Exploit 2016

Exploit 2016 - Úvod 2020 2019 2018 2017 2016 2015 2014 2013 2012 2011 2010 2009 2008 2007 2006 2005 2004 2003 2002 2001 2000

Úvod Remote Web App Local&Privilege Escalation DoS & PoC ShellCode Exploit Exploit prog. Ex. Techniky Exp. kit Typy Exploitů Exploit Articles

2016-12-30	Zend Framework / zend-mail < 2.4.11 - Remote Code Execution	webapps	PHP
2016-12-29	Google Android - get_user/put_user (Metasploit)	local	Android
2016-12-29	PHPMailer < 5.2.18 - Remote Code Execution (Python)	webapps	PHP
2016-12-29	WordPress Plugin Slider Templatic Tevolution < 2.3.6 - Arbitrary File Upload	webapps	PHP
2016-12-29	Dell SonicWALL Global Management System GMS 8.1 - Blind SQL Injection	webapps	Hardware
2016-12-29	Dell SonicWALL Secure Mobile Access SMA 8.1 - Cross-Site Scripting / Cross-Site Request Forgery	webapps	Hardware
2016-12-29	b2evolution 6.8.2 - Arbitrary File Upload	webapps	PHP
2016-12-28	WordPress Plugin Simply Poll 1.4.1 - SQL Injection	webapps	PHP
2016-12-28	SwiftMailer < 5.4.5-DEV - Remote Code Execution	webapps	PHP
2016-12-28	Joomla! Component aWeb Cart Watching System for Virtuemart 2.6.0 - SQL Injection	webapps	PHP
2016-12-28	SapLPD 7.40 - Denial of Service	dos	Windows
2016-12-27	PHPMailer < 5.2.20 - Remote Code Execution	webapps	PHP
2016-12-26	FTPShell Server 6.36 - '.csv' Local Denial of Service	dos	Windows
2016-12-26	Joomla! Component Blog Calendar - SQL Injection	webapps	PHP
2016-12-26	Wampserver 3.0.6 - Insecure File Permissions Privilege Escalation	local	Windows
2016-12-26	PHPMailer < 5.2.18 - Remote Code Execution (Bash)	webapps	PHP
2016-12-26	Shutter 0.93.1 - Code Execution	local	Linux
2016-12-26	PHPMailer < 5.2.19 - Sendmail Argument Injection (Metasploit)	webapps	Multiple
2016-12-25	XAMPP Control Panel - Denial Of Service	dos	Windows
2016-12-25	PHPMailer < 5.2.18 - Remote Code Execution (PHP)	webapps	PHP
2016-12-25	Sonicwall 8.1.0.2-14sv - 'extensionsettings.cgi' Remote Command Injection (Metasploit)	webapps	Hardware
2016-12-24	Sonicwall 8.1.0.2-14sv - 'viewcert.cgi' Remote Command Injection (Metasploit)	webapps	Hardware
2016-12-23	Apache mod_session_crypto - Padding Oracle	webapps	Multiple
2016-12-23	OpenSSH < 7.4 - 'UsePrivilegeSeparation Disabled' Forwarded Unix Domain Sockets Privilege Escalation	local	Linux
2016-12-23	OpenSSH < 7.4 - agent Protocol Arbitrary Library Loading	remote	Linux
2016-12-23	Freepbx < 2.11.1.5 - Remote Code Execution	webapps	PHP
2016-12-22	Microsoft Internet Explorer 11 - MSHTML CPasteCommand::ConvertBitmaptoPng Heap Buffer Overflow (MS14-056)	dos	Windows
2016-12-22	IBM AIX 6.1/7.1/7.2 - 'Bellmail' Local Privilege Escalation	local	AIX
2016-12-22	Vesta Control Panel 0.9.8-16 - Local Privilege Escalation	local	Linux
2016-12-22	Apple macOS 10.12.1 Kernel - Writable Privileged IOKit Registry Properties Code Execution	dos	macOS
2016-12-22	Apple macOS 10.12 - Double vm_deallocate in Userspace MIG Code Use-After-Free	dos	macOS
2016-12-22	Apple macOS < 10.12.2 / iOS < 10.2 Kernel - ipc_port_t Reference Count Leak Due to Incorrect externalMethod Overrides Use-After-Free	dos	Multiple
2016-12-22	Apple macOS < 10.12.2 / iOS < 10.2 - '_kernelrpc_mach_port_insert_right_trap' Kernel Reference Count Leak / Use-After-Free	local	macOS
2016-12-22	Apple macOS < 10.12.2 / iOS < 10.2 - Broken Kernel Mach Port Name uref Handling Privileged Port Name Replacement Privilege Escalation	local	macOS
2016-12-22	Apple macOS 10.12.1 / iOS < 10.2 - powerd Arbitrary Port Replacement	dos	Multiple
2016-12-22	Apple macOS 10.12.1 / iOS < 10.2 - syslogd Arbitrary Port Replacement	dos	Multiple
2016-12-21	Microsoft Edge - SIMD.toLocaleString Uninitialized Memory (MS16-145)	dos	Windows
2016-12-21	Microsoft Edge - Internationalization Initialization Type Confusion (MS16-144)	dos	Windows
2016-12-21	NETGEAR WNR2000v5 - Remote Code Execution	remote	CGI
2016-12-20	Google Android - WifiNative::setHotlist Stack Overflow	dos	Android
2016-12-20	Microsoft Internet Explorer 11 - MSHTML CSpliceTreeEngine::RemoveSplice Use-After-Free (MS14-035)	dos	Windows
2016-12-20	Java Debug Wire Protocol (JDWP) - Remote Code Execution	remote	Java
2016-12-19	WordPress Plugin 404 Redirection Manager 1.0 - SQL Injection	webapps	PHP
2016-12-19	Google Chrome < 31.0.1650.48 - HTTP 1xx base::StringTokenizerT<...>::QuickGetNext Out-of-Bounds Read	dos	Multiple
2016-12-18	Naenara Browser 3.5 (RedStar 3.0 Desktop) - 'JACKRABBIT' Client-Side Command Execution	local	Linux
2016-12-18	RedStar 3.0 Server - 'Shellshock' 'BEAM' / 'RSSMON' Command Injection	local	Linux
2016-12-16	Linux/x86 - execve(/bin/bash -c) Arbitrary Command Execution + Null-Free Shellcode (72 bytes)	shellcode	Linux_x86
2016-12-16	Orthanc DICOM Server 1.1.0 - Memory Corruption	dos	Windows
2016-12-16	Apple macOS 10.12 16A323 XNU Kernel / iOS 10.1.1 - 'set_dp_control_port' Lack of Locking Use-After-Free	local	Multiple
2016-12-16	OsiriX DICOM Viewer 8.0.1 - Memory Corruption	dos	Windows
2016-12-16	ConQuest DICOM Server 1.4.17d - Stack Buffer (PoC)	dos	Windows
2016-12-16	DCMTK 3.6.0 storescp - Stack Buffer Overflow	dos	Linux
2016-12-16	Horos 2.1.0 DICOM Medical Image Viewer - Denial of Service	dos	OSX
2016-12-16	Horos 2.1.0 Web Portal - Directory Traversal	remote	OSX

2016-12-16	WHMCompleteSolution (WHMCS) Addon VMPanel 2.7.4 - SQL Injection	webapps	PHP
2016-12-16	Microsoft Internet Explorer 9 - IEFRAME CMarkupPointer::MoveToGap Use-After-Free	dos	Windows
2016-12-16	WordPress Plugin Quiz And Survey Master 4.5.4/4.7.8 - Cross-Site Request Forgery	webapps	PHP
2016-12-16	Microsoft Internet Explorer 9 - IEFRAME CView::EnsureSize Use-After-Free (MS13-021)	dos	Windows
2016-12-16	WordPress Plugin WP Support Plus Responsive Ticket System 7.1.3 - SQL Injection	webapps	PHP
2016-12-16	WordPress Plugin WP Private Messages 1.0.1 - SQL Injection (1)	webapps	PHP
2016-12-15	Nidesoft MP3 Converter 2.6.18 - Local Buffer Overflow (SEH)	local	Windows
2016-12-15	Nagios < 4.2.2 - Arbitrary Code Execution	remote	Linux
2016-12-15	Nagios < 4.2.4 - Local Privilege Escalation	local	Linux
2016-12-15	Microsoft Internet Explorer 9 - MSHTML CMarkup::ReloadInCompatView Use-After-Free	dos	Windows
2016-12-15	Microsoft Internet Explorer 9 - IEFRAME CMarkup::RemovePointerPos Use-After-Free (MS13-055)	dos	Windows
2016-12-15	Netcore / Netis Routers - UDP Backdoor Access	remote	Hardware
2016-12-14	Adobe Animate 15.2.1.95 - Memory Corruption	dos	Windows
2016-12-14	APT - Repository Signing Bypass via Memory Allocation Failure	remote	Linux
2016-12-14	Apport 2.x (Ubuntu Desktop 12.10 < 16.04) - Local Code Execution	local	Linux
2016-12-13	Samsung Devices KNOX Extensions - OTP Service Heap Overflow	dos	Android
2016-12-13	TP-LINK TD-W8151N - Denial of Service	dos	Hardware
2016-12-13	McAfee Virus Scan Enterprise for Linux 1.9.2 < 2.0.2 - Remote Code Execution	remote	Linux
2016-12-13	Joomla! Component DT Register - 'cat' SQL Injection	webapps	PHP
2016-12-13	Samsung Devices KNOX Extensions - OTP TrustZone Trustlet Stack Buffer Overflow	dos	Android
2016-12-13	Google Chrome (Fedora 25 / Ubuntu 16.04) - 'tracker-extract' / 'gnome-video-thumbnailer' + 'totem' Drive-By Download	local	Linux
2016-12-12	Microsoft Internet Explorer 9 - IEFRAME CSelectionInteractButtonBehavior::_UpdateButtonLocation Use-After-Free (MS13-047)	dos	Windows
2016-12-12	Serva 3.0.0 - HTTP Server Denial of Service	dos	Windows
2016-12-12	iOS 10.1.x - Certificate File Memory Corruption	dos	iOS
2016-12-12	WordPress Plugin Multisite Post Duplicator 0.9.5.1 - Cross-Site Request Forgery	webapps	PHP
2016-12-12	Apache 2.4.23 mod_http2 - Denial of Service	dos	Linux
2016-12-12	Sophos Web Appliance 4.2.1.3 - block/unblock Remote Command Injection (Metasploit)	webapps	PHP
2016-12-12	Sophos Web Appliance 4.2.1.3 - DiagnosticTools Remote Command Injection (Metasploit)	webapps	Linux
2016-12-11	NETGEAR R7000 - Cross-Site Scripting	webapps	Hardware
2016-12-11	OpenSSL 1.1.0a/1.1.0b - Denial of Service	dos	Linux
2016-12-11	Art of Anti Detection - Introduction To AV & Detection Techniques	papers	Multiple
2016-12-11	ARG-W4 ADSL Router - Multiple Vulnerabilities	webapps	Hardware
2016-12-11	EasyPHP Devserver 16.1.1 - Insecure File Permissions Privilege Escalation	local	Windows
2016-12-10	Pozzo & Lucky, The phantom Shell. Stego in TCP/IP (part-2)	papers	Multiple
2016-12-10	10-Strike Network File Search Pro 2.3 - Local Buffer Overflow (SEH)	local	Windows
2016-12-09	Roundcube 1.2.2 - Remote Code Execution	webapps	PHP
2016-12-09	Microsoft Internet Explorer 9 - MSHTML CDispNode::InsertSiblingNode Use-After-Free (MS13-037) (1)	dos	Windows
2016-12-09	Microsoft Internet Explorer 9 - MSHTML CDispNode::InsertSiblingNode Use-After-Free (MS13-037) (2)	dos	Windows
2016-12-09	Splunk Enterprise 6.4.3 - Server-Side Request Forgery	webapps	Multiple
2016-12-09	Microsoft Internet Explorer 9 - MSHTML CElement::HasFlag Memory Corruption	dos	Windows
2016-12-09	D-Link DI-524 - Cross-Site Request Forgery	webapps	Hardware
2016-12-08	Windows/x64 - Bind (4444/TCP) Shell Shellcode (508 bytes)	shellcode	Windows_x86-64
2016-12-08	Teaching an Old Dog (not that new) Tricks. Stego in TCP/IP made easy (part-1)	papers	Multiple
2016-12-07	Dual DHCP DNS Server 7.29 - Denial of Service	dos	Windows
2016-12-07	TP-LINK TD-W8951ND - Denial of Service	dos	Hardware
2016-12-07	Cisco Unified Communications Manager 7/8/9 - Directory Traversal	webapps	Hardware
2016-12-07	OpenSSH 7.2 - Denial of Service	dos	Linux
2016-12-07	NETGEAR R7000 - Command Injection	webapps	CGI
2016-12-06	Google Android - Inter-Process munmap with User-Controlled Size in android.graphics.Bitmap	remote	Android
2016-12-06	Edge SkateShop - Authentication bypass	webapps	PHP
2016-12-06	Linux Kernel 4.4.0 (Ubuntu 14.04/16.04 x86-64) - 'AF_PACKET' Race Condition Privilege Escalation	local	Linux_x86-64
2016-12-06	Microsoft PowerShell - XML External Entity Injection	local	Windows
2016-12-06	Microsoft Edge - JSON.parse Info Leak	dos	Windows
2016-12-06	Google Android - 'IOMXNodeInstance::enableNativeBuffers' Unchecked Index	dos	Android
2016-12-06	AbanteCart 1.2.7 - Cross-Site Scripting	webapps	PHP
2016-12-06	Microsoft Edge - CMarkup::EnsureDeleteCFState Use-After-Free (MS15-125)	dos	Windows
2016-12-06	Microsoft Internet Explorer 9 - CDoc::ExecuteScriptUri Use-After-Free (MS13-009)	dos	Windows
2016-12-06	Microsoft Edge - CBaseScriptable::PrivateQueryInterface Memory Corruption (MS16-068)	dos	Windows
2016-12-06	Microsoft Internet Explorer 9 - 'jscript9' JavaScriptStackWalker Memory Corruption (MS15-056)	remote	Windows
2016-12-06	Microsoft Windows 10 (x86/x64) - WLAN AutoConfig Denial of Service (PoC)	dos	Windows
2016-12-05	WordPress Plugin Single Personal Message 1.0.3 - SQL Injection	webapps	PHP
2016-12-05	Microsoft Event Viewer 1.0 - XML External Entity Injection	local	Windows
2016-12-05	Microsoft MSINFO32.EXE 6.1.7601 - '.NFO' XML External Entity Injection	local	Windows
2016-12-05	Apache CouchDB 2.0.0 - Local Privilege Escalation	local	Windows
2016-12-05	NetCat 0.7.1 - Denial of Service	dos	Linux
2016-12-05	Shuttle Tech ADSL Wireless 920 WM - Multiple Vulnerabilities	remote	Hardware
2016-12-05	Dup Scout Enterprise 9.1.14 - Remote Buffer Overflow (SEH)	remote	Windows
2016-12-05	DiskBoss Enterprise 7.4.28 - 'GET' Remote Buffer Overflow	remote	Windows
2016-12-05	Linux/x86 - Reverse (/TCP) Netcat + mkfifo (-e option disabled) Shell (localhost:9999) Shellcode (180 bytes)	shellcode	Linux_x86
2016-12-04	BlackStratus LOGStorm 4.5.1.35/4.5.1.96 - Remote Code Execution	remote	Hardware
2016-12-04	Microsoft Authorization Manager 6.1.7601 - 'azman' XML External Entity Injection	local	Windows
2016-12-04	Microsoft Excel Starter 2010 - XML External Entity Injection	local	Windows
2016-12-04	Microsoft Windows Media Center 6.1.7600 - 'ehshell.exe' XML External Entity Injection	local	Windows
2016-12-04	Alcatel Lucent Omnivista 8770 - Remote Code Execution	remote	Windows
2016-12-03	Smart Guard Network Manager 6.3.2 - SQL Injection	webapps	PHP
2016-12-02	Xfinity Gateway - Remote Code Execution	webapps	Hardware
2016-12-01	Disk Savvy Enterprise 9.1.14 - 'GET' Remote Buffer Overflow	remote	Windows
2016-12-01	[Hebrew] Digital Whisper Security Magazine #78	papers	Multiple
2016-12-01	Tor (Firefox 41 < 50) - Code Execution	local	Windows
2016-12-01	Broadcom BCM43xx Wi-Fi - 'BroadPWN' Denial of Service	dos	Android
2016-11-30	Xitami Web Server 5.0a0 - Denial of Service	dos	Windows
2016-11-30	WordPress Plugin WP Vault 0.8.6.6 - Local File Inclusion	webapps	PHP
2016-11-30	Xfinity Gateway - Cross-Site Request Forgery	webapps	Hardware
2016-11-29	WinPower 4.9.0.4 - Local Privilege Escalation	local	Windows
2016-11-28	Google Android - 'BadKernel' Remote Code Execution	remote	Android
2016-11-28	VX Search Enterprise 9.1.12 - 'Login' Remote Buffer Overflow	remote	Windows
2016-11-28	Sync Breeze Enterprise 9.1.16 - 'Login' Remote Buffer Overflow	remote	Windows
2016-11-28	Disk Sorter Enterprise 9.1.12 - 'Login' Remote Buffer Overflow	remote	Windows
2016-11-28	Dup Scout Enterprise 9.1.14 - 'Login' Remote Buffer Overflow	remote	Windows
2016-11-28	Disk Savvy Enterprise 9.1.14 - 'Login' Remote Buffer Overflow	remote	Windows
2016-11-28	Disk Pulse Enterprise 9.1.16 - 'Login' Remote Buffer Overflow	remote	Windows
2016-11-28	Tenda/Dlink/Tplink TD-W8961ND - 'DHCP' Cross-Site Scripting	webapps	Hardware
2016-11-28	Linux Kernel 2.6.22 < 3.9 - 'Dirty COW' 'PTRACE_POKEDATA' Race Condition Privilege Escalation (/etc/passwd Method)	local	Linux
2016-11-28	NTP 4.2.8p3 - Denial of Service	dos	Linux
2016-11-28	Microsoft Internet Explorer 8 - MSHTML 'SRunPointer::SpanQualifier/RunType' Out-Of-Bounds Read (MS15-009)	dos	Windows
2016-11-28	Red Hat JBoss EAP - Deserialization of Untrusted Data	webapps	Java
2016-11-28	Microsoft Internet Explorer 11 - MSHTML 'CGeneratedContent::HasGeneratedSVGMarker' Type Confusion	dos	Windows
2016-11-28	Microsoft Internet Explorer 10 - MSHTML 'CEditAdorner::Detach' Use-After-Free (MS13-047)	dos	Windows
2016-11-28	Microsoft Internet Explorer 8/9/10/11 - MSHTML 'DOMImplementation' Type Confusion (MS16-009)	dos	Windows
2016-11-28	Trend Micro InterScan Web Security Virtual Appliance (IWSVA) 6.5 - Multiple Vulnerabilities	webapps	Hardware
2016-11-27	Core FTP LE 2.2 - 'SSH/SFTP' Remote Buffer Overflow (PoC)	dos	Windows
2016-11-27	Linux Kernel 2.6.22 < 3.9 - 'Dirty COW /proc/self/mem' Race Condition Privilege Escalation (/etc/passwd Method)	local	Linux
2016-11-25	Linux/x86 - Egghunter (0x56767606) Using fstenv + Obfuscation Shellcode (31 bytes)	shellcode	Linux_x86
2016-11-24	Remote Utilities Host 6.3 - Denial of Service	dos	Windows
2016-11-24	I Know Where Your Page Lives - De-randomizing the latest Windows 10 Kernel	papers	Windows
2016-11-24	Microsoft Windows Kernel - 'win32k.sys NtSetWindowLongPtr' Local Privilege Escalation (MS16-135) (1)	local	Windows
2016-11-24	GNU Wget < 1.18 - Access List Bypass / Race Condition	remote	Multiple
2016-11-24	osTicket 1.9.14 - 'X-Forwarded-For' Cross-Site Scripting	webapps	PHP
2016-11-23	Linux Kernel 2.6.32-642/3.16.0-4 - 'inode' Integer Overflow	dos	Linux
2016-11-23	UCanCode - Multiple Vulnerabilities	dos	Windows
2016-11-23	Windows/x64 - Download File (http://192.168.10.129/pl.exe) + Execute (C:/Users/Public/p.exe) Shellcode (358 bytes)	shellcode	Windows_x86-64
2016-11-22	AppFusions Doxygen for Atlassian Confluence 1.3.2 - Cross-Site Scripting	webapps	Java
2016-11-22	Huawei UTPS - Unquoted Service Path Privilege Escalation	local	Windows
2016-11-22	Linux/x64 - execve(/bin/sh) -c reboot Shellcode (89 bytes)	shellcode	Linux_x86-64
2016-11-22	EasyPHP Devserver 16.1.1 - Cross-Site Request Forgery / Remote Command Execution	webapps	PHP
2016-11-22	Crestron AM-100 - Multiple Vulnerabilities	remote	Hardware
2016-11-22	TP-LINK TDDP - Multiple Vulnerabilities	dos	Hardware
2016-11-22	Microsoft Internet Explorer 8 - MSHTML 'Ptls5::LsFindSpanVisualBoundaries' Memory Corruption	dos	Windows
2016-11-22	SAP NetWeaver AS JAVA - 'BC-BMT-BPM-DSK' XML External Entity Injection	webapps	XML
2016-11-22	Ubuntu 14.04/15.10 - User Namespace Overlayfs Xattr SetGID Privilege Escalation	local	Linux

