linux

日期	标题	类别	作者
2019-02-12	Jenkins 2.150.2 – Remote Command Execution (Metasploit)	webapps	AkkuS
2019-02-11	CentOS Web Panel 0.9.8.763 – Persistent Cross-Site Scripting	webapps	DKM
2019-02-11	Evince – CBT File Command Injection (Metasploit)	local	Metasploit
2019-01-29	MiniUPnPd 2.1 – Out-of-Bounds Read	dos	b1ack0wl
2019-01-24	Ghostscript 9.26 – Pseudo-Operator Remote Code Execution	remote	Google Security Research
2019-01-24	AddressSanitizer (ASan) – SUID Executable Privilege Escalation (Metasploit)	local	Metasploit
2019-01-23	Nagios XI 5.5.6 – Remote Code Execution / Privilege Escalation	webapps	Chris Lyne
2019-01-21	GattLib 0.2 – Stack Buffer Overflow	remote	Dhiraj Mishra
2019-01-21	Linux Kernel 4.13 – ‘compat_get_timex()’ Leak Kernel Pointer	dos	wally0813
2019-01-16	blueman – set_dhcp_handler D-Bus Privilege Escalation (Metasploit)	local	Metasploit
2019-01-16	NTPsec 1.1.2 – ‘config’ (Authenticated) Out-of-Bounds Write Denial of Service (PoC)	dos	Magnus Klaaborg Stubman
2019-01-16	NTPsec 1.1.2 – ‘ntp_control’ (Authenticated) NULL Pointer Dereference (PoC)	dos	Magnus Klaaborg Stubman
2019-01-16	NTPsec 1.1.2 – ‘ntp_control’ Out-of-Bounds Read (PoC)	dos	Magnus Klaaborg Stubman
2019-01-16	NTPsec 1.1.2 – ‘ctl_getitem’ Out-of-Bounds Read (PoC)	dos	Magnus Klaaborg Stubman
2019-01-09	polkit – Temporary auth Hijacking via PID Reuse and Non-atomic Fork	dos	Google Security Research
2019-01-04	Linux Kernel 4.15.x < 4.19.2 - 'map_write() CAP_SYS_ADMIN' Local Privilege Escalation (dbus Method)	local	bcoles
2019-01-04	Linux Kernel 4.15.x < 4.19.2 - 'map_write() CAP_SYS_ADMIN' Local Privilege Escalation (polkit Method)	local	bcoles
2019-01-02	Hashicorp Consul – Remote Command Execution via Services API (Metasploit)	remote	Metasploit
2019-01-02	Hashicorp Consul – Remote Command Execution via Rexec (Metasploit)	remote	Metasploit
2018-12-29	Linux Kernel < 4.4.0/ < 4.8.0 (Ubuntu 14.04/16.04 / Linux Mint 17/18 / Zorin) - Local Privilege Escalation (KASLR / SMEP)	local	bcoles
2018-12-29	Linux Kernel 4.8.0-34 < 4.8.0-45 (Ubuntu / Linux Mint) - Packet Socket Local Privilege Escalation	local	bcoles
2018-12-24	Angry IP Scanner for Linux 3.5.3 – Denial of Service (PoC)	dos	Sam
2018-12-19	Linux Kernel 4.4 – ‘rtnetlink’ Stack Memory Disclosure	local	Jinbum Park
2018-12-13	Linux – ‘userfaultfd’ Bypasses tmpfs File Permissions	dos	Google Security Research