misc

Namemisc
Signup10/25/2016
Community Points4558
Commits1586
Submits51
Posts23
Upvote0
RankMaster
Activity Badges
👴 Long-time User (9x)
🔁 Returning User
💻 Digital Nomad (4x)
🔬 Researcher (6x)
🚨 Staying Alert
🖖 Community Member (91x)
👋 Regular Visitor (12x)
📤 Submitter (9x)
📝 Editor (157x)
💬 Commentator (4x)

Submits (51)

Timeline (51)

The analysis of the timeline helps to identify the required approach and handling of single items and item collections. This overview makes it possible to see less important slices and more severe hotspots at a glance. Prioritizing items becomes possible.

IDTitleSubmissionModerationEntryPStatus
41689Xxxxxxxxx Xxxxxxxxxx Xxxxxx Xxxxxxxxxxxxxxxxxxxxxxxx Xxxxxxxxxxxxxxx Xx Xxxxxxxx07/19/202207/26/2022
 
0Rejected
36527Web3Signer - pgjdbc injection / Log4j05/10/202205/10/20221921180Duplicate
29334Local Privilege Escalation in polkit's pkexec01/26/202201/26/202219160319Accepted
25543Remote Code Execution in Java logging library Apache Log4j 212/10/202112/10/20211879250Duplicate
22950PHP-FPM Local root privilege escalation10/25/202110/26/202118542520Accepted
22410Kernel: use-after-free in route4_change() in net/sched/cls_route.c10/18/202110/18/202118452420Accepted
19987PostgreSQL Memory disclosure in partitioned-table UPDATE ... RETURNING09/08/202109/08/202118216220Accepted
19986PostgreSQL Memory disclosure in INSERT ... ON CONFLICT ... DO UPDATE09/08/202109/08/202118216120Accepted
19985PostgreSQL Memory disclosure in certain queries09/08/202109/08/202118216320Accepted
18902SteelSeries Apex Mechanical Gaming Keyboard Local Privilege Escalation08/24/202108/24/202118136920Accepted
18901Cross-site Scripting (XSS) in Angular versions <11.0.5 || >=11.1.0-next.0 <11.1.0-next.308/24/202108/24/202118135620Accepted
17584Versions 4.2 and 4.3 of Cobalt Strike’s server contain multiple Denial of Service vulnerabilities (CVE-2021-36798)08/04/202108/04/202118007320Accepted
17223Jira Data Center & Jira Service Management Data Center - Missing Authentication for Ehcache RMI07/27/202107/27/202117970420Accepted
15848Regular expression Denial of Service in mootools07/07/202107/07/202117800820Accepted
8339Unauthorized RCE in VMware vCenter02/24/202102/25/20211703780Duplicate
4438HP Support Assistant Potential Escalation of Privilege and Arbitrary File Deletion12/21/202012/21/202016662219Accepted
182GRUB2: crafted grub.cfg file can lead to arbitrary code execution during boot process07/30/202007/30/202015914320Accepted
156Unauthenticated persistent cross-site scripting injection into the administrative console of CISCO ISE web application via DHCP request02/19/202008/10/202015036319Accepted
154LPE and RCE in OpenSMTPD01/29/202008/10/202014954719Accepted
142Local Privilege Escalation in many Ricoh Printer Drivers for Windows01/22/202008/10/202014931518Accepted
138IceWarp: Cross-Site Scripting in Notes01/02/202008/10/202014828516Accepted
136Linux 5.3 - Privilege Escalation via io_uring Offload of sendmsg() onto Kernel Thread with Kernel Creds12/16/201912/18/201914733014Accepted
128Xinet Elegant 6 Asset Library Web Interface v6.1.655 Pre-Auth SQL Injection12/01/201912/08/201914649520Accepted
127Microsoft Excel 2016 v1901 Error Import Based XML External Entity Injection12/01/201912/08/201914680019Accepted
123Denial-of-Service vulnerability in axTLS library11/29/201912/08/201914660320Accepted
122Denial-of-Service vulnerability in axTLS library11/29/201912/08/201914665420Accepted
121rConfig v3.9.2 authenticated and unauthenticated RCE11/26/201912/08/201914425814Accepted
120Multiple attack vectors in rConfig v3.9.211/26/201912/08/201914679915Accepted
119OpenNetAdmin 18.1.1 - Remote Code Execution Exploit 11/21/201912/08/201914679814Accepted
