misc

Nombremisc
Inscribirse2016-10-25
Puntos De La Comunidad4558
Commits1586
Envía51
Publicaciones23
Voto A Favor0
RangoMaestro
Activity Badges
👴 Long-time User (10x)
🔁 Returning User
💻 Digital Nomad (4x)
🔬 Researcher (6x)
🚨 Staying Alert
🖖 Community Member (91x)
👋 Regular Visitor (12x)
📤 Submitter (9x)
📝 Editor (157x)
💬 Commentator (4x)

Envía (51)

Cronología (51)

IDTítuloSumisiónModeraciónArtículoPEstado
41689Xxxxxxxxx Xxxxxxxxxx Xxxxxx Xxxxxxxxxxxxxxxxxxxxxxxx Xxxxxxxxxxxxxxx Xx Xxxxxxxx2022-07-192022-07-26
 
0Rechazado
36527Web3Signer - pgjdbc injection / Log4j2022-05-102022-05-101921180Duplicado
29334Local Privilege Escalation in polkit's pkexec2022-01-262022-01-2619160319Aceptado
25543Remote Code Execution in Java logging library Apache Log4j 22021-12-102021-12-101879250Duplicado
22950PHP-FPM Local root privilege escalation2021-10-252021-10-2618542520Aceptado
22410Kernel: use-after-free in route4_change() in net/sched/cls_route.c2021-10-182021-10-1818452420Aceptado
19987PostgreSQL Memory disclosure in partitioned-table UPDATE ... RETURNING2021-09-082021-09-0818216220Aceptado
19986PostgreSQL Memory disclosure in INSERT ... ON CONFLICT ... DO UPDATE2021-09-082021-09-0818216120Aceptado
19985PostgreSQL Memory disclosure in certain queries2021-09-082021-09-0818216320Aceptado
18902SteelSeries Apex Mechanical Gaming Keyboard Local Privilege Escalation2021-08-242021-08-2418136920Aceptado
18901Cross-site Scripting (XSS) in Angular versions <11.0.5 || >=11.1.0-next.0 <11.1.0-next.32021-08-242021-08-2418135620Aceptado
17584Versions 4.2 and 4.3 of Cobalt Strike’s server contain multiple Denial of Service vulnerabilities (CVE-2021-36798)2021-08-042021-08-0418007320Aceptado
17223Jira Data Center & Jira Service Management Data Center - Missing Authentication for Ehcache RMI2021-07-272021-07-2717970420Aceptado
15848Regular expression Denial of Service in mootools2021-07-072021-07-0717800820Aceptado
8339Unauthorized RCE in VMware vCenter2021-02-242021-02-251703780Duplicado
4438HP Support Assistant Potential Escalation of Privilege and Arbitrary File Deletion2020-12-212020-12-2116662219Aceptado
182GRUB2: crafted grub.cfg file can lead to arbitrary code execution during boot process2020-07-302020-07-3015914320Aceptado
156Unauthenticated persistent cross-site scripting injection into the administrative console of CISCO ISE web application via DHCP request2020-02-192020-08-1015036319Aceptado
154LPE and RCE in OpenSMTPD2020-01-292020-08-1014954719Aceptado
142Local Privilege Escalation in many Ricoh Printer Drivers for Windows2020-01-222020-08-1014931518Aceptado
138IceWarp: Cross-Site Scripting in Notes2020-01-022020-08-1014828516Aceptado
136Linux 5.3 - Privilege Escalation via io_uring Offload of sendmsg() onto Kernel Thread with Kernel Creds2019-12-162019-12-1814733014Aceptado
128Xinet Elegant 6 Asset Library Web Interface v6.1.655 Pre-Auth SQL Injection2019-12-012019-12-0814649520Aceptado
127Microsoft Excel 2016 v1901 Error Import Based XML External Entity Injection2019-12-012019-12-0814680019Aceptado
123Denial-of-Service vulnerability in axTLS library2019-11-292019-12-0814660320Aceptado
122Denial-of-Service vulnerability in axTLS library2019-11-292019-12-0814665420Aceptado
121rConfig v3.9.2 authenticated and unauthenticated RCE2019-11-262019-12-0814425814Aceptado
120Multiple attack vectors in rConfig v3.9.22019-11-262019-12-0814679915Aceptado
119OpenNetAdmin 18.1.1 - Remote Code Execution Exploit 2019-11-212019-12-0814679814Aceptado
118Local Privilege Escalation in Symantec Endpoint Protection2019-11-162019-12-0814583011Aceptado
114WebKit - Universal XSS in JSObject::putInlineSlow and JSValue::putToPrimitive Exploit2019-11-072019-11-0714517513Aceptado
112AUO SunVeillance Monitoring System 1.1.9e - 'MailAdd' SQL Injection 2019-10-262019-10-2614423315Aceptado
111Joomla! 3.4.6 - Remote Code Execution2019-10-262019-10-2614423217Aceptado
110PHP-FPM env_path_info underflow in fpm_main.c can lead to RCE2019-10-262019-10-2614423113Aceptado
108Microsoft Windows NTFS Master File Table Integer Overflow leads to BSOD2019-10-232019-10-2514416918Aceptado
103Ajenti 2.1.31 - Remote Code Execution2019-10-162019-10-1814395013Aceptado
