misc

Nommisc
S'inscrire25/10/2016
Points Communautaires4558
Commits1586
Soumet51
Des Postes23
Vote Favorable0
RangMaître
Activity Badges
👴 Long-time User (9x)
🔁 Returning User
💻 Digital Nomad (4x)
🔬 Researcher (6x)
🚨 Staying Alert
🖖 Community Member (91x)
👋 Regular Visitor (12x)
📤 Submitter (9x)
📝 Editor (157x)
💬 Commentator (4x)

Soumet (51)

Chronologie (51)

IDTitreSoumissionModérerEntréePStatut
41689Xxxxxxxxx Xxxxxxxxxx Xxxxxx Xxxxxxxxxxxxxxxxxxxxxxxx Xxxxxxxxxxxxxxx Xx Xxxxxxxx19/07/202226/07/2022
 
0Rejeté
36527Web3Signer - pgjdbc injection / Log4j10/05/202210/05/20221921180Dupliqué
29334Local Privilege Escalation in polkit's pkexec26/01/202226/01/202219160319Accepté
25543Remote Code Execution in Java logging library Apache Log4j 210/12/202110/12/20211879250Dupliqué
22950PHP-FPM Local root privilege escalation25/10/202126/10/202118542520Accepté
22410Kernel: use-after-free in route4_change() in net/sched/cls_route.c18/10/202118/10/202118452420Accepté
19987PostgreSQL Memory disclosure in partitioned-table UPDATE ... RETURNING08/09/202108/09/202118216220Accepté
19986PostgreSQL Memory disclosure in INSERT ... ON CONFLICT ... DO UPDATE08/09/202108/09/202118216120Accepté
19985PostgreSQL Memory disclosure in certain queries08/09/202108/09/202118216320Accepté
18902SteelSeries Apex Mechanical Gaming Keyboard Local Privilege Escalation24/08/202124/08/202118136920Accepté
18901Cross-site Scripting (XSS) in Angular versions <11.0.5 || >=11.1.0-next.0 <11.1.0-next.324/08/202124/08/202118135620Accepté
17584Versions 4.2 and 4.3 of Cobalt Strike’s server contain multiple Denial of Service vulnerabilities (CVE-2021-36798)04/08/202104/08/202118007320Accepté
17223Jira Data Center & Jira Service Management Data Center - Missing Authentication for Ehcache RMI27/07/202127/07/202117970420Accepté
15848Regular expression Denial of Service in mootools07/07/202107/07/202117800820Accepté
8339Unauthorized RCE in VMware vCenter24/02/202125/02/20211703780Dupliqué
4438HP Support Assistant Potential Escalation of Privilege and Arbitrary File Deletion21/12/202021/12/202016662219Accepté
182GRUB2: crafted grub.cfg file can lead to arbitrary code execution during boot process30/07/202030/07/202015914320Accepté
156Unauthenticated persistent cross-site scripting injection into the administrative console of CISCO ISE web application via DHCP request19/02/202010/08/202015036319Accepté
154LPE and RCE in OpenSMTPD29/01/202010/08/202014954719Accepté
142Local Privilege Escalation in many Ricoh Printer Drivers for Windows22/01/202010/08/202014931518Accepté
138IceWarp: Cross-Site Scripting in Notes02/01/202010/08/202014828516Accepté
136Linux 5.3 - Privilege Escalation via io_uring Offload of sendmsg() onto Kernel Thread with Kernel Creds16/12/201918/12/201914733014Accepté
128Xinet Elegant 6 Asset Library Web Interface v6.1.655 Pre-Auth SQL Injection01/12/201908/12/201914649520Accepté
127Microsoft Excel 2016 v1901 Error Import Based XML External Entity Injection01/12/201908/12/201914680019Accepté
123Denial-of-Service vulnerability in axTLS library29/11/201908/12/201914660320Accepté
122Denial-of-Service vulnerability in axTLS library29/11/201908/12/201914665420Accepté
121rConfig v3.9.2 authenticated and unauthenticated RCE26/11/201908/12/201914425814Accepté
120Multiple attack vectors in rConfig v3.9.226/11/201908/12/201914679915Accepté
119OpenNetAdmin 18.1.1 - Remote Code Execution Exploit 21/11/201908/12/201914679814Accepté
118Local Privilege Escalation in Symantec Endpoint Protection16/11/201908/12/201914583011Accepté
114WebKit - Universal XSS in JSObject::putInlineSlow and JSValue::putToPrimitive Exploit07/11/201907/11/201914517513Accepté
112AUO SunVeillance Monitoring System 1.1.9e - 'MailAdd' SQL Injection 26/10/201926/10/201914423315Accepté
111Joomla! 3.4.6 - Remote Code Execution26/10/201926/10/201914423217Accepté
110PHP-FPM env_path_info underflow in fpm_main.c can lead to RCE26/10/201926/10/201914423113Accepté
108Microsoft Windows NTFS Master File Table Integer Overflow leads to BSOD23/10/201925/10/201914416918Accepté
