metasploit)	local	OSX
2013-03-05	Viscosity - setuid-set ViscosityHelper Privilege Escalation (Metasploit)	local	OSX
2013-03-05	Kaspersky Internet Security 2013 - Denial of Service	dos	Windows
2013-03-05	WordPress Plugin Count Per Day - 'daytoshow' Cross-Site Scripting	webapps	PHP
2013-03-05	Varnish Cache - Multiple Denial of Service Vulnerabilities	dos	Multiple
2013-03-05	Squid - 'httpMakeVaryMark()' Remote Denial of Service	dos	Linux
2013-03-04	D-Link DSL-2740B ADSL Router - Authentication Bypass	webapps	Hardware
2013-03-04	Nconf 1.3 - Multiple SQL Injections	webapps	PHP
2013-03-04	HP Intelligent Management Center - 'topoContent.jsf' Cross-Site Scripting	webapps	Java
2013-03-02	Plogger - Multiple Input Validation Vulnerabilities	webapps	PHP
2013-03-01	Hanso Player 2.1.0 - '.m3u' Buffer Overflow	dos	Windows
2013-03-01	Sami FTP Server 2.0.1 - 'LIST' Buffer Overflow	remote	Windows
2013-03-01	[Hebrew] Digital Whisper Security Magazine #40	papers	Multiple
2013-03-01	Post XSS Exploitation: Advanced Attacks and Remedies	papers	Linux
2013-03-01	doorGets CMS - Cross-Site Request Forgery	webapps	PHP
2013-03-01	Piwigo 2.4.6 - Multiple Vulnerabilities	webapps	PHP
2013-03-01	PHP-Fusion 7.02.05 - Multiple Vulnerabilities	webapps	PHP
2013-03-01	Batavi - 'index.php' Cross-Site Scripting	webapps	PHP
2013-03-01	WordPress Plugin Uploader - 'blog' Cross-Site Scripting	webapps	PHP
2013-03-01	Foscam < 11.37.2.49 - Directory Traversal	remote	Hardware
2013-03-01	Question2Answer - Cross-Site Request Forgery	webapps	PHP
2013-02-28	rpi-update - Insecure Temporary File Handling / Security Bypass	local	Linux
2013-02-27	Joomla! 3.0.2 - 'highlight.php' PHP Object Injection	webapps	PHP
2013-02-27	WordPress Plugin Comment Rating 2.9.32 - Multiple Vulnerabilities	webapps	PHP
2013-02-27	From Write to root on AIX	papers	AIX
2013-02-27	Story of a Client-Side Attack	papers	Windows
2013-02-27	Linux Kernel 3.3.x < 3.7.x (Arch Linux x86-64) - 'sock_diag_handlers[]' Local Privilege Escalation (1)	local	Linux_x86-64
2013-02-27	Geeklog - Cross-Site Scripting	webapps	PHP
2013-02-26	Brewthology 0.1 - SQL Injection	webapps	PHP
2013-02-26	Abusing, Exploiting and Pwning with Firefox Add-ons	papers	Multiple
2013-02-26	Rix4Web Portal - Blind SQL Injection	webapps	PHP
2013-02-26	iOS IPMap 2.5 - Arbitrary File Upload	webapps	iOS
2013-02-26	MTP Image Gallery 1.0 - 'edit_photos.php?title' Cross-Site Scripting	webapps	PHP
2013-02-26	MTP Guestbook 1.0 - Multiple Cross-Site Scripting Vulnerabilities	webapps	PHP
2013-02-26	MTP Poll 1.0 - Multiple Cross-Site Scripting Vulnerabilities	webapps	PHP
2013-02-26	Kordil EDms 2.2.60rc3 - Arbitrary File Upload (Metasploit)	remote	PHP
2013-02-26	Glossword 1.8.8 < 1.8.12 - Arbitrary File Upload (Metasploit)	remote	PHP
2013-02-26	PolarPearCMS - Arbitrary '.PHP' File Upload (Metasploit)	remote	PHP
2013-02-26	WiFilet 1.2 iPad iPhone - Multiple Vulnerabilities	webapps	Hardware
2013-02-26	JForum - 'jforum.page' Multiple Cross-Site Scripting Vulnerabilities	webapps	JSP
2013-02-25	Java Applet JMX - Remote Code Execution (Metasploit) (2)	remote	Multiple
2013-02-25	WordPress Plugin Smart Flv - 'jwplayer.swf' Multiple Cross-Site Scripting Vulnerabilities	webapps	PHP