102Podman & Varlink 1.5.1 - Remote Code Execution2019-10-162019-10-1814394913Aceptado
101Solaris xscreensaver 11.4 - Privilege Escalation2019-10-162019-10-1814374514Aceptado
100sudo: Potential bypass of Runas user restrictions2019-10-152019-10-1514346820Aceptado
99Icewarp Webclient 10.1.3/10.2.0 Https Post Request Cross Site Scripting2019-10-112019-10-1114337817Aceptado
98Icewarp Webclient 10.1.3/10.2.0 Https Post Request Cross Site Scripting2019-10-112019-10-1114337717Aceptado
97Icewarp Webclient 10.1.3/10.2.0 Https Post Request Cross Site Scripting2019-10-112019-10-1114337617Aceptado
96Icewarp Webclient 10.1.3/10.2.0 Https Post Request Cross Site Scripting2019-10-112019-10-1114337517Aceptado
95Icewarp Mail Server 10.1.3/10.2.0 Directory Traversal2019-10-112019-10-1114337417Aceptado
94XNU - Remote Double-Free via Data Race in IPComp Input Path2019-10-102019-10-1114337313Aceptado
91Multiple directory-traversal vulnerabilities in IceWarp Webclient2019-10-072019-10-0814299416Aceptado
90Multiple XSS vulnerabilities in IceWarp Webclient2019-10-072019-10-0814299315Aceptado
89SEH based local Buffer Overflow – DameWare Remote Support2019-10-072019-10-0814299216Aceptado
88Android: Use-After-Free in Binder driver2019-10-072019-10-0814299120Aceptado
73Mozilla Firefox Type confusion in Array.pop2019-06-192019-06-1913664120Aceptado
35Microsoft Windows - Advanced Local Procedure Call (ALPC) Local Privilege Escalation2018-08-292018-08-2912335020Aceptado

Commits (1586)

Cronología (227)

IDArtículoCVEActualizadoModeraciónCP
27747671-6Palo Alto GlobalProtect App/Global Protect App escalada de privilegiosCVE-2026-02512026-09-102026-09-10616
24842941-7Linux Kernel crypto algif_aead Copy Fail Local Privilege EscalationCVE-2026-314312026-04-302026-04-30716
23687874-9Fortinet FortiOS SSL-VPN desbordamiento de búferCVE-2024-217622026-02-122026-02-12614
21395489-95Linux Kernel netfilter bitmap_ip_uadt escalada de privilegiosCVE-2024-531412025-07-312025-07-31717
21395481-8Linux Kernel refcount.c bind desbordamiento de búferCVE-2025-217562025-07-312025-07-31818
21394806-11HP Plantronics Hub Updater escalada de privilegiosCVE-2024-274602025-07-312025-07-31615
21166012-20Microsoft Windows Update Service escalada de privilegiosCVE-2025-487992025-07-092025-07-09921
20544781-6Microsoft Windows BitLocker Local Privilege EscalationCVE-2023-215632025-05-152025-05-15615
19909375-80Kubernetes ingress-nginx IngressNightmare Ejecución remota de códigoCVE-2025-19742025-03-262025-03-26615
17932507-13Grafana SQL Expressions Experimental Feature escalada de privilegiosCVE-2024-92642024-10-212024-10-21717
17738941-6Microsoft SysInternals Sysmon Local Privilege EscalationCVE-2023-293432024-10-042024-10-04614
17355885-8Netgear WN604/WN802Tv2/WNAP210/WNAP320/WNDAP350/WNDAP360 boardDataWW.php escalada de privilegiosCVE-2016-15552024-08-252024-08-2549
17355883-4Apple macOS libxpc escalada de privilegiosCVE-2018-42372024-08-252024-08-2524
17355858-65Blueman Network.py EnableNetwork escalada de privilegiosCVE-2015-86122024-08-252024-08-25820
17355854-7NUOO CMS Web Server inyección SQLCVE-2018-189822024-08-252024-08-2549
17355845-53Imperva SecureSphere PWS escalada de privilegiosCVE-2018-166602024-08-252024-08-25921
17355826-7elFinder PHP Connector escalada de privilegiosCVE-2019-91942024-08-252024-08-2525
17355817-24Pipeline Declarative Plugin Sandbox Converter.groovy escalada de privilegiosCVE-2019-10030022024-08-252024-08-25820
17355798-9CMS Made Simple Watermark class.showtime2_image.php escalada de privilegiosCVE-2019-96922024-08-252024-08-2525
17355792-5LibreOffice Macro recorrido de directoriosCVE-2018-168582024-08-252024-08-2549
17354611-8AIS ESEL-Server 67 Backend inyección SQLCVE-2019-101232024-08-252024-08-25820
17354603-10Ruby on Rails Development Mode escalada de privilegiosCVE-2019-54202024-08-252024-08-25820
17354595-602GetSimple CMS theme-edit.php escalada de privilegiosCVE-2019-112312024-08-252024-08-25820
17354587-94Shopware loadPreviewAction escalada de privilegiosCVE-2017-183572024-08-252024-08-25820
17354583-6Apple macOS Feedback Assistant condición de carreraCVE-2019-85652024-08-252024-08-2549