118Local Privilege Escalation in Symantec Endpoint Protection11/16/201912/08/201914583011Accepted
114WebKit - Universal XSS in JSObject::putInlineSlow and JSValue::putToPrimitive Exploit11/07/201911/07/201914517513Accepted
112AUO SunVeillance Monitoring System 1.1.9e - 'MailAdd' SQL Injection 10/26/201910/26/201914423315Accepted
111Joomla! 3.4.6 - Remote Code Execution10/26/201910/26/201914423217Accepted
110PHP-FPM env_path_info underflow in fpm_main.c can lead to RCE10/26/201910/26/201914423113Accepted
108Microsoft Windows NTFS Master File Table Integer Overflow leads to BSOD10/23/201910/25/201914416918Accepted
103Ajenti 2.1.31 - Remote Code Execution10/16/201910/18/201914395013Accepted
102Podman & Varlink 1.5.1 - Remote Code Execution10/16/201910/18/201914394913Accepted
101Solaris xscreensaver 11.4 - Privilege Escalation10/16/201910/18/201914374514Accepted
100sudo: Potential bypass of Runas user restrictions10/15/201910/15/201914346820Accepted
99Icewarp Webclient 10.1.3/10.2.0 Https Post Request Cross Site Scripting10/11/201910/11/201914337817Accepted
98Icewarp Webclient 10.1.3/10.2.0 Https Post Request Cross Site Scripting10/11/201910/11/201914337717Accepted
97Icewarp Webclient 10.1.3/10.2.0 Https Post Request Cross Site Scripting10/11/201910/11/201914337617Accepted
96Icewarp Webclient 10.1.3/10.2.0 Https Post Request Cross Site Scripting10/11/201910/11/201914337517Accepted
95Icewarp Mail Server 10.1.3/10.2.0 Directory Traversal10/11/201910/11/201914337417Accepted
94XNU - Remote Double-Free via Data Race in IPComp Input Path10/10/201910/11/201914337313Accepted
91Multiple directory-traversal vulnerabilities in IceWarp Webclient10/07/201910/08/201914299416Accepted
90Multiple XSS vulnerabilities in IceWarp Webclient10/07/201910/08/201914299315Accepted
89SEH based local Buffer Overflow – DameWare Remote Support10/07/201910/08/201914299216Accepted
88Android: Use-After-Free in Binder driver10/07/201910/08/201914299120Accepted
73Mozilla Firefox Type confusion in Array.pop06/19/201906/19/201913664120Accepted
35Microsoft Windows - Advanced Local Procedure Call (ALPC) Local Privilege Escalation08/29/201808/29/201812335020Accepted

Commits (1586)

Timeline (227)

The analysis of the timeline helps to identify the required approach and handling of single items and item collections. This overview makes it possible to see less important slices and more severe hotspots at a glance. Prioritizing items becomes possible.

IDEntryCVEUpdatedModerationCP
27747671-6Palo Alto GlobalProtect App/Global Protect App untrusted search pathCVE-2026-025109/10/202609/10/2026616
24842941-7Linux Kernel crypto algif_aead Copy Fail resource transferCVE-2026-3143104/30/202604/30/2026716
23687874-9Fortinet FortiOS SSL-VPN out-of-bounds writeCVE-2024-2176202/12/202602/12/2026614
21395489-95Linux Kernel netfilter bitmap_ip_uadt privilege escalationCVE-2024-5314107/31/202507/31/2025717
21395481-8Linux Kernel refcount.c bind use after freeCVE-2025-2175607/31/202507/31/2025818
21394806-11HP Plantronics Hub Updater privileges assignmentCVE-2024-2746007/31/202507/31/2025615
21166012-20Microsoft Windows Update Service link followingCVE-2025-4879907/09/202507/09/2025921
20544781-6Microsoft Windows BitLocker Local Privilege EscalationCVE-2023-2156305/15/202505/15/2025615
19909375-80Kubernetes ingress-nginx IngressNightmare isolationCVE-2025-197403/26/202503/26/2025615
17932507-13Grafana SQL Expressions Experimental Feature code injectionCVE-2024-926410/21/202410/21/2024717
17738941-6Microsoft SysInternals Sysmon Local Privilege EscalationCVE-2023-2934310/04/202410/04/2024614