103Ajenti 2.1.31 - Remote Code Execution16/10/201918/10/201914395013Accepté
102Podman & Varlink 1.5.1 - Remote Code Execution16/10/201918/10/201914394913Accepté
101Solaris xscreensaver 11.4 - Privilege Escalation16/10/201918/10/201914374514Accepté
100sudo: Potential bypass of Runas user restrictions15/10/201915/10/201914346820Accepté
99Icewarp Webclient 10.1.3/10.2.0 Https Post Request Cross Site Scripting11/10/201911/10/201914337817Accepté
98Icewarp Webclient 10.1.3/10.2.0 Https Post Request Cross Site Scripting11/10/201911/10/201914337717Accepté
97Icewarp Webclient 10.1.3/10.2.0 Https Post Request Cross Site Scripting11/10/201911/10/201914337617Accepté
96Icewarp Webclient 10.1.3/10.2.0 Https Post Request Cross Site Scripting11/10/201911/10/201914337517Accepté
95Icewarp Mail Server 10.1.3/10.2.0 Directory Traversal11/10/201911/10/201914337417Accepté
94XNU - Remote Double-Free via Data Race in IPComp Input Path10/10/201911/10/201914337313Accepté
91Multiple directory-traversal vulnerabilities in IceWarp Webclient07/10/201908/10/201914299416Accepté
90Multiple XSS vulnerabilities in IceWarp Webclient07/10/201908/10/201914299315Accepté
89SEH based local Buffer Overflow – DameWare Remote Support07/10/201908/10/201914299216Accepté
88Android: Use-After-Free in Binder driver07/10/201908/10/201914299120Accepté
73Mozilla Firefox Type confusion in Array.pop19/06/201919/06/201913664120Accepté
35Microsoft Windows - Advanced Local Procedure Call (ALPC) Local Privilege Escalation29/08/201829/08/201812335020Accepté

Commits (1586)

Chronologie (227)

IDEntréeCVEMise à jourModérerCP
27747671-6Palo Alto GlobalProtect App/Global Protect App élévation de privilègesCVE-2026-025110/09/202610/09/2026616
24842941-7Linux Kernel crypto algif_aead Copy Fail Local Privilege EscalationCVE-2026-3143130/04/202630/04/2026716
23687874-9Fortinet FortiOS SSL-VPN buffer overflowCVE-2024-2176212/02/202612/02/2026614
21395489-95Linux Kernel netfilter bitmap_ip_uadt élévation de privilègesCVE-2024-5314131/07/202531/07/2025717
21395481-8Linux Kernel refcount.c bind buffer overflowCVE-2025-2175631/07/202531/07/2025818
21394806-11HP Plantronics Hub Updater élévation de privilègesCVE-2024-2746031/07/202531/07/2025615
21166012-20Microsoft Windows Update Service élévation de privilègesCVE-2025-4879909/07/202509/07/2025921
20544781-6Microsoft Windows BitLocker Local Privilege EscalationCVE-2023-2156315/05/202515/05/2025615
19909375-80Kubernetes ingress-nginx IngressNightmare Exécution de code à distanceCVE-2025-197426/03/202526/03/2025615
17932507-13Grafana SQL Expressions Experimental Feature élévation de privilègesCVE-2024-926421/10/202421/10/2024717
17738941-6Microsoft SysInternals Sysmon Local Privilege EscalationCVE-2023-2934304/10/202404/10/2024614
17355885-8Netgear WN604/WN802Tv2/WNAP210/WNAP320/WNDAP350/WNDAP360 boardDataWW.php élévation de privilègesCVE-2016-155525/08/202425/08/202449
17355883-4Apple macOS libxpc élévation de privilègesCVE-2018-423725/08/202425/08/202424
17355858-65Blueman Network.py EnableNetwork élévation de privilègesCVE-2015-861225/08/202425/08/2024820
17355854-7NUOO CMS Web Server injection SQLCVE-2018-1898225/08/202425/08/202449
17355845-53Imperva SecureSphere PWS élévation de privilègesCVE-2018-1666025/08/202425/08/2024921
17355826-7elFinder PHP Connector élévation de privilègesCVE-2019-919425/08/202425/08/202425
17355817-24Pipeline Declarative Plugin Sandbox Converter.groovy élévation de privilègesCVE-2019-100300225/08/202425/08/2024820
17355798-9CMS Made Simple Watermark class.showtime2_image.php élévation de privilègesCVE-2019-969225/08/202425/08/202425
17355792-5LibreOffice Macro directory traversalCVE-2018-1685825/08/202425/08/202449
17354611-8AIS ESEL-Server 67 Backend injection SQLCVE-2019-1012325/08/202425/08/2024820
17354603-10Ruby on Rails Development Mode élévation de privilègesCVE-2019-542025/08/202425/08/2024820
17354595-602GetSimple CMS theme-edit.php élévation de privilègesCVE-2019-1123125/08/202425/08/2024820
17354587-94Shopware loadPreviewAction élévation de privilègesCVE-2017-1835725/08/202425/08/2024820