17354558-65LibreNMS addhost.inc.php escalada de privilegiosCVE-2018-204342024-08-252024-08-25820
17354550-7IBM WebSphere Application Server escalada de privilegiosCVE-2019-42792024-08-252024-08-25820
17354542-9Webmin Package Updates update.cgi escalada de privilegiosCVE-2019-128402024-08-252024-08-25820
17354538-41Cisco Prime Infrastructure/Evolved Programmable Network Web-based Management escalada de privilegiosCVE-2019-18212024-08-252024-08-2549
17354530-7Apple macOS Time Machine escalada de privilegiosCVE-2019-85132024-08-252024-08-25820
17354526-9Xymon xymond useradm.c escalada de privilegiosCVE-2016-20562024-08-252024-08-2549
17354518-25Laravel Framework Permission .env writeNewEnvironmentFileWith Contraseña divulgación de informaciónCVE-2017-168942024-08-252024-08-25820
17354494-500Laravel Framework Token Encrypter.php decrypt escalada de privilegiosCVE-2018-151332024-08-252024-08-25717
17354490-3Microsoft Windows AppX Deployment Service escalada de privilegiosCVE-2019-08412024-08-252024-08-2549
17354469-72Microsoft Windows Win32k escalada de privilegiosCVE-2018-84532024-08-252024-08-2549
17354460-8Schneider Electric Pelco Endura NET55XX Encoder Access Control escalada de privilegiosCVE-2019-68142024-08-252024-08-25922
15315837-44Apache OFBiz escalada de privilegiosCVE-2023-490702024-01-042024-01-04818
14791408-16Microsoft SharePoint Server escalada de privilegiosCVE-2023-249552023-09-272023-09-27919
14266344-50Microsoft Windows Win32k desbordamiento de búferCVE-2023-293362023-06-092023-06-09716
13719620-8Fortinet FortiNAC HTTP escalada de privilegiosCVE-2022-399522023-02-212023-02-21919
13210626-35OpenSSL X.509 Certificate desbordamiento de búferCVE-2022-36022022-11-022022-11-021020
12503423-30Microsoft Windows Active Directory Domain Services autenticación débilCVE-2022-269232022-05-122022-05-12818
12484608-16F5 BIG-IP LTM HTTP denegación de servicioCVE-2022-294912022-05-092022-05-10919
12294874-8Adobe Photoshop desbordamiento de búferCVE-2007-23652022-03-182022-03-1859
12243279-84Linux Kernel Pipe Dirty Pipe escalada de privilegiosCVE-2022-08472022-03-082022-03-08612
12157863-71Microsoft Windows Print Spooler escalada de privilegiosCVE-2022-227182022-02-092022-02-09919
12119247-53Microsoft Windows Win32k desbordamiento de búferCVE-2022-218822022-01-282022-01-28717
12112234-41polkit pkexec escalada de privilegiosCVE-2021-40342022-01-262022-01-26812
11969890-6Microsoft Windows Common Log File System divulgación de informaciónCVE-2021-432242021-12-212021-12-21717
11843160-8Microsoft Windows Win32k desbordamiento de búferCVE-2021-404492021-11-112021-11-11919
11590624-7Jetty URI escalada de privilegiosCVE-2021-344292021-09-082021-09-08412
11571698-709Atlassian Confluence Server/Confluence Data Center Webwork OGNL escalada de privilegiosCVE-2021-260842021-09-012021-09-011224
11551826prototypejs Prototype JavaScript framework Ejecución remota de códigoCVE-2008-72202021-08-242021-08-2411
11473118-24Apple iOS/iPadOS IOMobileFrameBuffer desbordamiento de búferCVE-2021-308072021-07-272021-07-27715
11437240-5Microsoft Windows Volume Shadow Copy SAM SeriousSAM/HiveNightmare escalada de privilegiosCVE-2021-369342021-07-202021-07-20611
11375563-6549Microsoft Windows Print Spooler Local Privilege EscalationCVE-2021-16752021-06-292021-06-29919
11322551-7Microsoft Windows Graphics escalada de privilegiosCVE-2021-268682021-06-092021-06-09717
11322544-50Microsoft Windows DWM Core escalada de privilegiosCVE-2021-337392021-06-092021-06-09717
11311931-8VMware vCenter Server Virtual SAN Health Check Plug-In autenticación débilCVE-2021-219852021-06-052021-06-05818
11297528-36Microsoft Windows Hyper-V VmsIfrInfoParams_OID_SWITCH_NIC_REQUEST escalada de privilegiosCVE-2021-284762021-06-012021-06-01919
11254142-9Microsoft Windows HTTP Protocol desbordamiento de búferCVE-2021-311662021-05-162021-05-16818
11253726-33Pega Infinity Password Recovery autenticación débilCVE-2021-276512021-05-162021-05-16818
11250853-60Exim tls-openssl.c desbordamiento de búferCVE-2020-280182021-05-152021-05-15818
11244220-7Dell DBUtil BIOS Driver dbutil_2_3.sys escalada de privilegiosCVE-2021-215512021-05-142021-05-14818