17355885-8Netgear WN604/WN802Tv2/WNAP210/WNAP320/WNDAP350/WNDAP360 boardDataWW.php command injectionCVE-2016-155508/25/202408/25/202449
17355883-4Apple macOS libxpc access controlCVE-2018-423708/25/202408/25/202424
17355858-65Blueman Network.py EnableNetwork access controlCVE-2015-861208/25/202408/25/2024820
17355854-7NUOO CMS Web Server sql injectionCVE-2018-1898208/25/202408/25/202449
17355845-53Imperva SecureSphere PWS os command injectionCVE-2018-1666008/25/202408/25/2024921
17355826-7elFinder PHP Connector command injectionCVE-2019-919408/25/202408/25/202425
17355817-24Pipeline Declarative Plugin Sandbox Converter.groovy 7pk securityCVE-2019-100300208/25/202408/25/2024820
17355798-9CMS Made Simple Watermark class.showtime2_image.php unrestricted uploadCVE-2019-969208/25/202408/25/202425
17355792-5LibreOffice Macro path traversalCVE-2018-1685808/25/202408/25/202449
17354611-8AIS ESEL-Server 67 Backend sql injectionCVE-2019-1012308/25/202408/25/2024820
17354603-10Ruby on Rails Development Mode input validationCVE-2019-542008/25/202408/25/2024820
17354595-602GetSimple CMS theme-edit.php credentials managementCVE-2019-1123108/25/202408/25/2024820
17354587-94Shopware loadPreviewAction external referenceCVE-2017-1835708/25/202408/25/2024820
17354583-6Apple macOS Feedback Assistant race conditionCVE-2019-856508/25/202408/25/202449
17354558-65LibreNMS addhost.inc.php os command injectionCVE-2018-2043408/25/202408/25/2024820
17354550-7IBM WebSphere Application Server deserializationCVE-2019-427908/25/202408/25/2024820
17354542-9Webmin Package Updates update.cgi command injectionCVE-2019-1284008/25/202408/25/2024820
17354538-41Cisco Prime Infrastructure/Evolved Programmable Network Web-based Management input validationCVE-2019-182108/25/202408/25/202449
17354530-7Apple macOS Time Machine os command injectionCVE-2019-851308/25/202408/25/2024820
17354526-9Xymon xymond useradm.c command injectionCVE-2016-205608/25/202408/25/202449
17354518-25Laravel Framework Permission .env writeNewEnvironmentFileWith Password information disclosureCVE-2017-1689408/25/202408/25/2024820
17354494-500Laravel Framework Token Encrypter.php decrypt deserializationCVE-2018-1513308/25/202408/25/2024717
17354490-3Microsoft Windows AppX Deployment Service access controlCVE-2019-084108/25/202408/25/202449
17354469-72Microsoft Windows Win32k access controlCVE-2018-845308/25/202408/25/202449
17354460-8Schneider Electric Pelco Endura NET55XX Encoder Access Control access controlCVE-2019-681408/25/202408/25/2024922
15315837-44Apache OFBiz code injectionCVE-2023-4907001/04/202401/04/2024818
14791408-16Microsoft SharePoint Server code injectionCVE-2023-2495509/27/202309/27/2023919
14266344-50Microsoft Windows Win32k use after freeCVE-2023-2933606/09/202306/09/2023716
13719620-8Fortinet FortiNAC HTTP Request external referenceCVE-2022-3995202/21/202302/21/2023919
13210626-35OpenSSL X.509 Certificate buffer overflowCVE-2022-360211/02/202211/02/20221020
12503423-30Microsoft Windows Active Directory Domain Services certificate validationCVE-2022-2692305/12/202205/12/2022818
12484608-16F5 BIG-IP LTM HTTP null pointer dereferenceCVE-2022-2949105/09/202205/10/2022919
12294874-8Adobe Photoshop memory corruptionCVE-2007-236503/18/202203/18/202259
12243279-84Linux Kernel Pipe Dirty Pipe initializationCVE-2022-084703/08/202203/08/2022612
12157863-71Microsoft Windows Print Spooler privilege escalationCVE-2022-2271802/09/202202/09/2022919
12119247-53Microsoft Windows Win32k out-of-bounds writeCVE-2022-2188201/28/202201/28/2022717
12112234-41polkit pkexec access controlCVE-2021-403401/26/202201/26/2022812
11969890-6Microsoft Windows Common Log File System Driver information disclosureCVE-2021-4322412/21/202112/21/2021717
