linux

日期	标题	类别	作者
2018-08-01	SonicWall Global Management System – XMLRPC set_time_zone Command Injection (Metasploit)	remote	Metasploit
2018-07-31	Craft CMS SEOmatic plugin 3.1.4 – Server-Side Template Injection	webapps	0xB455
2018-07-30	Responsive Filemanager 9.13.1 – Server-Side Request Forgery	webapps	GUIA BRAHIM FOUAD
2018-07-30	fusermount – user_allow_other Restriction Bypass and SELinux Label Control	dos	Google Security Research
2018-07-30	H2 Database 1.4.197 – Information Disclosure	webapps	owodelta
2018-07-27	Axis Network Camera – .srv to parhand Remote Code Execution (Metasploit)	remote	Metasploit
2018-07-27	Online Trade 1 – Information Disclosure	webapps	Dhamotharan
2018-07-26	Kirby CMS 2.5.12 – Cross-Site Request Forgery (Delete Page)	webapps	Zaran Shaikh
2018-07-24	Nagios Core 4.4.1 – Denial of Service	dos	Fakhri Zulkifli
2018-07-23	Synology DiskStation Manager 4.1 – Directory Traversal	webapps	Berk Dusunur
2018-07-21	Inteno’s IOPSYS – (Authenticated) Local Privilege Escalation	local	neonsea
2018-07-19	Linux – BPF Sign Extension Local Privilege Escalation (Metasploit)	local	Metasploit
2018-07-17	QNAP Q’Center – ‘change_passwd’ Command Execution (Metasploit)	remote	Metasploit
2018-07-16	Linux (Ubuntu) – Other Users coredumps Can Be Read via setgid Directory and killpriv Bypass	dos	Google Security Research
2018-07-13	Hadoop YARN ResourceManager – Command Execution (Metasploit)	remote	Metasploit
2018-07-13	Apache CouchDB – Arbitrary Command Execution (Metasploit)	remote	Metasploit
2018-07-11	Awk to Perl 1.007-5 – Buffer Overflow (PoC)	local	Todor Donev
2018-07-10	Linux Kernel < 4.13.9 (Ubuntu 16.04 / Fedora 27) - Local Privilege Escalation	local	rlarabee
2018-07-10	Elektronischer Leitz-Ordner 10 – SQL Injection	webapps	Jens Regel
2018-07-09	Tor Browser < 0.3.2.10 - Use After Free (PoC)	dos	t4rkd3vilz
2018-07-09	HID discoveryd – ‘command_blink_on’ Remote Code Execution (Metasploit)	remote	Metasploit
2018-07-09	HP VAN SDN Controller – Root Command Injection (Metasploit)	remote	Metasploit
2018-07-03	OpenSLP 2.0.0 – Double-Free	dos	Magnus Klaaborg Stubman
2018-07-02	Nagios XI 5.2.6-5.4.12 – Chained Remote Code Execution (Metasploit)	remote	Metasploit