2013-02-25	phpMyRecipes - Multiple HTML Injection Vulnerabilities	webapps	PHP
2013-02-24	AirDrive HD 1.6 iPad iPhone - Multiple Vulnerabilities	webapps	Hardware
2013-02-24	Linux Kernel 3.3 < 3.8 (Ubuntu / Fedora 18) - 'sock_diag_handlers()' Local Privilege Escalation (3)	local	Linux
2013-02-23	Microsoft Internet Explorer - SLayoutRun Use-After-Free (MS13-009) (Metasploit) (2)	remote	Windows
2013-02-23	Photodex ProShow Producer - Multiple DLL Loading Arbitrary Code Execution Vulnerabilities	remote	Windows
2013-02-23	File Manager - HTML Injection / Local File Inclusion	webapps	PHP
2013-02-21	Web Cookbook - Multiple Vulnerabilities	webapps	PHP
2013-02-21	RTTucson Quotations Database Script - Authentication Bypass	webapps	PHP
2013-02-21	Alt-N MDaemon 12.5.6/13.0.3 - Email Body HTML/JS Injection	webapps	Windows
2013-02-21	Alt-N MDaemon WorldClient 13.0.3 - Multiple Vulnerabilities	webapps	Windows
2013-02-21	glFusion 1.2.2 - Multiple Cross-Site Scripting Vulnerabilities	webapps	PHP
2013-02-21	PHPMyRecipes 1.2.2 - 'viewrecipe.php?r_id' SQL Injection	webapps	PHP
2013-02-21	PHPmyGallery 1.5 - Local File Disclosure / Cross-Site Scripting	webapps	PHP
2013-02-21	OpenEMR - 'site' Cross-Site Scripting	webapps	PHP
2013-02-20	RTTucson Quotations Database - Multiple Vulnerabilities	webapps	PHP
2013-02-20	CloudFlare vs Incapsula vs ModSecurity	papers	Multiple
2013-02-20	Microsoft Office 2010 - Download Execute	remote	Windows
2013-02-20	BigAnt Server 2.97 - SCH / DUPF Buffer Overflow (Metasploit)	remote	Windows
2013-02-20	BigAnt Server 2.97 - DUPF Command Arbitrary File Upload (Metasploit)	remote	Windows
2013-02-20	OpenEMR - Arbitrary '.PHP' File Upload (Metasploit)	remote	PHP
2013-02-20	CKEditor 4.0.1 - Multiple Vulnerabilities	webapps	PHP
2013-02-20	WordPress Plugin Pretty Link - Cross-Site Scripting	webapps	PHP
2013-02-20	ZenPhoto - 'index.php' SQL Injection	webapps	PHP
2013-02-20	ZeroClipboard 1.9.x - 'id' Cross-Site Scripting	webapps	PHP
2013-02-19	Piwigo 2.4.6 - '/install.php' Arbitrary File Read/Delete	webapps	PHP
2013-02-19	Squirrelcart - 'table' Cross-Site Scripting	webapps	PHP
2013-02-19	CKEditor - 'posteddata.php' Cross-Site Scripting	webapps	PHP
2013-02-18	NETGEAR DGN2200B - Multiple Vulnerabilities	webapps	Hardware
2013-02-18	Scripts Genie Pet Rate Pro - Multiple Vulnerabilities	webapps	PHP
2013-02-18	Cometchat Application - Multiple Vulnerabilities	webapps	PHP
2013-02-18	Scripts Genie Hot Scripts Clone - 'showcategory.php?cid' SQL Injection	webapps	PHP
2013-02-18	USB Sharp 1.3.4 iPad iPhone - Multiple Vulnerabilities	webapps	Hardware
2013-02-18	MIMEsweeper For SMTP - Multiple Cross-Site Scripting Vulnerabilities	webapps	ASP
2013-02-18	Alt-N MDaemon WorldClient And WebAdmin - Cross-Site Request Forgery	remote	Windows
2013-02-17	Scripts Genie Gallery Personals - 'gallery.php?L' SQL Injection	webapps	PHP
2013-02-17	Scripts Genie Domain Trader - 'catalog.php?id' SQL Injection	webapps	PHP
2013-02-17	SAP NetWeaver Message Server - Multiple Vulnerabilities	dos	Windows
2013-02-17	Scripts Genie Games Site Script - 'index.php?id' SQL Injection	webapps	PHP
2013-02-17	Scripts Genie Top Sites - 'out.php?id' SQL Injection	webapps	PHP