11843160-8Microsoft Windows Win32k use after freeCVE-2021-4044911/11/202111/11/2021919
11590624-7Jetty URI access controlCVE-2021-3442909/08/202109/08/2021412
11571698-709Atlassian Confluence Server/Confluence Data Center Webwork OGNL injectionCVE-2021-2608409/01/202109/01/20211224
11551826prototypejs Prototype JavaScript framework Remote Code ExecutionCVE-2008-722008/24/202108/24/202111
11473118-24Apple iOS/iPadOS IOMobileFrameBuffer memory corruptionCVE-2021-3080707/27/202107/27/2021715
11437240-5Microsoft Windows Volume Shadow Copy SAM SeriousSAM/HiveNightmare permissionCVE-2021-3693407/20/202107/20/2021611
11375563-6549Microsoft Windows Print Spooler Local Privilege EscalationCVE-2021-167506/29/202106/29/2021919
11322551-7Microsoft Windows Graphics privileges managementCVE-2021-2686806/09/202106/09/2021717
11322544-50Microsoft Windows DWM Core privilege escalationCVE-2021-3373906/09/202106/09/2021717
11311931-8VMware vCenter Server Virtual SAN Health Check Plug-In improper authenticationCVE-2021-2198506/05/202106/05/2021818
11297528-36Microsoft Windows Hyper-V VmsIfrInfoParams_OID_SWITCH_NIC_REQUEST privilege escalationCVE-2021-2847606/01/202106/01/2021919
11254142-9Microsoft Windows HTTP Protocol use after freeCVE-2021-3116605/16/202105/16/2021818
11253726-33Pega Infinity Password Recovery improper authenticationCVE-2021-2765105/16/202105/16/2021818
11250853-60Exim tls-openssl.c use after freeCVE-2020-2801805/15/202105/15/2021818
11244220-7Dell DBUtil BIOS Driver dbutil_2_3.sys improper authorizationCVE-2021-2155105/14/202105/14/2021818
11240569-76Microsoft Exchange Server privilege escalationCVE-2021-2848205/12/202105/12/2021818
11200059-64Microsoft Windows splwow64 privileges managementCVE-2021-164804/28/202104/28/2021615
11156500-7Microsoft Windows Installer Local Privilege EscalationCVE-2021-2641504/22/202104/22/2021817
11129612-20Linux Kernel VSOCK af_vsock.c race conditionCVE-2021-2670804/13/202104/13/2021920
11120405-13Intel BlueZ information disclosureCVE-2020-1235204/08/202104/08/2021920
11120396-404Intel BlueZ input validationCVE-2020-1235104/08/202104/08/2021920
11116595-602Microsoft Windows TCP/IP denial of serviceCVE-2021-2408604/08/202104/08/2021818
11081007-13Microsoft Windows modem.sys information disclosureCVE-2021-169903/31/202103/31/2021717
11025221-9Microsoft Exchange Server path traversalCVE-2021-2706503/12/202103/12/2021921
11025212-20Microsoft Exchange Server ProxyLogon server-side request forgeryCVE-2021-2685503/12/202103/12/2021921
11009945-51Microsoft Windows Win32k out-of-bounds writeCVE-2021-173203/09/202103/09/2021717
10971130-40VMware vCenter Server/Cloud Foundation vSphere Client path traversalCVE-2021-2197202/25/202102/25/20211121
10933022-30Microsoft Exchange Server privilege escalationCVE-2021-2408502/15/202102/15/2021919
10873065-73sudo sudoers_policy_main heap-based overflowCVE-2021-315601/31/202101/31/2021918
10868090-6Google Chrome v8 input validationCVE-2018-1746301/28/202101/29/2021717
10868083-9Google Chrome Javascript use after freeCVE-2019-582501/28/202101/29/2021717
10865117-23sudo sudoedit selinux_edit_copy_tfiles temp fileCVE-2021-2324001/27/202101/27/2021716
10831687-95Microsoft Windows Lockscreen privileges managementCVE-2020-139801/17/202101/17/2021918
10793957-63Microsoft .NET Framework xml injectionCVE-2020-064601/04/202101/04/2021716
10729234-40Microsoft Exchange Server code injectionCVE-2020-1714112/11/202012/11/2020717
10729115-21Microsoft Exchange Server information disclosureCVE-2020-1714312/11/202012/11/2020717
10708502-11Microsoft Windows Kerberos privileges managementCVE-2020-1704912/09/202012/09/20201020