17354583-6Apple macOS Feedback Assistant race conditionCVE-2019-856525/08/202425/08/202449
17354558-65LibreNMS addhost.inc.php élévation de privilègesCVE-2018-2043425/08/202425/08/2024820
17354550-7IBM WebSphere Application Server élévation de privilègesCVE-2019-427925/08/202425/08/2024820
17354542-9Webmin Package Updates update.cgi élévation de privilègesCVE-2019-1284025/08/202425/08/2024820
17354538-41Cisco Prime Infrastructure/Evolved Programmable Network Web-based Management élévation de privilègesCVE-2019-182125/08/202425/08/202449
17354530-7Apple macOS Time Machine élévation de privilègesCVE-2019-851325/08/202425/08/2024820
17354526-9Xymon xymond useradm.c élévation de privilègesCVE-2016-205625/08/202425/08/202449
17354518-25Laravel Framework Permission .env writeNewEnvironmentFileWith Mot de passe divulgation d'informationCVE-2017-1689425/08/202425/08/2024820
17354494-500Laravel Framework Token Encrypter.php decrypt élévation de privilègesCVE-2018-1513325/08/202425/08/2024717
17354490-3Microsoft Windows AppX Deployment Service élévation de privilègesCVE-2019-084125/08/202425/08/202449
17354469-72Microsoft Windows Win32k élévation de privilègesCVE-2018-845325/08/202425/08/202449
17354460-8Schneider Electric Pelco Endura NET55XX Encoder Access Control élévation de privilègesCVE-2019-681425/08/202425/08/2024922
15315837-44Apache OFBiz élévation de privilègesCVE-2023-4907004/01/202404/01/2024818
14791408-16Microsoft SharePoint Server élévation de privilègesCVE-2023-2495527/09/202327/09/2023919
14266344-50Microsoft Windows Win32k buffer overflowCVE-2023-2933609/06/202309/06/2023716
13719620-8Fortinet FortiNAC HTTP élévation de privilègesCVE-2022-3995221/02/202321/02/2023919
13210626-35OpenSSL X.509 Certificate buffer overflowCVE-2022-360202/11/202202/11/20221020
12503423-30Microsoft Windows Active Directory Domain Services authentification faibleCVE-2022-2692312/05/202212/05/2022818
12484608-16F5 BIG-IP LTM HTTP déni de serviceCVE-2022-2949109/05/202210/05/2022919
12294874-8Adobe Photoshop buffer overflowCVE-2007-236518/03/202218/03/202259
12243279-84Linux Kernel Pipe Dirty Pipe élévation de privilègesCVE-2022-084708/03/202208/03/2022612
12157863-71Microsoft Windows Print Spooler élévation de privilègesCVE-2022-2271809/02/202209/02/2022919
12119247-53Microsoft Windows Win32k buffer overflowCVE-2022-2188228/01/202228/01/2022717
12112234-41polkit pkexec élévation de privilègesCVE-2021-403426/01/202226/01/2022812
11969890-6Microsoft Windows Common Log File System divulgation d'informationCVE-2021-4322421/12/202121/12/2021717
11843160-8Microsoft Windows Win32k buffer overflowCVE-2021-4044911/11/202111/11/2021919
11590624-7Jetty URI élévation de privilègesCVE-2021-3442908/09/202108/09/2021412
11571698-709Atlassian Confluence Server/Confluence Data Center Webwork OGNL élévation de privilègesCVE-2021-2608401/09/202101/09/20211224
11551826prototypejs Prototype JavaScript framework Exécution de code à distanceCVE-2008-722024/08/202124/08/202111
11473118-24Apple iOS/iPadOS IOMobileFrameBuffer buffer overflowCVE-2021-3080727/07/202127/07/2021715
11437240-5Microsoft Windows Volume Shadow Copy SAM SeriousSAM/HiveNightmare élévation de privilègesCVE-2021-3693420/07/202120/07/2021611
11375563-6549Microsoft Windows Print Spooler Local Privilege EscalationCVE-2021-167529/06/202129/06/2021919
11322551-7Microsoft Windows Graphics élévation de privilègesCVE-2021-2686809/06/202109/06/2021717
11322544-50Microsoft Windows DWM Core élévation de privilègesCVE-2021-3373909/06/202109/06/2021717
11311931-8VMware vCenter Server Virtual SAN Health Check Plug-In authentification faibleCVE-2021-2198505/06/202105/06/2021818
11297528-36Microsoft Windows Hyper-V VmsIfrInfoParams_OID_SWITCH_NIC_REQUEST élévation de privilègesCVE-2021-2847601/06/202101/06/2021919
11254142-9Microsoft Windows HTTP Protocol buffer overflowCVE-2021-3116616/05/202116/05/2021818
11253726-33Pega Infinity Password Recovery authentification faibleCVE-2021-2765116/05/202116/05/2021818
11250853-60Exim tls-openssl.c buffer overflowCVE-2020-2801815/05/202115/05/2021818