2016-11-22	Ubuntu 15.10 - 'USERNS ' Overlayfs Over Fuse Privilege Escalation	local	Linux
2016-11-21	Atlassian Confluence AppFusions Doxygen 1.3.0 - Directory Traversal	webapps	Java
2016-11-21	Microsoft Edge Scripting Engine - Memory Corruption (MS16-129)	dos	Windows
2016-11-21	WordPress Plugin Instagram Feed 1.4.6.2 - Cross-Site Request Forgery	webapps	PHP
2016-11-21	Tetris Heap Spraying: Spraying the Heap on a Budget	papers	Windows
2016-11-21	Microsoft Edge - 'CTextExtractor::GetBlockText' Out-of-Bounds Read (MS16-104)	dos	Windows
2016-11-21	Microsoft Internet Explorer 8 - jscript 'RegExpBase::FBadHeader' Use-After-Free (MS15-018)	dos	Windows
2016-11-21	Mezzanine 4.2.0 - Cross-Site Scripting	webapps	Python
2016-11-21	LEPTON 2.2.2 - SQL Injection	webapps	PHP
2016-11-21	LEPTON 2.2.2 - Remote Code Execution	webapps	PHP
2016-11-21	FUDforum 3.0.6 - Cross-Site Scripting / Cross-Site Request Forgery	webapps	PHP
2016-11-21	FUDforum 3.0.6 - Local File Inclusion	webapps	PHP
2016-11-21	WordPress Plugin Olimometer 2.56 - SQL Injection	webapps	PHP
2016-11-21	D-Link DIR-Series Routers - HNAP Login Stack Buffer Overflow (Metasploit)	remote	Multiple
2016-11-21	NTP 4.2.8p8 - Denial of Service	dos	Linux
2016-11-20	ScriptCase 8.1.053 - Multiple Vulnerabilities	webapps	PHP
2016-11-18	Nagios 4.2.2 - Local Privilege Escalation	local	Linux
2016-11-18	Windows/x64 - Reverse (192.168.232.129:4444/TCP) Shell + Injection Shellcode (694 bytes)	shellcode	Windows_x86-64
2016-11-18	EditMe CMS - Cross-Site Request Forgery (Add Admin)	webapps	PHP
2016-11-18	Microsoft Edge - 'Array.splice' Heap Overflow	dos	Windows
2016-11-18	FTPShell Client 5.24 - 'PWD' Remote Buffer Overflow	remote	Windows
2016-11-18	Moxa SoftCMS 1.5 - Denial of Service (PoC)	dos	Windows
2016-11-18	Microsoft Edge - 'FillFromPrototypes' Type Confusion	dos	Windows
2016-11-18	Microsoft Edge - 'Array.filter' Information Leak	dos	Windows
2016-11-18	Microsoft Edge - 'Array.reverse' Overflow	dos	Windows
2016-11-18	Palo Alto Networks PanOS - 'root_trace' Local Privilege Escalation	local	Linux
2016-11-18	Palo Alto Networks PanOS - 'root_reboot' Local Privilege Escalation	local	Linux
2016-11-18	Palo Alto Networks PanOS - appweb3 Stack Buffer Overflow	dos	Linux
2016-11-17	WordPress Plugin Answer My Question 1.3 - SQL Injection	webapps	PHP
2016-11-17	WordPress Plugin Sirv 1.3.1 - SQL Injection	webapps	PHP
2016-11-17	Microsoft Edge - 'eval' Type Confusion	dos	Windows
2016-11-16	Nginx (Debian Based Distros + Gentoo) - 'logrotate' Local Privilege Escalation	local	Linux
2016-11-16	CS-Cart 4.3.10 - XML External Entity Injection	webapps	PHP
2016-11-15	Microsoft Windows - VHDMP ZwDeleteFile Arbitrary File Deletion Privilege Escalation (MS16-138)	local	Windows
2016-11-15	Microsoft Windows - VHDMP Arbitrary File Creation Privilege Escalation (MS16-138)	local	Windows
2016-11-15	Easy Internet Sharing Proxy Server 2.2 - Remote Overflow (SEH) (Metasploit)	remote	Windows
2016-11-15	Microsoft Edge 11.0.10240.16384 - 'edgehtml' CAttrArray::Destroy Use-After-Free	dos	Windows
2016-11-15	Linux Kernel 4.8.0-22/3.10.0-327 (Ubuntu 16.10 / RedHat) - 'keyctl' Null Pointer Dereference	dos	Linux
2016-11-15	Microsoft Windows - VHDMP Arbitrary Physical Disk Cloning Privilege Escalation (MS16-138)	local	Windows
2016-11-15	Microsoft Windows Kernel - Registry Hive Loading 'nt!RtlEqualSid' Out-of-Bounds Read (MS16-138)	dos	Windows
2016-11-15	WinaXe 7.7 FTP Client - Remote Buffer Overflow (Metasploit)	remote	Windows
2016-11-14	Microsoft Internet Explorer 11 - MSHTML CMapElement::Notify Use-After-Free (MS15-009)	dos	Windows
2016-11-14	Disk Pulse Enterprise 9.0.34 - 'Login' Remote Buffer Overflow (Metasploit)	remote	Windows
2016-11-14	Linux Kernel 4.4 (Ubuntu 16.04) - 'BPF' Local Privilege Escalation (Metasploit)	local	Linux
2016-11-14	Boonex Dolphin 7.3.2 - Authentication Bypass / Remote Code Execution	webapps	PHP
2016-11-13	Schoolhos CMS 2.29 - Remote Code Execution / SQL Injection	webapps	PHP
2016-11-13	[Hebrew] Digital Whisper Security Magazine #77	papers	Multiple
2016-11-13	ATutor 2.2.2 - Cross-Site Request Forgery (Add New Course)	webapps	PHP
2016-11-12	WordPress Plugin BBS e-Franchise 1.1.1 - SQL Injection	webapps	PHP
2016-11-12	WordPress Plugin Product Catalog 8 1.2.0 - SQL Injection	webapps	PHP
2016-11-11	InvoicePlane 1.4.8 - Password Reset	webapps	PHP
2016-11-10	Microsoft WININET.dll - 'CHttpHeaderParser::ParseStatusLine' Out-of-Bounds Read (MS16-104/MS16-105)	dos	Windows
2016-11-10	Microsoft Internet Explorer 11/10/9 - MSHTML 'PROPERTYDESC::HandleStyleComponentProperty' Out-of-Bounds Read (MS16-104)	dos	Windows
2016-11-10	MyBB 1.8.6 - Cross-Site Scripting	webapps	PHP
2016-11-10	4Images 1.7.13 - SQL Injection	webapps	PHP
2016-11-09	VBScript 5.8.7600.16385/5.8.9600.16384 - RegExpComp::PnodeParse Out-of-Bounds Read	dos	Windows
2016-11-09	Adobe Connect 9.5.7 - Cross-Site Scripting	webapps	Windows
2016-11-09	Microsoft Windows - LSASS SMB NTLM Exchange Null-Pointer Dereference (MS16-137)	dos	Windows
2016-11-09	Microsoft Windows Kernel - 'win32k' Denial of Service (MS16-135)	dos	Windows
2016-11-09	e107 CMS 2.1.2 - Privilege Escalation	webapps	PHP
2016-11-08	Microsoft Windows Server 2008/2012 - LDAP RootDSE Netlogon Denial of Service	dos	Windows
2016-11-08	WordPress Plugin 404 to 301 2.2.8 - Persistent Cross-Site Scripting	webapps	PHP
2016-11-08	WordPress Plugin WassUp Real Time Analytics 1.9 - Persistent Cross-Site Scripting	webapps	PHP
2016-11-08	MOVISTAR BHS_RTA ADSL Router - Remote File Disclosure	remote	Hardware
2016-11-08	D-Link DSL-2730U/2750U/2750E ADSL Router - Remote File Disclosure	remote	Hardware
2016-11-08	NETGEAR JNR1010 ADSL Router - (Authenticated) Remote File Disclosure	remote	Hardware
2016-11-08	NETGEAR WNR500/WNR612v3/JNR1010/JNR2010 ADSL Router - (Authenticated) Remote File Disclosure	remote	Hardware
2016-11-08	PLANET ADSL Router AND-4101 - Remote File Disclosure	remote	Hardware
2016-11-08	Eir D1000 Wireless Router - WAN Side Remote Command Injection (Metasploit)	remote	Linux_MIPS
2016-11-08	Avira Antivirus 15.0.21.86 - '.zip' Directory Traversal / Command Execution	local	Windows
2016-11-07	Schoolhos CMS 2.29 - 'kelas' SQL Injection	webapps	PHP
2016-11-07	Acoem 01dB CUBE/DUO Smart Noise Monitor - Password Change	remote	Hardware
2016-11-07	Microsoft Internet Explorer 8/9/10/11 / IIS / CScript.exe/WScript.exe VBScript - CRegExp..Execute Use of Uninitialized Memory (MS14-080/MS14-084)	remote	Windows
2016-11-07	Microsoft Internet Explorer 9 - MSHTML CPtsTextParaclient::CountApes Out-of-Bounds Read	dos	Windows
2016-11-07	NodCMS - PHP Code Execution	webapps	PHP
2016-11-07	Piwik 2.16.0 - 'layout' PHP Object Injection	webapps	PHP
2016-11-07	Sophos Web Appliance 4.2.1.3 - Remote Code Execution	webapps	PHP
2016-11-06	SweetRice 1.5.1 - Arbitrary File Upload	webapps	PHP
2016-11-06	SweetRice 1.5.1 - Backup Disclosure	webapps	PHP
2016-11-04	IBM AIX 6.1/7.1/7.2.0.2 - 'lsmcode' Local Privilege Escalation	local	AIX
2016-11-04	IBM AIX 5.3/6.1/7.1/7.2 - 'lquerylv' Local Privilege Escalation	local	AIX
2016-11-04	Freefloat FTP Server 1.0 - 'SITE ZONE' Remote Buffer Overflow	remote	Windows
2016-11-04	PCMan FTP Server 2.0.7 - 'NLST' Remote Buffer Overflow	remote	Windows
2016-11-04	PCMan FTP Server 2.0.7 - 'SITE CHMOD' Remote Buffer Overflow	remote	Windows
2016-11-04	PCMan FTP Server 2.0.7 - 'PORT' Remote Buffer Overflow	remote	Windows
2016-11-04	BolinTech DreamFTP Server 1.02 - 'RETR' Remote Buffer Overflow	remote	Windows
2016-11-03	WinaXe 7.7 'FTP client' - Remote Buffer Overflow	remote	Windows
2016-11-03	Rapid PHP Editor 14.1 - Remote Command Execution	remote	Windows
2016-11-03	SweetRice 1.5.1 - Arbitrary File Download	webapps	PHP
2016-11-03	Axessh 4.2 - Denial of Service	dos	Windows
2016-11-03	SweetRice 1.5.1 - Cross-Site Request Forgery / PHP Code Execution	webapps	PHP
2016-11-03	ETchat 3.7 - Cross-Site Request Forgery	webapps	PHP
2016-11-03	sNews 1.7.1 - Cross-Site Request Forgery	webapps	PHP
2016-11-03	sNews 1.7.1 - Arbitrary File Upload	webapps	PHP
2016-11-03	PCMan FTP Server 2.0.7 - 'ACCT' Remote Buffer Overflow	remote	Windows
2016-11-03	nodCMS - Cross-Site Request Forgery	webapps	PHP
2016-11-03	Redaxo 5.2.0 - Cross-Site Request Forgery	webapps	PHP
2016-11-02	PCMan FTP Server 2.0.7 - 'UMASK' Remote Buffer Overflow	remote	Windows
2016-11-02	Freefloat FTP Server 1.0 - 'DIR' Remote Buffer Overflow	remote	Windows
2016-11-02	Alienvault OSSIM/USM 5.3.1 - PHP Object Injection	webapps	PHP
2016-11-02	Alienvault OSSIM/USM 5.3.1 - Persistent Cross-Site Scripting	webapps	PHP
2016-11-02	Alienvault OSSIM/USM 5.3.1 - SQL Injection	webapps	PHP
2016-11-02	Microsoft Internet Explorer 9 - MSHTML CAttrArray Use-After-Free (MS14-056)	dos	Windows
2016-11-02	Citrix Receiver/Receiver Desktop Lock 4.5 - Authentication Bypass	local	Multiple
2016-11-02	SunellSecurity NVR / Camera - Denial of Service	dos	Hardware
2016-11-02	Linux Kernel (Ubuntu / Fedora / RedHat) - 'Overlayfs' Local Privilege Escalation (Metasploit)	local	Linux
2016-11-02	Bassmaster 1.5.1 - Batch Arbitrary JavaScript Injection Remote Code Execution (Metasploit)	remote	Linux
2016-11-02	LifeSize Room 5.0.9 - Multiple Vulnerabilities	webapps	Hardware
2016-11-02	Microsoft Internet Explorer 11 - MSHTML CView::CalculateImageImmunity Use-After-Free	dos	Windows
2016-11-02	SweetRice 1.5.1 - Cross-Site Request Forgery	webapps	PHP
2016-11-01	My Little Forum 2.3.7 - Multiple Vulnerabilities	webapps	PHP
2016-11-01	Freefloat FTP Server 1.0 - 'ABOR' Remote Buffer Overflow	remote	Windows
2016-11-01	School Registration and Fee System - Authentication Bypass	webapps	PHP
2016-11-01	Freefloat FTP Server 1.0 - 'RMD' Remote Buffer Overflow	remote	Windows
2016-11-01	Freefloat FTP Server 1.0 - 'HOST' Remote Buffer Overflow	remote	Windows
2016-11-01	KarjaSoft Sami FTP Server 2.0.2 - USER/PASS Remote Buffer Overflow (SEH)	remote	Windows
2016-11-01	Freefloat FTP Server 1.0 - 'RENAME' Remote Buffer Overflow	remote	Windows
2016-11-01	MySQL / MariaDB / PerconaDB 5.5.x/5.6.x/5.7.x - 'mysql' System User Privilege Escalation / Race Condition	local	Linux
2016-11-01	MySQL / MariaDB / PerconaDB 5.5.x/5.6.x/5.7.x - 'root' System User Privilege Escalation	local	Linux
2016-11-01	Memcached 1.4.33 - 'Crash' (PoC)	dos	Linux

2016-11-01	Memcached 1.4.33 - 'Add' (PoC)	dos	Linux
2016-11-01	Memcached 1.4.33 - 'sasl' (PoC)	dos	Linux
2016-10-31	freeFTPd 1.0.8 - 'mkd' Denial of Service	dos	Windows
2016-10-31	Micro Focus Rumba 9.4 - Local Denial of Service	dos	Windows
2016-10-31	Micro Focus Rumba 9.3 - ActiveX Stack Buffer Overflow (PoC)	dos	Windows
2016-10-31	S9Y Serendipity 2.0.4 - Cross-Site Scripting	webapps	PHP
2016-10-31	Rumba FTP Client 4.x - Remote Stack Buffer Overflow (SEH)	remote	Windows
2016-10-31	Apple OS X Kernel - IOBluetoothFamily.kext Use-After-Free	dos	OSX
2016-10-31	Apple OS X/iOS Kernel - IOSurface Use-After-Free	local	OSX
2016-10-31	Apple OS X/iOS - 'mach_ports_register' Multiple Memory Safety s	dos	Multiple
2016-10-31	NVIDIA Driver - UVMLiteController ioctl Handling Unchecked Input/Output Lengths Privilege Escalation	local	Windows
2016-10-31	NVIDIA Driver - Escape Code Leaks Uninitialised ExAllocatePoolWithTag Memory to Userspace	dos	Windows
2016-10-31	NVIDIA Driver - Unchecked Write to User-Provided Pointer in Escape 0x700010d	dos	Windows
2016-10-31	NVIDIA Driver - No Bounds Checking in Escape 0x7000194	dos	Windows
2016-10-31	NVIDIA Driver - Unchecked Write to User-Provided Pointer in Escape 0x600000D	dos	Windows
2016-10-31	NVIDIA Driver - NvStreamKms 'PsSetCreateProcessNotifyRoutineEx Local Stack Buffer Overflow Callback / Local Privilege Escalation	local	Windows
2016-10-31	NVIDIA Driver - Escape 0x100010b Missing Bounds Check	dos	Windows
2016-10-31	NVIDIA Driver - No Bounds Checking in Escape 0x7000170	dos	Windows
2016-10-31	NVIDIA Driver - Unchecked User-Provided Pointer in Escape 0x5000027	dos	Windows
2016-10-31	NVIDIA Driver - Incorrect Bounds Check in Escape 0x70001b2	dos	Windows
2016-10-31	NVIDIA Driver - Missing Bounds Check in Escape 0x100009a	dos	Windows
2016-10-31	NVIDIA Driver - Missing Bounds Check in Escape 0x70000d5	dos	Windows
2016-10-31	NVIDIA Driver - Stack Buffer Overflow in Escape 0x7000014	dos	Windows
2016-10-31	NVIDIA Driver - Stack Buffer Overflow in Escape 0x10000e9	dos	Windows
2016-10-31	Apple macOS 10.12 - 'task_t' Local Privilege Escalation	local	macOS
2016-10-31	PCMan FTP Server 2.0.7 - 'DELETE' Remote Buffer Overflow	remote	Windows
2016-10-28	InfraPower PPS-02-S Q213V1 - Local File Disclosure	webapps	PHP
2016-10-28	InfraPower PPS-02-S Q213V1 - Insecure Direct Object Reference	webapps	PHP
2016-10-28	InfraPower PPS-02-S Q213V1 - Authentication Bypass	webapps	PHP
2016-10-28	InfraPower PPS-02-S Q213V1 - Multiple Cross-Site Scripting Vulnerabilities	webapps	PHP
2016-10-28	InfraPower PPS-02-S Q213V1 - Cross-Site Request Forgery	webapps	PHP
2016-10-28	InfraPower PPS-02-S Q213V1 - Hard-Coded Credentials	remote	Hardware
2016-10-28	InfraPower PPS-02-S Q213V1 - Remote Command Execution	webapps	Hardware
2016-10-27	Baby FTP server 1.24 - Denial of Service (2)	dos	Windows
2016-10-27	GNU GTypist 2.9.5-2 - Local Buffer Overflow	local	Linux
2016-10-27	uSQLite 1.0.0 - Denial of Service	dos	Windows
2016-10-27	HP TouchSmart Calendar 4.1.4245 - Insecure File Permissions Privilege Escalation	local	Windows
2016-10-27	Joomla! 3.4.4 < 3.6.4 - Account Creation / Privilege Escalation	webapps	PHP
2016-10-27	CherryTree 0.36.9 - Memory Corruption (PoC)	dos	Windows
2016-10-27	Phrack: Attacking JavaScript Engines: A case study of JavaScriptCore and CVE-2016-4622 (saelo)	papers	Magazine
2016-10-27	Rootkit analysis - Use case on HideDRV	papers	Windows
2016-10-26	Boonex Dolphin 7.3.2 - Authentication Bypass	webapps	PHP
2016-10-26	SmallFTPd 1.0.3 - 'mkd' Denial of Service	dos	Windows
2016-10-26	Komfy Switch with Camera DKZ-201S/W - WiFi Password Disclosure	remote	Hardware
2016-10-26	Linux Kernel 2.6.22 < 3.9 - 'Dirty COW PTRACE_POKEDATA' Race Condition (Write Access Method)	local	Linux
2016-10-25	Network Scanner 4.0.0 - Local Buffer Overflow (SEH)	local	Windows
2016-10-24	Orange Inventel LiveBox 5.08.3-sp - Cross-Site Request Forgery	webapps	Hardware
2016-10-24	Microsoft Windows (x86) - 'NDISTAPI' Local Privilege Escalation (MS11-062)	local	Windows_x86
2016-10-24	EC-CUBE 2.12.6 - Server-Side Request Forgery	webapps	PHP
2016-10-24	Industrial Secure Routers EDR-810 / EDR-G902 / EDR-G903 - Insecure Configuration Management	webapps	Hardware
2016-10-23	Zenbership 107 - Multiple Vulnerabilities	webapps	PHP
2016-10-21	Just Dial Clone Script - 'srch' SQL Injection	webapps	PHP
2016-10-21	FreePBX 13 - Remote Command Execution / Privilege Escalation	webapps	PHP
2016-10-21	RealPlayer 18.1.5.705 - '.QCP' Crash (PoC)	dos	Windows
2016-10-21	Linux Kernel 2.6.22 < 3.9 (x86/x64) - 'Dirty COW /proc/self/mem' Race Condition Privilege Escalation (SUID Method)	local	Linux
2016-10-21	Oracle VM VirtualBox 4.3.28 - '.ovf' Crash (PoC)	dos	Windows
2016-10-21	TrendMicro InterScan Web Security Virtual Appliance - 'Shellshock' Remote Command Injection	remote	Hardware
2016-10-20	Microsoft Edge - 'Array.map' Heap Overflow (MS16-119)	dos	Windows
2016-10-20	Microsoft Edge - 'Array.join' Infomation Leak (MS16-119)	dos	Windows
2016-10-20	Oracle Netbeans IDE 8.1 - Directory Traversal	local	Multiple
2016-10-20	MiCasaVerde VeraLite - Remote Code Execution	remote	Hardware
2016-10-20	Oracle BI Publisher 11.1.1.6.0/11.1.1.7.0/11.1.1.9.0/12.2.1.0.0 - XML External Entity Injection	webapps	XML
2016-10-20	Classifieds Rental Script - SQL Injection	webapps	PHP
2016-10-20	SAP NetWeaver KERNEL 7.0 < 7.5 - Denial of Service	dos	Windows
2016-10-20	SAP Adaptive Server Enterprise 16 - Denial of Service	dos	Windows
2016-10-20	Event Calendar PHP 1.5 - SQL Injection	webapps	PHP
2016-10-20	SPIP 3.1.2 Template Compiler/Composer - PHP Code Execution	webapps	PHP
2016-10-20	SPIP 3.1.1/3.1.2 - File Enumeration / Path Traversal	webapps	PHP
2016-10-20	SPIP 3.1.2 - Cross-Site Request Forgery	webapps	PHP
2016-10-20	Microsoft Windows - 'win32k.sys' TTF Processing RCVT TrueType Instruction Handler Out-of-Bounds Read (MS16-120)	dos	Windows
2016-10-20	Microsoft Windows - 'win32k.sys' TTF Processing win32k!sbit_Embolden / win32k!ttfdCloseFontContext Use-After-Free (MS16-120)	dos	Windows
2016-10-20	Microsoft Windows Kernel - Registry Hive Loading Negative RtlMoveMemory Size in nt!CmpCheckValueList (MS16-124)	dos	Windows
2016-10-20	Microsoft Windows Kernel - Registry Hive Loading Relative Arbitrary Read in nt!RtlValidRelativeSecurityDescriptor (MS16-123)	dos	Windows
2016-10-20	Microsoft Edge - 'Function.apply' Information Leak (MS16-119)	dos	Windows
2016-10-20	Microsoft Edge - Spread Operator Stack Overflow (MS16-119)	dos	Windows
2016-10-20	Microsoft Windows Edge/Internet Explorer - Isolated Private Namespace Insecure DACL Privilege Escalation (MS16-118)	local	Windows
2016-10-20	Microsoft Windows Edge/Internet Explorer - Isolated Private Namespace Insecure Boundary Descriptor Privilege Escalation (MS16-118)	local	Windows
2016-10-20	Microsoft Windows - NtLoadKeyEx Read Only Hive Arbitrary File Write Privilege Escalation (MS16-124)	local	Windows
2016-10-20	Hak5 WiFi Pineapple 2.4 - Preconfiguration Command Injection (Metasploit)	remote	Linux
2016-10-20	OpenNMS - Java Object Unserialization Remote Code Execution (Metasploit)	remote	Linux
2016-10-19	CNDSOFT 2.3 - Cross-Site Request Forgery / Arbitrary File Upload	webapps	PHP
2016-10-19	XhP CMS 0.5.1 - Cross-Site Request Forgery / Persistent Cross-Site Scripting	webapps	PHP
2016-10-19	IObit Advanced SystemCare 10.0.2 - Unquoted Service Path Privilege Escalation	local	Windows
2016-10-19	HikVision Security Systems - Activex Buffer Overflow	local	Windows
2016-10-19	Intel(R) Management Engine Components 8.0.1.1399 - Unquoted Service Path Privilege Escalation	local	Windows
2016-10-19	Lenovo RapidBoot HDD Accelerator 1.00.0802 - Unquoted Service Path Privilege Escalation	local	Windows
2016-10-19	Lenovo Slim USB Keyboard 1.09 - Unquoted Service Path Privilege Escalation	local	Windows
2016-10-19	Vembu StoreGrid 4.0 - Unquoted Service Path Privilege Escalation	local	Windows
2016-10-19	Lenovo ThinkVantage Communications Utility 3.0.42.0 - Unquoted Service Path Privilege Escalation	local	Windows
2016-10-19	Intel(R) PROSet/Wireless for Bluetooth(R) + High Speed 15.1.0.0096 - Unquoted Service Path Privilege Escalation	local	Windows
2016-10-19	Intel(R) PROSet/Wireless WiFi Software 15.01.1000.0927 - Unquoted Service Path Privilege Escalation	webapps	PHP
2016-10-19	PDF Complete 4.1.12 Corporate Edition - Unquoted Service Path Privilege Escalation	local	Windows
2016-10-19	Realtek High Definition Audio Driver 6.0.1.6730 - Unquoted Service Path Privilege Escalation	local	Windows
2016-10-19	Linux Kernel 2.6.22 < 3.9 - 'Dirty COW' /proc/self/mem Race Condition (Write Access Method)	local	Linux
2016-10-18	Microsoft Windows (x86) - 'afd.sys' Local Privilege Escalation (MS11-046)	local	Windows_x86
2016-10-18	[Turkish] Detailed Cross-Site Scripting Paper	papers	Multiple
2016-10-18	Pluck CMS 4.7.3 - Cross-Site Request Forgery (Add Page)	webapps	PHP
2016-10-18	LanSpy 2.0.0.155 - Local Buffer Overflow	local	Windows
2016-10-18	ManageEngine ServiceDesk Plus 9.2 Build 9207 - Unauthorized Information Disclosure	webapps	Java
2016-10-18	The Unarchiver 3.11.1 - '.tar.Z' Crash (PoC)	dos	OSX
2016-10-18	Cgiemail 1.6 - Source Code Disclosure	webapps	CGI
2016-10-18	Microsoft Windows - DFS Client Driver Arbitrary Drive Mapping Privilege Escalation (MS16-123)	local	Windows
2016-10-18	Microsoft Windows - DeviceApi CMApi PiCMOpenDeviceKey Arbitrary Registry Key Write Privilege Escalation (MS16-124)	local	Windows
2016-10-18	Microsoft Windows - DeviceApi CMApi User Hive Impersonation Privilege Escalation (MS16-124)	local	Windows
2016-10-18	PoC \|\| GTFO 0x13	papers	Magazine
2016-10-17	[Turkish] Web Security Vulnerabilities - Web Güvenlik Açıkları	papers	Multiple
2016-10-17	Windows/x64 - WinExec(cmd.exe) Shellcode (93 bytes)	shellcode	Windows_x86-64
2016-10-17	Spy Emergency 23.0.205 - Unquoted Service Path Privilege Escalation	local	Windows
2016-10-17	Subrion CMS 4.0.5 - Cross-Site Request Forgery Bypass / Persistent Cross-Site Scripting	webapps	PHP
2016-10-17	Tuleap 8.18 - SQL Injection & Cross-Site Scripting Vulnerability Analysis	papers	PHP
2016-10-17	PHP Business Directory - Multiple Vulnerabilities	webapps	PHP
2016-10-17	Windows/x86 - Reverse (www.example.com:4444/UDP) Keylogger Shellcode (493 bytes)	shellcode	Windows_x86
2016-10-17	Ruby on Rails - Dynamic Render File Upload / Remote Code Execution (Metasploit)	remote	Multiple
2016-10-17	Microsoft Windows Diagnostics Hub - DLL Load Privilege Escalation (MS16-125)	local	Windows
2016-10-16	PHP Telephone Directory - Multiple Vulnerabilities	webapps	PHP
2016-10-16	PHP Image Database - Multiple Vulnerabilities	webapps	PHP
2016-10-16	PHP NEWS 1.3.0 - Cross-Site Request Forgery (Add Admin)	webapps	PHP
2016-10-16	Linux Kernel < 4.5.1 - Off-By-One (PoC)	dos	Linux
2016-10-15	NETGATE Registry Cleaner 16.0.205 - Unquoted Service Path Privilege Escalation	local	Windows
2016-10-15	NETGATE AMITI Antivirus 23.0.305 - Unquoted Service Path Privilege Escalation	local	Windows