11240569-76Microsoft Exchange Server escalada de privilegiosCVE-2021-284822021-05-122021-05-12818
11200059-64Microsoft Windows splwow64 escalada de privilegiosCVE-2021-16482021-04-282021-04-28615
11156500-7Microsoft Windows Installer Local Privilege EscalationCVE-2021-264152021-04-222021-04-22817
11129612-20Linux Kernel VSOCK af_vsock.c condición de carreraCVE-2021-267082021-04-132021-04-13920
11120405-13Intel BlueZ divulgación de informaciónCVE-2020-123522021-04-082021-04-08920
11120396-404Intel BlueZ escalada de privilegiosCVE-2020-123512021-04-082021-04-08920
11116595-602Microsoft Windows TCP/IP denegación de servicioCVE-2021-240862021-04-082021-04-08818
11081007-13Microsoft Windows modem.sys divulgación de informaciónCVE-2021-16992021-03-312021-03-31717
11025221-9Microsoft Exchange Server recorrido de directoriosCVE-2021-270652021-03-122021-03-12921
11025212-20Microsoft Exchange Server ProxyLogon escalada de privilegiosCVE-2021-268552021-03-122021-03-12921
11009945-51Microsoft Windows Win32k desbordamiento de búferCVE-2021-17322021-03-092021-03-09717
10971130-40VMware vCenter Server/Cloud Foundation vSphere Client recorrido de directoriosCVE-2021-219722021-02-252021-02-251121
10933022-30Microsoft Exchange Server escalada de privilegiosCVE-2021-240852021-02-152021-02-15919
10873065-73sudo sudoers_policy_main desbordamiento de búferCVE-2021-31562021-01-312021-01-31918
10868090-6Google Chrome v8 escalada de privilegiosCVE-2018-174632021-01-282021-01-29717
10868083-9Google Chrome Javascript desbordamiento de búferCVE-2019-58252021-01-282021-01-29717
10865117-23sudo sudoedit selinux_edit_copy_tfiles escalada de privilegiosCVE-2021-232402021-01-272021-01-27716
10831687-95Microsoft Windows Lockscreen escalada de privilegiosCVE-2020-13982021-01-172021-01-17918
10793957-63Microsoft .NET Framework escalada de privilegiosCVE-2020-06462021-01-042021-01-04716
10729234-40Microsoft Exchange Server escalada de privilegiosCVE-2020-171412020-12-112020-12-11717
10729115-21Microsoft Exchange Server divulgación de informaciónCVE-2020-171432020-12-112020-12-11717
10708502-11Microsoft Windows Kerberos escalada de privilegiosCVE-2020-170492020-12-092020-12-091020
10610266-75Microsoft Exchange Server secuencias de comandos en sitios cruzadosCVE-2020-170832020-11-122020-11-121020
10600386-92Oracle WebLogic Server Ejecución remota de códigoCVE-2020-147502020-11-092020-11-09716
10589163-7Oracle Solaris Pluggable authentication module parse_user_name desbordamiento de búferCVE-2020-148712020-11-042020-11-04511
10508994-9000MobileIron Core/Connector escalada de privilegiosCVE-2020-155052020-09-142020-09-14614
10481571-6Microsoft Windows Netlogon Zerologon escalada de privilegiosCVE-2020-14722020-09-122020-09-13511
10507040-6Microsoft Internet Explorer Scripting desbordamiento de búferCVE-2020-06742020-09-122020-09-13614
10509729-36Microsoft Exchange Server Email escalada de privilegiosCVE-2020-168752020-09-122020-09-12715
10509455-62Microsoft Windows Setup escalada de privilegiosCVE-2020-15712020-08-172020-08-17715
10509227-39Microsoft .NET Framework XML escalada de privilegiosCVE-2020-11472020-08-172020-08-17717
10509379-85Microsoft Windows Print Spooler escalada de privilegiosCVE-2020-13372020-08-122020-08-12614
10509075-83SAP NetWeaver AS JAVA LM Configuration Wizard RECON autenticación débilCVE-2020-62872020-07-242020-07-25816
10509303-9Microsoft Windows WalletService escalada de privilegiosCVE-2020-13622020-07-172020-07-18614
10509158-64Microsoft Windows DNS Server SigRed desbordamiento de búferCVE-2020-13502020-07-162020-07-17614
10508257-63Fortinet FortiMail/FortiVoiceEntreprise Password Change autenticación débilCVE-2020-92942020-07-062020-07-06614
10508819-31F5 BIG-IP Traffic Management User escalada de privilegiosCVE-2020-59022020-07-062020-07-061127
10508675-81Microsoft Windows OLE escalada de privilegiosCVE-2020-12812020-06-102020-06-12614
10508749-55Microsoft Windows SMBv1 escalada de privilegiosCVE-2020-13012020-06-102020-06-12614
10508426-39VMware Cloud Director escalada de privilegiosCVE-2020-39562020-06-042020-06-07717
10508486-92Apache Tomcat escalada de privilegiosCVE-2020-94842020-06-042020-06-07614
