linux

日期	标题	类别	作者
2020-05-26	Pi-hole 4.4.0 – Remote Code Execution (Authenticated)	webapps	Photubias
2020-05-10	Pi-hole < 4.4 - Authenticated Remote Code Execution / Privileges Escalation	webapps	Nick Frichette
2020-05-10	Pi-hole < 4.4 - Authenticated Remote Code Execution	webapps	Nick Frichette
2020-04-22	Mahara 19.10.2 CMS – Persistent Cross-Site Scripting	webapps	Vulnerability-Lab
2020-04-20	Unraid 6.8.0 – Auth Bypass PHP Code Execution (Metasploit)	remote	Metasploit
2020-04-17	Nexus Repository Manager – Java EL Injection RCE (Metasploit)	remote	Metasploit
2020-04-16	Pandora FMS – Ping Authenticated Remote Code Execution (Metasploit)	remote	Metasploit
2020-04-16	ThinkPHP – Multiple PHP Injection RCEs (Metasploit)	remote	Metasploit
2020-04-07	dnsmasq-utils 2.79-1 – ‘dhcp_release’ Denial of Service (PoC)	dos	JosueEncinar
2020-03-31	Redis – Replication Code Execution (Metasploit)	remote	Metasploit
2020-03-30	Multiple DrayTek Products – Pre-authentication Remote Root Code Execution	remote	0xsha
2020-03-17	Rconfig 3.x – Chained Remote Code Execution (Metasploit)	remote	Metasploit
2020-03-13	Centos WebPanel 7 – ‘term’ SQL Injection	webapps	Berke YILMAZ
2020-03-11	CTROMS Terminal OS Port Portal – ‘Password Reset’ Authentication Bypass (Metasploit)	remote	AkkuS
2020-03-10	Nagios XI – Authenticated Remote Command Execution (Metasploit)	remote	Metasploit
2020-03-09	OpenSMTPD – OOB Read Local Privilege Escalation (Metasploit)	local	Metasploit
2020-03-02	netkit-telnet-0.17 telnetd (Fedora 31) – ‘BraveStarr’ Remote Code Execution	remote	Immunity
2020-02-26	OpenSMTPD 6.6.3 – Arbitrary File Read	remote	Qualys Corporation
2020-02-24	Diamorphine Rootkit – Signal Privilege Escalation (Metasploit)	local	Metasploit
2020-02-24	Apache James Server 2.3.2 – Insecure User Creation Arbitrary File Write (Metasploit)	remote	Metasploit
2020-02-24	Go SSH servers 0.0.2 – Denial of Service (PoC)	dos	Mark Adams
2020-02-10	OpenSMTPD – MAIL FROM Remote Code Execution (Metasploit)	remote	Metasploit
2020-02-10	usersctp – Out-of-Bounds Reads in sctp_load_addresses_from_init	dos	Google Security Research
2020-02-06	Sudo 1.8.25p – ‘pwfeedback’ Buffer Overflow	local	Dylan Katz