2013-02-15	Edimax EW-7206-APg and EW-7209APg - Multiple Vulnerabilities	webapps	Hardware
2013-02-15	TP-Link TL-WA701N / TL-WA701ND - Multiple Vulnerabilities	webapps	Hardware
2013-02-15	Photodex ProShow Producer 5.0.3297 - '.pxs' Memory Corruption	local	Windows
2013-02-15	Cometchat - Multiple Vulnerabilities	webapps	PHP
2013-02-15	ChillyCMS 1.3.0 - Multiple Vulnerabilities	webapps	PHP
2013-02-14	A Short Guide on ARM Exploitation	papers	ARM
2013-02-14	Polycom HDX - Telnet Authentication Bypass (Metasploit)	remote	Hardware
2013-02-14	Microsoft Internet Explorer - SLayoutRun Use-After-Free (MS13-009) (Metasploit) (1)	remote	Windows

2013-02-14	SonicWALL Scrutinizer 9.5.2 - SQL Injection	webapps	Windows
2013-02-14	Transferable Remote 1.1 iPad iPhone - Multiple Vulnerabilities	webapps	Hardware
2013-02-14	OpenPLI 3.0 Beta (OpenPLi-beta-dm7000-20130127-272) - Multiple Vulnerabilities	webapps	Hardware
2013-02-14	Raidsonic IB-NAS5220 and IB-NAS4220-B - Multiple Vulnerabilities	webapps	Hardware
2013-02-14	SonicWALL OEM Scrutinizer 9.5.2 - Multiple Vulnerabilities	webapps	Windows
2013-02-14	Ultra Light Forum - Persistent Cross-Site Scripting	webapps	PHP
2013-02-14	Foxit Reader Plugin - URL Processing Buffer Overflow (Metasploit)	remote	Windows
2013-02-14	Dell SonicWALL Scrutinizer - Multiple HTML Injection Vulnerabilities	remote	Multiple
2013-02-14	WordPress Plugin NextGEN Gallery - Full Path Disclosure	webapps	PHP
2013-02-13	OpenEMR 4.1.1 - 'ofc_upload_image.php' Arbitrary File Upload	webapps	PHP
2013-02-12	VMware OVF Tools - Format String (Metasploit) (2)	remote	Windows
2013-02-12	Novell Groupwise Client - 'gwcls1.dll' ActiveX Remote Code Execution (Metasploit)	remote	Windows
2013-02-12	osCommerce - Cross-Site Request Forgery	webapps	PHP
2013-02-12	BlackNova Traders - 'news.php' SQL Injection	webapps	PHP
2013-02-12	Sonar - Multiple Cross-Site Scripting Vulnerabilities	webapps	PHP
2013-02-11	Linksys E1500/E2500 - Multiple Vulnerabilities	webapps	Hardware
2013-02-11	Linksys WAG200G - Multiple Vulnerabilities	webapps	Hardware
2013-02-11	D-Link DIR-615 Rev H - Multiple Vulnerabilities	webapps	Hardware
2013-02-11	Linksys WRT160N - Multiple Vulnerabilities	webapps	Hardware
2013-02-11	Freefloat FTP Server 1.0 - 'Raw' Remote Buffer Overflow	remote	Windows
2013-02-11	IRIS Citations Management Tool - (Authenticated) Remote Command Execution	webapps	PHP
2013-02-11	IP.Gallery 4.2.x/5.0.x - Persistent Cross-Site Scripting	webapps	PHP
2013-02-11	Manipulating Memory for Fun & Profit	papers	Windows
2013-02-11	TP-Link - Admin Panel Multiple Cross-Site Request Forgery Vulnerabilities	webapps	Hardware
2013-02-11	Air Disk Wireless 1.9 iPad iPhone - Multiple Vulnerabilities	webapps	Hardware
2013-02-11	Microsoft Windows - HWND_BROADCAST (PoC) (MS13-005)	dos	Windows
2013-02-11	Google Chrome - Silent HTTP Authentication	dos	Multiple
2013-02-11	cURL - Buffer Overflow (PoC)	dos	Linux
2013-02-10	KMPlayer - Denial of Service	dos	Windows
2013-02-10	Easy Live Shop System - SQL Injection	webapps	PHP
2013-02-10	Schneider Electric Accutech Manager - Heap Overflow (PoC)	dos	Windows