10610266-75Microsoft Exchange Server cross site scriptingCVE-2020-1708311/12/202011/12/20201020
10600386-92Oracle WebLogic Server Remote Code ExecutionCVE-2020-1475011/09/202011/09/2020716
10589163-7Oracle Solaris Pluggable authentication module parse_user_name stack-based overflowCVE-2020-1487111/04/202011/04/2020511
10508994-9000MobileIron Core/Connector privileges managementCVE-2020-1550509/14/202009/14/2020614
10481571-6Microsoft Windows Netlogon Zerologon privileges managementCVE-2020-147209/12/202009/13/2020511
10507040-6Microsoft Internet Explorer Scripting memory corruptionCVE-2020-067409/12/202009/13/2020614
10509729-36Microsoft Exchange Server Email code injectionCVE-2020-1687509/12/202009/12/2020715
10509455-62Microsoft Windows Setup default permissionCVE-2020-157108/17/202008/17/2020715
10509227-39Microsoft .NET Framework XML File code injectionCVE-2020-114708/17/202008/17/2020717
10509379-85Microsoft Windows Print Spooler privileges managementCVE-2020-133708/12/202008/12/2020614
10509075-83SAP NetWeaver AS JAVA LM Configuration Wizard RECON improper authenticationCVE-2020-628707/24/202007/25/2020816
10509303-9Microsoft Windows WalletService privileges managementCVE-2020-136207/17/202007/18/2020614
10509158-64Microsoft Windows DNS Server SigRed memory corruptionCVE-2020-135007/16/202007/17/2020614
10508257-63Fortinet FortiMail/FortiVoiceEntreprise Password Change improper authenticationCVE-2020-929407/06/202007/06/2020614
10508819-31F5 BIG-IP Traffic Management User code injectionCVE-2020-590207/06/202007/06/20201127
10508675-81Microsoft Windows OLE input validationCVE-2020-128106/10/202006/12/2020614
10508749-55Microsoft Windows SMBv1 privileges managementCVE-2020-130106/10/202006/12/2020614
10508426-39VMware Cloud Director injectionCVE-2020-395606/04/202006/07/2020717
10508486-92Apache Tomcat deserializationCVE-2020-948406/04/202006/07/2020614
10505638-45Google Chrome WebRTC use after freeCVE-2019-1369404/17/202004/17/2020715
10508084-91VMware vCenter Server vmdir authorizationCVE-2020-395204/17/202004/17/2020715
10508031-4Sonatype Nexus Repository Manager Access Control default permissionCVE-2020-1144404/09/202004/11/2020410
10507966-70Microsoft Windows SMBv3 SMBGhost memory corruptionCVE-2020-079603/30/202004/05/202049
10507252-65Microsoft Exchange Server deserializationCVE-2020-068803/02/202003/27/2020818
10507829-42OpenSMTPD mta_session.c out-of-boundsCVE-2020-879402/27/202003/02/2020717
10507769-82OpenSMTPD makemap.c untrusted search pathCVE-2020-879302/26/202003/02/2020717
10507406-12Microsoft Windows Error Reporting privileges managementCVE-2020-075402/23/202003/02/2020614
10507329-35Microsoft Windows Error Reporting privileges managementCVE-2020-075302/23/202003/02/2020614
10507710-6Cacti Cooikie graph_realtime.php os command injectionCVE-2020-881302/22/202003/02/2020614
10507109-17Microsoft SQL Server Reporting Services deserializationCVE-2020-061802/22/202003/02/2020816
10507185-92Microsoft Windows Windows Installer privileges managementCVE-2020-068302/15/202002/20/2020715
10501800-11CPU Kernel information disclosureCVE-2019-112502/15/202002/20/2020718
10507466-80HP System Event Utility input validationCVE-2019-1891502/15/202002/20/2020817
10484762-75Microsoft SharePoint Server Application Package input validationCVE-2019-060402/15/202002/20/2020818
10506903-14sudo pwfeedback tgetpass.c getln out-of-bounds writeCVE-2019-1863402/15/202002/20/2020717
10506967-78OpenSMTPD SMTP Session smtp_session.c return valueCVE-2020-724701/31/202002/20/2020717
10506178-93Citrix Application Delivery Controller/Gateway path traversalCVE-2019-1978101/11/202001/13/20201129
10561465-71Apache Tomcat Utility Method 7pk securityCVE-2016-501801/08/202001/13/202070