2016-10-15	NETGATE Data Backup build 3.0.605 - Unquoted Service Path Privilege Escalation	local	Windows
2016-10-14	Simple Forum PHP 2.4 - SQL Injection	webapps	PHP
2016-10-14	Simple Forum PHP 2.4 - Cross-Site Request Forgery (Edit Options)	webapps	PHP
2016-10-14	NO-IP DUC 4.1.1 - Unquoted Service Path Privilege Escalation	local	Windows
2016-10-14	YouTube Automated CMS 1.0.7 - Cross-Site Request Forgery / Persistent Cross-Site Scripting	webapps	PHP
2016-10-14	Wondershare PDFelement 5.2.9 - Unquoted Service Path Privilege Escalation	local	Windows
2016-10-14	Mozilla Firefox 49.0.1 - Denial of Service	dos	Windows
2016-10-14	Graylog Collector 0.4.2 - Unquoted Service Path Privilege Escalation	local	Windows
2016-10-14	Student Information System (SIS) 0.1 - Authentication Bypass	webapps	PHP
2016-10-14	Web Based Alumni Tracking System 0.1 - SQL Injection	webapps	PHP
2016-10-14	Simple Dynamic Web 0.1 - SQL Injection	webapps	PHP
2016-10-14	Learning Management System 0.1 - Authentication Bypass	webapps	PHP
2016-10-14	Fashion Shopping Cart 0.1 - SQL Injection	webapps	PHP
2016-10-14	Health Record System 0.1 - Authentication Bypass	webapps	PHP
2016-10-14	Simple Shopping Cart Application 0.1 - SQL Injection	webapps	PHP
2016-10-14	School Full CBT 0.1 - SQL Injection	webapps	PHP
2016-10-13	ASLDRService ATK Hotkey 1.0.69.0 - Unquoted Service Path Privilege Escalation	local	Windows
2016-10-13	Thatware 0.4.6 - SQL Injection	webapps	PHP
2016-10-13	InsOnSrv Asus InstantOn 2.3.1.1 - Unquoted Service Path Privilege Escalation	local	Windows
2016-10-13	Simple Blog PHP 2.0 - Multiple Vulnerabilities	webapps	PHP
2016-10-13	Simple Blog PHP 2.0 - SQL Injection	webapps	PHP
2016-10-13	ATKGFNEXSrv ATKGFNEX 1.0.11.1 - Unquoted Service Path Privilege Escalation	local	Windows
2016-10-13	VOX Music Player 2.8.8 - '.pls' Denial of Service	dos	OSX
2016-10-13	IObit Malware Fighter 4.3.1 - Unquoted Service Path Privilege Escalation	local	Windows
2016-10-13	Colorful Blog - Persistent Cross-Site Scripting	webapps	PHP
2016-10-13	Colorful Blog - Cross-Site Request Forgery (Change Admin Password)	webapps	PHP
2016-10-13	Hotspot Shield 6.0.3 - Unquoted Service Path Privilege Escalation	local	Windows
2016-10-13	RSS News AutoPilot Script 1.0.1/3.1.0 - Admin Panel Authentication Bypass	webapps	PHP
2016-10-13	JonhCMS 4.5.1 - SQL Injection	webapps	PHP
2016-10-12	Subversion 1.6.6/1.6.12 - Code Execution	remote	Linux
2016-10-12	Cisco Webex Player T29.10 - '.WRF' Use-After-Free Memory Corruption	dos	Windows
2016-10-12	Cisco Webex Player T29.10 - '.ARF' Out-of-Bounds Memory Corruption	dos	Windows
2016-10-12	Adobe Flash Player 23.0.0.162 - '.SWF' ConstantPool Critical Memory Corruption	dos	Multiple
2016-10-12	Categorizator 0.3.1 - SQL Injection	webapps	PHP
2016-10-12	NetBilletterie 2.8 - Multiple Vulnerabilities	webapps	PHP
2016-10-12	ApPHP MicroCMS 3.9.5 - Persistent Cross-Site Scripting	webapps	PHP
2016-10-12	OpenCimetiere 3.0.0-a5 - Blind SQL Injection	webapps	PHP
2016-10-12	Google Android - Binder Generic ASLR Leak	dos	Android
2016-10-12	ApPHP MicroCMS 3.9.5 - Cross-Site Request Forgery (Add Admin)	webapps	PHP
2016-10-11	Minecraft Launcher 1.6.61 - Insecure File Permissions Privilege Escalation	local	Windows
2016-10-11	BirdBlog 1.4.0 - Cross-Site Request Forgery (Add New Post)	webapps	PHP
2016-10-11	phpEnter 4.2.7 - Cross-Site Request Forgery (Add New Post)	webapps	PHP
2016-10-11	Sheed AntiVirus 2.3 - Unquoted Service Path Privilege Escalation	local	Windows
2016-10-11	AVTECH IP Camera / NVR / DVR Devices - Multiple Vulnerabilities	webapps	CGI
2016-10-11	RSA Enterprise Compromise Assessment Tool 4.1.0.1 - XML External Entity Injection	webapps	XML
2016-10-11	Google Android - 'gpsOneXtra' Data Files Denial of Service	dos	Android
2016-10-11	Linux Kernel 3.13.1 - 'Recvmmsg' Local Privilege Escalation (Metasploit)	local	Linux
2016-10-11	Allwinner 3.4 Legacy Kernel - Local Privilege Escalation (Metasploit)	local	Android
2016-10-11	ApPHP MicroBlog 1.0.2 - Persistent Cross-Site Scripting	webapps	PHP
2016-10-11	ApPHP MicroBlog 1.0.2 - Cross-Site Request Forgery (Add New Author)	webapps	PHP
2016-10-10	Apache Tomcat 8/7/6 (RedHat Based Distros) - Local Privilege Escalation	local	Linux
2016-10-10	Linux Kernel 4.6.2 (Ubuntu 16.04.1) - 'IP6T_SO_SET_REPLACE' Local Privilege Escalation	local	Linux
2016-10-10	Zend Studio IDE 13.5.1 - Insecure File Permissions Privilege Escalation	local	Windows
2016-10-10	HP Client 9.1/9.0/8.1/7.9 - Command Injection	remote	Multiple
2016-10-10	Maian Weblog 4.0 - Cross-Site Request Forgery (Add New Post)	webapps	PHP
2016-10-10	Spacemarc News - Cross-Site Request Forgery (Add New Post)	webapps	PHP
2016-10-09	miniblog 1.0.1 - Cross-Site Request Forgery (Add New Post)	webapps	PHP
2016-10-09	Fitbit Connect Service - Unquoted Service Path Privilege Escalation	local	Windows
2016-10-09	Leap Service - Unquoted Service Path Privilege Escalation	local	Windows
2016-10-09	Wacom Consumer Service - Unquoted Service Path Privilege Escalation	local	Windows
2016-10-09	Foxit Cloud Update Service - Unquoted Service Path Privilege Escalation	local	Windows
2016-10-09	PHP Press Release - Cross-Site Request Forgery (Add Admin)	webapps	PHP
2016-10-09	PHP Press Release - Persistent Cross-Site Scripting	webapps	PHP
2016-10-07	Simple PHP Blog 0.8.4 - Cross-Site Request Forgery (Add Admin)	webapps	PHP
2016-10-07	Entrepreneur Job Portal Script 2.06 - SQL Injection	webapps	PHP
2016-10-07	BlueStacks 2.5.55 - Unquoted Service Path Privilege Escalation	local	Windows
2016-10-07	Waves Audio Service - Unquoted Service Path Privilege Escalation	local	Windows
2016-10-06	Advance MLM Script - SQL Injection	webapps	PHP
2016-10-06	PHP Classifieds Rental Script - Blind SQL Injection	webapps	PHP
2016-10-06	B2B Portal Script - Blind SQL Injection	webapps	PHP
2016-10-06	MLM Unilevel Plan Script 1.0.2 - SQL Injection	webapps	PHP
2016-10-06	Just Dial Clone Script - 'fid' SQL Injection	webapps	PHP
2016-10-06	Comodo Dragon Browser - Unquoted Service Path Privilege Escalation	local	Windows
2016-10-06	Billion 7700NR4 Router - Remote Command Execution	remote	Hardware
2016-10-06	Comodo Chromodo Browser - Unquoted Service Path Privilege Escalation	local	Windows
2016-10-06	Exagate WEBPack Management System - Multiple Vulnerabilities	remote	Hardware
2016-10-05	Cisco Firepower Threat Management Console 6.0.1 - Hard-Coded MySQL Credentials	local	Linux
2016-10-05	Cisco Firepower Threat Management Console 6.0.1 - Local File Inclusion	webapps	CGI
2016-10-05	Cisco Firepower Threat Management Console 6.0.1 - Remote Command Execution	webapps	CGI
2016-10-05	Picosafe Web GUI - Multiple Vulnerabilities	webapps	PHP
2016-10-05	VX Search Enterprise 9.0.26 - 'Login' Remote Buffer Overflow	remote	Windows
2016-10-05	Sync Breeze Enterprise 8.9.24 - 'Login' Remote Buffer Overflow	remote	Windows
2016-10-05	Dup Scout Enterprise 9.0.28 - 'Login' Remote Buffer Overflow	remote	Windows
2016-10-05	Disk Sorter Enterprise 9.0.24 - 'Login' Remote Buffer Overflow	remote	Windows
2016-10-05	Disk Savvy Enterprise 9.0.32 - 'Login' Remote Buffer Overflow	remote	Windows
2016-10-05	Abyss Web Server X1 2.11.1 - Unquoted Service Path Privilege Escalation	local	Windows
2016-10-05	Fortitude HTTP 1.0.4.0 - Unquoted Service Path Privilege Escalation	local	Windows
2016-10-05	Witbe - Remote Code Execution	webapps	CGI
2016-10-04	ISC BIND 9 - Denial of Service	dos	Multiple
2016-10-04	Mambo < 4.5.4 - SQL Injection	webapps	PHP
2016-10-03	[Hebrew] Digital Whisper Security Magazine #76	papers	Multiple
2016-10-03	Microsoft Windows Firewall Control - Unquoted Service Path Privilege Escalation	local	Windows
2016-10-03	Google Android - Insufficient Binder Message Verification Pointer Leak	dos	Android
2016-10-03	DWebPro 8.4.2 - Multiple Vulnerabilities	remote	Windows
2016-10-03	[Turkish] Wireshark - Important Tips	papers	Multiple
2016-10-03	Apache Tomcat 8/7/6 (Debian-Based Distros) - Local Privilege Escalation	local	Linux
2016-10-03	Street Fighter 5 - 'Capcom.sys' Kernel Execution (Metasploit)	local	Windows_x86-64
2016-10-03	Disk Pulse Enterprise 9.0.34 - 'Login' Remote Buffer Overflow	remote	Windows
2016-09-30	NETGEAR Genie 2.4.32 - Unquoted Service Path Privilege Escalation	local	Windows
2016-09-29	KeepNote 0.7.8 - Command Execution	local	Multiple
2016-09-29	Grandsteam GXV3611_HD - SQL Injection	remote	Hardware
2016-09-28	Symantec Messaging Gateway 10.6.1 - Directory Traversal	webapps	Java
2016-09-28	Glassfish Server - Unquoted Service Path Privilege Escalation	local	Windows
2016-09-28	VideoLAN VLC Media Player 2.2.1 - Buffer Overflow	dos	Windows
2016-09-27	Linux Kernel 4.6.3 (x86) - 'Netfilter' Local Privilege Escalation (Metasploit)	local	Linux_x86
2016-09-27	FreePBX < 13.0.188 - Remote Command Execution (Metasploit)	remote	PHP
2016-09-27	Deactivating Endpoint Protection Software in an Unauthorized Manner (Revisited)	papers	Windows
2016-09-27	TP-Link Archer CR-700 - Cross-Site Scripting	webapps	Hardware
2016-09-27	NetMan 204 - Backdoor Account	remote	Hardware
2016-09-27	Google Android 5.0 < 5.1.1 - 'Stagefright' .MP4 tx3g Integer Overflow (Metasploit)	remote	Android
2016-09-26	Microsoft Windows - RegLoadAppKey Hive Enumeration Privilege Escalation (MS16-111)	local	Windows
2016-09-26	Macro Expert 4.0 - Multiple Privilege Escalations	local	Windows
2016-09-26	Iperius Remote 1.7.0 - Unquoted Service Path Privilege Escalation	local	Windows
2016-09-26	MSI - 'NTIOLib.sys' / 'WinIO.sys' Local Privilege Escalation	local	Windows
2016-09-26	Elantech-Smart Pad 11.9.0.0 - Unquoted Service Path Privilege Escalation	local	Windows
2016-09-26	[Turkish] Web Application Security and Secure Coding 101	papers	Multiple
2016-09-26	Joomla! Component Event Booking 2.10.1 - SQL Injection	webapps	PHP
2016-09-26	NetDrive 2.6.12 - Unquoted Service Path Privilege Escalation	local	Windows
2016-09-26	Microsoft Windows 8.1 Update 2 / 10 10586 (x86/x64) - NtLoadKeyEx User Hive Attachment Point Privilege Escalation (MS16-111)	local	Windows
2016-09-23	Adobe Flash - Crash When Freeing Memory After AVC decoding	dos	Multiple

2016-09-23	Adobe Flash - Video Decompression Memory Corruption	dos	Multiple
2016-09-23	Linux SELinux - W+X Protection Bypass via AIO	dos	Linux
2016-09-23	Zortam Mp3 Media Studio 21.15 - Insecure File Permissions Privilege Escalation	local	Windows
2016-09-23	Wise Care 365 4.27 / Wise Disk Cleaner 9.29 - Unquoted Service Path Privilege Escalation	local	Windows
2016-09-22	Matrimonial Website Script 1.0.2 - SQL Injection	webapps	PHP
2016-09-22	Metasploit Web UI - Diagnostic Console Command Execution (Metasploit)	remote	Multiple
2016-09-22	Kerio Control Unified Threat Management 9.1.0 build 1087/9.1.1 build 1324 - Multiple Vulnerabilities	webapps	PHP
2016-09-22	Joomla! Component com_videogallerylite 1.0.9 - SQL Injection	webapps	PHP
2016-09-22	Exponent CMS 2.3.9 - Blind SQL Injection	webapps	PHP
2016-09-22	JCraft/JSch Java Secure Channel 0.1.53 - Recursive sftp-get Directory Traversal	dos	Windows
2016-09-22	AnyDesk 2.5.0 - Unquoted Service Path Privilege Escalation	local	Windows
2016-09-22	Microsoft Windows Kerberos - Security Feature Bypass (MS16-101)	local	Windows
2016-09-22	[Turkish] Network Penetration Testing 101	papers	Multiple
2016-09-22	Microix Timesheet Module - SQL Injection	webapps	ASPX
2016-09-21	Kaltura 11.1.0-2 - Remote Code Execution (Metasploit)	remote	PHP
2016-09-21	Microsoft Office PowerPoint 2010 - Invalid Pointer Reference	dos	Windows
2016-09-21	Symantec RAR Decomposer Engine (Multiple Products) - Out-of-Bounds Read / Out-of-Bounds Write	dos	Multiple
2016-09-20	Dolphin 7.3.0 - Error-Based SQL Injection	webapps	PHP
2016-09-20	VegaDNS 0.13.2 - Remote Command Injection	webapps	PHP
2016-09-19	ZineBasic 1.1 - Arbitrary File Disclosure	webapps	PHP
2016-09-19	SolarWinds Kiwi CatTools 3.11.0 - Unquoted Service Path Privilege Escalation	local	Windows
2016-09-19	VMware Workstation - 'vprintproxy.exe' JPEG2000 Images Multiple Memory Corruptions	dos	Windows
2016-09-19	VMware Workstation - 'vprintproxy.exe' TrueType NAME Tables Heap Buffer Overflow (PoC)	dos	Windows
2016-09-19	MuM MapEdit 3.2.6.0 - Multiple Vulnerabilities	webapps	ASPX
2016-09-19	MyBB 1.8.6 - SQL Injection	webapps	PHP
2016-09-19	Kajona 4.7 - Cross-Site Scripting / Directory Traversal	webapps	PHP
2016-09-19	Docker Daemon - Local Privilege Escalation (Metasploit)	local	Linux
2016-09-19	SolarWinds Kiwi Syslog Server 9.5.1 - Unquoted Service Path Privilege Escalation	local	Windows
2016-09-19	EKG Gadu 1.9~pre+r2855-3+b1 - Local Buffer Overflow	local	Linux
2016-09-19	WordPress Plugin Order Export Import for WooCommerce - Order Information Disclosure	webapps	PHP
2016-09-19	BuilderEngine 3.5.0 - Arbitrary File Upload	webapps	PHP
2016-09-19	PHP 5.0.0 - 'tidy_parse_file()' Local Buffer Overflow	local	Windows
2016-09-19	ShoreTel Connect ONSITE - Blind SQL Injection	webapps	PHP
2016-09-16	AnoBBS 1.0.1 - Remote File Inclusion	webapps	PHP
2016-09-16	Cisco ASA - 'EXTRABACON' Authentication Bypass (Improved Shellcode) (69 bytes)	shellcode	Hardware
2016-09-16	Cisco ASA 9.2(3) - 'EXTRABACON' Authentication Bypass	remote	Hardware
2016-09-16	Joomla! Component Catalog 1.0.7 - SQL Injection	webapps	PHP
2016-09-16	Joomla! Component Portfolio Gallery 1.0.6 - SQL Injection	webapps	PHP
2016-09-15	Cisco EPC 3925 - Multiple Vulnerabilities	webapps	ASP
2016-09-15	NetBSD - 'mail.local(8)' Local Privilege Escalation (Metasploit)	local	NetBSD_x86
2016-09-15	A Day In The Life Of A Pentester: How I Owned Your Domain In 4 Hours	papers	Multiple
2016-09-14	Google Android - getpidcon Usage binder Service Replacement Race Condition	dos	Android
2016-09-14	PrivateTunnel Client 2.7.0 (x64) - Local Credentials Disclosure	local	Windows_x86-64
2016-09-14	Apache Mina 2.0.13 - Remote Command Execution	remote	Multiple
2016-09-13	Cherry Music 0.35.1 - Arbitrary File Disclosure	webapps	PHP
2016-09-13	Battle.Net 1.5.0.7963 - Insecure File Permissions Privilege Escalation	local	Windows
2016-09-13	Windows/x86 - Bind (/TCP) Shell + Password (damn_it!$$##@;*#) Shellcode (637 bytes)	shellcode	Windows_x86
2016-09-13	wdCalendar 2 - SQL Injection	webapps	PHP
2016-09-13	Zapya Desktop 1.803 - 'ZapyaService.exe' Local Privilege Escalation	local	Windows
2016-09-13	Contrexx CMS egov Module 1.0.0 - SQL Injection	webapps	PHP
2016-09-13	Exper EWM-01 ADSL/MODEM - DNS Change	webapps	CGI
2016-09-13	Open-Xchange App Suite 7.8.2 - Cross-Site Scripting	webapps	Linux
2016-09-13	Open-Xchange Guard 2.4.2 - Multiple Cross-Site Scripting Vulnerabilities	webapps	Linux
2016-09-13	Multiple Icecream Apps - Insecure File Permissions Privilege Escalation	local	Windows
2016-09-13	WinSMS 3.43 - Insecure File Permissions Privilege Escalation	local	Windows
2016-09-13	Microsoft Internet Explorer 11.0.9600.18482 - Use After Free	dos	Windows
2016-09-13	ASUS DSL-X11 ADSL Router - DNS Change	webapps	CGI
2016-09-13	COMTREND ADSL Router CT-5367 C01_R12 / CT-5624 C01_R03 - DNS Change	webapps	CGI
2016-09-13	Tenda ADSL2/2+ Modem 963281TAN - DNS Change	webapps	CGI
2016-09-13	PLANET VDR-300NU ADSL Router - DNS Change	webapps	CGI
2016-09-13	PIKATEL 96338WS, 96338L-2M-8M - DNS Change	webapps	CGI
2016-09-13	Inteno EG101R1 VoIP Router - DNS Change	webapps	CGI
2016-09-12	MySQL / MariaDB / PerconaDB 5.5.51/5.6.32/5.7.14 - Code Execution / Privilege Escalation	local	Linux
2016-09-09	Airmail 3.0.2 - Cross-Site Scripting	webapps	OSX
2016-09-09	LamaHub 0.0.6.2 - Remote Buffer Overflow	remote	Linux
2016-09-09	Vodafone Mobile Wifi - Reset Admin Password	webapps	Hardware
2016-09-08	Dropbox Desktop Client 9.4.49 (x64) - Local Credentials Disclosure	local	Windows_x86-64
2016-09-08	Adobe Flash - Method Calls Use-After-Free	dos	Multiple
2016-09-08	Adobe Flash - Transform.colorTranform Getter Infomation Leak	dos	Multiple
2016-09-08	Google Android - libutils UTF16 to UTF8 Conversion Heap Buffer Overflow	remote	Android
2016-09-08	Zabbix 2.0 < 3.0.3 - SQL Injection	webapps	PHP
2016-09-08	Apple iCloud Desktop Client 5.2.1.0 - Local Credentials Disclosure	local	Windows
2016-09-08	LogMeIn Client 1.3.2462 (x64) - Local Credentials Disclosure	local	Windows_x86-64
2016-09-08	Jobberbase 2.0 - Multiple Vulnerabilities	webapps	PHP
2016-09-08	Windows/x86 (7) - Bind (4444/TCP) Shell Shellcode (357 bytes)	shellcode	Windows_x86
2016-09-07	Adobe ColdFusion < 11 Update 10 - XML External Entity Injection	webapps	Multiple
2016-09-07	FreePBX 13.0.x < 13.0.154 - Remote Command Execution	webapps	PHP
2016-09-07	SugarCRM 6.5.23 - REST PHP Object Injection (Metasploit)	remote	PHP
2016-09-07	CumulusClips 2.4.1 - Multiple Vulnerabilities	webapps	PHP
2016-09-07	TeamViewer 11.0.65452 (x64) - Local Credentials Disclosure	local	Windows_x86-64
2016-09-06	WIN-911 7.17.00 - Multiple Vulnerabilities	local	Windows
2016-09-06	glibc - 'getaddrinfo' Remote Stack Buffer Overflow	remote	Linux
2016-09-06	PHPIPAM 1.2.1 - Multiple Vulnerabilities	webapps	PHP
2016-09-06	Sony Playstation 4 (PS4) 3.15 < 3.55 - WebKit Code Execution (PoC)	local	Hardware
2016-09-05	Navicat Premium 11.2.11 (x64) - Local Database Password Disclosure	local	Windows_x86-64
2016-09-05	ArcServe UDP 6.0.3792 Update 2 Build 516 - Unquoted Service Path Privilege Escalation	local	Windows
2016-09-05	Windows/x86 - Reverse (192.168.232.129:4444/TCP) Shell + Persistent Access Shellcode (494 bytes)	shellcode	Windows_x86
2016-09-05	WordPress Plugin RB Agency 2.4.7 - Local File Disclosure	webapps	PHP
2016-09-05	MySQL 5.5.45 (x64) - Local Credentials Disclosure	local	Windows_x86-64
2016-09-04	Belkin F9K1122v1 1.00.30 - Buffer Overflow (via Cross-Site Request Forgery)	webapps	Hardware
2016-09-01	FortiClient SSLVPN 5.4 - Credentials Disclosure	local	Windows
2016-09-01	[Hebrew] Digital Whisper Security Magazine #75	papers	Multiple
2016-08-31	PHP 5.0.0 - 'snmpwalkoid()' Local Denial of Service	dos	PHP
2016-08-31	PHP 5.0.0 - 'fbird_[p]connect()' Local Denial of Service	dos	PHP
2016-08-31	PHP 5.0.0 - 'snmpwalk()' Local Denial of Service	dos	PHP
2016-08-31	PHP 5.0.0 - 'snmprealwalk()' Local Denial of Service	dos	PHP
2016-08-31	PHP 5.0.0 - 'snmpset()' Local Denial of Service	dos	PHP
2016-08-31	PHP 7.0 - 'AppendIterator::append' Local Denial of Service	dos	PHP
2016-08-31	ZKTeco ZKTime.Net 3.0.1.6 - Insecure File Permissions Privilege Escalation	local	Windows
2016-08-31	ZKTeco ZKAccess Professional 3.5.3 - Insecure File Permissions Privilege Escalation	local	Windows
2016-08-31	ZKTeco ZKBioSecurity 3.0 - Hard-Coded Credentials SYSTEM Remote Code Execution	webapps	JSP
2016-08-31	ZKTeco ZKBioSecurity 3.0 - Cross-Site Request Forgery (Add Superadmin)	webapps	JSP
2016-08-31	ZKTeco ZKBioSecurity 3.0 - Directory Traversal	webapps	JSP
2016-08-31	ZKTeco ZKBioSecurity 3.0 - 'visLogin.jsp' Local Authentication Bypass	webapps	JSP
2016-08-31	ZKTeco ZKAccess Security System 5.3.1 - Persistent Cross-Site Scripting	webapps	JSP
2016-08-31	PHP 7.0 - JsonSerializable::jsonSerialize json_encode Local Denial of Service	dos	PHP
2016-08-30	PHP 5.0.0 - 'imap_mail()' Local Denial of Service	dos	PHP
2016-08-30	PHP 5.0.0 - 'hw_docbyanchor()' Local Denial of Service	dos	PHP
2016-08-30	PHP 5.0.0 - 'html_doc_file()' Local Denial of Service	dos	PHP
2016-08-30	RSS News AutoPilot Script 1.0.1/3.0.3 - Cross-Site Request Forgery	webapps	PHP
2016-08-30	Sony PlayStation Vita - Vita sceNetIoctl use-after-free (Kernel)	papers	Hardware
2016-08-29	NScan 0.9.1 - 'Target' Local Buffer Overflow	local	Windows
2016-08-29	PHP 5.0.0 - 'domxml_open_file()' Local Denial of Service	dos	PHP
2016-08-29	PHP 7.0 - Object Cloning Local Denial of Service	dos	PHP
2016-08-29	Intellinet IP Camera INT-L100M20N - Unauthorized Admin Credential Change	webapps	CGI
2016-08-29	PLC Wireless Router GPN2.4P21-C-CN - Arbitrary File Disclosure	webapps	CGI
2016-08-29	PHP 5.0.0 - 'simplexml_load_file()' Local Denial of Service	dos	PHP
2016-08-29	PHP 5.0.0 - 'xmldocfile()' Local Denial of Service	dos	PHP
2016-08-29	Adobe Flash - Selection.setFocus Use-After-Free	dos	Multiple
2016-08-29	Goron WebServer 2.0 - Multiple Vulnerabilities	dos	Windows