2013-02-09	WordPress Theme Pinboard - 'tab' Cross-Site Scripting	webapps	PHP
2013-02-08	TP-Link TL-WR2543ND Router - Admin Panel Multiple Cross-Site Request Forgery Vulnerabilities	remote	Hardware
2013-02-07	Cool PDF Reader 3.0.2.256 - Buffer Overflow	dos	Windows
2013-02-07	NETGEAR DGN1000B - Multiple Vulnerabilities	webapps	Hardware
2013-02-07	CubeCart 5.2.0 - 'cubecart.class.php' PHP Object Injection	webapps	PHP
2013-02-07	WirelessFiles 1.1 iPad iPhone - Multiple Vulnerabilities	webapps	Hardware
2013-02-07	ActFax 5.01 - RAW Server (Metasploit)	remote	Windows
2013-02-06	VMware OVF Tools - Format String (Metasploit) (1)	remote	Windows
2013-02-06	Hiverr 2.2 - Multiple Vulnerabilities	webapps	PHP
2013-02-06	ezStats2 - 'style.php' Local File Inclusion	webapps	PHP
2013-02-06	ezStats for Battlefield 3 - '/ezStats2/compare.php' Multiple Cross-Site Scripting Vulnerabilities	webapps	PHP
2013-02-06	WordPress Plugin CommentLuv - '_ajax_nonce' Cross-Site Scripting	webapps	PHP
2013-02-06	WordPress Plugin Wysija Newsletters - Multiple SQL Injections	webapps	PHP
2013-02-06	xNBD - '/tmp/xnbd.log' Insecure Temporary File Handling	local	Linux
2013-02-06	Verax NMS - Multiple Method Authentication Bypass	webapps	Multiple
2013-02-05	[Hebrew] Digital Whisper Security Magazine #39	papers	Multiple
2013-02-05	Opera SVG - Use-After-Free	dos	Windows
2013-02-05	Cisco Unity Express - Multiple Vulnerabilities	webapps	JSP
2013-02-05	FreeBSD 9.1 - 'ftpd' Remote Denial of Service	dos	FreeBSD
2013-02-05	ArrowChat 1.5.61 - Multiple Vulnerabilities	webapps	PHP
2013-02-05	AdaptCMS 2.0.4 - 'config.php?question' SQL Injection	webapps	PHP
2013-02-05	D-Link DIR-600 / DIR-300 (Rev B) - Multiple Vulnerabilities	webapps	Hardware
2013-02-05	Free Monthly Websites 2.0 - Multiple Vulnerabilities	webapps	PHP
2013-02-05	Portable UPnP SDK - 'unique_service_name()' Remote Code Execution (Metasploit)	remote	Unix
2013-02-05	glossword 1.8.12 - Multiple Vulnerabilities	webapps	PHP
2013-02-05	Glossword 1.8.3 - SQL Injection	webapps	PHP
2013-02-05	Oracle Automated Service Manager 1.3 - Installation Privilege Escalation	local	Linux
2013-02-05	Linux Kernel 2.6.32-5 (Debian 6.0.5) - '/dev/ptmx' Key Stroke Timing Local Disclosure	local	Linux
2013-02-04	Simple Machine Forum 2.0.x < 2.0.4 - File Disclosure / Directory Traversal	webapps	PHP
2013-02-04	EasyITSP - 'voicemail.php' Directory Traversal	webapps	PHP
2013-02-02	WordPress Theme flashnews - Multiple Input Validation Vulnerabilities	webapps	PHP
2013-02-02	CADA 3S CoDeSys Gateway Server - Directory Traversal (Metasploit)	local	Windows
2013-02-01	DataLife Engine - 'preview.php' PHP Code Injection (Metasploit)	remote	PHP
2013-01-31	NETGEAR SPH200D - Multiple Vulnerabilities	webapps	Hardware
2013-01-31	D-Link DCS Cameras - Multiple Vulnerabilities	webapps	Hardware
2013-01-31	Buffalo TeraStation TS-Series - Multiple Vulnerabilities	webapps	Hardware
2013-01-31	Novell Groupwise Client 8.0 - Multiple Remote Code Execution Vulnerabilities	remote	Multiple
2013-01-31	WordPress Plugin Audio Player - 'playerID' Cross-Site Scripting	webapps	PHP
2013-01-31	Firebird - Relational Database CNCT Group Number Buffer Overflow (Metasploit)	local	Windows