11244220-7Dell DBUtil BIOS Driver dbutil_2_3.sys élévation de privilègesCVE-2021-2155114/05/202114/05/2021818
11240569-76Microsoft Exchange Server élévation de privilègesCVE-2021-2848212/05/202112/05/2021818
11200059-64Microsoft Windows splwow64 élévation de privilègesCVE-2021-164828/04/202128/04/2021615
11156500-7Microsoft Windows Installer Local Privilege EscalationCVE-2021-2641522/04/202122/04/2021817
11129612-20Linux Kernel VSOCK af_vsock.c race conditionCVE-2021-2670813/04/202113/04/2021920
11120405-13Intel BlueZ divulgation d'informationCVE-2020-1235208/04/202108/04/2021920
11120396-404Intel BlueZ élévation de privilègesCVE-2020-1235108/04/202108/04/2021920
11116595-602Microsoft Windows TCP/IP déni de serviceCVE-2021-2408608/04/202108/04/2021818
11081007-13Microsoft Windows modem.sys divulgation d'informationCVE-2021-169931/03/202131/03/2021717
11025221-9Microsoft Exchange Server directory traversalCVE-2021-2706512/03/202112/03/2021921
11025212-20Microsoft Exchange Server ProxyLogon élévation de privilègesCVE-2021-2685512/03/202112/03/2021921
11009945-51Microsoft Windows Win32k buffer overflowCVE-2021-173209/03/202109/03/2021717
10971130-40VMware vCenter Server/Cloud Foundation vSphere Client directory traversalCVE-2021-2197225/02/202125/02/20211121
10933022-30Microsoft Exchange Server élévation de privilègesCVE-2021-2408515/02/202115/02/2021919
10873065-73sudo sudoers_policy_main buffer overflowCVE-2021-315631/01/202131/01/2021918
10868090-6Google Chrome v8 élévation de privilègesCVE-2018-1746328/01/202129/01/2021717
10868083-9Google Chrome Javascript buffer overflowCVE-2019-582528/01/202129/01/2021717
10865117-23sudo sudoedit selinux_edit_copy_tfiles élévation de privilègesCVE-2021-2324027/01/202127/01/2021716
10831687-95Microsoft Windows Lockscreen élévation de privilègesCVE-2020-139817/01/202117/01/2021918
10793957-63Microsoft .NET Framework élévation de privilègesCVE-2020-064604/01/202104/01/2021716
10729234-40Microsoft Exchange Server élévation de privilègesCVE-2020-1714111/12/202011/12/2020717
10729115-21Microsoft Exchange Server divulgation d'informationCVE-2020-1714311/12/202011/12/2020717
10708502-11Microsoft Windows Kerberos élévation de privilègesCVE-2020-1704909/12/202009/12/20201020
10610266-75Microsoft Exchange Server cross site scriptingCVE-2020-1708312/11/202012/11/20201020
10600386-92Oracle WebLogic Server Exécution de code à distanceCVE-2020-1475009/11/202009/11/2020716
10589163-7Oracle Solaris Pluggable authentication module parse_user_name buffer overflowCVE-2020-1487104/11/202004/11/2020511
10508994-9000MobileIron Core/Connector élévation de privilègesCVE-2020-1550514/09/202014/09/2020614
10481571-6Microsoft Windows Netlogon Zerologon élévation de privilègesCVE-2020-147212/09/202013/09/2020511
10507040-6Microsoft Internet Explorer Scripting buffer overflowCVE-2020-067412/09/202013/09/2020614
10509729-36Microsoft Exchange Server Email élévation de privilègesCVE-2020-1687512/09/202012/09/2020715
10509455-62Microsoft Windows Setup élévation de privilègesCVE-2020-157117/08/202017/08/2020715
10509227-39Microsoft .NET Framework XML élévation de privilègesCVE-2020-114717/08/202017/08/2020717
10509379-85Microsoft Windows Print Spooler élévation de privilègesCVE-2020-133712/08/202012/08/2020614
10509075-83SAP NetWeaver AS JAVA LM Configuration Wizard RECON authentification faibleCVE-2020-628724/07/202025/07/2020816
10509303-9Microsoft Windows WalletService élévation de privilègesCVE-2020-136217/07/202018/07/2020614
10509158-64Microsoft Windows DNS Server SigRed buffer overflowCVE-2020-135016/07/202017/07/2020614
10508257-63Fortinet FortiMail/FortiVoiceEntreprise Password Change authentification faibleCVE-2020-929406/07/202006/07/2020614
10508819-31F5 BIG-IP Traffic Management User élévation de privilègesCVE-2020-590206/07/202006/07/20201127
10508675-81Microsoft Windows OLE élévation de privilègesCVE-2020-128110/06/202012/06/2020614
10508749-55Microsoft Windows SMBv1 élévation de privilègesCVE-2020-130110/06/202012/06/2020614
10508426-39VMware Cloud Director élévation de privilègesCVE-2020-395604/06/202007/06/2020717
