multiple

日期	标题	类别	作者
2020-03-09	Google Chrome 67, 68 and 69 – Object.create Type Confusion (Metasploit)	remote	Metasploit
2020-03-09	Google Chrome 72 and 73 – Array.map Out-of-Bounds Write (Metasploit)	remote	Metasploit
2020-03-05	EyesOfNetwork – AutoDiscovery Target Command Execution (Metasploit)	remote	Metasploit
2020-03-02	Wing FTP Server 6.2.5 – Privilege Escalation	webapps	Cary Hooper
2020-03-02	Joplin Desktop 1.0.184 – Cross-Site Scripting	webapps	Javier Olmedo
2020-02-28	qdPM < 9.1 - Remote Code Execution	webapps	Tobin Shields
2020-02-24	Real Web Pentesting Tutorial Step by Step – [Persian]	webapps	Meisam Monsef
2020-02-20	Apache Tomcat – AJP ‘Ghostcat File Read/Inclusion	webapps	YDHCUI
2020-02-10	iOS/macOS – Out-of-Bounds Timestamp Write in IOAccelCommandQueue2::processSegmentKernelCommand()	dos	Google Security Research
2020-02-10	Forcepoint WebSecurity 8.5 – Reflective Cross-Site Scripting	webapps	Prasenjit Kanti Paul
2020-02-07	Google Invisible RECAPTCHA 3 – Spoof Bypass	webapps	Matamorphosis
2020-02-03	Cacti 1.2.8 – Unauthenticated Remote Code Execution	webapps	Askar
2020-02-03	Cacti 1.2.8 – Authenticated Remote Code Execution	webapps	Askar
2020-01-28	macOS/iOS ImageIO – Heap Corruption when Processing Malformed TIFF Image	dos	Google Security Research
2020-01-22	KeePass 2.44 – Denial of Service (PoC)	dos	Mustafa Emre Gül
2020-01-16	Citrix Application Delivery Controller (ADC) and Gateway 13.0 – Path Traversal	webapps	Dhiraj Mishra
2020-01-16	Tautulli 2.1.9 – Denial of Service (Metasploit)	dos	Ismail Tasdelen
2020-01-13	Citrix Application Delivery Controller and Gateway 10.5 – Remote Code Execution (Metasploit)	webapps	mekhalleh
2020-01-11	Citrix Application Delivery Controller and Citrix Gateway – Remote Code Execution	webapps	TrustedSec
2020-01-11	Citrix Application Delivery Controller and Citrix Gateway – Remote Code Execution (PoC)	webapps	Project Zero India
2020-01-01	nostromo 1.9.6 – Remote Code Execution	remote	Kr0ff
2019-12-12	ManageEngine Desktop Central – ‘FileStorage getChartImage’ Deserialization / Unauthenticated Remote Code Execution	webapps	mr_me
2019-11-20	Pulse Secure VPN – Arbitrary Command Execution (Metasploit)	remote	Metasploit
2019-11-20	FreeSWITCH – Event Socket Command Execution (Metasploit)	remote	Metasploit