2013-01-29	Ruby on Rails - JSON Processor YAML Deserialization Code Execution (Metasploit)	remote	Multiple
2013-01-29	Fortinet FortiMail 400 IBE - Multiple Vulnerabilities	webapps	Hardware
2013-01-29	Kohana Framework 2.3.3 - Directory Traversal	webapps	PHP
2013-01-29	Apple Quick Time Player (Windows) 7.7.3 - Out of Bound Read	dos	Windows
2013-01-29	pfSense UTM Platform 2.0.1 - Cross-Site Scripting	webapps	FreeBSD
2013-01-29	Multiple Hunt CCTV - Information Disclosure	remote	Multiple
2013-01-28	Microsoft Internet Explorer 8/9 - Steal Any Cookie	webapps	Windows
2013-01-28	PHP weby directory software 1.2 - Multiple Vulnerabilities	webapps	PHP
2013-01-28	DataLife Engine 9.7 - 'preview.php' PHP Code Injection	webapps	PHP
2013-01-25	WordPress Plugin SolveMedia 1.1.0 - Cross-Site Request Forgery	webapps	PHP
2013-01-25	ImageCMS 4.0.0b - Multiple Vulnerabilities	webapps	PHP
2013-01-25	Microsoft Windows - Manage Memory Payload Injection (Metasploit)	local	Windows
2013-01-25	PHPWeby Free Directory Script - 'contact.php' Multiple SQL Injections	webapps	PHP
2013-01-25	iCart Pro - 'section' SQL Injection	webapps	PHP
2013-01-24	Java Applet - Method Handle Remote Code Execution (Metasploit)	remote	Multiple
2013-01-24	Java Applet - AverageRangeStatisticImpl Remote Code Execution (Metasploit)	remote	Java
2013-01-24	ZoneMinder Video Server - packageControl Command Execution (Metasploit)	remote	Unix
2013-01-24	Windows (2000/XP/7) - URLDownloadToFile(http://bflow.security-portal.cz/down/xy.txt) + WinExec() + ExitProcess Shellcode	shellcode	Windows
2013-01-24	Aloaha PDF Crypter (3.5.0.1164) - ActiveX Arbitrary File Overwrite	dos	Windows
2013-01-24	SQLiteManager 1.2.4 - Remote PHP Code Injection	webapps	Multiple
2013-01-24	SonicWALL Gms 6 - Arbitrary File Upload (Metasploit)	remote	Multiple
2013-01-24	Novell eDirectory 8 - Remote Buffer Overflow (Metasploit)	remote	Multiple
2013-01-24	WordPress Plugin WP-Table Reloaded - 'id' Cross-Site Scripting	webapps	PHP
2013-01-23	gpEasy CMS - 'section' Cross-Site Scripting	webapps	PHP
2013-01-23	WordPress Theme Chocolate WP - Multiple Vulnerabilities	webapps	PHP
2013-01-22	WordPress Plugin Developer Formatter - Cross-Site Request Forgery	webapps	PHP
2013-01-22	Adult WebMaster Script - Password Disclosure	webapps	PHP
2013-01-22	DigiLIBE - Execution-After-Redirect Information Disclosure	webapps	PHP
2013-01-22	Perforce P4Web - Multiple Cross-Site Scripting Vulnerabilities	webapps	JSP
2013-01-21	NConf 1.3 - '/detail.php/detail_admin_items.php?id' SQL Injection	webapps	PHP
2013-01-21	NConf 1.3 - Arbitrary File Creation	webapps	PHP
2013-01-21	Jenkins - Script-Console Java Execution (Metasploit)	remote	Multiple
2013-01-21	PHP-Charts 1.0 - PHP Code Execution (Metasploit)	remote	PHP
2013-01-21	GNU Coreutils 'sort' Text Utility - Local Buffer Overflow	local	Linux
2013-01-21	F5 Networks BIG-IP - XML External Entity Injection	remote	Hardware
2013-01-20	Aloaha Credential Provider Monitor 5.0.226 - Local Privilege Escalation	local	Windows
2013-01-20	Scripts Genie Classified Ultra - SQL Injection / Cross-Site Scripting	webapps	PHP
2013-01-19	Joomla! Component com_collector - Arbitrary File Upload	webapps	PHP