2016-08-29	[Persian] Android Security and Forensic Science	papers	Android
2016-08-29	HelpDeskZ 1.0.2 - Arbitrary File Upload	webapps	PHP
2016-08-29	FreePBX 13.0.35 - Remote Command Execution	webapps	PHP
2016-08-29	Adobe Flash - BitmapData.copyPixels Use-After-Free	dos	Multiple
2016-08-29	Adobe Flash - Stage.align Setter Use-After-Free	dos	Multiple
2016-08-29	Adobe Flash - Use-After-Free When Returning Rectangle	dos	Multiple
2016-08-29	Adobe Flash - MovieClip Transform Getter Use-After-Free	dos	Multiple
2016-08-29	FreePBX 13.0.35 - SQL Injection	webapps	PHP
2016-08-28	CubeCart < 3.0.12 - Multiple Vulnerabilities	webapps	PHP
2016-08-27	Sony PlayStation Vita - On HENkaku offline installer	papers	Hardware
2016-08-24	WordPress Plugin CYSTEME Finder 1.3 - Arbitrary File Disclosure/Arbitrary File Upload	webapps	PHP
2016-08-23	WordPress Plugin Mail Masta 1.0 - Local File Inclusion	webapps	PHP
2016-08-23	Eye of Gnome 3.10.2 - GMarkup Out of Bounds Write	dos	Linux
2016-08-23	SimplePHPQuiz - Blind SQL Injection	webapps	PHP
2016-08-23	chatNow - Multiple Vulnerabilities	webapps	PHP
2016-08-23	Phoenix Exploit Kit - Remote Code Execution (Metasploit)	remote	PHP
2016-08-22	Vanderbilt IP-Camera CCPW3025-IR / CVMW3025-IR - Local File Disclosure	webapps	CGI
2016-08-22	JVC IP-Camera VN-T216VPRU - Local File Disclosure	webapps	CGI
2016-08-22	Honeywell IP-Camera HICC-1100PT - Local File Disclosure	webapps	CGI
2016-08-22	VideoIQ Camera - Local File Disclosure	webapps	Hardware
2016-08-22	Ocomon 2.0 - SQL Injection	webapps	PHP
2016-08-22	Sakai 10.7 - Multiple Vulnerabilities	webapps	Java
2016-08-22	Hunting HTML 5 postMessage Vulnerabilities	papers	Multiple
2016-08-22	WordPress 4.5.3 - Directory Traversal / Denial of Service	webapps	PHP
2016-08-22	ObiHai ObiPhone 1032/1062 < 5-0-0-3497 - Multiple Vulnerabilities	dos	Hardware
2016-08-19	SIEMENS IP Cameras (Multiple Models) - Credential Disclosure / Configuration Download	webapps	CGI
2016-08-19	Vanderbilt IP-Camera CCPW3025-IR / CVMW3025-IR - Credentials Disclosure	webapps	CGI
2016-08-19	JVC IP-Camera VN-T216VPRU - Credentials Disclosure	webapps	CGI
2016-08-19	C2S DVR Management IRDOME-II-C2S / IRBOX-II-C2S / DVR - Credentials Disclosure / Authentication Bypass	webapps	CGI
2016-08-19	TOSHIBA IP-Camera IK-WP41A - Authentication Bypass / Configuration Download	webapps	CGI
2016-08-19	MESSOA IP-Camera NIC990 - Authentication Bypass / Configuration Download	webapps	CGI
2016-08-19	Microsoft Windows - Fileless UAC Protection Bypass Privilege Escalation (Metasploit)	local	Windows
2016-08-19	ZYCOO IP Phone System - Remote Command Execution	webapps	CGI
2016-08-19	Watchguard Firewalls - 'ESCALATEPLOWMAN' ifconfig Privilege Escalation	local	Linux
2016-08-19	Cisco ASA / PIX - 'EPICBANANA' Local Privilege Escalation	local	Hardware
2016-08-19	TOPSEC Firewalls - 'ELIGIBLECONTESTANT' Remote Code Execution	webapps	CGI
2016-08-19	TOPSEC Firewalls - 'ELIGIBLECANDIDATE' Remote Code Execution	webapps	CGI
2016-08-19	TOPSEC Firewalls - 'ELIGIBLEBOMBSHELL' Remote Code Execution	webapps	CGI
2016-08-19	TOPSEC Firewalls - 'ELIGIBLEBACHELOR' Remote Command Execution	remote	Hardware
2016-08-19	Fortigate Firewalls - 'EGREGIOUSBLUNDER' Remote Code Execution	webapps	Hardware
2016-08-19	MESSOA IP Cameras (Multiple Models) - Password Change	webapps	CGI
2016-08-19	tcPbX - 'tcpbx_lang' Local File Inclusion	webapps	PHP
2016-08-18	Cisco ASA 8.x - 'EXTRABACON' Authentication Bypass	remote	Hardware
2016-08-18	Windows/x86 - InitiateSystemShutdownA() Shellcode (599 bytes)	shellcode	Windows_x86
2016-08-18	SIEMENS IP Camera CCMW1025 x.2.2.1798 - Remote Admin Credentials Change	webapps	CGI
2016-08-18	Honeywell IP-Camera HICC-1100PT - Credentials Disclosure	webapps	CGI
2016-08-18	X-Cart < 4.1.3 - Arbitrary Variable Overwrite	webapps	PHP
2016-08-18	Linux Kernel - TCP Related Read Use-After-Free	dos	Linux
2016-08-18	Sony PlayStation Vita - Exploiting WebKit on Vita 3.60 (WebKit)	papers	Hardware
2016-08-17	SIEMENS IP-Camera CVMS2025-IR / CCMS2025 - Credentials Disclosure	webapps	CGI
2016-08-17	Microsoft Windows - GDI+ DecodeCompressedRLEBitmap Invalid Pointer Arithmetic Out-of-Bounds Write (MS16-097)	dos	Windows
2016-08-17	Microsoft Windows - GDI+ ValidateBitmapInfo Invalid Pointer Arithmetic Out-of-Bounds Reads (MS16-097)	dos	Windows
2016-08-17	Microsoft Windows - GDI+ EMR_EXTTEXTOUTA / EMR_POLYTEXTOUTA Heap Buffer Overflow (MS16-097)	dos	Windows
2016-08-16	Microsoft Word 2013/2016 - sprmSdyaTop Denial of Service (MS16-099)	dos	Multiple
2016-08-16	WSO2 Identity Server 5.1.0 - Multiple Vulnerabilities	webapps	JSP
2016-08-16	WSO2 Carbon 4.4.5 - Local File Inclusion	webapps	JSP
2016-08-16	WSO2 Carbon 4.4.5 - Persistent Cross-Site Scripting	webapps	JSP
2016-08-16	WSO2 Carbon 4.4.5 - Denial of Service / Cross-Site Request Forgery	webapps	JSP
2016-08-16	[Turkish] Drupal Coder Vulnerability Analysis & MSF Module Dev	papers	PHP
2016-08-16	Windows/x86 - MessageBoxA() Shellcode (242 bytes)	shellcode	Windows_x86
2016-08-16	Windows/x86 - CreateProcessA cmd.exe Shellcode (253 bytes)	shellcode	Windows_x86
2016-08-16	Lepton CMS 2.2.0/2.2.1 - Directory Traversal	webapps	PHP
2016-08-16	Lepton CMS 2.2.0/2.2.1 - PHP Code Injection	webapps	PHP
2016-08-16	Pi-Hole Web Interface 2.8.1 - Persistent Cross-Site Scripting in Whitelist/Blacklist	webapps	Linux
2016-08-16	Nagios Log Server 1.4.1 - Multiple Vulnerabilities	webapps	PHP
2016-08-16	Nagios Network Analyzer 2.2.0 - Multiple Vulnerabilities	webapps	PHP
2016-08-16	Nagios Incident Manager 2.0.0 - Multiple Vulnerabilities	webapps	PHP
2016-08-16	Microsoft Internet Explorer - MSHTML!CMultiReadStreamLifetimeManager::ReleaseThreadStateInternal Read AV	dos	Windows
2016-08-15	GitLab - 'impersonate' Feature Privilege Escalation	webapps	Ruby
2016-08-15	Zabbix 2.2.x/3.0.x - SQL Injection	webapps	PHP
2016-08-14	Samsung Smart Home Camera SNH-P-6410 - Command Injection	remote	Hardware
2016-08-14	Claroline < 1.7.7 - Arbitrary File Inclusion	webapps	PHP
2016-08-12	FreePBX 13/14 - Remote Command Execution / Privilege Escalation	remote	Linux
2016-08-11	ColoradoFTP 1.3 Prime Edition (Build 8) - Directory Traversal	webapps	Java
2016-08-11	SquirrelMail < 1.4.7 - Arbitrary Variable Overwrite	webapps	PHP
2016-08-10	Nagios Network Analyzer 2.2.1 - Multiple Cross-Site Request Forgery Vulnerabilities	webapps	PHP
2016-08-10	Linux/x86 - Bind (9090/TCP) Shell (/bin/zsh) Shellcode (96 bytes)	shellcode	Linux_x86
2016-08-10	Linux/x86 - Reverse (127.255.255.254:9090/TCP) Shell (/bin/zsh) Shellcode (80 bytes)	shellcode	Linux_x86
2016-08-10	Microsoft Word 2007/2010/2013/2016 - Out-of-Bounds Read Code Execution (MS16-099)	local	Windows
2016-08-10	vBulletin 5.2.2 - Server-Side Request Forgery	webapps	PHP
2016-08-10	EyeLock Myris 3.3.2 - SDK Service Unquoted Service Path Privilege Escalation	local	Windows
2016-08-10	EyeLock nano NXT 3.5 - Local File Disclosure	webapps	PHP
2016-08-10	EyeLock nano NXT 3.5 - Remote Code Execution	webapps	PHP
2016-08-10	WebNMS Framework Server 5.2/5.2 SP1 - Multiple Vulnerabilities	webapps	JSP
2016-08-10	SAP SAPCAR - Multiple Vulnerabilities	dos	Linux
2016-08-09	Xfinity Gateway (Technicolor DPC3941T) - Cross-Site Request Forgery	webapps	Hardware
2016-08-08	Navis Webaccess - SQL Injection	webapps	JSP
2016-08-08	PHPCollab CMS 2.5 - 'emailusers.php' SQL Injection	webapps	PHP
2016-08-08	Microsoft Windows 7 (x86/x64) - Group Policy Privilege Escalation (MS16-072)	local	Windows
2016-08-08	WordPress Plugin Add From Server < 3.3.2 - Cross-Site Request Forgery (Arbitrary File Upload)	webapps	PHP
2016-08-06	NUUO NVRmini 2 3.0.8 - Remote Code Execution	webapps	PHP
2016-08-06	NUUO NVRmini 2 3.0.8 - Cross-Site Request Forgery (Add Admin)	webapps	PHP
2016-08-06	NUUO NVRmini 2 3.0.8 - Local File Disclosure	webapps	PHP
2016-08-06	NUUO NVRmini 2 3.0.8 - Multiple OS Command Injections	webapps	PHP
2016-08-06	NUUO NVRmini 2 3.0.8 - Remote Command Injection (Shellshock)	webapps	CGI
2016-08-06	NUUO NVRmini 2 3.0.8 - Arbitrary File Deletion	webapps	PHP
2016-08-06	NUUO NVRmini 2 3.0.8 - 'strong_user.php' Backdoor Remote Shell Access	webapps	PHP
2016-08-06	VMware Host Guest Client Redirector - DLL Side Loading (Metasploit)	local	Windows
2016-08-05	NUUO NVRmini2 / NVRsolo / Crystal Devices / NETGEAR ReadyNAS Surveillance Application - Multiple Vulnerabilities	remote	Hardware
2016-08-05	ntop/nbox 2.3 < 2.5 - Multiple Vulnerabilities	remote	Linux
2016-08-05	Subrion CMS 4.0.5 - SQL Injection	webapps	PHP
2016-08-05	zFTP Client 20061220 - 'Connection Name' Local Buffer Overflow	local	Linux
2016-08-05	PHP Power Browse 1.2 - Directory Traversal	webapps	PHP
2016-08-05	Davolink DV-2051 - Multiple Vulnerabilities	webapps	CGI
2016-08-05	WordPress Plugin Count Per Day 3.5.4 - Persistent Cross-Site Scripting	webapps	PHP
2016-08-05	NASdeluxe NDL-2400r 2.01.09 - OS Command Injection	webapps	Hardware
2016-08-05	Kodi Web Server 16.1 - Denial of Service	dos	Windows
2016-08-04	ntop-ng 2.5.160805 - Username Enumeration	webapps	Multiple
2016-08-03	Wireshark 1.12.0 < 1.12.12 - NDS Dissector Denial of Service	dos	Multiple
2016-08-03	Wireshark 2.0.0 < 2.0.4 - MMSE / WAP / WBXML / WSP Dissectors Denial of Service	dos	Multiple
2016-08-03	Wireshark 2.0.0 < 2.0.4 - CORBA IDL Dissectors Denial of Service	dos	Windows_x86-64
2016-08-03	Wireshark 1.12.0 < 1.12.12 / 2.0.0 < 2.0.4 - PacketBB Dissector Denial of Service	dos	Multiple
2016-08-03	Wireshark 1.12.0 < 1.12.12 / 2.0.0 < 2.0.4 - WSP Dissector Denial of Service	dos	Multiple
2016-08-03	Wireshark 1.12.0 < 1.12.12 / 2.0.0 < 2.0.4 - RLC Dissector Denial of Service	dos	Multiple
2016-08-02	Open Upload 0.4.2 - Cross-Site Request Forgery (Add Admin)	webapps	PHP
2016-08-01	[Hebrew] Digital Whisper Security Magazine #74	papers	Multiple
2016-08-01	WordPress Plugin Booking Calendar 6.2 - SQL Injection	webapps	PHP
2016-08-01	WordPress Plugin WP Live Chat Support 6.2.03 - Persistent Cross-Site Scripting	webapps	PHP
2016-08-01	WordPress Plugin ALO EasyMail NewsLetter 2.9.2 - Cross-Site Request Forgery (Add/Import Arbitrary Subscribers)	webapps	PHP
2016-08-01	Halliburton LogView Pro 9.7.5 - '.cgm' / '.tif' / '.tiff' / '.tifh' Crash (PoC)	dos	Windows

2016-07-30	Sony Playstation 4 (PS4) - Hacking the PS4, part 3 - Kernel exploitation	papers	Hardware
2016-07-29	WebKit - TypedArray.fill Memory Corruption	dos	Multiple
2016-07-29	Linux Kernel (ARM/ARM64) - 'perf_event_open()' Arbitrary Memory Read	dos	ARM
2016-07-29	AppArmor securityfs < 4.8 - 'aa_fs_seq_hash_show' Reference Count Leak	dos	Linux
2016-07-29	AXIS (Multiple Products) - 'devtools ' (Authenticated) Remote Command Execution	webapps	Linux
2016-07-29	VUPlayer 2.49 - '.pls' File Stack Buffer Overflow (DEP Bypass)	local	Windows
2016-07-29	mySCADAPro 7 - Local Privilege Escalation	local	Windows
2016-07-29	WordPress Plugin Ultimate Product Catalog 3.9.8 - do_shortcode via ajax Blind SQL Injection	webapps	PHP
2016-07-29	Windows/x86 (7) - localhost Port Scanner Shellcode (556 bytes)	shellcode	Windows_x86
2016-07-29	Barracuda Web App Firewall 8.0.1.008/Load Balancer 5.4.0.004 - (Authenticated) Remote Command Execution (Metasploit) (3)	remote	Linux
2016-07-29	Barracuda Web Application Firewall 8.0.1.008 - (Authenticated) Remote Command Execution (Metasploit)	remote	Linux
2016-07-29	Easy File Sharing Web Server 7.2 - Remote Overflow (Egghunter) (SEH)	remote	Windows
2016-07-29	Linux/x86 - Bind (98/TCP + UDP) Netcat Shell Shellcode (44/52 bytes)	shellcode	Linux_x86
2016-07-29	Trend Micro Deep Discovery 3.7/3.8 SP1 (3.81)/3.8 SP2 (3.82) - 'hotfix_upload.cgi' Filename Remote Code Execution	webapps	Linux
2016-07-29	WebKit - TypedArray.copyWithin Memory Corruption	dos	Multiple
2016-07-29	phpMyAdmin 4.6.2 - (Authenticated) Remote Code Execution	webapps	PHP
2016-07-27	Centreon 2.5.3 - Web Useralias Command Execution (Metasploit)	remote	Python
2016-07-26	Barracuda Web App Firewall 8.0.1.007/Load Balancer 5.4.0.004 - (Authenticated) Remote Command Execution (Metasploit)	remote	Linux
2016-07-26	PHP File Vault 0.9 - Directory Traversal	webapps	PHP
2016-07-26	Iris ID IrisAccess ICU 7000-2 - Multiple Vulnerabilities	webapps	CGI
2016-07-26	Iris ID IrisAccess ICU 7000-2 - Remote Command Execution	webapps	CGI
2016-07-26	Iris ID IrisAccess iCAM4000/iCAM7000 - Hard-Coded Credentials Remote Shell Access	remote	Linux
2016-07-25	Rapid7 AppSpider 6.12 - Local Privilege Escalation	local	Windows
2016-07-25	Barracuda Web App Firewall 8.0.1.007/Load Balancer 5.4.0.004 - Remote Command Execution (Metasploit)	remote	Linux
2016-07-25	Barracuda Spam & Virus Firewall 5.1.3.007 - Remote Command Execution (Metasploit)	remote	Linux
2016-07-25	Mediacoder 0.8.43.5852 - '.m3u' (SEH)	local	Windows
2016-07-25	Drupal Module CODER 2.5 - Remote Command Execution (Metasploit)	webapps	PHP
2016-07-25	CodoForum 3.2.1 - SQL Injection	webapps	PHP
2016-07-25	CoolPlayer+ Portable 2.19.6 - '.m3u' File Stack Overflow (Egghunter + ASLR Bypass)	local	Windows
2016-07-25	Cryptshare 3.10.1.2 - Stored XSS	papers	Linux
2016-07-25	GRR Système de Gestion et de Réservations de Ressources 3.0.0-RC1 - Arbitrary File Upload	webapps	PHP
2016-07-25	PHP gettext 1.0.12 - 'gettext.php' Code Execution	webapps	PHP
2016-07-25	PHP 5.5.37/5.6.23/7.0.8 - 'bzread()' Out-of-Bounds Write	dos	PHP
2016-07-25	Ubee EVW3226 Modem/Router 1.0.20 - Multiple Vulnerabilities	webapps	CGI
2016-07-25	Technicolor TC7200 Modem/Router STD6.02.11 - Multiple Vulnerabilities	webapps	CGI
2016-07-25	Hitron CGNV4 Modem/Router 4.3.9.9-SIP-UPC - Multiple Vulnerabilities	webapps	Hardware
2016-07-25	Compal CH7465LG-LC Modem/Router CH7465LG-NCIP-4.50.18.13-NOSH - Multiple Vulnerabilities	webapps	Hardware
2016-07-25	Bellini/Supercook Wi-Fi Yumi SC200 - Multiple Vulnerabilities	webapps	Hardware
2016-07-25	Micro Focus Filr 2 2.0.0.421/1.2 1.2.0.846 - Multiple Vulnerabilities	webapps	Java
2016-07-23	Drupal Module Coder < 7.x-1.3/7.x-2.6 - Remote Code Execution	remote	PHP
2016-07-22	Novel contributions to the field - How I broke MySQL's codebase	papers	Multiple
2016-07-21	TFTP Server 1.4 - 'WRQ' Remote Buffer Overflow (Egghunter)	remote	Windows
2016-07-21	Linux/x64 - Reverse (10.1.1.4:46357/TCP) Shell + Subtle Probing + Timer + Burst + Password (la crips) + Multi-Terminal Shellcode (84/122/172 bytes)	shellcode	Linux_x86-64
2016-07-21	TeamPass Passwords Management System 2.1.26 - Arbitrary File Download	webapps	PHP
2016-07-21	NetBSD - 'mail.local(8)' Local Privilege Escalation	local	BSD
2016-07-20	Linux/CRISv32 Axis Communication - Reverse (192.168.57.1:443/TCP) Shell (/bin/sh) Shellcode (189 bytes)	shellcode	Linux_CRISv32
2016-07-20	Django CMS 3.3.0 - Editor Snippet Persistent Cross-Site Scripting	webapps	Python
2016-07-20	Drupal Module RESTWS 7.x - PHP Remote Code Execution (Metasploit)	remote	PHP
2016-07-20	Linux/x86 - execve(/bin/sh) Shellcode (19 bytes)	shellcode	Linux_x86
2016-07-20	Wowza Streaming Engine 4.5.0 - Local Privilege Escalation	local	Windows
2016-07-20	Wowza Streaming Engine 4.5.0 - Remote Privilege Escalation	webapps	Multiple
2016-07-20	Wowza Streaming Engine 4.5.0 - Cross-Site Request Forgery (Add Advanced Admin)	webapps	Multiple
2016-07-20	Wowza Streaming Engine 4.5.0 - Multiple Cross-Site Scripting Vulnerabilities	webapps	Multiple
2016-07-20	OpenSSH 7.2p2 - Username Enumeration	remote	Linux
2016-07-20	WordPress Plugin Video Player 1.5.16 - SQL Injection	webapps	PHP
2016-07-20	Websphere/JBoss/OpenNMS/Symantec Endpoint Protection Manager - Java Deserialization Remote Code Execution	remote	Multiple
2016-07-19	Linux/x64 - Bind (4442/TCP) Shell + Syscall Persistent + Multi-Terminal/Port-Range (4444-4447/TCP) + Password (la crips) + Daemon Shellcode (83/148/177 bytes)	shellcode	Linux_x86-64
2016-07-19	Exploiting Apache James Server 2.3.2	papers	Java
2016-07-19	Axis Communications MPQT/PACS 5.20.x - Server-Side Include Daemon Remote Format String	remote	Multiple
2016-07-19	NewsP Free News Script 1.4.7 - User Credentials Disclosure	webapps	PHP
2016-07-19	newsp.eu PHP Calendar Script 1.0 - User Credentials Disclosure	webapps	PHP
2016-07-18	OpenSSHd 7.2p2 - Username Enumeration	remote	Linux
2016-07-17	Meinberg NTP Time Server ELX800/GPS M4x V5.30p - Remote Command Execution / Escalate Privileges	remote	Hardware
2016-07-15	Clear Voyager Hotspot IMW-C910W - Arbitrary File Disclosure	webapps	CGI
2016-07-14	Joomla! Component Guru Pro - 'Itemid' SQL Injection	webapps	PHP
2016-07-13	Adobe Acrobat Reader DC 15.016.20045 - Invalid Font '.ttf' Memory Corruption (1)	dos	Multiple
2016-07-13	Adobe Acrobat Reader DC 15.016.20045 - Invalid Font '.ttf' Memory Corruption (2)	dos	Multiple
2016-07-13	Adobe Acrobat Reader DC 15.016.20045 - Invalid Font '.ttf' Memory Corruption (3)	dos	Multiple
2016-07-13	Adobe Acrobat Reader DC 15.016.20045 - Invalid Font '.ttf' Memory Corruption (4)	dos	Multiple
2016-07-13	Adobe Acrobat Reader DC 15.016.20045 - Invalid Font '.ttf' Memory Corruption (5)	dos	Multiple
2016-07-13	Adobe Acrobat Reader DC 15.016.20045 - Invalid Font '.ttf' Memory Corruption (6)	dos	Multiple
2016-07-13	Adobe Acrobat Reader DC 15.016.20045 - Invalid Font '.ttf' Memory Corruption (7)	dos	Multiple
2016-07-13	Adobe Flash Player 22.0.0.192 - DefineBitsJPEG2 Memory Corruption	dos	Multiple
2016-07-13	Adobe Flash Player 22.0.0.192 - DefineSprite Memory Corruption	dos	Multiple
2016-07-13	Adobe Flash Player 22.0.0.192 - TAG Memory Corruption	dos	Multiple
2016-07-13	Adobe Flash Player 22.0.0.192 - SceneAndFrameData Memory Corruption	dos	Multiple
2016-07-13	Windows/x86 - URLDownloadToFileA(http://192.168.86.130/sample.exe) + SetFileAttributesA(pyld.exe) + WinExec() + ExitProcess() Shellcode (394 bytes)	shellcode	Windows_x86
2016-07-13	GSX Analyzer 10.12/11 - 'main.swf' Hard-Coded Superadmin Credentials	webapps	Windows
2016-07-13	Microsoft Windows 7 < 10 / 2008 < 2012 (x86/x64) - Secondary Logon Handle Privilege Escalation (MS16-032) (Metasploit)	local	Windows
2016-07-13	Riverbed SteelCentral NetProfiler/NetExpress - Remote Code Execution (Metasploit)	remote	Linux
2016-07-13	Apache Archiva 1.3.9 - Multiple Cross-Site Request Forgery Vulnerabilities	webapps	XML
2016-07-13	Linux/x86 - Reverse (127.1.1.1:10/TCP) Xterm Shell Shellcode (68 bytes)	shellcode	Linux_x86
2016-07-11	WordPress Plugin Activity Log 2.3.1 - Persistent Cross-Site Scripting	webapps	PHP
2016-07-11	IPS Community Suite 4.1.12.3 - PHP Code Injection	webapps	PHP
2016-07-11	Adobe Flash - ATF Processing Overflow	dos	Multiple
2016-07-11	Adobe Flash - JXR Processing Double-Free	dos	Multiple
2016-07-11	Adobe Flash - LMZA Property Decoding Heap Corruption	dos	Multiple
2016-07-11	Adobe Flash - ATF Image Packing Overflow	dos	Multiple
2016-07-11	Tiki Wiki 15.1 - File Upload (Metasploit)	webapps	PHP
2016-07-11	Microsoft Windows 7 SP1 - 'mrxdav.sys' WebDAV Privilege Escalation (MS16-016) (Metasploit)	local	Windows
2016-07-11	Ruby on Rails ActionPack Inline ERB - Code Execution (Metasploit)	remote	Ruby
2016-07-11	Tiki Wiki CMS 15.0 - Arbitrary File Download	webapps	PHP
2016-07-11	Belkin AC1200 Router Firmware 1.00.27 - Authentication Bypass	webapps	CGI
2016-07-11	WordPress Plugin All in One SEO Pack 2.3.6.1 - Persistent Cross-Site Scripting	webapps	PHP
2016-07-11	Beauty Parlour & SPA Saloon Management System - Blind SQL Injection	webapps	PHP
2016-07-11	Clinic Management System - Blind SQL Injection	webapps	PHP
2016-07-11	Linux/x64 - Reverse (10.1.1.4/TCP) Shell + Continuously Probing via Socket + Port-Range (391-399) + Password (la crips) + Null-Free Shellcode (172 bytes)	shellcode	Linux_x86-64
2016-07-11	Sony Playstation 4 (PS4) - Hacking the PS4, part 2 - Userland code execution	papers	Hardware
2016-07-08	WordPress Plugin Lazy Content Slider 3.4 - Cross-Site Request Forgery (Add Catetory)	webapps	PHP
2016-07-08	Hide.Me VPN Client 1.2.4 - Local Privilege Escalation	local	Windows
2016-07-08	InstantHMI 6.1 - Local Privilege Escalation	local	Windows
2016-07-08	Microsoft Process Kill Utility (kill.exe) 6.3.9600.17298 - Crash (PoC)	dos	Windows
2016-07-08	Microsoft WinDbg - 'logviewer.exe' Crash (PoC)	dos	Windows
2016-07-08	Linux/x86 - Reverse (192.168.227.129:4444/TCP) Shell (/bin/sh) Shellcode (75 bytes)	shellcode	Linux_x86
2016-07-08	PHP Real Estate Script 3 - Arbitrary File Disclosure	webapps	PHP
2016-07-08	CyberPower Systems PowerPanel 3.1.2 - XML External Entity Out-Of-Band Data Retrieval	webapps	XML
2016-07-08	Streamo Online Radio And TV Streaming CMS - SQL Injection	webapps	PHP
2016-07-07	OPAC KpwinSQL - Multiple Vulnerabilities	webapps	PHP
2016-07-07	GE Proficy HMI/SCADA CIMPLICITY 8.2 - Local Privilege Escalation	local	Windows
2016-07-07	Tiki Wiki 15.1 - File Upload	webapps	PHP
2016-07-06	CIMA DocuClass ECM - Multiple Vulnerabilities	webapps	PHP
2016-07-06	24online SMS_2500i 8.3.6 build 9.0 - SQL Injection	webapps	JSP
2016-07-06	Linux/x64 - Bind (4442/TCP) Ncat Shell + SSL + Multi-Channel (4444-4447/TCP) + Persistant + fork() + IPv4/6 + Password + Null-Free Shellcode (176 bytes)	shellcode	Linux_x86-64
2016-07-06	Advanced Webhost Billing System (AWBS) 2.9.6 - Multiple Vulnerabilities	webapps	PHP
2016-07-06	PaKnPost Pro 1.14 - Multiple Vulnerabilities	webapps	CGI
2016-07-06	GNU Wget < 1.18 - Arbitrary File Upload / Remote Code Execution	remote	Linux
2016-07-06	OpenFire 3.10.2 < 4.0.1 - Multiple Vulnerabilities	webapps	JSP
2016-07-06	Samsung Android JACK - Local Privilege Escalation	local	Android
2016-07-06	Nagios XI Chained - Remote Code Execution (Metasploit)	remote	Linux
2016-07-04	Exim 4 (Debian 8 / Ubuntu 16.04) - Spool Privilege Escalation	local	Linux