10505638-45Google Chrome WebRTC desbordamiento de búferCVE-2019-136942020-04-172020-04-17715
10508084-91VMware vCenter Server vmdir escalada de privilegiosCVE-2020-39522020-04-172020-04-17715
10508031-4Sonatype Nexus Repository Manager Access Control escalada de privilegiosCVE-2020-114442020-04-092020-04-11410
10507966-70Microsoft Windows SMBv3 SMBGhost desbordamiento de búferCVE-2020-07962020-03-302020-04-0549
10507252-65Microsoft Exchange Server escalada de privilegiosCVE-2020-06882020-03-022020-03-27818
10507829-42OpenSMTPD mta_session.c divulgación de informaciónCVE-2020-87942020-02-272020-03-02717
10507769-82OpenSMTPD makemap.c escalada de privilegiosCVE-2020-87932020-02-262020-03-02717
10507406-12Microsoft Windows Error Reporting escalada de privilegiosCVE-2020-07542020-02-232020-03-02614
10507329-35Microsoft Windows Error Reporting escalada de privilegiosCVE-2020-07532020-02-232020-03-02614
10507710-6Cacti Cooikie graph_realtime.php escalada de privilegiosCVE-2020-88132020-02-222020-03-02614
10507109-17Microsoft SQL Server Reporting Services escalada de privilegiosCVE-2020-06182020-02-222020-03-02816
10507185-92Microsoft Windows Windows Installer escalada de privilegiosCVE-2020-06832020-02-152020-02-20715
10501800-11CPU Kernel divulgación de informaciónCVE-2019-11252020-02-152020-02-20718
10507466-80HP System Event Utility escalada de privilegiosCVE-2019-189152020-02-152020-02-20817
10484762-75Microsoft SharePoint Server Application Package escalada de privilegiosCVE-2019-06042020-02-152020-02-20818
10506903-14sudo pwfeedback tgetpass.c getln desbordamiento de búferCVE-2019-186342020-02-152020-02-20717
10506967-78OpenSMTPD SMTP Session smtp_session.c escalada de privilegiosCVE-2020-72472020-01-312020-02-20717
10506178-93Citrix Application Delivery Controller/Gateway recorrido de directoriosCVE-2019-197812020-01-112020-01-131129
10561465-71Apache Tomcat Utility Method escalada de privilegiosCVE-2016-50182020-01-082020-01-1370
10502610-23JetBrains TeamCity escalada de privilegiosCVE-2019-150392020-01-082020-01-13717
10502149-55Microsoft Windows Winsock ws2ifsl.sys escalada de privilegiosCVE-2019-12152020-01-072020-01-13614
10482998-3014Apache Tika tika-server escalada de privilegiosCVE-2018-13352020-01-052020-01-05717
10500125-39Exim escalada de privilegiosCVE-2019-101492020-01-042020-01-05717
10501741-52Tableau Server XML Data XML External EntityCVE-2019-156372020-01-042020-01-05717
10500896-908Apple Safari WebKit desbordamiento de búferCVE-2019-86892020-01-042020-01-05717
10505498-513ktsuss Privileges escalada de privilegiosCVE-2011-29212020-01-042020-01-05717
10501681Cisco Integrated Management Controller CLI autenticación débilCVE-2019-19352020-01-042020-01-05919
10500443Cisco Data Center Network Manager Web-based Management escalada de privilegiosCVE-2019-16202020-01-042020-01-05919
10484830Cisco RV110W Wireless-N VPN Firewall Web-based Management escalada de privilegiosCVE-2019-16632020-01-042020-01-05922
10483471Crestron AirMedia AM-100/AirMedia AM-101 escalada de privilegiosCVE-2017-167092020-01-042020-01-05919
10502074-85LibreNMS collectd.inc.php passthru escalada de privilegiosCVE-2019-106692020-01-042020-01-05717
10482528-40October CMS File Upload escalada de privilegiosCVE-2017-10001192020-01-042020-01-05717
10501305-13Microsoft Windows Core Shell COM Server Registrar escalada de privilegiosCVE-2019-11842020-01-032020-01-05816
10501534-42Adobe Acrobat Reader desbordamiento de búferCVE-2019-80392020-01-022020-01-03816
10501464-72Adobe Acrobat Reader desbordamiento de búferCVE-2019-80382020-01-022020-01-03816
10501027-40FreeBSD File Descriptors Underflow escalada de privilegiosCVE-2019-56032019-12-302020-01-01818
10484693-706FreeBSD Unix Domain Socket escalada de privilegiosCVE-2019-55962019-12-302020-01-01818
10484047-62Microsoft Windows TCP/IP divulgación de informaciónCVE-2018-84932019-12-232019-12-25819
10506015-26OpenBSD setuid Program ld.so _dl_setup_env escalada de privilegiosCVE-2019-197262019-12-162019-12-17717
10505948-60Adobe Acrobat Reader desbordamiento de búferCVE-2019-164512019-12-152019-12-15615
10505823-36Lenovo Power Management Driver desbordamiento de búferCVE-2019-61922019-12-152019-12-15717
