linux

日期	标题	类别	作者
2018-12-11	GNU inetutils < 1.9.4 - 'telnet.c' Multiple Overflows (PoC)	dos	Hacker Fantastic
2018-12-04	OpenSSH < 7.7 - User Enumeration (2)	remote	Leap Security
2018-12-03	Budabot 4.0 – Denial of Service (PoC)	dos	Ryan Delaney
2018-12-03	Apache Superset < 0.23 - Remote Code Execution	webapps	David May
2018-12-03	PaloAlto Networks Expedition Migration Tool 1.0.106 – Information Disclosure	webapps	ParagonSec
2018-11-30	Linux Kernel 4.8 (Ubuntu 16.04) – Leak sctp Kernel Pointer	dos	Jinbum Park
2018-11-29	Linux – Nested User Namespace idmap Limit Local Privilege Escalation (Metasploit)	local	Metasploit
2018-11-29	PHP imap_open – Remote Code Execution (Metasploit)	remote	Metasploit
2018-11-29	Unitrends Enterprise Backup – bpserverd Privilege Escalation (Metasploit)	local	Metasploit
2018-11-26	MariaDB Client 10.1.26 – Denial of Service (PoC)	dos	strider
2018-11-21	Linux Kernel 4.15.x < 4.19.2 - 'map_write() CAP_SYS_ADMIN' Local Privilege Escalation (ldpreload Method)	local	bcoles
2018-11-21	Linux Kernel 4.15.x < 4.19.2 - 'map_write() CAP_SYS_ADMIN' Local Privilege Escalation (cron Method)	local	bcoles
2018-11-16	Linux – Broken uid/gid Mapping for Nested User Namespaces	local	Google Security Research
2018-11-14	PHP 5.2.3 imap (Debian Based) – ‘imap_open’ disable_functions Bypass	local	Anton Lopanitsyn
2018-11-14	Dell OpenManage Network Manager 6.2.0.51 SP3 – Multiple Vulnerabilities	webapps	KoreLogic
2018-11-14	ntpd 4.2.8p10 – Out-of-Bounds Read (PoC)	local	Magnus Klaaborg Stubman
2018-11-13	xorg-x11-server < 1.20.1 - Local Privilege Escalation	local	bolonobolo
2018-11-13	Evince 3.24.0 – Command Injection	dos	Matlink
2018-11-12	TufinOS 2.17 Build 1193 – XML External Entity Injection	webapps	Konstantinos Alexiou
2018-11-07	OpenSLP 2.0.0 – Multiple Vulnerabilities	local	Magnus Klaaborg Stubman
2018-11-06	libiec61850 1.3 – Stack Based Buffer Overflow	local	Dhiraj Mishra
2018-10-30	SIPp 3.3.990 – Local Buffer Overflow (PoC)	dos	Nawaf Alkeraithe
2018-10-29	systemd – ‘chown_one()’ Dereference Symlinks	local	Google Security Research
2018-10-29	systemd – ‘reexec’ State Injection	dos	Google Security Research