10508486-92Apache Tomcat élévation de privilègesCVE-2020-948404/06/202007/06/2020614
10505638-45Google Chrome WebRTC buffer overflowCVE-2019-1369417/04/202017/04/2020715
10508084-91VMware vCenter Server vmdir élévation de privilègesCVE-2020-395217/04/202017/04/2020715
10508031-4Sonatype Nexus Repository Manager Access Control élévation de privilègesCVE-2020-1144409/04/202011/04/2020410
10507966-70Microsoft Windows SMBv3 SMBGhost buffer overflowCVE-2020-079630/03/202005/04/202049
10507252-65Microsoft Exchange Server élévation de privilègesCVE-2020-068802/03/202027/03/2020818
10507829-42OpenSMTPD mta_session.c divulgation d'informationCVE-2020-879427/02/202002/03/2020717
10507769-82OpenSMTPD makemap.c élévation de privilègesCVE-2020-879326/02/202002/03/2020717
10507406-12Microsoft Windows Error Reporting élévation de privilègesCVE-2020-075423/02/202002/03/2020614
10507329-35Microsoft Windows Error Reporting élévation de privilègesCVE-2020-075323/02/202002/03/2020614
10507710-6Cacti Cooikie graph_realtime.php élévation de privilègesCVE-2020-881322/02/202002/03/2020614
10507109-17Microsoft SQL Server Reporting Services élévation de privilègesCVE-2020-061822/02/202002/03/2020816
10507185-92Microsoft Windows Windows Installer élévation de privilègesCVE-2020-068315/02/202020/02/2020715
10501800-11CPU Kernel divulgation d'informationCVE-2019-112515/02/202020/02/2020718
10507466-80HP System Event Utility élévation de privilègesCVE-2019-1891515/02/202020/02/2020817
10484762-75Microsoft SharePoint Server Application Package élévation de privilègesCVE-2019-060415/02/202020/02/2020818
10506903-14sudo pwfeedback tgetpass.c getln buffer overflowCVE-2019-1863415/02/202020/02/2020717
10506967-78OpenSMTPD SMTP Session smtp_session.c élévation de privilègesCVE-2020-724731/01/202020/02/2020717
10506178-93Citrix Application Delivery Controller/Gateway directory traversalCVE-2019-1978111/01/202013/01/20201129
10561465-71Apache Tomcat Utility Method élévation de privilègesCVE-2016-501808/01/202013/01/202070
10502610-23JetBrains TeamCity élévation de privilègesCVE-2019-1503908/01/202013/01/2020717
10502149-55Microsoft Windows Winsock ws2ifsl.sys élévation de privilègesCVE-2019-121507/01/202013/01/2020614
10482998-3014Apache Tika tika-server élévation de privilègesCVE-2018-133505/01/202005/01/2020717
10500125-39Exim élévation de privilègesCVE-2019-1014904/01/202005/01/2020717
10501741-52Tableau Server XML Data XML External EntityCVE-2019-1563704/01/202005/01/2020717
10500896-908Apple Safari WebKit buffer overflowCVE-2019-868904/01/202005/01/2020717
10505498-513ktsuss Privileges élévation de privilègesCVE-2011-292104/01/202005/01/2020717
10501681Cisco Integrated Management Controller CLI authentification faibleCVE-2019-193504/01/202005/01/2020919
10500443Cisco Data Center Network Manager Web-based Management élévation de privilègesCVE-2019-162004/01/202005/01/2020919
10484830Cisco RV110W Wireless-N VPN Firewall Web-based Management élévation de privilègesCVE-2019-166304/01/202005/01/2020922
10483471Crestron AirMedia AM-100/AirMedia AM-101 élévation de privilègesCVE-2017-1670904/01/202005/01/2020919
10502074-85LibreNMS collectd.inc.php passthru élévation de privilègesCVE-2019-1066904/01/202005/01/2020717
10482528-40October CMS File Upload élévation de privilègesCVE-2017-100011904/01/202005/01/2020717
10501305-13Microsoft Windows Core Shell COM Server Registrar élévation de privilègesCVE-2019-118403/01/202005/01/2020816
10501534-42Adobe Acrobat Reader buffer overflowCVE-2019-803902/01/202003/01/2020816
10501464-72Adobe Acrobat Reader buffer overflowCVE-2019-803802/01/202003/01/2020816
10501027-40FreeBSD File Descriptors Underflow élévation de privilègesCVE-2019-560330/12/201901/01/2020818
10484693-706FreeBSD Unix Domain Socket élévation de privilègesCVE-2019-559630/12/201901/01/2020818
10484047-62Microsoft Windows TCP/IP divulgation d'informationCVE-2018-849323/12/201925/12/2019819
10506015-26OpenBSD setuid Program ld.so _dl_setup_env élévation de privilègesCVE-2019-1972616/12/201917/12/2019717
10505948-60Adobe Acrobat Reader buffer overflowCVE-2019-1645115/12/201915/12/2019615