10505886-92Progress Telerik UI for ASP.NET AJAX .NET Deserialization RadAsyncUpload escalada de privilegiosCVE-2019-189352019-12-152019-12-15614
10501109-25Symantec Endpoint Protection escalada de privilegiosCVE-2019-127502019-12-142019-12-14615
10499910-7Mozilla Firefox/Firefox ESR/Thunderbird IonMonkey JIT Compiler Array.prototype.slice desbordamiento de búferCVE-2019-98102019-12-082019-12-08715
10500377-83Mozilla Firefox Sandbox escalada de privilegiosCVE-2019-117082019-12-082019-12-08612
10505702-15verot.net class.upload class.upload.php escalada de privilegiosCVE-2019-195762019-12-082019-12-08717
10483325CA Privileged Access Manager Configuration escalada de privilegiosCVE-2018-90222019-12-082019-12-08919
10483260CA Privileged Access Manager escalada de privilegiosCVE-2018-90212019-12-082019-12-08919
10502315-26Integard Pro LoginAdmin desbordamiento de búferCVE-2019-167022019-12-082019-12-08717
10504120Trend Micro Deep Security Agent escalada de privilegiosCVE-2019-156272019-12-082019-12-081329
10505575-86Fotinet FortiOS URL/SPAM/AV autenticación débilCVE-2018-91952019-11-272019-12-041024
10505119Patriot Viper RGB Driver MsIo64.sys ZwMapViewOfSection escalada de privilegiosCVE-2019-188452019-11-272019-12-04817
10482269-87VMware ESXi/Workstation Pro/Player/Fusion Pro/Fusion divulgación de informaciónCVE-2017-49052019-11-262019-11-27717
10482354-72VMware Workstation/Fusion Drag/Drop desbordamiento de búferCVE-2017-49012019-11-262019-11-27717
10482662-5FasterXML jackson-databind Incomplete Fix CVE-2017-7525 readValue escalada de privilegiosCVE-2017-174852019-11-252019-11-27412
10500188-99FreePBX Operator Panel exec.php secuencias de comandos en sitios cruzadosCVE-2019-114092019-11-212019-11-25717
10502014-25Bludit upload-images.php escalada de privilegiosCVE-2019-161132019-11-212019-11-25717
10499782-95Pulse Secure Pulse Connect Secure Admin Web escalada de privilegiosCVE-2019-115392019-11-212019-11-25717
10500062-7FreeRADIUS Logrotate escalada de privilegiosCVE-2019-101432019-11-162019-11-16512
10502894-906Microsoft Windows Authentication autenticación débilCVE-2019-13222019-11-162019-11-16717
10505257-69Microsoft Windows UPnP Service escalada de privilegiosCVE-2019-14052019-11-162019-11-16717
10505440-50SibSoft Xfilesharing up.cgi escalada de privilegiosCVE-2019-189522019-11-162019-11-16615
10505320Technicolor TC7300 wlanAccess.asp secuencias de comandos en sitios cruzadosCVE-2019-175242019-11-162019-11-16818
10505006-16Technicolor TD5130v2 Web mnt_ping.cgi escalada de privilegiosCVE-2019-183962019-11-162019-11-16615
10505381-92FUDForum Almacenado secuencias de comandos en sitios cruzadosCVE-2019-188392019-11-162019-11-16717
10505183-95FUDForum admsession.php Almacenado secuencias de comandos en sitios cruzadosCVE-2019-188732019-11-162019-11-16820
10500563-75Nortek Linear eMerge E3 escalada de privilegiosCVE-2019-72562019-11-162019-11-16818
10499654-67Atlassian Confluence Server/Data Center downloadallattachments recorrido de directoriosCVE-2019-33982019-11-122019-11-13717
10500503-15Prima Systems FlexAir escalada de privilegiosCVE-2019-76702019-11-122019-11-13818
10504322-34Adobe Acrobat Reader denegación de servicioCVE-2019-81962019-11-122019-11-13615
10504256-68Adobe Acrobat Reader denegación de servicioCVE-2019-81952019-11-122019-11-13615
10502442-54Apple iOS Foundation divulgación de informaciónCVE-2019-86412019-11-122019-11-13615
10500965-77Apple iOS Quick Look desbordamiento de búferCVE-2019-86622019-11-122019-11-13615
10504807-13Apple iOS/iPadOS Audio desbordamiento de búferCVE-2019-87972019-11-112019-11-12614
10504874-80Apple iOS/iPadOS AVEVideoEncoder desbordamiento de búferCVE-2019-87952019-11-112019-11-12614
10504943-9Apple iOS/iPadOS Kernel Memory escalada de privilegiosCVE-2019-87942019-11-112019-11-12614
10500710-8Microsoft Windows Kernel divulgación de informaciónCVE-2019-10712019-11-112019-11-11816
10503732Nostromo nhttpd SSL_accept recorrido de directoriosCVE-2019-162792019-11-092019-11-10816
10502256-67Micro Focus Data Protector escalada de privilegiosCVE-2019-116602019-11-092019-11-10717
10503351-64Microsoft Edge divulgación de informaciónCVE-2019-13562019-11-092019-11-10818