2013-01-19	WordPress Plugin Ripe HD FLV Player - SQL Injection	webapps	PHP
2013-01-18	PHP-Charts - Arbitrary PHP Code Execution	webapps	PHP
2013-01-18	Linksys WRT54GL Firmware 4.30.15 build 2 - Multiple Vulnerabilities	webapps	Hardware
2013-01-18	SonicWALL GMS/Viewpoint/Analyzer - Authentication Bypass	webapps	Multiple
2013-01-18	SonicWALL GMS/VIEWPOINT 6.x Analyzer 7.x - Remote Command Execution	webapps	Multiple
2013-01-18	Novell NCP - Remote Command Execution	remote	Linux
2013-01-18	Jenkins CI Script Console - Command Execution (Metasploit)	remote	Multiple
2013-01-18	Nvidia Display Driver Service (Nsvr) - Local Buffer Overflow	local	Windows
2013-01-18	Apache OFBiz 10.4.x - Multiple Cross-Site Scripting Vulnerabilities	remote	Multiple
2013-01-17	Invision Gallery 2.0.5 - SQL Injection	webapps	PHP
2013-01-17	IP.Gallery - 'img' SQL Injection	webapps	PHP
2013-01-16	Detecting System Intrusions	papers	Multiple

2013-01-16	Cydia Repo Manager - Cross-Site Request Forgery	webapps	PHP
2013-01-16	Oracle Application Framework - Diagnostic Mode Bypass	webapps	JSP
2013-01-16	Nagios3 - 'history.cgi' Host Command Execution (Metasploit)	remote	Linux
2013-01-15	[Turkish] Pen-Tester's Guide for Metasploit Framework	papers	Multiple
2013-01-15	freeSSHd 1.2.6 - Authentication Bypass (Metasploit)	remote	Windows
2013-01-15	CMS snews - SQL Injection	webapps	PHP
2013-01-15	phpLiteAdmin - 'table' SQL Injection	webapps	PHP
2013-01-14	phpShop 2.0 - SQL Injection	webapps	PHP
2013-01-14	DOMSDAY - Analyzing a Dom-Based XSS in Yahoo!	papers	Windows
2013-01-14	Serva 2.0.0 - DNS Server QueryName Remote Denial of Service	dos	Windows
2013-01-14	Serva 2.0.0 - HTTP Server GET Remote Denial of Service	dos	Windows
2013-01-13	Nagios3 - 'history.cgi' Remote Command Execution	remote	Multiple
2013-01-13	Stack Smashing On A Modern Linux System	papers	Linux
2013-01-13	phlyLabs phlyMail Lite 4.03.04 - 'go' Open Redirect	webapps	PHP
2013-01-13	phlyLabs phlyMail Lite 4.03.04 - Full Path Disclosure / Persistent Cross-Site Scripting	webapps	PHP
2013-01-11	PHPLiteAdmin 1.9.3 - Remote PHP Code Injection	webapps	PHP
2013-01-11	Java Applet JMX - Remote Code Execution (Metasploit) (1)	remote	Java
2013-01-11	Microsoft Lync 2010 4.0.7577.0 - User-Agent Header Handling Arbitrary Command Execution	remote	Windows
2013-01-10	Microsoft Internet Explorer 8 - Fixed Col Span ID (Full ASLR + DEP Bypass) (MS12-037)	remote	Windows
2013-01-10	eXtplorer 2.1 - Arbitrary File Upload (Metasploit)	remote	PHP
2013-01-10	Ruby on Rails - XML Processor YAML Deserialization Code Execution (Metasploit)	remote	Multiple
2013-01-10	Microsoft Internet Explorer - Option Element Use-After-Free (MS11-081) (Metasploit)	remote	Windows
2013-01-10	Honeywell Tema Remote Installer - ActiveX Remote Code Execution (Metasploit)	remote	Windows
2013-01-10	Nero MediaHome 4.5.8.0 - Denial of Service	dos	Windows
2013-01-10	Colloquy 1.3.5/1.3.6 - Denial of Service	dos	Hardware
2013-01-10	WordPress Plugin Gallery - 'filename_1' Arbitrary File Access	webapps	PHP
2013-01-09	WebsiteBaker Addon Concert Calendar 2.1.4 - Multiple Vulnerabilities	webapps	PHP
2013-01-09	Free Blog 1.0 - Multiple Vulnerabilities	webapps	PHP