10505823-36Lenovo Power Management Driver buffer overflowCVE-2019-619215/12/201915/12/2019717
10505886-92Progress Telerik UI for ASP.NET AJAX .NET Deserialization RadAsyncUpload élévation de privilègesCVE-2019-1893515/12/201915/12/2019614
10501109-25Symantec Endpoint Protection élévation de privilègesCVE-2019-1275014/12/201914/12/2019615
10499910-7Mozilla Firefox/Firefox ESR/Thunderbird IonMonkey JIT Compiler Array.prototype.slice buffer overflowCVE-2019-981008/12/201908/12/2019715
10500377-83Mozilla Firefox Sandbox élévation de privilègesCVE-2019-1170808/12/201908/12/2019612
10505702-15verot.net class.upload class.upload.php élévation de privilègesCVE-2019-1957608/12/201908/12/2019717
10483325CA Privileged Access Manager Configuration élévation de privilègesCVE-2018-902208/12/201908/12/2019919
10483260CA Privileged Access Manager élévation de privilègesCVE-2018-902108/12/201908/12/2019919
10502315-26Integard Pro LoginAdmin buffer overflowCVE-2019-1670208/12/201908/12/2019717
10504120Trend Micro Deep Security Agent élévation de privilègesCVE-2019-1562708/12/201908/12/20191329
10505575-86Fotinet FortiOS URL/SPAM/AV authentification faibleCVE-2018-919527/11/201904/12/20191024
10505119Patriot Viper RGB Driver MsIo64.sys ZwMapViewOfSection élévation de privilègesCVE-2019-1884527/11/201904/12/2019817
10482269-87VMware ESXi/Workstation Pro/Player/Fusion Pro/Fusion divulgation d'informationCVE-2017-490526/11/201927/11/2019717
10482354-72VMware Workstation/Fusion Drag/Drop buffer overflowCVE-2017-490126/11/201927/11/2019717
10482662-5FasterXML jackson-databind Incomplete Fix CVE-2017-7525 readValue élévation de privilègesCVE-2017-1748525/11/201927/11/2019412
10500188-99FreePBX Operator Panel exec.php cross site scriptingCVE-2019-1140921/11/201925/11/2019717
10502014-25Bludit upload-images.php élévation de privilègesCVE-2019-1611321/11/201925/11/2019717
10499782-95Pulse Secure Pulse Connect Secure Admin Web élévation de privilègesCVE-2019-1153921/11/201925/11/2019717
10500062-7FreeRADIUS Logrotate élévation de privilègesCVE-2019-1014316/11/201916/11/2019512
10502894-906Microsoft Windows Authentication authentification faibleCVE-2019-132216/11/201916/11/2019717
10505257-69Microsoft Windows UPnP Service élévation de privilègesCVE-2019-140516/11/201916/11/2019717
10505440-50SibSoft Xfilesharing up.cgi élévation de privilègesCVE-2019-1895216/11/201916/11/2019615
10505320Technicolor TC7300 wlanAccess.asp cross site scriptingCVE-2019-1752416/11/201916/11/2019818
10505006-16Technicolor TD5130v2 Web mnt_ping.cgi élévation de privilègesCVE-2019-1839616/11/201916/11/2019615
10505381-92FUDForum Stocké cross site scriptingCVE-2019-1883916/11/201916/11/2019717
10505183-95FUDForum admsession.php Stocké cross site scriptingCVE-2019-1887316/11/201916/11/2019820
10500563-75Nortek Linear eMerge E3 élévation de privilègesCVE-2019-725616/11/201916/11/2019818
10499654-67Atlassian Confluence Server/Data Center downloadallattachments directory traversalCVE-2019-339812/11/201913/11/2019717
10500503-15Prima Systems FlexAir élévation de privilègesCVE-2019-767012/11/201913/11/2019818
10504322-34Adobe Acrobat Reader déni de serviceCVE-2019-819612/11/201913/11/2019615
10504256-68Adobe Acrobat Reader déni de serviceCVE-2019-819512/11/201913/11/2019615
10502442-54Apple iOS Foundation divulgation d'informationCVE-2019-864112/11/201913/11/2019615
10500965-77Apple iOS Quick Look buffer overflowCVE-2019-866212/11/201913/11/2019615
10504807-13Apple iOS/iPadOS Audio buffer overflowCVE-2019-879711/11/201912/11/2019614
10504874-80Apple iOS/iPadOS AVEVideoEncoder buffer overflowCVE-2019-879511/11/201912/11/2019614
10504943-9Apple iOS/iPadOS Kernel Memory élévation de privilègesCVE-2019-879411/11/201912/11/2019614
10500710-8Microsoft Windows Kernel divulgation d'informationCVE-2019-107111/11/201911/11/2019816
10503732Nostromo nhttpd SSL_accept directory traversalCVE-2019-1627909/11/201910/11/2019816
10502256-67Micro Focus Data Protector élévation de privilègesCVE-2019-1166009/11/201910/11/2019717
10503351-64Microsoft Edge divulgation d'informationCVE-2019-135609/11/201910/11/2019818