10502610-23JetBrains TeamCity input validationCVE-2019-1503901/08/202001/13/2020717
10502149-55Microsoft Windows Winsock ws2ifsl.sys privileges managementCVE-2019-121501/07/202001/13/2020614
10482998-3014Apache Tika tika-server command injectionCVE-2018-133501/05/202001/05/2020717
10500125-39Exim os command injectionCVE-2019-1014901/04/202001/05/2020717
10501741-52Tableau Server XML Data xml external entity referenceCVE-2019-1563701/04/202001/05/2020717
10500896-908Apple Safari WebKit memory corruptionCVE-2019-868901/04/202001/05/2020717
10505498-513ktsuss Privileges dropped privilegesCVE-2011-292101/04/202001/05/2020717
10501681Cisco Integrated Management Controller CLI hard-coded credentialsCVE-2019-193501/04/202001/05/2020919
10500443Cisco Data Center Network Manager Web-based Management access controlCVE-2019-162001/04/202001/05/2020919
10484830Cisco RV110W Wireless-N VPN Firewall Web-based Management input validationCVE-2019-166301/04/202001/05/2020922
10483471Crestron AirMedia AM-100/AirMedia AM-101 access controlCVE-2017-1670901/04/202001/05/2020919
10502074-85LibreNMS collectd.inc.php passthru injectionCVE-2019-1066901/04/202001/05/2020717
10482528-40October CMS File Upload unrestricted uploadCVE-2017-100011901/04/202001/05/2020717
10501305-13Microsoft Windows Core Shell COM Server Registrar access controlCVE-2019-118401/03/202001/05/2020816
10501534-42Adobe Acrobat Reader use after freeCVE-2019-803901/02/202001/03/2020816
10501464-72Adobe Acrobat Reader use after freeCVE-2019-803801/02/202001/03/2020816
10501027-40FreeBSD File Descriptors Underflow access controlCVE-2019-560312/30/201901/01/2020818
10484693-706FreeBSD Unix Domain Socket access controlCVE-2019-559612/30/201901/01/2020818
10484047-62Microsoft Windows TCP/IP information disclosureCVE-2018-849312/23/201912/25/2019819
10506015-26OpenBSD setuid Program ld.so _dl_setup_env privileges managementCVE-2019-1972612/16/201912/17/2019717
10505948-60Adobe Acrobat Reader out-of-bounds writeCVE-2019-1645112/15/201912/15/2019615
10505823-36Lenovo Power Management Driver memory corruptionCVE-2019-619212/15/201912/15/2019717
10505886-92Progress Telerik UI for ASP.NET AJAX .NET Deserialization RadAsyncUpload deserializationCVE-2019-1893512/15/201912/15/2019614
10501109-25Symantec Endpoint Protection access controlCVE-2019-1275012/14/201912/14/2019615
10499910-7Mozilla Firefox/Firefox ESR/Thunderbird IonMonkey JIT Compiler Array.prototype.slice memory corruptionCVE-2019-981012/08/201912/08/2019715
10500377-83Mozilla Firefox Sandbox input validationCVE-2019-1170812/08/201912/08/2019612
10505702-15verot.net class.upload class.upload.php unrestricted uploadCVE-2019-1957612/08/201912/08/2019717
10483325CA Privileged Access Manager Configuration File access controlCVE-2018-902212/08/201912/08/2019919
10483260CA Privileged Access Manager access controlCVE-2018-902112/08/201912/08/2019919
10502315-26Integard Pro LoginAdmin buffer overflowCVE-2019-1670212/08/201912/08/2019717
10504120Trend Micro Deep Security Agent input validationCVE-2019-1562712/08/201912/08/20191329
10505575-86Fotinet FortiOS URL/SPAM/AV hard-coded credentialsCVE-2018-919511/27/201912/04/20191024
10505119Patriot Viper RGB Driver MsIo64.sys ZwMapViewOfSection privileges managementCVE-2019-1884511/27/201912/04/2019817
10482269-87VMware ESXi/Workstation Pro/Player/Fusion Pro/Fusion information disclosureCVE-2017-490511/26/201911/27/2019717
10482354-72VMware Workstation/Fusion Drag/Drop memory corruptionCVE-2017-490111/26/201911/27/2019717
10482662-5FasterXML jackson-databind Incomplete Fix CVE-2017-7525 readValue code injectionCVE-2017-1748511/25/201911/27/2019412