2016-07-04	XpoLog Center 6 - Remote Command Execution / Cross-Site Request Forgery	webapps	JSP
2016-07-04	Ktools Photostore 4.7.5 - Multiple Vulnerabilities	webapps	PHP
2016-07-04	Linux/x64 - Bind (/TCP) Netcat Shell + Null-Free Shellcode (64 bytes)	shellcode	Linux_x86-64
2016-07-04	WordPress Plugin Real3D FlipBook - Multiple Vulnerabilities	webapps	PHP
2016-07-04	Linux/x86 - Bind (4444/TCP) Shell (/bin/sh) Shellcode (98 bytes)	shellcode	Linux_x86
2016-07-04	WebCalendar 1.2.7 - Multiple Vulnerabilities	webapps	PHP
2016-07-04	eCardMAX 10.5 - Multiple Vulnerabilities	webapps	PHP
2016-07-04	Linux Kernel < 4.4.0-21 (Ubuntu 16.04 x64) - 'netfilter target_offset' Local Privilege Escalation	local	Linux
2016-07-03	Linux Kernel 4.4.0-21 (Ubuntu 16.04 x64) - Netfilter target_offset Out-of-Bounds Privilege Escalation	local	Linux_x86-64
2016-07-03	Python smtplib 2.7.11 / 3.4.4 / 3.5.1 - Man In The Middle StartTLS Stripping	local	Multiple
2016-07-01	Phoenix Exploit Kit - Remote Code Execution	webapps	PHP
2016-06-30	Ktools Photostore 4.7.5 - Blind SQL Injection	webapps	PHP
2016-06-29	Symantec AntiVirus - Unpacking RAR Multiple Remote Memory Corruptions	dos	Multiple
2016-06-29	Symantec AntiVirus - 'dec2lha Library' Remote Stack Buffer Overflow (PoC)	dos	Multiple
2016-06-29	Symantec AntiVirus - Heap Overflow Modifying MIME Messages	dos	Multiple
2016-06-29	Symantec AntiVirus - TNEF Decoder Integer Overflow	dos	Multiple
2016-06-29	Symantec AntiVirus - Missing Bounds Checks in dec2zip ALPkOldFormatDecompressor::UnShrink	dos	Multiple
2016-06-29	Symantec AntiVirus - PowerPoint Misaligned Stream-cache Remote Stack Buffer Overflow (PoC)	dos	Multiple
2016-06-29	Core FTP LE 2.2 - Path Field Local Buffer Overflow (PoC)	dos	Windows
2016-06-29	Microsoft Windows 7 SP1 (x86) - Local Privilege Escalation (MS16-014)	local	Windows_x86
2016-06-29	Lenovo ThinkPad - System Management Mode Arbitrary Code Execution	local	Windows
2016-06-29	Symantec Endpoint Protection Manager 12.1 - Multiple Vulnerabilities	webapps	PHP
2016-06-29	WordPress Plugin Ultimate Membership Pro 3.3 - SQL Injection	webapps	PHP
2016-06-29	Cuckoo Sandbox Guest 2.0.1 - XMLRPC Privileged Remote Code Execution	remote	Windows
2016-06-29	Ubiquiti Administration Portal - Remote Command Execution (via Cross-Site Request Forgery)	webapps	CGI
2016-06-29	Concrete5 CMS 5.7.3.1 - 'Application::dispatch' Method Local File Inclusion	webapps	PHP
2016-06-28	Linux/x64 - Reverse (192.168.86.128:1472/TCP) cat /etc/passwd Shellcode (164 bytes)	shellcode	Linux_x86-64
2016-06-28	Untangle NGFW 12.1.0 Beta - 'execEvil()' Command Injection	webapps	JSON
2016-06-27	WordPress Plugin Ultimate Product Catalog 3.8.6 - Arbitrary File Upload	webapps	PHP
2016-06-27	OPAC KpwinSQL - SQL Injection	webapps	PHP
2016-06-27	Magnet Networks Tesley CPVA 642 Router - Weak WPA-PSK Passphrase Algorithm	dos	Hardware
2016-06-27	CodoForum 3.4 - Persistent Cross-Site Scripting	webapps	PHP
2016-06-27	Option CloudGate CG0192-11897 - Multiple Vulnerabilities	webapps	Hardware
2016-06-27	Mediacoder 0.8.43.5830 - '.m3u' Local Buffer Overflow (SEH)	local	Windows
2016-06-27	VUPlayer 2.49 (Windows 7) - '.m3u' Local Buffer Overflow (DEP Bypass)	local	Windows
2016-06-27	Kagao 3.0 - Multiple Vulnerabilities	webapps	PHP
2016-06-27	Panda Security (Multiple Products) - Local Privilege Escalation	local	Windows
2016-06-27	My Little Forum 2.3.5 - PHP Command Injection	webapps	PHP
2016-06-27	iBilling 3.7.0 - Persistent Cross-Site Scripting / Reflected Cross-Site Scripting	webapps	PHP
2016-06-27	PInfo 0.6.9-5.1 - Local Buffer Overflow	local	Linux
2016-06-27	BigTree CMS 4.2.11 - SQL Injection	webapps	PHP
2016-06-27	HNB 1.9.18-10 - Local Buffer Overflow	local	Linux
2016-06-27	Linux/x86 - execve(/bin/sh) + ASLR Bruteforce Shellcode	shellcode	Linux_x86
2016-06-27	SugarCRM 6.5.18 - PHP Code Injection	webapps	PHP
2016-06-27	Riverbed SteelCentral NetProfiler & NetExpress 10.8.7 - Multiple Vulnerabilities	webapps	PHP
2016-06-23	Getsimple CMS 3.3.10 - Arbitrary File Upload	webapps	PHP
2016-06-23	Alibaba Clone B2B Script - Arbitrary File Disclosure	webapps	PHP
2016-06-23	XuezhuLi FileSharing - Directory Traversal	webapps	PHP
2016-06-23	XuezhuLi FileSharing - Cross-Site Request Forgery (Add User)	webapps	PHP
2016-06-23	FinderView - Multiple Vulnerabilities	webapps	PHP
2016-06-22	PCMan FTP Server 2.0.7 - 'ls' Remote Buffer Overflow (Metasploit)	remote	Windows_x86-64
2016-06-22	[Hebrew] Digital Whisper Security Magazine #71	papers	Multiple
2016-06-22	[Hebrew] Digital Whisper Security Magazine #72	papers	Multiple
2016-06-22	[Hebrew] Digital Whisper Security Magazine #73	papers	Multiple
2016-06-22	Wolf CMS 0.8.2 - Arbitrary File Upload (Metasploit)	remote	PHP
2016-06-22	Windows/x86 - ShellExecuteA(NULL,NULL,"cmd.exe",NULL,NULL,1) Shellcode (250 bytes)	shellcode	Windows_x86
2016-06-22	Microsoft Internet Explorer 11 (Windows 10) - VBScript Memory Corruption (MS16-051)	local	Windows
2016-06-21	DarkComet Server - Arbitrary File Download (Metasploit)	remote	Windows
2016-06-21	Banshee 2.6.2 - '.mp3' Crash (PoC)	dos	Linux
2016-06-21	IonizeCMS 1.0.8 - Cross-Site Request Forgery (Add Admin)	webapps	PHP
2016-06-21	Yona CMS - Cross-Site Request Forgery	webapps	PHP
2016-06-21	Joomla! Component com_publisher - SQL Injection	webapps	PHP
2016-06-21	Microsoft Windows - 'gdi32.dll' Multiple DIB-Related EMF Record Handlers Heap Out-of-Bounds Reads/Memory Disclosure (MS16-074)	dos	Windows
2016-06-21	Microsoft Windows Kernel - 'ATMFD.dll' NamedEscape 0x250C Pool Corruption (MS16-074)	dos	Windows
2016-06-21	Linux Kernel - 'ecryptfs' '/proc/$pid/environ' Local Privilege Escalation	local	Linux
2016-06-21	Microsoft Windows - Custom Font Disable Policy Bypass	dos	Windows_x86
2016-06-21	Microsoft Internet Explorer 11 - Garbage Collector Attribute Type Confusion (MS16-063)	dos	Windows
2016-06-21	SAP NetWeaver AS JAVA 7.1 < 7.5 - 'ctcprotocol Servlet' XML External Entity	webapps	Java
2016-06-21	SAP NetWeaver AS JAVA 7.1 < 7.5 - Directory Traversal	webapps	Java
2016-06-21	Radiant CMS 1.1.3 - Multiple Persistent Cross-Site Scripting Vulnerabilities	webapps	Ruby
2016-06-21	YetiForce CRM < 3.1 - Persistent Cross-Site Scripting	webapps	PHP
2016-06-20	WordPress Plugin Ultimate Product Catalog 3.8.1 - Privilege Escalation	webapps	PHP
2016-06-20	sNews CMS 1.7.1 - Multiple Vulnerabilities	webapps	PHP
2016-06-20	Joomla! Component com_bt_media 1.0 - SQL Injection	webapps	PHP
2016-06-20	WordPress Plugin Premium SEO Pack 1.9.1.3 - wp_options Overwrite	webapps	PHP
2016-06-20	Windows (XP < 10) - Download File + Execute Shellcode	shellcode	Windows
2016-06-20	Tomabo MP4 Player 3.11.6 - Local Stack Overflow (SEH) (Metasploit)	local	Windows
2016-06-20	Airia - Cross-Site Request Forgery (Add Content)	webapps	PHP
2016-06-20	Airia - Arbitrary File Upload	webapps	PHP
2016-06-20	Symphony CMS 2.6.7 - Session Fixation	webapps	PHP
2016-06-20	ACROS Security 0patch 2016.05.19.539 - '0PatchServicex64.exe' Unquoted Service Path Privilege Escalation	local	Windows_x86-64
2016-06-18	PoC \|\| GTFO 0x12	papers	Magazine
2016-06-17	WordPress Plugin Gravity Forms 1.8.19 - Arbitrary File Upload	webapps	PHP
2016-06-17	Vicidial 2.11 - Scripts Persistent Cross-Site Scripting	webapps	PHP
2016-06-17	phpATM 1.32 (Windows) - Arbitrary File Upload / Remote Command Execution	webapps	PHP
2016-06-17	phpATM 1.32 - Multiple Vulnerabilities	webapps	PHP
2016-06-17	op5 7.1.9 - Configuration Command Execution (Metasploit)	remote	Linux
2016-06-16	Gemalto Sentinel License Manager 18.0.1.55505 - Directory Traversal	webapps	Windows
2016-06-16	SolarWinds Virtualization Manager - Local Privilege Escalation	local	Linux
2016-06-16	Blat 3.2.14 - Stack Overflow	dos	Windows
2016-06-16	Tiki Wiki CMS Calendar 6.15/9.11 LTS/12.5 LTS/14.2 - Remote Code Execution	webapps	PHP
2016-06-16	ATCOM PBX IP01 / IP08 / IP4 / IP2G4A - Authentication Bypass	webapps	Hardware
2016-06-16	Roxy Fileman 1.4.4 - Arbitrary File Upload	webapps	PHP
2016-06-16	SlimCMS 0.1 - Cross-Site Request Forgery (Change Admin Password)	webapps	PHP
2016-06-15	Ultrabenosaurus ChatBoard - Persistent Cross-Site Scripting	webapps	PHP
2016-06-15	Ultrabenosaurus ChatBoard - Cross-Site Request Forgery (Send Message)	webapps	PHP
2016-06-15	w2wiki - Multiple Cross-Site Scripting Vulnerabilities	webapps	PHP
2016-06-15	Hyperoptic (Tilgin) Router HG23xx - Multiple Vulnerabilities	webapps	Hardware
2016-06-15	Dokeos 2.2.1 - Blind SQL Injection	webapps	PHP
2016-06-15	Joomla! Component com_enmasse 5.1 < 6.4 - SQL Injection	webapps	PHP
2016-06-15	AdobeUpdateService 3.6.0.248 - Unquoted Service Path Privilege Escalation	local	Windows
2016-06-15	BookingWizz Booking System < 5.5 - Multiple Vulnerabilities	webapps	PHP
2016-06-15	jbFileManager - Directory Traversal	webapps	PHP
2016-06-15	PHPLive 4.4.8 < 4.5.4 - Password Recovery SQL Injection	webapps	PHP
2016-06-15	Bomgar Remote Support - Code Execution (Metasploit)	remote	Linux
2016-06-15	Microsoft Windows 7 - win32k Bitmap Use-After-Free (MS16-062) (1)	dos	Windows
2016-06-15	Microsoft Windows 7 - win32k Bitmap Use-After-Free (MS16-062) (2)	dos	Windows
2016-06-15	Google Chrome - GPU Process MailboxManagerImpl Double-Read	dos	Linux
2016-06-14	Apache Continuum - Arbitrary Command Execution (Metasploit)	remote	Linux
2016-06-14	WordPress Plugin Social Stream 1.5.15 - wp_options Overwrite	webapps	PHP
2016-06-14	Oracle Orakill.exe 11.2.0 - Buffer Overflow (PoC)	dos	Windows
2016-06-13	FRticket Ticket System - Persistent Cross-Site Scripting	webapps	PHP
2016-06-13	Viart Shopping Cart 5.0 - Cross-Site Request Forgery / Arbitrary File Upload	webapps	PHP
2016-06-13	Easy RM to MP3 Converter 2.7.3.700 - '.m3u' File (Universal ASLR + DEP Bypass)	local	Windows
2016-06-13	Dream Gallery 2.0 - Admin Panel Authentication Bypass	webapps	PHP
2016-06-13	Grid Gallery 1.0 - Admin Panel Authentication Bypass	webapps	PHP
2016-06-13	Joomla! Component com_payplans 3.3.6 - SQL Injection	webapps	PHP
2016-06-13	Zabbix 2.2 < 3.0.3 - API JSON-RPC Remote Code Execution	webapps	PHP
2016-06-13	iSQL 1.0 - Command Injection	local	Linux
2016-06-13	iSQL 1.0 - 'isql_main.c' Buffer Overflow (PoC)	dos	Linux