10482591-606Google Android art escalada de privilegiosCVE-2017-131562019-11-082019-11-09717
10504739-51rConfig ajaxServerSettingsChk.php exec escalada de privilegiosCVE-2019-166622019-11-082019-11-09818
10504676build-metrics Plugin Reflected secuencias de comandos en sitios cruzadosCVE-2019-104752019-11-082019-11-09917
10484498-503BMC Patrol Agent PatrolCli Lateral escalada de privilegiosCVE-2018-207352019-11-082019-11-08512
10561440-4Microsoft Windows Group Policy escalada de privilegiosCVE-2015-00092019-10-292019-10-30512
10561435-9Microsoft Windows Group Policy autenticación débilCVE-2015-00082019-10-292019-10-30512
10504383-95Rocket.Chat secuencias de comandos en sitios cruzadosCVE-2019-172202019-10-262019-10-26615
10503492-502Moxa EDR 810 Log File divulgación de informaciónCVE-2019-109632019-10-262019-10-26615
10503551-62Moxa EDR 810 Ping escalada de privilegiosCVE-2019-109692019-10-262019-10-26717
10504441-55Trend Micro Anti-Threat Toolkit escalada de privilegiosCVE-2019-94912019-10-222019-10-231022
10504190-202Adobe Acrobat Reader desbordamiento de búferCVE-2019-81972019-10-222019-10-23615
10503798Ubisoft Uplay Permission escalada de privilegiosCVE-2019-147372019-10-162019-10-1811
10503671-81Kirona Dynamic Resource Scheduling report Reflected secuencias de comandos en sitios cruzadosCVE-2019-175042019-10-162019-10-18615
10503610-20Kirona Dynamic Resource Scheduling REGISTER.cmd divulgación de informaciónCVE-2019-175032019-10-162019-10-18615
10503851-62X.org X Server ct.c_char XQueryKeymap desbordamiento de búferCVE-2019-176242019-10-162019-10-18716
10502744-55Icewarp Webclient secuencias de comandos en sitios cruzadosCVE-2010-53362019-10-112019-10-1135
10502769-828Icewarp Mail Server Webmail index.html recorrido de directoriosCVE-2010-53342019-10-112019-10-11716
10500311-22TP-LINK WR1043ND V2 Management Web autenticación débilCVE-2019-69712019-10-102019-10-10615
10503429-41Microsoft Windows Win32k desbordamiento de búferCVE-2019-13642019-10-102019-10-10615
10502970-82Microsoft Windows desbordamiento de búferCVE-2019-13432019-10-102019-10-10615
10503047-59Microsoft Windows Code Integrity divulgación de informaciónCVE-2019-13442019-10-102019-10-10615
10503124-35Microsoft Windows Kernel divulgación de informaciónCVE-2019-13452019-10-102019-10-10513
10503200-11Microsoft Windows desbordamiento de búferCVE-2019-13462019-10-102019-10-10513
10503276-88Microsoft Windows desbordamiento de búferCVE-2019-13472019-10-102019-10-10615
10502632libpl_droidsonroids_gif decoding.c DDGifSlurp desbordamiento de búferCVE-2019-119322019-10-072019-10-081022
10499993Microsoft Windows Remote Desktop Service BlueKeep desbordamiento de búferCVE-2019-07082019-10-072019-10-08817
10502334-87vBulletin widget_php escalada de privilegiosCVE-2019-167592019-10-072019-10-08617
10499721-33Check Point ZoneAlarm/Endpoint Security Client Log File Archive escalada de privilegiosCVE-2019-84522019-10-072019-10-08717
10500638Microsoft Windows Win32k escalada de privilegiosCVE-2019-11322019-07-262019-07-261019
10500209SolarWinds Serv-U escalada de privilegiosCVE-2019-121812019-07-262019-07-26818
10482158S-nail root Helper recorrido de directoriosCVE-2017-58992019-07-262019-07-26614
10482439Linux Kernel __ip_append_data condición de carreraCVE-2017-10001122019-07-262019-07-26613
10500733Linux Kernel ptrace.c escalada de privilegiosCVE-2019-132722019-07-262019-07-26716
10485021-31PostgreSQL escalada de privilegiosCVE-2019-91932019-05-222019-05-22615
10499847Oracle Fusion Middleware WebLogic Server escalada de privilegiosCVE-2019-27252019-05-222019-05-22817
10484892-6Sonatype Nexus Repository Manager Access Control escalada de privilegiosCVE-2019-72382019-05-222019-05-2249
10484955-69Atlassian Confluence Server Widget Connector Macro recorrido de directoriosCVE-2019-33962019-05-222019-05-22821
10483849-71Linux Kernel create_elf_tables desbordamiento de búferCVE-2018-146342018-10-022018-10-02718
6377712-6Citrix NetScaler ADC/NetScaler Gateway GCM Nonce Generator divulgación de informaciónCVE-2017-59332017-05-042017-05-0424
6182205Fortinet FortiOS Contraseña divulgación de informaciónCVE-2016-75422017-05-042017-05-0413