10500188-99FreePBX Operator Panel exec.php cross site scriptingCVE-2019-1140911/21/201911/25/2019717
10502014-25Bludit upload-images.php code injectionCVE-2019-1611311/21/201911/25/2019717
10499782-95Pulse Secure Pulse Connect Secure Admin Web command injectionCVE-2019-1153911/21/201911/25/2019717
10500062-7FreeRADIUS Logrotate access controlCVE-2019-1014311/16/201911/16/2019512
10502894-906Microsoft Windows Authentication Request improper authenticationCVE-2019-132211/16/201911/16/2019717
10505257-69Microsoft Windows UPnP Service privileges managementCVE-2019-140511/16/201911/16/2019717
10505440-50SibSoft Xfilesharing up.cgi unrestricted uploadCVE-2019-1895211/16/201911/16/2019615
10505320Technicolor TC7300 wlanAccess.asp cross site scriptingCVE-2019-1752411/16/201911/16/2019818
10505006-16Technicolor TD5130v2 Web mnt_ping.cgi os command injectionCVE-2019-1839611/16/201911/16/2019615
10505381-92FUDForum Stored cross site scriptingCVE-2019-1883911/16/201911/16/2019717
10505183-95FUDForum admsession.php Stored cross site scriptingCVE-2019-1887311/16/201911/16/2019820
10500563-75Nortek Linear eMerge E3 command injectionCVE-2019-725611/16/201911/16/2019818
10499654-67Atlassian Confluence Server/Data Center downloadallattachments path traversalCVE-2019-339811/12/201911/13/2019717
10500503-15Prima Systems FlexAir command injectionCVE-2019-767011/12/201911/13/2019818
10504322-34Adobe Acrobat Reader null pointer dereferenceCVE-2019-819611/12/201911/13/2019615
10504256-68Adobe Acrobat Reader null pointer dereferenceCVE-2019-819511/12/201911/13/2019615
10502442-54Apple iOS Foundation out-of-boundsCVE-2019-864111/12/201911/13/2019615
10500965-77Apple iOS Quick Look use after freeCVE-2019-866211/12/201911/13/2019615
10504807-13Apple iOS/iPadOS Audio memory corruptionCVE-2019-879711/11/201911/12/2019614
10504874-80Apple iOS/iPadOS AVEVideoEncoder memory corruptionCVE-2019-879511/11/201911/12/2019614
10504943-9Apple iOS/iPadOS Kernel Memory input validationCVE-2019-879411/11/201911/12/2019614
10500710-8Microsoft Windows Kernel information disclosureCVE-2019-107111/11/201911/11/2019816
10503732Nostromo nhttpd SSL_accept path traversalCVE-2019-1627911/09/201911/10/2019816
10502256-67Micro Focus Data Protector privileges managementCVE-2019-1166011/09/201911/10/2019717
10503351-64Microsoft Edge information disclosureCVE-2019-135611/09/201911/10/2019818
10482591-606Google Android art access controlCVE-2017-1315611/08/201911/09/2019717
10504739-51rConfig ajaxServerSettingsChk.php exec os command injectionCVE-2019-1666211/08/201911/09/2019818
10504676build-metrics Plugin Reflected cross site scriptingCVE-2019-1047511/08/201911/09/2019917
10484498-503BMC Patrol Agent PatrolCli Lateral access controlCVE-2018-2073511/08/201911/08/2019512
10561440-4Microsoft Windows Group Policy 7pk securityCVE-2015-000910/29/201910/30/2019512
10561435-9Microsoft Windows Group Policy data authenticityCVE-2015-000810/29/201910/30/2019512
10504383-95Rocket.Chat cross site scriptingCVE-2019-1722010/26/201910/26/2019615
10503492-502Moxa EDR 810 Log File log fileCVE-2019-1096310/26/201910/26/2019615
10503551-62Moxa EDR 810 Ping input validationCVE-2019-1096910/26/201910/26/2019717
10504441-55Trend Micro Anti-Threat Toolkit input validationCVE-2019-949110/22/201910/23/20191022
10504190-202Adobe Acrobat Reader memory corruptionCVE-2019-819710/22/201910/23/2019615
10503798Ubisoft Uplay Permission permission assignmentCVE-2019-1473710/16/201910/18/201911
10503671-81Kirona Dynamic Resource Scheduling report Reflected cross site scriptingCVE-2019-1750410/16/201910/18/2019615
10503610-20Kirona Dynamic Resource Scheduling REGISTER.cmd information disclosureCVE-2019-1750310/16/201910/18/2019615