2016-06-13	Foxit PDF Reader 1.0.1.0925 - CPDF_StreamContentParser::~CPDF_StreamContentParser Heap Memory Corruption	dos	Linux
2016-06-13	Foxit PDF Reader 1.0.1.0925 - CPDF_DIBSource::TranslateScanline24bpp Out-of-Bounds Read	dos	Linux
2016-06-13	Foxit PDF Reader 1.0.1.0925 - CFX_WideString::operator= Invalid Read	dos	Linux
2016-06-13	Foxit PDF Reader 1.0.1.0925 - kdu_core::kdu_codestream::get_subsampling Memory Corruption	dos	Linux
2016-06-13	Foxit PDF Reader 1.0.1.0925 - CFX_BaseSegmentedArray::IterateIndex Memory Corruption	dos	Linux
2016-06-10	Poison Ivy 2.1.x (C2 Server) - Remote Buffer Overflow (Metasploit)	remote	Windows
2016-06-10	Matrix42 Remote Control Host 3.20.0031 - Unquoted Path Privilege Escalation	local	Windows
2016-06-10	Dell OpenManage Server Administrator 8.3 - XML External Entity	webapps	XML
2016-06-10	Mobiketa 1.0 - Cross-Site Request Forgery (Add Admin)	webapps	PHP
2016-06-10	miniMySQLAdmin 1.1.3 - Cross-Site Request Forgery (SQL Execution)	webapps	PHP
2016-06-10	phpMyFAQ 2.9.0 - Persistent Cross-Site Scripting	webapps	PHP
2016-06-10	Windows/x86 - system(systeminfo) Shellcode (224 bytes)	shellcode	Windows_x86
2016-06-10	Armadito Antimalware - Backdoor Access/Bypass	dos	Windows
2016-06-10	Riot Games League of Legends - Insecure File Permissions Privilege Escalation	local	Windows
2016-06-10	IPFire - 'proxy.cgi' Remote Code Execution (Metasploit)	remote	CGI
2016-06-10	IPFire - 'Shellshock' Bash Environment Variable Command Injection (Metasploit)	remote	CGI
2016-06-10	Apache Struts - REST Plugin With Dynamic Method Invocation Remote Code Execution (Metasploit)	remote	Multiple
2016-06-10	Apple Mac OSX Kernel - Null Pointer Dereference in nvCommandQueue::GetHandleIndex in GeForce.kext	dos	OSX
2016-06-10	Google Android - '/system/bin/sdcard' Stack Buffer Overflow (PoC)	dos	Android
2016-06-10	Apple Mac OSX Kernel - Null Pointer Dereference in AppleMuxControl.kext	dos	OSX
2016-06-10	Apple Mac OSX Kernel - Null Pointer Dereference in AppleGraphicsDeviceControl	dos	OSX
2016-06-10	Apple Mac OSX Kernel - NULL Dereference in IOAccelSharedUserClient2::page_off_resource	dos	OSX
2016-06-10	Apple Mac OSX Kernel - NULL Dereference in CoreCaptureResponder Due to Unchecked Return Value	dos	OSX
2016-06-10	Apple Mac OSX Kernel - Null Pointer Dereference in IOAudioEngine	dos	OSX
2016-06-10	Apple Mac OSX Kernel - Out-of-Bounds Read of Object Pointer Due to Insufficient Checks in Raw Cast to enum Type	dos	OSX
2016-06-10	Apple Mac OSX Kernel - Use-After-Free Due to Bad Locking in IOAcceleratorFamily2	dos	OSX
2016-06-10	Apple Mac OSX / iOS Kernel - UAF Racing getProperty on IOHDIXController and testNetBootMethod on IOHDIXControllerUserClient	dos	Multiple
2016-06-10	Apple Mac OSX Kernel - GeForce GPU Driver Stack Buffer Overflow	dos	OSX
2016-06-09	Microsoft Word (Windows/OSX) - Crash (PoC)	dos	Multiple
2016-06-08	Drale DBTableViewer 100123 - Blind SQL Injection	webapps	PHP
2016-06-07	Windows/x86 - WinExec("cmd.exe",0) Shellcode (184 bytes)	shellcode	Windows_x86
2016-06-07	Linux/x86 - Bind (13337/TCP) Netcat (/bin/nc) Shell (/bin/sh) Shellcode (56 bytes)	shellcode	Linux_x86
2016-06-07	League of Legends Screensaver - Unquoted Service Path Privilege Escalation	local	Windows
2016-06-07	League of Legends Screensaver - Insecure File Permissions Privilege Escalation	local	Windows
2016-06-07	Cisco EPC 3928 - Multiple Vulnerabilities	webapps	ASP
2016-06-06	WordPress Plugin Simple Backup 2.7.11 - Multiple Vulnerabilities	webapps	PHP
2016-06-06	Dream Gallery 1.0 - Cross-Site Request Forgery (Add Admin)	webapps	PHP
2016-06-06	BSD / Linux / Windows - execve("/bin//sh", {"//bin/sh", "-c", "cmd"}, NULL) Execute Command Shellcode (194 bytes)	shellcode	Multiple
2016-06-06	Apache Continuum 1.4.2 - Multiple Vulnerabilities	webapps	Java
2016-06-06	Sun Secure Global Desktop and Oracle Global Desktop 4.61.915 - Command Injection (Shellshock)	webapps	CGI
2016-06-06	Valve Steam 3.42.16.13 - Local Privilege Escalation	local	Windows
2016-06-06	ArticleSetup 1.00 - Cross-Site Request Forgery (Change Admin Password)	webapps	PHP
2016-06-06	Electroweb Online Examination System 1.0 - SQL Injection	webapps	PHP
2016-06-06	WordPress Plugin WP Mobile Detector 3.5 - Arbitrary File Upload	webapps	PHP
2016-06-06	WordPress Theme Creative Multi-Purpose 9.1.3 - Persistent Cross-Site Scripting	webapps	PHP
2016-06-06	WordPress Plugin WP PRO Advertising System 4.6.18 - SQL Injection	webapps	PHP
2016-06-06	WordPress Theme Newspaper 6.7.1 - Privilege Escalation	webapps	PHP
2016-06-06	WordPress Theme Uncode 1.3.1 - Arbitrary File Upload	webapps	PHP
2016-06-06	WordPress Plugin Double Opt-In for Download 2.0.9 - SQL Injection	webapps	PHP
2016-06-06	Notilus Travel Solution Software 2012 R3 - SQL Injection	webapps	ASP
2016-06-06	rConfig 3.1.1 - Local File Inclusion	webapps	PHP
2016-06-06	Nagios XI 5.2.7 - Multiple Vulnerabilities	webapps	PHP
2016-06-02	Joomla! Component SecurityCheck 2.8.9 - Multiple Vulnerabilities	webapps	PHP
2016-06-02	Liferay CE < 6.2 CE GA6 - Persistent Cross-Site Scripting	webapps	JSP
2016-06-02	Relay Ajax Directory Manager relayb01-071706/1.5.1/1.5.3 - Arbitrary File Upload	webapps	PHP
2016-06-02	Websockify (C Implementation) 0.8.0 - Buffer Overflow (PoC)	dos	Multiple
2016-06-01	AjaxExplorer 1.10.3.2 - Multiple Vulnerabilities	webapps	PHP
2016-06-01	Wireshark - erf_meta_read_tag SIGSEGV	dos	Multiple
2016-05-31	Flatpress 1.0.3 - Cross-Site Request Forgery / Arbitrary File Upload	webapps	PHP
2016-05-31	AirOS NanoStation M2 5.6-beta - Multiple Vulnerabilities	webapps	CGI
2016-05-31	ProcessMaker 3.0.1.7 - Multiple Vulnerabilities	webapps	PHP
2016-05-31	CCextractor 0.80 - Crash (PoC)	dos	Linux
2016-05-31	HP Data Protector A.09.00 - Encrypted Communications Arbitrary Command Execution (Metasploit)	remote	Windows
2016-05-31	TCPDump 4.5.1 - Crash (PoC)	dos	Linux
2016-05-30	MySQL 5.5.45 - procedure analyse Function Denial of Service	dos	Multiple
2016-05-30	Open Source Real Estate Script 3.6.0 - SQL Injection	webapps	PHP
2016-05-30	Linux/x64 - execve() + XOR Encoded Shellcode (84 bytes)	shellcode	Linux_x86-64
2016-05-29	FreeBSD Kernel (FreeBSD 10.2 < 10.3 x64) - 'SETFKEY' (PoC)	dos	FreeBSD_x86-64
2016-05-29	FreeBSD Kernel (FreeBSD 10.2 x64) - 'sendmsg' Kernel Heap Overflow (PoC)	dos	FreeBSD_x86-64
2016-05-27	PHP Realestate Script Script 4.9.0 - SQL Injection	webapps	PHP
2016-05-27	VideoLAN VLC Media Player 2.2.1 - 'DecodeAdpcmImaQT' Buffer Overflow	dos	Windows
2016-05-26	Real Estate Portal 4.1 - Multiple Vulnerabilities	webapps	PHP
2016-05-26	EduSec 4.2.5 - SQL Injection	webapps	PHP
2016-05-26	Micro Focus Rumba+ 9.4 - Multiple Stack Buffer Overflow Vulnerabilities	dos	Windows
2016-05-26	HP Data Protector A.09.00 - Arbitrary Command Execution	remote	Windows
2016-05-26	Graphite2 - GlyphCache::GlyphCache Heap Buffer Overflow	dos	Multiple
2016-05-26	Graphite2 - GlyphCache::Loader Heap Overreads	dos	Multiple
2016-05-26	Graphite2 - TtfUtil::CheckCmapSubtable12 Heap Overread	dos	Multiple
2016-05-26	Graphite2 - TtfUtil::CmapSubtable4NextCodepoint Heap Overread	dos	Multiple
2016-05-26	Graphite2 - NameTable::getName Multiple Heap Out-of-Bounds Reads	dos	Multiple
2016-05-25	Linux/x86 - Bind (4444/TCP) Shell (/bin/bash) Shellcode (656 bytes)	shellcode	Linux_x86
2016-05-25	Oracle Application Testing Suite (ATS) - Arbitrary File Upload (Metasploit)	remote	Java
2016-05-25	Ubiquiti airOS - Arbitrary File Upload (Metasploit)	remote	Unix
2016-05-25	PowerFolder Server 10.4.321 - Remote Code Execution	remote	Java
2016-05-24	AfterLogic WebMail Pro ASP.NET 6.2.6 - Administrator Account Disclosure via XML External Entity Injection	webapps	ASP
2016-05-23	Operation Technology ETAP 14.1.0 - Local Privilege Escalation	local	Windows
2016-05-23	Operation Technology ETAP 14.1.0 - Multiple Stack Buffer Overrun Vulnerabilities	dos	Windows
2016-05-23	Linux/x64 - Download File (http://192.168.30.129/pri.sh) + Execute Used To Steal Information Shellcode (399 bytes)	shellcode	Linux_x86-64
2016-05-23	WordPress Plugin Job Script by Scubez - Remote Code Execution	webapps	PHP
2016-05-23	XenAPI 1.4.1 for XenForo - Multiple SQL Injections	webapps	PHP
2016-05-19	Apple QuickTime - '.mov' Parsing Memory Corruption	dos	OSX
2016-05-19	SAP NetWeaver AS JAVA 7.1 < 7.5 - SQL Injection	webapps	XML
2016-05-19	SAP NetWeaver AS JAVA 7.1 < 7.5 - Information Disclosure	webapps	XML
2016-05-19	4digits 1.1.4 - Local Buffer Overflow (PoC)	dos	Linux
2016-05-19	VirIT Explorer Lite & Pro 8.1.68 - Local Privilege Escalation	local	Windows
2016-05-18	Magento < 2.0.6 - Arbitrary Unserialize / Arbitrary Write File	webapps	PHP
2016-05-17	Meteocontrol WEB’log - Admin Password Disclosure (Metasploit)	webapps	Multiple
2016-05-17	Cisco ASA Software 8.x/9.x - IKEv1 / IKEv2 Buffer Overflow	remote	Hardware
2016-05-17	Adobe Flash - JXR Processing Out-of-Bounds Read	dos	Multiple
2016-05-17	Adobe Flash - Out-of-Bounds Read when Placing Object	dos	Multiple
2016-05-17	Adobe Flash - Overflow in Processing Raw 565 Textures	dos	Multiple
2016-05-17	Adobe Flash - Heap Overflow in ATF Processing Image Reading	dos	Multiple
2016-05-17	Adobe Flash - '.MP4' Stack Corruption	dos	Multiple
2016-05-17	Adobe Flash - Type Confusion in FileReference Constructor	dos	Multiple
2016-05-17	Adobe Flash - addProperty Use-After-Free	dos	Multiple
2016-05-17	Adobe Flash - SetNative Use-After-Free	dos	Multiple
2016-05-17	Microsoft Windows - 'gdi32.dll' Multiple 'EMF CREATECOLORSPACEW' Record Handling (MS16-055)	dos	Windows
2016-05-17	Microsoft Windows - 'gdi32.dll' Multiple 'EMF COMMENT_MULTIFORMATS' Record Handling (MS16-055)	dos	Windows
2016-05-17	Microsoft Windows - 'gdi32.dll' Heap Buffer Overflow in ExtEscape() Triggerable via EMR_EXTESCAPE EMF Record (MS16-055)	dos	Multiple
2016-05-17	Symantec/Norton AntiVirus - ASPack Remote Heap/Pool Memory Corruption	dos	Multiple
2016-05-17	Dell SonicWALL Scrutinizer 11.01 - methodDetail SQL Injection (Metasploit)	remote	Multiple
2016-05-17	SAP xMII 15.0 - Directory Traversal	webapps	Java
2016-05-16	CakePHP Framework 3.2.4 - IP Spoofing	webapps	PHP
2016-05-16	Multiples Nexon Games - Unquoted Path Privilege Escalation	local	Windows
2016-05-16	Linux/x86 - Bind (1234/TCP) Shell (/bin/sh) Shellcode (87 bytes) (Generator)	shellcode	Generator
2016-05-16	eXtplorer 2.1.9 - '.ZIP' Directory Traversal	webapps	PHP
2016-05-16	Web Interface for DNSmasq / Mikrotik - SQL Injection	webapps	PHP
2016-05-16	Microsoft Excel 2010 - Crash (PoC) (2)	dos	Windows
2016-05-16	Hex : Shard of Fate 1.0.1.026 - Unquoted Path Privilege Escalation	local	Windows
2016-05-16	Web2py 2.14.5 - Multiple Vulnerabilities	webapps	Python

2016-05-16	Apple OS X 10.10.5 - 'rootsh' Local Privilege Escalation	local	OSX
2016-05-13	NRSS Reader 0.3.9 - Local Stack Overflow	local	Linux
2016-05-13	runAV mod_security - Arbitrary Command Execution	local	Linux
2016-05-13	Wireshark - 'AirPDcapDecryptWPABroadcastKey' Heap Out-of-Bounds Read (2)	dos	Multiple
2016-05-12	Microsoft Windows Media Center - '.MCL' File Processing Remote Code Execution (MS16-059)	remote	Windows
2016-05-12	WordPress Plugin Q and A (Focus Plus) FAQ 1.3.9.7 - Multiple Vulnerabilities	webapps	PHP
2016-05-12	WordPress Plugin Huge-IT Image Gallery 1.8.9 - Multiple Vulnerabilities	webapps	PHP
2016-05-12	Trend Micro - 'CoreServiceShell.exe' Multiple HTTP s	webapps	Windows
2016-05-11	Google Android Broadcom Wi-Fi Driver - Memory Corruption	dos	Android
2016-05-11	CIScan 1.00 - Hostname/IP Field Overwrite (SEH) (PoC)	dos	Windows
2016-05-11	FileZilla FTP Client 3.17.0.0 - Unquoted Path Privilege Escalation	local	Windows
2016-05-11	Intuit QuickBooks Desktop 2007 < 2016 - Arbitrary Code Execution	local	Windows
2016-05-10	Windows - Keylogger to File (%TEMP%/log.bin) + Null-Free Shellcode (601 bytes)	shellcode	Windows
2016-05-10	MediaInfo 0.7.61 - Crash (PoC)	dos	Windows
2016-05-10	Ipswitch WS_FTP LE 12.3 - Search field Overwrite (SEH) (PoC)	dos	Windows
2016-05-10	Core FTP Server 32-bit Build 587 - Heap Overflow	dos	Windows_x86
2016-05-10	JVC HDRs / Net (Multiple Cameras) - Multiple Vulnerabilities	webapps	Hardware
2016-05-10	Adobe Reader DC 15.010.20060 - Memory Corruption	dos	Multiple
2016-05-10	Nfdump Nfcapd 1.6.14 - Multiple Vulnerabilities	dos	Linux
2016-05-09	Ajaxel CMS 8.0 - Multiple Vulnerabilities	webapps	PHP
2016-05-09	i.FTP 2.21 - Host Address / URL Field (SEH)	dos	Windows
2016-05-09	Dell SonicWALL Scrutinizer 11.0.1 - setUserSkin/deleteTab SQL Injection Remote Code Execution	remote	Windows
2016-05-09	ZeewaysCMS - Multiple Vulnerabilities	webapps	PHP
2016-05-09	ASUS Memory Mapping Driver (ASMMAP/ASMMAP64) - Physical Memory Read/Write	dos	Windows
2016-05-09	Certec EDV atvise SCADA Server 2.5.9 - Local Privilege Escalation	local	Windows
2016-05-09	[Persian] Ollydbg Tutorial v 1.10	papers	Windows
2016-05-09	Microsoft Windows 7 - 'WebDAV' Local Privilege Escalation (MS16-016) (2)	local	Windows
2016-05-09	RPCScan 2.03 - Hostname/IP Field Overwrite (SEH) (PoC)	dos	Windows
2016-05-09	ImageMagick 6.9.3-9 / 7.0.1-0 - 'ImageTragick' Delegate Arbitrary Command Execution (Metasploit)	local	Multiple
2016-05-09	Ruby on Rails - Development Web Console (v2) Code Execution (Metasploit)	remote	Ruby
2016-05-06	RPCScan 2.03 - Hostname/IP Field Crash (PoC)	dos	Windows
2016-05-06	CIScan 1.00 - Hostname/IP Field Crash (PoC)	dos	Windows
2016-05-06	DotNetNuke 07.04.00 - Administration Authentication Bypass	webapps	ASP
2016-05-06	Adobe Flash (Multiple Scripts) - Use-After-Free When Rendering Displays (2)	dos	Windows
2016-05-06	Adobe Flash - MovieClip.duplicateMovieClip Use-After-Free	dos	Windows
2016-05-06	ManageEngine Applications Manager Build 12700 - Multiple Vulnerabilities	webapps	JSP
2016-05-06	Phrack #69	papers	Magazine
2016-05-05	Baidu Spark Browser 43.23.1000.476 - Address Bar URL Spoofing	dos	Windows
2016-05-04	Linux/x64 - Bind (1472/TCP) Shell (/bin/sh) + IPv6 Shellcode (199 bytes)	shellcode	Linux_x86-64
2016-05-04	Alibaba Clone B2B Script - Admin Authentication Bypass	webapps	PHP
2016-05-04	CMS Made Simple < 1.12.1 / < 2.1.3 - Web Server Cache Poisoning	webapps	PHP
2016-05-04	WordPress Plugin Acunetix WP Security Plugin 3.0.3 - Cross-Site Scripting	webapps	PHP
2016-05-04	NetCommWireless HSPA 3G10WVE Wireless Router - Multiple Vulnerabilities	webapps	CGI
2016-05-04	Linux/x64 - Reverse (192.168.209.131:1472/TCP) Shell (/bin/sh) + IPv6 Shellcode (203 bytes)	shellcode	Linux_x86-64
2016-05-04	TRN Threaded USENET News Reader 3.6-23 - Local Stack Overflow	local	Linux
2016-05-04	IPFire < 2.19 Core Update 101 - Remote Command Execution	webapps	CGI
2016-05-04	Imagick 3.3.0 (PHP 5.4) - Disable Functions Bypass	webapps	PHP
2016-05-04	ImageMagick 7.0.1-0 / 6.9.3-9 - 'ImageTragick ' Multiple Vulnerabilities	dos	Multiple
2016-05-04	OpenSSL - Padding Oracle in AES-NI CBC MAC Check	dos	Multiple
2016-05-04	Zabbix Agent 3.0.1 - 'mysql.size' Shell Command Injection	local	Linux
2016-05-04	McAfee LiveSafe 14.0 - Relocations Processing Memory Corruption	dos	Windows
2016-05-04	Linux Kernel (Ubuntu 14.04.3) - 'perf_event_open()' Can Race with execve() (Access /etc/shadow)	local	Linux
2016-05-04	Linux Kernel 4.4.x (Ubuntu 16.04) - 'double-fdput()' bpf(BPF_PROG_LOAD) Privilege Escalation	local	Linux
2016-05-04	Linux Kernel (Ubuntu 16.04) - Reference Count Overflow Using BPF Maps	dos	Linux
2016-05-04	WordPress Plugin Ninja Forms 2.9.36 < 2.9.42 - File Upload (Metasploit)	webapps	Multiple
2016-05-02	WordPress Plugin Ghost 0.5.5 - Unrestricted Export Download	webapps	PHP
2016-05-02	Windows/x86 (.Net Framework) - Execute Native x86 Shellcode	shellcode	Windows_x86
2016-05-02	Acunetix WVS 10 - Remote Command Execution	remote	Windows
2016-05-02	Apache Struts - Dynamic Method Invocation Remote Code Execution (Metasploit)	remote	Linux
2016-05-02	QSEE - PRDiag* Commands Privilege Escalation	local	Android
2016-04-29	Observium 0.16.7533 - Cross-Site Request Forgery	webapps	PHP
2016-04-29	Observium 0.16.7533 - (Authenticated) Arbitrary Command Execution	webapps	PHP
2016-04-29	Merit Lilin IP Cameras - Multiple Vulnerabilities	webapps	CGI
2016-04-29	Rough Auditing Tool for Security (RATS) 2.3 - Array Out of Block Crash	dos	Linux
2016-04-29	Wireshark - dissect_2008_16_security_4 Stack Buffer Overflow	dos	Multiple
2016-04-29	Wireshark - alloc_address_wmem Assertion Failure	dos	Multiple
2016-04-29	Wireshark - ett_zbee_zcl_pwr_prof_enphases Static Out-of-Bounds Read	dos	Multiple
2016-04-29	GLPi 0.90.2 - SQL Injection	webapps	PHP
2016-04-28	PHP 7.0.5 - ZipArchive::getFrom* Integer Overflow	remote	PHP
2016-04-28	Microsoft Windows Kernel - 'win32k.sys' TTF Processing EBLC / EBSC Tables Pool Corruption (MS16-039)	dos	Windows
2016-04-27	EMC ViPR SRM - Cross-Site Request Forgery	webapps	Multiple
2016-04-27	RomPager 4.34 (Multiple Router Vendors) - 'Misfortune Cookie' Authentication Bypass	webapps	Hardware
2016-04-27	Microsoft Windows - CSRSS BaseSrvCheckVDM Session 0 Process Creation Privilege Escalation (MS16-048)	dos	Windows
2016-04-27	Mach Race OSX - Local Privilege Escalation	local	OSX
2016-04-27	Sony Playstation 4 (PS4) 1.76 - 'dlclose' Linux Kernel Loader	local	Hardware
2016-04-26	Yasr Screen Reader 0.6.9 - Local Buffer Overflow	local	Linux
2016-04-26	Advantech Webaccess Dashboard Viewer - Arbitrary File Upload (Metasploit)	remote	Windows
2016-04-26	libgd 2.1.1 - Signedness Heap Overflow	remote	Linux
2016-04-26	ImpressCMS 1.3.9 - SQL Injection	webapps	PHP
2016-04-25	Totemomail 4.x/5.x - Persistent Cross-Site Scripting	webapps	JSP
2016-04-25	C/C++ Offline Compiler and C For OS - Persistent Cross-Site Scripting	webapps	iOS
2016-04-25	Linux/x86 - Reverse (::ffff:192.168.64.129:1472/TCP) Shell (/bin/sh) + IPv6 Shellcode (159 bytes)	shellcode	Linux_x86
2016-04-25	Linux/x86 - Bind (1472/TCP) Shell (/bin/sh) + IPv6 Shellcode (1250 bytes)	shellcode	Linux_x86
2016-04-25	Gemtek CPE7000 - WLTCS-106 Administrator SID Retriever (Metasploit)	webapps	Hardware
2016-04-25	Gemtek CPE7000 - WLTCS-106 'sysconf.cgi' Remote Command Execution (Metasploit)	webapps	Hardware
2016-04-25	CompuSource Systems Real Time Home Banking - Local Privilege Escalation	local	Windows
2016-04-25	Linux/x64 - Bind (/TCP) Shell Shellcode (Generator)	shellcode	Generator
2016-04-25	PCMan FTP Server 2.0.7 - 'RENAME' Remote Buffer Overflow (Metasploit)	remote	Windows_x86
2016-04-25	NationBuilder - Multiple Persistent Cross-Site Scripting Vulnerabilities	webapps	Ruby
2016-04-25	Windows - Keylogger to File (./log.bin) + Null-Free Shellcode (431 bytes)	shellcode	Windows
2016-04-25	[Turkish] Privilege Escalation Vectors On Windows Systems	papers	Windows
2016-04-25	Rough Auditing Tool for Security (RATS) 2.3 - Crash (PoC)	dos	Linux
2016-04-25	Microsoft Windows 7 < 10 / 2008 < 2012 (x86/x64) - Local Privilege Escalation (MS16-032) (C#)	local	Windows
2016-04-21	phpLiteAdmin 1.9.6 - Multiple Vulnerabilities	webapps	PHP
2016-04-21	Symantec Brightmail 10.6.0-7 - LDAP Credentials Disclosure (Metasploit)	webapps	Java
2016-04-21	Gemtek CPE7000 / WLTCS-106 - Multiple Vulnerabilities	webapps	Hardware
2016-04-21	Phorum 5.2.20 - Multiple Vulnerabilities	papers	PHP
2016-04-21	Linux/x64 - Bind (5600/TCP) Shell Shellcode (86 bytes)	shellcode	Linux_x86-64
2016-04-21	Microsoft Windows 7 < 10 / 2008 < 2012 R2 (x86/x64) - Local Privilege Escalation (MS16-032) (PowerShell)	local	Windows
2016-04-21	Sony Playstation 4 (PS4) < 2.50 - WebKit Code Execution (PoC)	local	Hardware
2016-04-20	PHPBack 1.3.0 - SQL Injection	webapps	PHP
2016-04-20	Microsoft Windows Kernel - DrawMenuBarTemp Wild-Write (MS16-039)	dos	Windows_x86-64
2016-04-20	Hyper-V - 'vmswitch.sys' VmsMpCommonPvtHandleMulticastOids Guest to Host Kernel-Pool Overflow	dos	Windows
2016-04-19	modified eCommerce Shopsoftware 2.0.0.0 rev 9678 - Blind SQL Injection	webapps	PHP
2016-04-18	WordPress Plugin leenk.me 2.5.0 - Cross-Site Request Forgery / Cross-Site Scripting	webapps	PHP
2016-04-18	WordPress Plugin Kento Post View Counter 2.8 - Cross-Site Request Forgery / Cross-Site Scripting	webapps	PHP
2016-04-18	TH692 Outdoor P2P HD Waterproof IP Camera - Hard-Coded Credentials	dos	Hardware
2016-04-18	Webutler CMS 3.2 - Cross-Site Request Forgery	webapps	PHP
2016-04-18	Novell ServiceDesk - (Authenticated) Arbitrary File Upload (Metasploit)	remote	Multiple
2016-04-18	pfSense Community Edition 2.2.6 - Multiple Vulnerabilities	webapps	PHP
2016-04-17	HackBack - A DIY Guide	papers	eZine
2016-04-15	Microsoft Internet Explorer 11 - MSHTML!CMarkupPointer::UnEmbed Use-After-Free	dos	Windows
2016-04-15	Linux/x64 - Read /etc/passwd Shellcode (65 bytes)	shellcode	Linux_x86-64
2016-04-15	AirOS 6.x - Arbitrary File Upload	webapps	CGI
2016-04-15	Exim - 'perl_startup' Local Privilege Escalation (Metasploit)	local	Linux
2016-04-15	[Spanish] HackBack - A DIY Guide	papers	eZine
2016-04-14	Microsoft Excel - Out-of-Bounds Read Code Execution (MS16-042)	local	Windows
2016-04-14	pfSense Firewall 2.2.6 - Services Cross-Site Request Forgery	webapps	PHP
2016-04-14	Brickcom Corporation Network Cameras - Multiple Vulnerabilities	webapps	Hardware
2016-04-14	PHPmongoDB 1.0.0 - Multiple Vulnerabilities	webapps	PHP