2013-01-09	Watson Management Console 4.11.2.G - Directory Traversal	webapps	Hardware
2013-01-09	Inmatrix Ltd. Zoom Player 8.5 - '.jpeg'File Memory Corruption / Arbitrary Code Execution	local	Windows
2013-01-09	WeBid 1.0.6 - SQL Injection	webapps	PHP
2013-01-09	Schmid Watson Management Console - Directory Traversal	remote	Linux
2013-01-09	Prizm Content Connect - Arbitrary File Upload	webapps	PHP
2013-01-09	Dell OpenManage Server Administrator - Cross-Site Scripting	remote	Multiple
2013-01-09	tinybrowser - 'type' Cross-Site Scripting	webapps	PHP
2013-01-09	TinyBrowser - 'tinybrowser.php' Directory Listing	webapps	PHP
2013-01-09	TinyBrowser - 'edit.php' Directory Listing	webapps	PHP
2013-01-09	Samsung Kies - Remote Buffer Overflow	remote	Windows
2013-01-09	Quick.CMS / Quick.Cart - Cross-Site Scripting	webapps	PHP
2013-01-09	Colloquy - Remote Denial of Service	dos	Multiple
2013-01-08	IBM Cognos - 'tm1admsd.exe' Remote Overflow (Metasploit)	remote	Windows
2013-01-08	E Sms Script - Multiple SQL Injections	webapps	PHP
2013-01-08	Advantech Webaccess HMI/SCADA Software - Persistence Cross-Site Scripting	webapps	ASP
2013-01-08	WordPress Plugin Google Document Embedder - Arbitrary File Disclosure (Metasploit)	webapps	PHP
2013-01-08	[French] Une simple Exploitation de vulnérabilité Format String	papers	Unix
2013-01-08	MotoCMS - 'admin/data/users.xml' Access Restriction / Information Disclosure	webapps	PHP
2013-01-08	Joomla! Component com_incapsula - Multiple Cross-Site Scripting Vulnerabilities	webapps	PHP
2013-01-08	WordPress Plugin NextGEN Gallery - 'test-head' Cross-Site Scripting	webapps	PHP
2013-01-08	BT Home Hub - 'uuid' Buffer Overflow	dos	Multiple
2013-01-08	Mozilla Firefox < 17.0.1 - Flash Privileged Code Injection (Metasploit)	local	Multiple
2013-01-07	Foxit Reader 5.4.4.1128 Firefox Plugin - 'npFoxitReaderPlugin.dll' Stack Buffer Overflow (PoC)	dos	Windows
2013-01-07	Ettercap 0.7.5.1 - Stack Overflow	dos	Unix
2013-01-07	Movable Type 4.2x/4.3x - Web Upgrade Remote Code Execution (Metasploit)	remote	Multiple
2013-01-07	Facebook for Android - 'LoginActivity' Information Disclosure	remote	Android
2013-01-06	[Spanish] Hashcat Manual de Usuario	papers	Multiple
2013-01-06	FoxPlayer 2.9.0 - Denial of Service	dos	Windows
2013-01-06	Nexpose Security Console - Cross-Site Request Forgery	webapps	Multiple
2013-01-06	Havalite CMS - 'comment' HTML Injection	webapps	PHP
2013-01-05	pfSense 2.0.1 - Cross-Site Scripting / Cross-Site Request Forgery / Remote Command Execution	webapps	PHP
2013-01-04	Simple Web Server 2.3-rc1 - Directory Traversal	webapps	Windows
2013-01-04	Enterasys NetSight - 'nssyslogd.exe' Remote Buffer Overflow (Metasploit)	remote	Windows
2013-01-04	MyBB Profile Wii Friend Code - Multiple Vulnerabilities	webapps	PHP
2013-01-04	Multiple WordPress WPScientist Themes - Arbitrary File Upload	webapps	PHP
2013-01-04	TomatoCart - 'json.php' Security Bypass	webapps	PHP
2013-01-03	Allied Telesis AT-MCF2000M 3.0.2 - Remote Command Execution	remote	Hardware
2013-01-03	WordPress Plugin Advanced Custom Fields - Remote File Inclusion (Metasploit)	remote	PHP
2013-01-03	WordPress Plugin Uploader - Arbitrary File Upload	webapps	PHP