10482591-606Google Android art élévation de privilègesCVE-2017-1315608/11/201909/11/2019717
10504739-51rConfig ajaxServerSettingsChk.php exec élévation de privilègesCVE-2019-1666208/11/201909/11/2019818
10504676build-metrics Plugin Reflected cross site scriptingCVE-2019-1047508/11/201909/11/2019917
10484498-503BMC Patrol Agent PatrolCli Lateral élévation de privilègesCVE-2018-2073508/11/201908/11/2019512
10561440-4Microsoft Windows Group Policy élévation de privilègesCVE-2015-000929/10/201930/10/2019512
10561435-9Microsoft Windows Group Policy authentification faibleCVE-2015-000829/10/201930/10/2019512
10504383-95Rocket.Chat cross site scriptingCVE-2019-1722026/10/201926/10/2019615
10503492-502Moxa EDR 810 Log File divulgation d'informationCVE-2019-1096326/10/201926/10/2019615
10503551-62Moxa EDR 810 Ping élévation de privilègesCVE-2019-1096926/10/201926/10/2019717
10504441-55Trend Micro Anti-Threat Toolkit élévation de privilègesCVE-2019-949122/10/201923/10/20191022
10504190-202Adobe Acrobat Reader buffer overflowCVE-2019-819722/10/201923/10/2019615
10503798Ubisoft Uplay Permission élévation de privilègesCVE-2019-1473716/10/201918/10/201911
10503671-81Kirona Dynamic Resource Scheduling report Reflected cross site scriptingCVE-2019-1750416/10/201918/10/2019615
10503610-20Kirona Dynamic Resource Scheduling REGISTER.cmd divulgation d'informationCVE-2019-1750316/10/201918/10/2019615
10503851-62X.org X Server ct.c_char XQueryKeymap buffer overflowCVE-2019-1762416/10/201918/10/2019716
10502744-55Icewarp Webclient cross site scriptingCVE-2010-533611/10/201911/10/201935
10502769-828Icewarp Mail Server Webmail index.html directory traversalCVE-2010-533411/10/201911/10/2019716
10500311-22TP-LINK WR1043ND V2 Management Web authentification faibleCVE-2019-697110/10/201910/10/2019615
10503429-41Microsoft Windows Win32k buffer overflowCVE-2019-136410/10/201910/10/2019615
10502970-82Microsoft Windows buffer overflowCVE-2019-134310/10/201910/10/2019615
10503047-59Microsoft Windows Code Integrity divulgation d'informationCVE-2019-134410/10/201910/10/2019615
10503124-35Microsoft Windows Kernel divulgation d'informationCVE-2019-134510/10/201910/10/2019513
10503200-11Microsoft Windows buffer overflowCVE-2019-134610/10/201910/10/2019513
10503276-88Microsoft Windows buffer overflowCVE-2019-134710/10/201910/10/2019615
10502632libpl_droidsonroids_gif decoding.c DDGifSlurp buffer overflowCVE-2019-1193207/10/201908/10/20191022
10499993Microsoft Windows Remote Desktop Service BlueKeep buffer overflowCVE-2019-070807/10/201908/10/2019817
10502334-87vBulletin widget_php élévation de privilègesCVE-2019-1675907/10/201908/10/2019617
10499721-33Check Point ZoneAlarm/Endpoint Security Client Log File Archive élévation de privilègesCVE-2019-845207/10/201908/10/2019717
10500638Microsoft Windows Win32k élévation de privilègesCVE-2019-113226/07/201926/07/20191019
10500209SolarWinds Serv-U élévation de privilègesCVE-2019-1218126/07/201926/07/2019818
10482158S-nail root Helper directory traversalCVE-2017-589926/07/201926/07/2019614
10482439Linux Kernel __ip_append_data race conditionCVE-2017-100011226/07/201926/07/2019613
10500733Linux Kernel ptrace.c élévation de privilègesCVE-2019-1327226/07/201926/07/2019716
10485021-31PostgreSQL élévation de privilègesCVE-2019-919322/05/201922/05/2019615
10499847Oracle Fusion Middleware WebLogic Server élévation de privilègesCVE-2019-272522/05/201922/05/2019817
10484892-6Sonatype Nexus Repository Manager Access Control élévation de privilègesCVE-2019-723822/05/201922/05/201949
10484955-69Atlassian Confluence Server Widget Connector Macro directory traversalCVE-2019-339622/05/201922/05/2019821
10483849-71Linux Kernel create_elf_tables buffer overflowCVE-2018-1463402/10/201802/10/2018718
6377712-6Citrix NetScaler ADC/NetScaler Gateway GCM Nonce Generator divulgation d'informationCVE-2017-593304/05/201704/05/201724
6182205Fortinet FortiOS Mot de passe divulgation d'informationCVE-2016-754204/05/201704/05/201713
10482116Microsoft Windows Kernel divulgation d'informationCVE-2016-007522/11/201622/11/2016918