2016-04-14	Microsoft Internet Explorer 9/10/11 - 'CDOMStringDataList::InitFromString' Out-of-Bounds Read (MS15-112)	remote	Windows
2016-04-13	Avactis PHP Shopping Cart - Multiple Vulnerabilities	papers	PHP
2016-04-13	Oracle Application Testing Suite (ATS) 12.4.0.2.0 - Authentication Bypass / Arbitrary File Upload	webapps	JSP
2016-04-13	Texas Instrument Emulator 3.03 - Local Buffer Overflow	local	Linux
2016-04-13	Dell KACE K1000 - Arbitrary File Upload (Metasploit)	remote	Unix
2016-04-12	Ovidentia troubleticketsModule 7.6 - Remote File Inclusion	webapps	PHP
2016-04-12	[Persian] XML Injection	papers	XML
2016-04-11	Hikvision Digital Video Recorder - Cross-Site Request Forgery	webapps	Hardware
2016-04-11	WPN-XM Serverstack 0.8.6 - Cross-Site Request Forgery	webapps	PHP
2016-04-11	OpenCart 2.1.0.2 < 2.2.0.0 - json_decode Function Remote Code Execution	webapps	PHP
2016-04-11	CAM UnZip 5.1 - .'ZIP' File Directory Traversal	local	Windows
2016-04-11	RockMongo PHP MongoDB Administrator 1.1.8 - Multiple Vulnerabilities	webapps	PHP
2016-04-11	Axis Network Cameras - Multiple Vulnerabilities	webapps	Hardware
2016-04-11	Linux/x64 - Bind (5600/TCP) Shell Shellcode (81 bytes)	shellcode	Linux_x86-64
2016-04-11	Google Android - IOMX 'getConfig'/'getParameter' Information Disclosure	dos	Android
2016-04-11	Google Android - IMemory Native Interface is Insecure for IPC Use	dos	Android
2016-04-11	Novell ServiceDesk 6.5/7.0.3/7.1.0 - Multiple Vulnerabilities	webapps	JSP
2016-04-08	Express Zip 2.40 - Directory Traversal	local	Windows
2016-04-08	Apple Intel HD 3000 Graphics Driver 10.0.0 - Local Privilege Escalation	local	OSX
2016-04-08	op5 7.1.9 - Remote Command Execution	webapps	PHP
2016-04-07	PLANET Technology IP Surveillance Cameras - Multiple Vulnerabilities	webapps	Hardware
2016-04-07	Mess Emulator 0.154-3.1 - Local Buffer Overflow	local	Linux
2016-04-07	ExaGrid - Known SSH Key and Default Password (Metasploit)	remote	Linux
2016-04-06	Asbru Web Content Management System 9.2.7 - Multiple Vulnerabilities	webapps	JSP
2016-04-06	SocialEngine 4.8.9 - SQL Injection	webapps	PHP
2016-04-06	Linux Kernel (x86) - Disable ASLR by Setting the RLIMIT_STACK Resource to Unlimited	dos	Linux_x86
2016-04-06	Panda Security URL Filtering < 4.3.1.9 - Local Privilege Escalation	local	Windows
2016-04-06	Panda Endpoint Administration Agent < 7.50.00 - Local Privilege Escalation	local	Windows
2016-04-05	A New CVE-2015-0057 Exploit Technology	papers	Windows
2016-04-05	Easy File Sharing HTTP Server 7.2 - Remote Overflow (SEH) (Metasploit)	remote	Windows
2016-04-05	PCMan FTP Server - 'PUT' Buffer Overflow (Metasploit)	remote	Windows
2016-04-05	Microsoft Internet Explorer - MSHTML!CSVGHelpers::SetAttributeStringAndPointer Use-After-Free (MS16-023)	dos	Windows
2016-04-05	ManageEngine Password Manager Pro 8102 to 8302 - Multiple Vulnerabilities	webapps	JSP
2016-04-05	Windows Kernel Exploitation 101: Exploiting CVE-2014-4113	papers	Windows
2016-04-05	Microsoft Windows Kernel - 'win32k.sys' Local Privilege Escalation (MS14-058)	local	Windows
2016-04-04	Xion Audio Player 1.5 (build 160) - '.mp3' Crash (PoC)	dos	Windows
2016-04-04	Hexchat IRC Client 2.11.0 - Directory Traversal	local	Multiple
2016-04-04	Hexchat IRC Client 2.11.0 - CAP LS Handling Buffer Overflow	dos	Multiple
2016-04-04	Exploiting Buffer Overflows on MIPS Architecture	papers	Multiple
2016-04-04	PQI Air Pen Express 6W51-0000R2/6W51-0000R2XXX - Multiple Vulnerabilities	webapps	Hardware
2016-04-03	DameWare Remote Controller < 12.0.0.520 - Remote Code Execution	remote	Windows
2016-04-01	PHP 5.5.33/7.0.4 - SNMP Format String	remote	Multiple
2016-04-01	WordPress Plugin Advanced Video 1.0 - Local File Inclusion	webapps	PHP
2016-04-01	Microsoft Windows Kernel - Bitmap Use-After-Free	dos	Windows
2016-04-01	Microsoft Windows Kernel - 'NtGdiGetTextExtentExW' Out-of-Bounds Memory Read	dos	Windows
2016-04-01	Adobe Flash - URLStream.readObject Use-After-Free	dos	Multiple
2016-04-01	Adobe Flash - textfield.maxChars Use-After-Free	dos	Multiple
2016-04-01	Google Android - 'ih264d_process_intra_mb' Memory Corruption	dos	Android
2016-04-01	Adobe Flash - Color.setTransform Use-After-Free	dos	Multiple
2016-04-01	PHP 5.5.33 - Invalid Memory Write	dos	PHP
2016-03-31	MOBOTIX Video Security Cameras - Cross-Site Request Forgery (Add Admin)	webapps	Hardware
2016-03-31	Apache OpenMeetings 1.9.x < 3.1.0 - '.ZIP' File Directory Traversal	webapps	Linux
2016-03-31	Apache Jetspeed - Arbitrary File Upload (Metasploit)	remote	Java
2016-03-31	Wireshark - dissect_pktc_rekey Heap Out-of-Bounds Read	dos	Multiple
2016-03-30	Apple QuickTime < 7.7.79.80.95 - '.FPX' Parsing Memory Corruption (1)	dos	Multiple
2016-03-30	Apple QuickTime < 7.7.79.80.95 - '.FPX' Parsing Memory Corruption (2)	dos	Multiple
2016-03-30	Apple QuickTime < 7.7.79.80.95 - '.PSD' Parsing Memory Corruption	dos	Multiple
2016-03-30	CubeCart 6.0.10 - Multiple Vulnerabilities	webapps	PHP
2016-03-30	Kamailio 4.3.4 - Heap Buffer Overflow	dos	Linux
2016-03-30	ATutor 2.2.1 - Directory Traversal / Remote Code Execution (Metasploit)	remote	PHP
2016-03-30	Google Android 5.0.1 - Metaphor Stagefright (ASLR Bypass)	remote	Android
2016-03-29	Adobe Flash - Object.unwatch Use-After-Free	remote	Multiple
2016-03-28	Liferay Portal 5.1.2 - Persistent Cross-Site Scripting	webapps	Multiple
2016-03-28	Linux/x64 - execve(/bin/sh) Shellcode (25 bytes) (1)	shellcode	Linux_x86-64
2016-03-28	Linux/x64 - execve(/bin/bash) Shellcode (33 bytes)	shellcode	Linux_x86-64
2016-03-28	TallSoft SNMP/TFTP Server 1.0.0 - Denial of Service	dos	Windows
2016-03-28	FireEye - Malware Input Processor Privilege Escalation	local	Linux
2016-03-28	Android One - mt_wifi IOCTL_GET_STRUCT Privilege Escalation	dos	Android
2016-03-28	Cogent Datahub 7.3.9 Gamma Script - Local Privilege Escalation	local	Windows
2016-03-27	WordPress Plugin IMDb Profile Widget 1.0.8 - Local File Inclusion	webapps	PHP
2016-03-27	Trend Micro Deep Discovery Inspector 3.8/3.7 - Cross-Site Request Forgery	webapps	Hardware
2016-03-27	WordPress Plugin Photocart Link 1.6 - Local File Inclusion	webapps	PHP
2016-03-24	Linux/x64 - execve(/bin/sh) Shellcode (26 bytes)	shellcode	Linux_x86-64
2016-03-23	Apple Mac OSX / iOS - SUID Binary Logic Error Kernel Code Execution	local	Multiple
2016-03-23	Multiple CCTV-DVR Vendors - Remote Code Execution	remote	Hardware
2016-03-23	MiCollab 7.0 - SQL Injection	webapps	Multiple
2016-03-23	Comodo AntiVirus - Forwards Emulated API Calls to the Real API During Scans	remote	Windows
2016-03-23	Avira - Heap Underflow Parsing PE Section Headers	dos	Windows
2016-03-23	Comodo - PackMan Unpacker Insufficient Parameter Validation	dos	Windows
2016-03-23	Comodo - LZMA Decoder Heap Overflow via Insufficient Parameter Checks	dos	Windows
2016-03-23	Comodo - Integer Overlow Leading to Heap Overflow Parsing Composite Documents	dos	Windows
2016-03-23	Wireshark - dissect_ber_integer Static Out-of-Bounds Write	dos	Multiple
2016-03-23	Comodo - Integer Overflow Leading to Heap Overflow in Win32 Emulation	dos	Windows
2016-03-23	Comodo AntiVirus - Heap Overflow in LZX Decompression	dos	Windows
2016-03-23	Apple Mac OSX Kernel - Code Execution Due to Lack of Bounds Checking in AppleUSBPipe::Abort	dos	OSX
2016-03-23	Adobe Flash - Shape Rendering Crash	dos	Windows
2016-03-23	Adobe Flash - Zlib Codec Heap Overflow	dos	Windows
2016-03-23	Adobe Flash - Sprite Creation Use-After-Free	dos	Windows
2016-03-23	Adobe Flash - Uninitialized Stack Parameter Access in AsBroadcaster.broadcastMessage UaF Fix	dos	Windows
2016-03-23	Adobe Flash - Uninitialized Stack Parameter Access in Object.unwatch UaF Fix	dos	Windows
2016-03-23	Adobe Flash - Uninitialized Stack Parameter Access in MovieClip.swapDepths UaF Fix	dos	Windows
2016-03-23	Apple Mac OSX Kernel - AppleKeyStore Use-After-Free	dos	OSX
2016-03-23	Apple Mac OSX Kernel - Unchecked Array Index Used to Read Object Pointer Then Call Virtual Method in Nvidia Geforce Driver	dos	OSX
2016-03-23	Apple Mac OSX Kernel - Use-After-Free and Double Delete Due to Incorrect Locking in Intel GPU Driver	dos	OSX
2016-03-22	WordPress Plugin HB Audio Gallery Lite 1.0.0 - Arbitrary File Download	webapps	PHP
2016-03-22	Joomla! Component Easy Youtube Gallery 1.0.2 - SQL Injection	webapps	PHP
2016-03-22	WordPress Plugin Brandfolder 3.0 - Local/Remote File Inclusion	webapps	PHP
2016-03-22	WordPress Plugin Dharma Booking 2.38.3 - Remote File Inclusion	webapps	PHP
2016-03-22	WordPress Plugin Memphis Document Library 3.1.5 - Arbitrary File Download	webapps	PHP
2016-03-22	CoolPlayer (Standalone) build 2.19 - '.m3u' Local Stack Overflow	local	Windows
2016-03-21	Microsoft Windows 8.1/10 (x86) - Secondary Logon Standard Handles Missing Sanitization Privilege Escalation (MS16-032)	local	Windows_x86
2016-03-21	WordPress Plugin eBook Download 1.1 - Directory Traversal	webapps	PHP
2016-03-21	WordPress Plugin Import CSV 1.0 - Directory Traversal	webapps	PHP
2016-03-21	WordPress Plugin Abtest - Local File Inclusion	webapps	PHP
2016-03-21	Linux/x64 - Reverse (192.168.1.2:1234/TCP) Shell Shellcode (134 bytes)	shellcode	Linux_x86-64
2016-03-21	Internet Download Manager 6.25 Build 14 - 'Find file' Unicode (SEH)	local	Windows
2016-03-21	Disc ORGanizer (DORG) - Multiple Vulnerabilities	webapps	PHP
2016-03-21	D-Link DWR-932 Firmware 4.00 - Authentication Bypass	webapps	Hardware
2016-03-21	Xoops 2.5.7.2 - Cross-Site Request Forgery (Arbitrary User Deletions)	webapps	PHP
2016-03-21	XOOPS 2.5.7.2 - Directory Traversal Bypass	webapps	PHP
2016-03-21	WordPress Plugin Image Export 1.1.0 - Arbitrary File Disclosure	webapps	PHP
2016-03-21	Sysax Multi Server 6.50 - HTTP File Share Overflow Remote Code Execution (SEH)	remote	Windows
2016-03-21	Dating Pro Genie 2015.7 - Cross-Site Request Forgery	webapps	PHP
2016-03-21	iTop 2.2.1 - Cross-Site Request Forgery	webapps	PHP
2016-03-21	ProjectSend r582 - Multiple Cross-Site Scripting Vulnerabilities	webapps	PHP
2016-03-20	Wildfly - 'WEB-INF' / 'META-INF' Information Disclosure via Filter Restriction Bypass	webapps	Windows
2016-03-17	ZenPhoto 1.4.11 - Remote File Inclusion	webapps	PHP
2016-03-17	PivotX 2.3.11 - Directory Traversal	webapps	PHP
2016-03-17	PoC \|\| GTFO 0x11	papers	Magazine
2016-03-16	Monstra CMS 3.0.3 - Multiple Vulnerabilities	webapps	PHP

2016-03-16	AKIPS Network Monitor 15.37 through 16.5 - OS Command Injection	webapps	Perl
2016-03-16	Netwrix Auditor 7.1.322.0 - ActiveX 'sourceFile' Stack Buffer Overflow	dos	Windows
2016-03-16	Cisco UCS Manager 2.1(1b) - Remote Command Injection (Shellshock)	remote	Hardware
2016-03-16	OpenSSH 7.2p1 - (Authenticated) xauth Command Injection	remote	Multiple
2016-03-16	FreeBSD 10.2 (x64) - 'amd64_set_ldt' Heap Overflow	dos	FreeBSD_x86-64
2016-03-15	Kaltura Community Edition < 11.1.0-2 - Multiple Vulnerabilities	webapps	PHP
2016-03-14	Linux Kernel 3.10.0-229.x (CentOS / RHEL 7.1) - 'snd-usb-audio' Crash (PoC)	dos	Linux
2016-03-14	Linux Kernel 3.10.0-229.x (CentOS / RHEL 7.1) - 'iowarrior' Driver Crash (PoC)	dos	Linux
2016-03-14	Zortam Mp3 Media Studio 20.15 - Overflow (PoC) (SEH)	dos	Windows
2016-03-14	WordPress Plugin Site Import 1.0.1 - Local/Remote File Inclusion	webapps	PHP
2016-03-14	TeamPass 2.1.24 - Multiple Vulnerabilities	webapps	PHP
2016-03-14	Microsoft Windows Kernel - 'ATMFD.dll' OTF Font Processing Pool-Based Buffer Overflow (MS16-026)	dos	Windows
2016-03-14	Microsoft Windows Kernel - 'ATMFD.dll' OTF Font Processing Stack Corruption (MS16-026)	dos	Windows
2016-03-14	Microsoft Internet Explorer - Read AV in MSHTML!Layout::LayoutBuilderDivider::BuildPageLayout (MS16-023)	dos	Windows
2016-03-11	WordPress Theme Beauty & Clean 1.0.8 - Arbitrary File Upload	webapps	PHP
2016-03-11	WordPress Plugin DZS Videogallery < 8.60 - Multiple Vulnerabilities	webapps	PHP
2016-03-11	PHP Utility Belt - Remote Code Execution (Metasploit)	remote	PHP
2016-03-11	FUCK THEM ALL (FTA) - Staminus Communications	papers	eZine
2016-03-10	Nitro Pro 10.5.7.32 / Nitro Reader 5.5.3.1 - Heap Memory Corruption	dos	Windows
2016-03-10	WordPress Plugin Best Web Soft Captcha 4.1.5 - Multiple Vulnerabilities	webapps	PHP
2016-03-10	WordPress Plugin WP Advanced Comment 0.10 - Persistent Cross-Site Scripting	webapps	PHP
2016-03-10	Exim < 4.86.2 - Local Privilege Escalation	local	Linux
2016-03-10	libotr 4.1.0 - Memory Corruption	dos	Multiple
2016-03-10	Putty pscp 0.66 - Stack Buffer Overwrite	dos	Multiple
2016-03-09	Adobe Digital Editions 4.5.0 - '.pdf' Critical Memory Corruption	dos	Windows
2016-03-09	Bluethrust Clan Scripts v4 R17 - Multiple Vulnerabilities	webapps	PHP
2016-03-09	Exim 4.84-3 - Local Privilege Escalation	local	Linux
2016-03-09	WordPress Theme SiteMile Project 2.0.9.5 - Multiple Vulnerabilities	webapps	PHP
2016-03-09	Linux Kernel 3.10.0 (CentOS / RHEL 7.1) - 'digi_acceleport' Nullpointer Dereference	dos	Linux
2016-03-09	Linux Kernel 3.10.0 (CentOS / RHEL 7.1) - 'Wacom' Multiple Nullpointer Dereferences	dos	Linux
2016-03-09	Linux Kernel 3.10.0 (CentOS / RHEL 7.1) - visor 'treo_attach' Nullpointer Dereference	dos	Linux
2016-03-09	Linux Kernel 3.10.0 (CentOS / RHEL 7.1) - visor clie_5_attach Nullpointer Dereference	dos	Linux
2016-03-09	Linux Kernel 3.10.0 (CentOS / RHEL 7.1) - 'cypress_m8' Nullpointer Dereference	dos	Linux
2016-03-09	Linux Kernel 3.10.0 (CentOS / RHEL 7.1) - 'mct_u232' Nullpointer Dereference	dos	Linux
2016-03-09	Linux Kernel 3.10.0 (CentOS / RHEL 7.1) - 'cdc_acm' Nullpointer Dereference	dos	Linux
2016-03-09	Linux Kernel 3.10.0 (CentOS / RHEL 7.1) - 'aiptek' Nullpointer Dereference	dos	Linux
2016-03-09	Linux Kernel 3.10/3.18 /4.4 - Netfilter IPT_SO_SET_REPLACE Memory Corruption	dos	Linux
2016-03-07	ATutor LMS - '/install_modules.php' Cross-Site Request Forgery / Remote Code Execution	webapps	PHP
2016-03-07	Microsoft Windows 7 (x64) - 'afd.sys' Dangling Pointer Privilege Escalation (MS14-040)	local	Windows_x86-64
2016-03-07	Cerberus Helpdesk (Cerb5) 5 < 6.7 - Password Hash Disclosure	webapps	PHP
2016-03-07	Metaphor - A (real) real-life Stagefright exploit	papers	Android
2016-03-07	Wireshark - wtap_optionblock_free Use-After-Free	dos	Multiple
2016-03-07	Avast! - Authenticode Parsing Memory Corruption	dos	Windows
2016-03-07	McAfee VirusScan Enterprise 8.8 - Security Restrictions Bypass	local	Windows
2016-03-05	PHPLib < 7.4 - SQL Injection	webapps	PHP
2016-03-03	WordPress Plugin Bulk Delete 5.5.3 - Privilege Escalation	webapps	PHP
2016-03-03	Schneider Electric SBO / AS - Multiple Vulnerabilities	remote	Hardware
2016-03-03	AppLocker - Execution Prevention Bypass (Metasploit)	local	Windows
2016-03-03	DropBearSSHD 2015.71 - Command Injection	remote	Linux
2016-03-02	Quick Tftp Server Pro 2.3 - Read Mode Denial of Service	dos	Windows
2016-03-02	FreeProxy Internet Suite 4.10 - Denial of Service	dos	Windows
2016-03-02	PictureTrails Photo Editor GE.exe 2.0.0 - '.bmp' Crash (PoC)	dos	Windows
2016-03-02	Windows/x86 - Download File + Run via WebDAV (//192.168.1.19/c) Null-Free Shellcode (96 bytes)	shellcode	Windows_x86
2016-03-02	Secret Net 7 and Secret Net Studio 8 - Local Privilege Escalation	local	Windows_x86-64
2016-03-02	Gallery 2 < 2.0.2 - Multiple Vulnerabilities	webapps	PHP
2016-03-01	Crouzet em4 soft 1.1.04 - '.pm4' Integer Division By Zero	dos	Windows
2016-03-01	Crouzet em4 soft 1.1.04 / M3 soft 3.1.2.0 - Insecure File Permissions	local	Windows
2016-03-01	[Hebrew] Digital Whisper Security Magazine #70	papers	Multiple
2016-03-01	Viscomsoft Calendar Active-X 2.0 - Multiple Crashes (PoC)	dos	Windows
2016-03-01	WordPress Plugin CP Polls 1.0.8 - Multiple Vulnerabilities	webapps	PHP
2016-03-01	ATutor 2.2.1 - SQL Injection / Remote Code Execution (Metasploit)	remote	PHP
2016-03-01	NETGEAR NMS300 ProSafe Network Management System - Arbitrary File Upload (Metasploit)	remote	Windows
2016-02-29	WordPress Plugin More Fields 2.1 - Cross-Site Request Forgery	webapps	PHP
2016-02-29	Comodo Anti-Virus - 'SHFolder.dll' Local Privilege Escalation	local	Windows
2016-02-26	Linux/ARM - Reverse (10.0.0.10:1337/TCP) Shell (/bin/sh) Shellcode (95 bytes)	shellcode	ARM
2016-02-26	Infor CRM 8.2.0.1136 - Multiple HTML Script Injection Vulnerabilities	webapps	ASHX
2016-02-26	WordPress Plugin Ocim MP3 - SQL Injection	webapps	PHP
2016-02-26	Proxmox VE 3/4 - Insecure Hostname Checking Remote Command Execution	remote	Linux
2016-02-26	Zimbra 8.0.9 GA - Cross-Site Request Forgery	webapps	Linux
2016-02-26	Centreon 2.5.3 - Remote Command Execution	webapps	PHP
2016-02-26	GpicView 0.2.5 - Crash (PoC)	dos	Linux
2016-02-26	Wireshark - print_hex_data_buffer / print_packet Use-After-Free	dos	Multiple
2016-02-26	Qualcomm Adreno GPU MSM Driver - perfcounter Query Heap Overflow	dos	Android
2016-02-26	Linux Kernel - io_submit L2TP sendmsg Integer Overflow	dos	Linux
2016-02-26	Joomla! Component com_poweradmin 2.3.0 - Multiple Vulnerabilities	webapps	PHP
2016-02-26	Microsoft Windows - 'srv2.sys' SMB Code Execution (Python) (MS09-050)	remote	Windows
2016-02-26	Microsoft Windows - 'NetAPI32.dll' Code Execution (Python) (MS08-067)	remote	Windows
2016-02-26	phpRPC < 0.7 - Remote Code Execution	webapps	PHP
2016-02-25	IBM Lotus Domino R8 - Password Hash Extraction	webapps	Windows
2016-02-24	WordPress Plugin Extra User Details 0.4.2 - Privilege Escalation	webapps	PHP
2016-02-24	Wireshark - vwr_read_s2_s3_W_rec Heap Buffer Overflow	dos	Multiple
2016-02-24	libxml2 - xmlDictAddString Heap Buffer Overread	dos	Linux
2016-02-24	libxml2 - xmlParseEndTag2 Heap Buffer Overread	dos	Linux
2016-02-24	libxml2 - xmlParserPrintFileContextInternal Heap Buffer Overread	dos	Linux
2016-02-24	libxml2 - htmlCurrentChar Heap Buffer Overread	dos	Linux
2016-02-24	Mambo < 4.5.3h - Multiple Vulnerabilities	webapps	PHP
2016-02-23	Dell OpenManage Server Administrator 8.2 - (Authenticated) Directory Traversal	webapps	Windows
2016-02-23	libquicktime 1.2.4 - Integer Overflow	dos	Multiple
2016-02-23	Ubiquiti Networks UniFi 3.2.10 - Cross-Site Request Forgery	webapps	JSON
2016-02-22	InstantCoder 1.0 iOS - Multiple Vulnerabilities	webapps	iOS
2016-02-22	Core FTP Server 1.2 - Local Buffer Overflow	local	Windows
2016-02-22	BlackBerry Enterprise Service < 12.4 (BES12) Self-Service - Multiple Vulnerabilities	webapps	Java
2016-02-22	Wireshark - dissect_oml_attrs Static Out-of-Bounds Read	dos	Multiple
2016-02-22	Wireshark - add_ff_vht_compressed_beamforming_report Static Out-of-Bounds Read	dos	Multiple
2016-02-22	Wireshark - dissect_ber_set Static Out-of-Bounds Read	dos	Multiple
2016-02-22	Thru Managed File Transfer Portal 9.0.2 - SQL Injection	webapps	ASP
2016-02-22	Ubuntu < 15.10 - PT Chown Arbitrary PTs Access Via User Namespace Privilege Escalation	local	Linux
2016-02-22	Linux Kernel 3.x (Ubuntu 14.04 / Mint 17.3 / Fedora 22) - Double-free usb-midi SMEP Privilege Escalation	local	Linux
2016-02-21	PEAR LiveUser < 0.16.8 - Arbitrary File Access	webapps	PHP
2016-02-20	SOLIDserver < 5.0.4 - Local File Inclusion	webapps	PHP
2016-02-19	XM Easy Personal FTP Server 5.8.0 - 'HELP' Remote Denial of Service	dos	Windows
2016-02-19	STIMS Buffer 1.1.20 - Buffer Overflow (PoC) (SEH Overwrite)	dos	Windows
2016-02-19	STIMS Cutter 1.1.3.20 - Buffer Overflow (Denial of Service) (PoC)	dos	Windows
2016-02-19	Chamilo LMS IDOR - 'messageId' Delete POST Injection	webapps	PHP
2016-02-19	Chamilo LMS - Persistent Cross-Site Scripting	webapps	PHP
2016-02-19	QuickHeal 16.00 - 'webssx.sys' Driver Denial of Service	dos	Windows
2016-02-19	Adobe Flash - SimpleButton Creation Type Confusion	dos	Multiple
2016-02-19	ManageEngine Firewall Analyzer 8.5 - Multiple Vulnerabilities	webapps	Windows
2016-02-19	Geeklog < 1.4.0 - Multiple Vulnerabilities	webapps	PHP
2016-02-19	AUFS (Ubuntu 15.10) - 'allow_userns' Fuse/Xattr User Namespaces Privilege Escalation	local	Linux
2016-02-18	Vesta Control Panel 0.9.8-15 - Persistent Cross-Site Scripting	webapps	PHP
2016-02-18	DirectAdmin 1.491 - Cross-Site Request Forgery	webapps	PHP
2016-02-18	ADOdb < 4.71 - Cross Site Scripting	webapps	PHP
2016-02-17	Inductive Automation Ignition 7.8.1 - Remote Leakage Of Shared Buffers	remote	Multiple
2016-02-17	JMX2 Email Tester - 'save_email.php' Arbitrary File Upload	webapps	Multiple
2016-02-17	Redaxo 5.0.0 - Multiple Vulnerabilities	webapps	PHP
2016-02-17	OCS Inventory NG 2.2 - SQL Injection	webapps	PHP
2016-02-17	Adobe Flash - Out-of-Bounds Image Read	dos	Multiple
2016-02-17	Adobe Flash - textfield Constructor Type Confusion	dos	Multiple
2016-02-17	Adobe Flash - Sound.loadPCMFromByteArray Dangling Pointer	dos	Multiple