2013-01-03	Belkin Wireless Router - Default WPS PIN Security	remote	Hardware
2013-01-02	Microsoft Internet Explorer - CButton Object Use-After-Free (Metasploit)	remote	Windows
2013-01-02	Analyzing Near Field Communication (NFC) Security	papers	Hardware
2013-01-02	[Hebrew] Digital Whisper Security Magazine #38	papers	Multiple
2013-01-02	e107 1.0.1 - Arbitrary JavaScript Execution (via Cross-Site Request Forgery)	webapps	PHP
2013-01-02	e107 1.0.2 - SQL Injection (via Cross-Site Request Forgery)	webapps	PHP
2013-01-02	Astium VoIP PBX 2.1 build 25399 - Remote Crash (PoC)	dos	Linux
2013-01-02	Astium VoIP PBX 2.1 build 25399 - Multiple Vulnerabilities/Remote Command Execution	webapps	PHP
2013-01-02	[Turkish] Introduction to ARM Exploiting on Linux	papers	ARM
2013-01-02	WordPress Plugin Xerte Online - 'save.php' Arbitrary File Upload	webapps	PHP
2013-01-02	osTicket - 'l.php?url' Arbitrary Site Redirect	webapps	PHP
2013-01-02	osTicket - 'tickets.php?status' Cross-Site Scripting	webapps	PHP
2013-01-01	WordPress Plugin Shopping Cart for WordPress - '/wp-content/plugins/levelfourstorefront/scripts/administration/exportsubscribers.php? reqID' SQL Injection	webapps	PHP
2013-01-01	WordPress Plugin Shopping Cart for WordPress - '/wp-content/plugins/levelfourstorefront/scripts/administration/backup.php?reqID' SQL Injection	webapps	PHP
2013-01-01	WordPress Plugin Shopping Cart for WordPress - '/wp-content/plugins/levelfourstorefront/scripts/administration/exportaccounts.php?reqID' SQL Injection	webapps	PHP
2013-01-01	Linux/x86 - Bind (1111/TCP) Shell + SO_REUSEADDR Set (Avoiding SIGSEGV) + Null-Free Shellcode (103 bytes)	shellcode	Linux_x86
2013-01-01	Linux/x86 - Reverse (127.1.1.1:55555/TCP) Shell + Null-Free Shellcode (72 bytes)	shellcode	Linux_x86
2013-01-01	Linux/x86 - Bind (Random TCP Port) Shell + Null-Free Shellcode (65 bytes)	shellcode	Linux_x86
2013-01-01	Linux/x86 - Bind (1111/TCP) Shell + GetPC/Call/Ret Method + Null-Free Shellcode (89 bytes)	shellcode	Linux_x86
2013-01-01	Linux/x86 - Bind (1111/TCP) Shell + Null-Free Shellcode (73 bytes)	shellcode	Linux_x86
2013-01-01	Linux/x86 - Bind (Random TCP Port) Shell + Null-Free Shellcode (57 bytes)	shellcode	Linux_x86
2013-01-01	Linux/x86 - Egghunter (0x50905090) + Null-Free Shellcode (38 bytes)	shellcode	Linux_x86
2013-01-01	Linux/x86 - execve(/bin/sh) + Null-Free Shellcode (21 bytes) (6)	shellcode	Linux_x86
2013-01-01	Linux/x86 - Read /etc/passwd file + Null-Free Shellcode (51 bytes)	shellcode	Linux_x86
2013-01-01	Linux/x86 - Reboot() + Mutated + Null-Free Shellcode (55 bytes)	shellcode	Linux_x86
2013-01-01	Linux/x86 - Fork Bomb + Mutated + Null-Free Shellcode (15 bytes)	shellcode	Linux_x86
2013-01-01	Linux/x86 - execve wget + Mutated + Null-Free Shellcode (96 bytes)	shellcode	Linux_x86
2013-01-01	Linux/x86 - execve(/bin/sh) + Uzumaki Encoded + Null-Free Shellcode (50 bytes)	shellcode	Linux_x86
2013-01-01	Linux/x86 - Uzumaki Encryptor Shellcode (Generator)	shellcode	Generator
2013-01-01	Linux/x86 - Insertion Decoder + Null-Free Shellcode (33+ bytes)	shellcode	Linux_x86
2013-01-01	Linux/x86 - Reverse (127.1.1.1:11111/TCP) Shell + Null-Free Shellcode (67 bytes)	shellcode	Linux_x86