10482028Microsoft Windows Kernel API divulgation d'informationCVE-2016-337122/11/201622/11/2016918

Des postes (23)

Chronologie (23)

DateEntréeCVECommentaireVStatut
10/09/2026363682CVE-2026-0251Website and Write-Up of the vulnerabilities: https://globalunprotect.io/index.html0
Accepté
11/10/2023231296CVE-2023-27997Python script to check if a service is vulnerable: https://github.com/BishopFox/CVE-2023-27997-check0
Accepté
30/06/2021176473CVE-2021-1675There is another proof of concept based on impacked: https://github.com/cube0x0/CVE-2021-16752
Accepté
12/03/2021170595CVE-2021-27065xxxxx xxx x xxxxxxxxx xxxxxxxx xx xxx xxxxxx, xxx xxxxxxx xx xxxxxx xxx xxxxxxx xx xx. xxx xxxxxxx xxxx xx xxxx xxx xxxxxxx xx xxxxxx, xxx xxx xxxxx xxxx xxxxxxxxx xx xxx xxxxxxx xxx xxxxxx. xxxx xxx xxx xxxxx xx xxx xxxxxxx xxxx: xxxxx://xxx.xxxxxxxxxxx.x…0
Rejeté
12/03/2021170592CVE-2021-26855There are 2 different exploits at the moment, one written in python and another in go. The exploit code of Jang was removed by GitHub, and was later made available on Web Archive and GitLab. Here are two links to the exploit code: https://git.blackmarble.s…0
Accepté
09/03/2021170592CVE-2021-26855Nmap script from Microsoft to detect if an Exchange Server is vulnerable: https://github.com/microsoft/CSS-Exchange/blob/main/Security/http-vuln-cve2021-26855.nse1
Accepté
31/01/2021168695CVE-2021-3156The exploit in the previous comment is also available on GitHub: https://github.com/blasty/CVE-2021-31561
Accepté
31/01/2021168695CVE-2021-3156There is another exploit available under the URL https://haxx.in/CVE-2021-3156.tar.gz.1
Accepté
14/09/2020159502CVE-2020-1472And here is another exploit from dirkjanm: https://github.com/dirkjanm/CVE-2020-1472/blob/master/cve-2020-1472-exploit.py0
Accepté
14/09/2020159502CVE-2020-1472After SecuraBV had published a testing script, there is now a proof of concept exploit from BlackArrow: https://github.com/blackarrowsec/redteam-research/blob/master/CVE-2020-1472/CVE-2020-1472.py0
Accepté
12/08/2020159525CVE-2020-1337There is another exploit for this vulnerability: https://github.com/sailay1996/cve-2020-1337-poc1
Accepté
12/01/2020147804CVE-2019-19781Additional exploit and scanner from TrustedSec: https://github.com/trustedsec/cve-2019-197811
Accepté
05/01/2020133407CVE-2019-0232The exploit is available in Metasploit as well: "https://www.rapid7.com/db/modules/exploit/windows/http/tomcat_cgi_cmdlineargs"0
Accepté
05/01/2020136570CVE-2019-12181The exploit is available in Metasploit as well: "https://www.rapid7.com/db/modules/exploit/linux/local/servu_ftp_server_prepareinstallation_priv_esc"0
Accepté
30/12/2019143087CVE-2019-1322There is now a Metasploit module for this vulnerability (https://www.rapid7.com/db/modules/exploit/windows/local/comahawk).0
Accepté
30/12/2019145369CVE-2019-1405There is now a Metasploit module for this vulnerability (https://www.rapid7.com/db/modules/exploit/windows/local/comahawk).0
Accepté
30/12/2019147035CVE-2019-19726There is now a Metasploit module for this vulnerability (https://www.rapid7.com/db/modules/exploit/openbsd/local/dynamic_loader_chpass_privesc) 0
Accepté
17/12/201994127CVE-2016-6277There is another exploit for this vulnerability: https://www.exploit-db.com/exploits/477820
Accepté
15/12/2019146798CVE-2019-25065The exploit is available in Metasploit as well: https://www.exploit-db.com/exploits/477720
Accepté
21/11/2019125954CVE-2018-14665There is now an exploit available in Metasploit called "Xorg X11 Server Local Privilege Escalation", see https://www.exploit-db.com/exploits/477011
Accepté
08/11/2019144257CVE-2019-16662The exploit was ported to Metasploit Framework as "rConfig install Command Execution" on 2019-11-08.0
Accepté
29/10/2019142917CVE-2019-11932Additional exploit on GitHub available: https://github.com/dorkerdevil/CVE-2019-11932. This exploit is based on the work of awakened1712.0
Accepté
26/10/2019138210CVE-2019-13272The exploit is also now part of the Metasploit Framework.0
Accepté

Want to stay up to date on a daily basis?

Enable the mail alert feature now!