2016-02-17	Adobe Flash - LoadVars.decode Use-After-Free	dos	Multiple
2016-02-17	Adobe Flash - H264 Parsing Out-of-Bounds Read	dos	Multiple
2016-02-17	Adobe Flash - ATF Processing Heap Overflow	dos	Multiple
2016-02-17	Adobe Flash - H264 File Stack Corruption	dos	Multiple
2016-02-17	Adobe Flash - BitmapData.drawWithQuality Heap Overflow	dos	Multiple
2016-02-16	ManageEngine OPutils 8.0 - Multiple Vulnerabilities	webapps	Multiple
2016-02-16	ManageEngine Network Configuration Management Build 11000 - Privilege Escalation	webapps	Multiple
2016-02-16	WordPress Plugin ALO EasyMail NewsLetter 2.6.01 - Cross-Site Request Forgery	webapps	PHP
2016-02-16	CyberCop Scanner Smbgrind 5.5 - Buffer Overflow (PoC)	dos	Windows
2016-02-16	phpMyBackupPro 2.5 - Remote Command Execution / Cross-Site Request Forgery	webapps	PHP
2016-02-16	glibc - 'getaddrinfo' Stack Buffer Overflow (PoC)	dos	Linux
2016-02-16	Flash ActiveX 28.0.0.137 - Code Execution (1)	local	Windows
2016-02-15	Microsoft Windows - Kerberos Security Feature Bypass (MS16-014)	local	Windows
2016-02-15	Delta Industrial Automation DCISoft 1.12.09 - Local Stack Buffer Overflow	local	Windows
2016-02-15	Alternate Pic View 2.150 - '.pgm' Crash (PoC)	dos	Windows
2016-02-15	NTPd ntp-4.2.6p5 - 'ctl_putdata()' Buffer Overflow (PoC)	dos	Linux
2016-02-15	Microsoft Windows 7 (x86) - 'afd.sys' Dangling Pointer Privilege Escalation (MS14-040)	local	Windows_x86
2016-02-15	Network Scanner 4.0.0.0 - Crash (SEH) (PoC)	dos	Windows
2016-02-15	Tiny Tiny RSS - Blind SQL Injection	webapps	PHP
2016-02-13	Flash ActiveX 28.0.0.137 - Code Execution (2)	local	Windows
2016-02-11	File Replication Pro 7.2.0 - Multiple Vulnerabilities	remote	JSP
2016-02-11	NDI5aster - Privilege Escalation through NDIS 5.x Filter Intermediate Drivers	papers	Windows
2016-02-10	Microsoft Windows 7 SP1 (x86) - 'WebDAV' Local Privilege Escalation (MS16-016) (1)	local	Windows_x86
2016-02-10	Deepin Linux 15 - 'lastore-daemon' Local Privilege Escalation	local	Linux
2016-02-10	The Most Forgotten Web Vulnerabilities	papers	Multiple
2016-02-10	Apache Sling Framework (Adobe AEM) 2.3.6 - Information Disclosure	webapps	Multiple
2016-02-10	Yeager CMS 1.2.1 - Multiple Vulnerabilities	webapps	PHP
2016-02-10	D-Link DCS-930L - (Authenticated) Remote Command Execution (Metasploit)	remote	Hardware
2016-02-10	Wieland wieplan 4.1 - Document Parsing Java Code Execution Using XMLDecoder	local	XML
2016-02-09	PotPlayer 1.6.5x - '.mp3' Crash (PoC)	dos	Windows
2016-02-09	Adobe Photoshop CC / Bridge CC - '.png' Parsing Memory Corruption (1)	dos	Windows
2016-02-09	Adobe Photoshop CC / Bridge CC - '.png' Parsing Memory Corruption (2)	dos	Windows
2016-02-09	Adobe Photoshop CC / Bridge CC - '.iff' Parsing Memory Corruption	dos	Windows
2016-02-08	Solr 3.5.0 - Arbitrary Data Deletion	webapps	Java
2016-02-08	dotDefender Firewall 5.00.12865/5.13-13282 - Cross-Site Request Forgery	webapps	Multiple
2016-02-08	WordPress Plugin User Meta Manager 3.4.6 - Information Disclosure	webapps	PHP
2016-02-08	WordPress Plugin WooCommerce Store Toolkit 1.5.5 - Privilege Escalation	webapps	PHP
2016-02-08	WordPress Plugin WP User Frontend < 2.3.11 - Unrestricted Arbitrary File Upload	webapps	PHP
2016-02-08	WordPress Plugin Booking Calendar Contact Form 1.0.23 - Multiple Vulnerabilities	webapps	PHP
2016-02-08	Samsung Galaxy S6 - libQjpeg je_free Crash	dos	Android
2016-02-08	Samsung Galaxy S6 - 'android.media.process' 'MdConvertLine' Face Recognition Memory Corruption	dos	Android
2016-02-08	Adobe Flash - Processing AVC Causes Stack Corruption	dos	Multiple
2016-02-04	GE Industrial Solutions UPS SNMP Adapter < 4.8 - Multiple Vulnerabilities	webapps	Hardware
2016-02-04	D-Link DVGN5402SP - Multiple Vulnerabilities	webapps	Hardware
2016-02-04	WordPress Plugin User Meta Manager 3.4.6 - Blind SQL Injection	webapps	PHP
2016-02-04	WordPress Plugin User Meta Manager 3.4.6 - Privilege Escalation	webapps	PHP
2016-02-04	NETGEAR NMS300 ProSafe Network Management System - Multiple Vulnerabilities	webapps	Hardware
2016-02-04	UliCMS v9.8.1 - SQL Injection	webapps	PHP
2016-02-04	OpenDocMan 1.3.4 - Cross-Site Request Forgery	webapps	PHP
2016-02-04	ATutor 2.2 - Multiple Cross-Site Scripting Vulnerabilities	webapps	PHP
2016-02-04	Symphony CMS 2.6.3 - Multiple SQL Injections	webapps	PHP
2016-02-04	FTPShell Client 5.24 - 'Create NewFolder' Local Buffer Overflow	local	Windows
2016-02-03	Baumer VeriSens Application Suite 2.6.2 - Buffer Overflow (PoC)	dos	Windows
2016-02-03	TimeClock Software 0.995 - Multiple SQL Injections	webapps	PHP
2016-02-03	Jive Forums 5.5.25 - Directory Traversal	webapps	JSP
2016-02-03	yTree 1.94-1.1 - Local Buffer Overflow (PoC)	dos	Linux
2016-02-03	Viprinet Multichannel VPN Router 300 - Persistent Cross-Site Scripting	webapps	Hardware
2016-02-02	Manage Engine Network Configuration Manager Build 11000 - Cross-Site Request Forgery	webapps	Multiple
2016-02-02	Toshiba Viewer v2 p3console - Local Denial of Service	dos	Windows
2016-02-02	pdfium - opj_t2_read_packet_header 'libopenjpeg' Heap Use-After-Free	dos	Multiple
2016-02-02	eClinicalWorks (CCMR) - Multiple Vulnerabilities	webapps	JSP
2016-02-01	iScripts EasyCreate 3.0 - Multiple Vulnerabilities	webapps	PHP
2016-02-01	iScripts EasyCreate 3.0 - Remote Code Execution	webapps	PHP
2016-02-01	Linux/x64 - Reverse (127.0.0.1:4444/TCP) Shell + Password (hack) + Polymorphic Shellcode (135 bytes)	shellcode	Linux_x86-64
2016-02-01	Linux/x86 - Download File + Execute Shellcode (135 bytes)	shellcode	Linux_x86
2016-02-01	Linux/x64 - execve() Stack + Polymorphic Shellcode (47 bytes)	shellcode	Linux_x86-64
2016-02-01	Hippo CMS 10.1 - Multiple Vulnerabilities	webapps	Java
2016-02-01	[Hebrew] Digital Whisper Security Magazine #69	papers	Multiple
2016-02-01	Autonics DAQMaster 1.7.3 - DQP Parsing Buffer Overflow Code Execution (PoC)	dos	Windows
2016-02-01	ManageEngine EventLog Analyzer 4.0 < 10 - Privilege Escalation	webapps	Multiple
2016-02-01	WPS Office < 2016 - '.ppt' Heap Memory Corruption	dos	Windows
2016-02-01	WPS Office < 2016 - '.doc' OneTableDocumentStream Memory Corruption	dos	Windows
2016-02-01	WPS Office < 2016 - '.ppt' drawingContainer Memory Corruption	dos	Windows
2016-02-01	WPS Office < 2016 - '.xls' Heap Memory Corruption	dos	Windows
2016-02-01	Apache 2.4.7 + PHP 7.0.2 - 'openssl_seal()' Uninitialized Memory Code Execution	remote	PHP
2016-02-01	Microsoft Internet Explorer 11 - javascript Code Execution	local	Windows
2016-01-29	Linux/x64 - Reverse (127.0.0.1:4444/TCP) Shell (/bin/sh) + Password (hack) + Polymorphic Shellcode (122 bytes)	shellcode	Linux_x86-64
2016-01-29	WordPress Plugin Simple Add Pages or Posts 1.6 - Cross-Site Request Forgery	webapps	PHP
2016-01-29	ProjectSend r582 - Multiple Vulnerabilities	webapps	PHP
2016-01-28	Apple Mac OSX Kernel - IOAccelMemoryInfoUserClient Use-After-Free	dos	OSX
2016-01-28	Apple Mac OSX Kernel - no-more-senders Use-After-Free	dos	OSX
2016-01-28	Apple Mac OSX - IOBluetoothHCIPacketLogUserClient Memory Corruption	dos	OSX
2016-01-28	Apple Mac OSX - 'IOBluetoothHCIUserClient' Arbitrary Kernel Code Execution	dos	OSX
2016-01-28	Apple Mac OSX Kernel - IOAccelDisplayPipeUserClient2 Use-After-Free	dos	OSX
2016-01-28	VideoLAN VLC Media Player 2.2.1 - '.mp4' Heap Memory Corruption	dos	Windows
2016-01-28	Ramui Forum Script 9.0 - SQL Injection	webapps	PHP
2016-01-28	Ramui Web Hosting Directory Script 4.0 - Remote File Inclusion	webapps	PHP
2016-01-28	NETGEAR WNR1000v4 - Authentication Bypass	webapps	Hardware
2016-01-28	Apple Mac OSX / iOS - Unsandboxable Kernel Code Exection Due to iokit Double Release in IOKit	dos	OSX
2016-01-28	Apple Mac OSX / iOS - Multiple Kernel Uninitialized Variable Bugs Leading to Code Execution Vulnerabilities	dos	Multiple
2016-01-28	iOS Kernel - AppleOscarGyro Use-After-Free	dos	iOS
2016-01-28	iOS Kernel - AppleOscarAccelerometer Use-After-Free	dos	iOS
2016-01-28	iOS Kernel - AppleOscarCompass Use-After-Free	dos	iOS
2016-01-28	iOS Kernel - AppleOscarCMA Use-After-Free	dos	iOS
2016-01-28	iOS Kernel - IOHIDEventService Use-After-Free	dos	iOS
2016-01-28	iOS Kernel - IOReportHub Use-After-Free	dos	iOS
2016-01-28	Apple Mac OSX / iOS Kernel - IOHDIXControllUserClient::clientClose Use-After-Free/Double-Free	dos	Multiple
2016-01-28	Apple Mac OSX / iOS Kernel - iokit Registry Iterator Manipulation Double-Free	dos	Multiple
2016-01-28	Apple Mac OSX - io_service_close Use-After-Free	dos	OSX
2016-01-28	Apple Mac OSX - 'gst_configure' Kernel Buffer Overflow	dos	OSX
2016-01-28	Apple Mac OSX - 'IntelAccelerator::gstqConfigure' Kernel NULL Dereference	dos	OSX
2016-01-28	Apple Mac OSX Kernel - Hypervisor Driver Use-After-Free	dos	OSX
2016-01-28	Apple Mac OSX - IOSCSIPeripheralDeviceType00 Userclient Type 12 Kernel NULL Dereference	dos	OSX
2016-01-28	Apple Mac OSX / iOS - Unsandboxable Kernel Use-After-Free in Mach Vouchers	dos	Multiple
2016-01-28	Apple Mac OSX / iOS - NECP System Control Socket Packet Parsing Kernel Code Execution Integer Overflow	dos	Multiple
2016-01-28	Apple Mac OSX / iOS - Double-Delete IOHIDEventQueue::start Code Execution	dos	Multiple
2016-01-28	Apple Mac OSX - OSMetaClassBase::safeMetaCast in IOAccelContext2::connectClient NULL Dereference	dos	OSX
2016-01-28	Apple Mac OSX - 'IOHDIXControllerUserClient::convertClient' Buffer Integer Overflow	dos	OSX
2016-01-28	SAP HANA 1.00.095 - hdbindexserver Memory Corruption	webapps	Multiple
2016-01-27	Secure Item Hub 1.0 iOS - Multiple Vulnerabilities	webapps	iOS
2016-01-27	Linux x86/x64 - Reverse (192.168.1.29:4444/TCP) Shell Shellcode (195 bytes)	shellcode	Linux
2016-01-27	Linux x86/x64 - Bind (4444/TCP) Shell Shellcode (251 bytes)	shellcode	Linux
2016-01-27	Linux x86/x64 - Read /etc/passwd Shellcode (156 bytes)	shellcode	Linux
2016-01-27	BK Mobile jQuery CMS 2.4 - Multiple Vulnerabilities	webapps	PHP
2016-01-27	Google Android - 'sensord' Local Privilege Escalation	local	Android
2016-01-27	WordPress Plugin Booking Calendar Contact Form 1.1.24 - Multiple Vulnerabilities	webapps	PHP
2016-01-27	WordPress Plugin Booking Calendar Contact Form 1.1.24 - addslashes SQL Injection	webapps	PHP
2016-01-26	WordPress Plugin Booking Calendar Contact Form 1.1.23 - Shortcode SQL Injection	webapps	PHP
2016-01-26	Gongwalker API Manager 1.1 - Blind SQL Injection	webapps	PHP
2016-01-26	pdfium - opj_jp2_apply_pclr 'libopenjpeg' Heap Out-of-Bounds Read	dos	Multiple

2016-01-26	pdfium - opj_j2k_read_mcc 'libopenjpeg' Heap Out-of-Bounds Read	dos	Multiple
2016-01-26	Wireshark - 'iseries_check_file_type' Stack Out-of-Bounds Read	dos	Multiple
2016-01-26	Wireshark - dissect_nhdr_extopt Stack Buffer Overflow	dos	Multiple
2016-01-26	Wireshark - hiqnet_display_data Static Out-of-Bounds Read	dos	Multiple
2016-01-26	Wireshark - 'nettrace_3gpp_32_423_file_open' Stack Out-of-Bounds Read	dos	Multiple
2016-01-26	Wireshark - dissect_ber_constrained_bitstring Heap Out-of-Bounds Read	dos	Multiple
2016-01-26	Google Android ADB Debug Server - Remote Payload Execution (Metasploit)	remote	Android
2016-01-26	Foxit Reader 7.2.8.1124 - '.PDF' Parsing Memory Corruption	dos	Windows
2016-01-25	FreeBSD SCTP ICMPv6 - Error Processing	dos	FreeBSD
2016-01-25	pfSense Firewall 2.2.5 - Config File Cross-Site Request Forgery	webapps	PHP
2016-01-25	Linux Kernel 3.x/4.x - prima WLAN Driver Heap Overflow	dos	Linux
2016-01-25	WordPress Plugin Booking Calendar Contact Form 1.1.23 - SQL Injection	webapps	PHP
2016-01-25	Microsoft Windows - Sandboxed Mount Reparse Point Creation Mitigation Bypass Redux (MS16-008) (2)	local	Windows
2016-01-25	Microsoft Windows - Sandboxed Mount Reparse Point Creation Mitigation Bypass Redux (MS16-008) (1)	local	Windows
2016-01-25	Linux/x64 - execve() + XOR/NOT/DIV Encoded Shellcode (54 bytes)	shellcode	Linux_x86-64
2016-01-24	Huawei Mate 7 - '/dev/hifi_misc' Privilege Escalation	local	Hardware
2016-01-21	Oracle - 'HtmlConverter.exe' Local Buffer Overflow	local	Windows
2016-01-21	xWPE 1.5.30a-2.1 - Local Buffer Overflow	local	Linux
2016-01-21	[Spanish] Windows Heap Overflow Exploitation - Exploiting a Custom Heap Under Windows 7	papers	Windows
2016-01-21	NTP - Local Privilege Escalation	local	Linux
2016-01-19	CesarFTP 0.99g - XCWD Denial of Service	dos	Windows
2016-01-19	PDF-XChange Viewer 2.5.315.0 - Shading Type 7 Heap Memory Corruption	dos	Windows
2016-01-19	[Spanish] Bypass a lista blanca de McAfee Appication Control	papers	Windows
2016-01-19	Linux Kernel 4.4.1 - REFCOUNT Overflow Use-After-Free in Keyrings Local Privilege Escalation (1)	local	Linux
2016-01-19	Linux Kernel 4.4.1 - REFCOUNT Overflow Use-After-Free in Keyrings Local Privilege Escalation (2)	local	Linux
2016-01-18	WEG SuperDrive G2 12.0.0 - Insecure File Permissions	local	Windows
2016-01-18	Advanced Electron Forum 1.0.9 - Cross-Site Request Forgery	webapps	PHP
2016-01-18	Advanced Electron Forum 1.0.9 - Persistent Cross-Site Scripting	webapps	PHP
2016-01-18	Advanced Electron Forum 1.0.9 - Remote File Inclusion / Cross-Site Request Forgery	webapps	PHP
2016-01-18	SeaWell Networks Spectrum - Multiple Vulnerabilities	webapps	PHP
2016-01-16	PoC \|\| GTFO 0x10	papers	Magazine
2016-01-15	GlassFish Server - Arbitrary File Read	webapps	Java
2016-01-15	NetSchedScan 1.0 - Crash (PoC)	dos	Windows
2016-01-15	phpDolphin 2.0.5 - Multiple Vulnerabilities	webapps	PHP
2016-01-15	Amanda 3.3.1 - 'amstar' Command Injection Privilege Escalation	local	Linux
2016-01-15	Roundcube Webmail 1.1.3 - Directory Traversal	webapps	PHP
2016-01-15	mcart.xls Bitrix Module 6.5.2 - SQL Injection	webapps	PHP
2016-01-15	Roaming Through the OpenSSH Client: CVE-2016-0777 and CVE-2016-0778	papers	Multiple
2016-01-14	SevOne NMS 5.3.6.0 - Remote Command Execution	webapps	PHP
2016-01-14	Manage Engine Applications Manager 12 - Multiple Vulnerabilities	webapps	Multiple
2016-01-14	Manage Engine Application Manager 12.5 - Arbitrary Command Execution	webapps	Multiple
2016-01-13	WhatsUp Gold 16.3 - Remote Code Execution	webapps	ASP
2016-01-13	Microsoft Windows - devenum.dll!DeviceMoniker::Load() Heap Corruption Buffer Underflow (MS16-007)	dos	Windows
2016-01-13	Microsoft Office / COM Object - 'WMALFXGFXDSP.dll' DLL Planting (MS16-007)	dos	Windows
2016-01-12	Apple watchOS 2 - Crash (PoC)	dos	Hardware
2016-01-12	SNScan 1.05 - Scan Hostname/IP Field Buffer Overflow Crash (PoC)	dos	Windows
2016-01-12	FingerTec Fingerprint Reader - Remote Access and Remote Enrolment	remote	Hardware
2016-01-12	Bypassing McAfee’s Application Whitelisting for Critical Infrastructure Systems	papers	Windows
2016-01-12	Grassroots DICOM (GDCM) 2.6.0 and 2.6.1 - ImageRegionReader::ReadIntoBuffer Buffer Overflow	dos	Linux
2016-01-12	Linux Kernel 4.3.3 - 'overlayfs' Local Privilege Escalation (2)	local	Linux
2016-01-11	Konica Minolta FTP Utility 1.00 - CWD Command Overflow (SEH)	remote	Windows
2016-01-11	KeePass Password Safe Classic 1.29 - Crash (PoC)	dos	Windows
2016-01-11	Amanda 3.3.1 - Local Privilege Escalation	local	Linux
2016-01-11	Trend Micro - node.js HTTP Server Listening on localhost Can Execute Commands	remote	Windows
2016-01-11	Adobe Flash BlurFilter Processing - Out-of-Bounds Memset	dos	Multiple
2016-01-11	Adobe Flash (Multiple Scripts) - Use-After-Free When Rendering Displays (1)	dos	Windows
2016-01-11	Adobe Flash - Use-After-Free When Setting Stage	dos	Windows_x86-64
2016-01-11	SedSystems D3 Decimator - Multiple Vulnerabilities	webapps	Multiple
2016-01-09	Fortinet FortiGate 4.x < 5.0.7 - SSH Backdoor Access	remote	Linux
2016-01-08	WordPress Plugin WP Symposium Pro Social Network Plugin 15.12 - Multiple Vulnerabilities	webapps	PHP
2016-01-08	Linux/x64 - Egghunter (0x50905090) Shellcode (18 bytes)	shellcode	Linux_x86-64
2016-01-08	Linux/x86 - Egghunter (0x4f904790) Shellcode (13 bytes)	shellcode	Linux_x86
2016-01-07	D-Link DCS-931L - Arbitrary File Upload (Metasploit)	webapps	Hardware
2016-01-07	OpenMRS Reporting Module 0.9.7 - Remote Code Execution	webapps	Java
2016-01-07	AVM FRITZ!Box < 6.30 - Remote Buffer Overflow	remote	Hardware
2016-01-06	MediaAccess TG788vn - File Disclosure	webapps	Hardware
2016-01-06	Linux/x64 - Reverse (127.0.0.1:4444/TCP) Shell (/bin/sh) + Password (hack) + Null-Free Shellcode (151 bytes)	shellcode	Linux_x86-64
2016-01-05	Linux Kernel 4.3.3 (Ubuntu 14.04/15.10) - 'overlayfs' Local Privilege Escalation (1)	local	Linux
2016-01-05	Online Airline Booking System - Multiple Vulnerabilities	webapps	PHP
2016-01-05	Simple PHP Polling System - Multiple Vulnerabilities	webapps	PHP
2016-01-05	Ganeti - Multiple Vulnerabilities	dos	Multiple
2016-01-05	Atlassian Confluence 5.2/5.8.14/5.8.15 - Multiple Vulnerabilities	webapps	XML
2016-01-05	PHPIPAM 1.1.010 - Multiple Vulnerabilities	webapps	PHP
2016-01-04	FTPShell Client 5.24 - 'Add to Favorites' Buffer Overflow	local	Windows
2016-01-04	Linux/x86 - execve(/bin/sh) Shellcode (24 bytes) (1)	shellcode	Linux_x86
2016-01-04	Rejetto HTTP File Server (HFS) 2.3.x - Remote Command Execution (2)	remote	Windows
2016-01-04	pdfium - CPDF_DIBSource::DownSampleScanline32Bit Heap Out-of-Bounds Read	dos	Multiple
2016-01-04	pdfium - CPDF_TextObject::CalcPositionData Heap Out-of-Bounds Read	dos	Multiple
2016-01-04	pdfium IsFlagSet (v8 memory management) - SIGSEGV	dos	Multiple
2016-01-04	pdfium - CPDF_Function::Call Stack Buffer Overflow	dos	Multiple
2016-01-03	Advanced Encryption Package - Buffer Overflow (Denial of Service) (PoC)	dos	Windows
2016-01-02	Open Audit - SQL Injection	webapps	PHP
2016-01-02	Linux/x64 - Bind (4444/TCP) Shell (/bin/sh) + Password (hack) + Null-Free Shellcode (162 bytes)	shellcode	Linux_x86-64
2016-01-01	Linux/x64 - Bind (4444/TCP) Shell (/bin/sh) + Null-Free Shellcode (103 bytes)	shellcode	Linux_x86-64