10482116Microsoft Windows Kernel divulgación de informaciónCVE-2016-00752016-11-222016-11-22918
10482028Microsoft Windows Kernel API divulgación de informaciónCVE-2016-33712016-11-222016-11-22918

Publicaciones (23)

Cronología (23)

FechaArtículoCVEComentarioVEstado
2026-09-10363682CVE-2026-0251Website and Write-Up of the vulnerabilities: https://globalunprotect.io/index.html0
Aceptado
2023-10-11231296CVE-2023-27997Python script to check if a service is vulnerable: https://github.com/BishopFox/CVE-2023-27997-check0
Aceptado
2021-06-30176473CVE-2021-1675There is another proof of concept based on impacked: https://github.com/cube0x0/CVE-2021-16752
Aceptado
2021-03-12170595CVE-2021-27065xxxxx xxx x xxxxxxxxx xxxxxxxx xx xxx xxxxxx, xxx xxxxxxx xx xxxxxx xxx xxxxxxx xx xx. xxx xxxxxxx xxxx xx xxxx xxx xxxxxxx xx xxxxxx, xxx xxx xxxxx xxxx xxxxxxxxx xx xxx xxxxxxx xxx xxxxxx. xxxx xxx xxx xxxxx xx xxx xxxxxxx xxxx: xxxxx://xxx.xxxxxxxxxxx.x…0
Rechazado
2021-03-12170592CVE-2021-26855There are 2 different exploits at the moment, one written in python and another in go. The exploit code of Jang was removed by GitHub, and was later made available on Web Archive and GitLab. Here are two links to the exploit code: https://git.blackmarble.s…0
Aceptado
2021-03-09170592CVE-2021-26855Nmap script from Microsoft to detect if an Exchange Server is vulnerable: https://github.com/microsoft/CSS-Exchange/blob/main/Security/http-vuln-cve2021-26855.nse1
Aceptado
2021-01-31168695CVE-2021-3156The exploit in the previous comment is also available on GitHub: https://github.com/blasty/CVE-2021-31561
Aceptado
2021-01-31168695CVE-2021-3156There is another exploit available under the URL https://haxx.in/CVE-2021-3156.tar.gz.1
Aceptado
2020-09-14159502CVE-2020-1472And here is another exploit from dirkjanm: https://github.com/dirkjanm/CVE-2020-1472/blob/master/cve-2020-1472-exploit.py0
Aceptado
2020-09-14159502CVE-2020-1472After SecuraBV had published a testing script, there is now a proof of concept exploit from BlackArrow: https://github.com/blackarrowsec/redteam-research/blob/master/CVE-2020-1472/CVE-2020-1472.py0
Aceptado
2020-08-12159525CVE-2020-1337There is another exploit for this vulnerability: https://github.com/sailay1996/cve-2020-1337-poc1
Aceptado
2020-01-12147804CVE-2019-19781Additional exploit and scanner from TrustedSec: https://github.com/trustedsec/cve-2019-197811
Aceptado
2020-01-05133407CVE-2019-0232The exploit is available in Metasploit as well: "https://www.rapid7.com/db/modules/exploit/windows/http/tomcat_cgi_cmdlineargs"0
Aceptado
2020-01-05136570CVE-2019-12181The exploit is available in Metasploit as well: "https://www.rapid7.com/db/modules/exploit/linux/local/servu_ftp_server_prepareinstallation_priv_esc"0
Aceptado
2019-12-30143087CVE-2019-1322There is now a Metasploit module for this vulnerability (https://www.rapid7.com/db/modules/exploit/windows/local/comahawk).0
Aceptado
2019-12-30145369CVE-2019-1405There is now a Metasploit module for this vulnerability (https://www.rapid7.com/db/modules/exploit/windows/local/comahawk).0
Aceptado
2019-12-30147035CVE-2019-19726There is now a Metasploit module for this vulnerability (https://www.rapid7.com/db/modules/exploit/openbsd/local/dynamic_loader_chpass_privesc) 0
Aceptado
2019-12-1794127CVE-2016-6277There is another exploit for this vulnerability: https://www.exploit-db.com/exploits/477820
Aceptado
2019-12-15146798CVE-2019-25065The exploit is available in Metasploit as well: https://www.exploit-db.com/exploits/477720
Aceptado
2019-11-21125954CVE-2018-14665There is now an exploit available in Metasploit called "Xorg X11 Server Local Privilege Escalation", see https://www.exploit-db.com/exploits/477011
Aceptado
2019-11-08144257CVE-2019-16662The exploit was ported to Metasploit Framework as "rConfig install Command Execution" on 2019-11-08.0
Aceptado
2019-10-29142917CVE-2019-11932Additional exploit on GitHub available: https://github.com/dorkerdevil/CVE-2019-11932. This exploit is based on the work of awakened1712.0
Aceptado
2019-10-26138210CVE-2019-13272The exploit is also now part of the Metasploit Framework.0
Aceptado

Do you know our Splunk app?

Download it now for free!