10503851-62X.org X Server ct.c_char XQueryKeymap out-of-bounds writeCVE-2019-1762410/16/201910/18/2019716
10502744-55Icewarp Webclient cross site scriptingCVE-2010-533610/11/201910/11/201935
10502769-828Icewarp Mail Server Webmail index.html path traversalCVE-2010-533410/11/201910/11/2019716
10500311-22TP-LINK WR1043ND V2 Management Web improper authenticationCVE-2019-697110/10/201910/10/2019615
10503429-41Microsoft Windows Win32k memory corruptionCVE-2019-136410/10/201910/10/2019615
10502970-82Microsoft Windows memory corruptionCVE-2019-134310/10/201910/10/2019615
10503047-59Microsoft Windows Code Integrity information disclosureCVE-2019-134410/10/201910/10/2019615
10503124-35Microsoft Windows Kernel information disclosureCVE-2019-134510/10/201910/10/2019513
10503200-11Microsoft Windows memory corruptionCVE-2019-134610/10/201910/10/2019513
10503276-88Microsoft Windows memory corruptionCVE-2019-134710/10/201910/10/2019615
10502632libpl_droidsonroids_gif decoding.c DDGifSlurp double freeCVE-2019-1193210/07/201910/08/20191022
10499993Microsoft Windows Remote Desktop Service BlueKeep use after freeCVE-2019-070810/07/201910/08/2019817
10502334-87vBulletin widget_php code injectionCVE-2019-1675910/07/201910/08/2019617
10499721-33Check Point ZoneAlarm/Endpoint Security Client Log File Archive permissionCVE-2019-845210/07/201910/08/2019717
10500638Microsoft Windows Win32k access controlCVE-2019-113207/26/201907/26/20191019
10500209SolarWinds Serv-U access controlCVE-2019-1218107/26/201907/26/2019818
10482158S-nail root Helper path traversalCVE-2017-589907/26/201907/26/2019614
10482439Linux Kernel __ip_append_data race conditionCVE-2017-100011207/26/201907/26/2019613
10500733Linux Kernel ptrace.c access controlCVE-2019-1327207/26/201907/26/2019716
10485021-31PostgreSQL os command injectionCVE-2019-919305/22/201905/22/2019615
10499847Oracle Fusion Middleware WebLogic Server access controlCVE-2019-272505/22/201905/22/2019817
10484892-6Sonatype Nexus Repository Manager Access Control access controlCVE-2019-723805/22/201905/22/201949
10484955-69Atlassian Confluence Server Widget Connector Macro path traversalCVE-2019-339605/22/201905/22/2019821
10483849-71Linux Kernel create_elf_tables integer overflowCVE-2018-1463410/02/201810/02/2018718
6377712-6Citrix NetScaler ADC/NetScaler Gateway GCM Nonce Generator information disclosureCVE-2017-593305/04/201705/04/201724
6182205Fortinet FortiOS Password information disclosureCVE-2016-754205/04/201705/04/201713
10482116Microsoft Windows Kernel information disclosureCVE-2016-007511/22/201611/22/2016918
10482028Microsoft Windows Kernel API information disclosureCVE-2016-337111/22/201611/22/2016918

Posts (23)

Timeline (23)

The analysis of the timeline helps to identify the required approach and handling of single items and item collections. This overview makes it possible to see less important slices and more severe hotspots at a glance. Prioritizing items becomes possible.

DateEntryCVECommentVStatus
09/10/2026363682CVE-2026-0251Website and Write-Up of the vulnerabilities: https://globalunprotect.io/index.html0
Accepted
10/11/2023231296CVE-2023-27997Python script to check if a service is vulnerable: https://github.com/BishopFox/CVE-2023-27997-check0
Accepted
06/30/2021176473CVE-2021-1675There is another proof of concept based on impacked: https://github.com/cube0x0/CVE-2021-16752
Accepted
03/12/2021170595CVE-2021-27065xxxxx xxx x xxxxxxxxx xxxxxxxx xx xxx xxxxxx, xxx xxxxxxx xx xxxxxx xxx xxxxxxx xx xx. xxx xxxxxxx xxxx xx xxxx xxx xxxxxxx xx xxxxxx, xxx xxx xxxxx xxxx xxxxxxxxx xx xxx xxxxxxx xxx xxxxxx. xxxx xxx xxx xxxxx xx xxx xxxxxxx xxxx: xxxxx://xxx.xxxxxxxxxxx.x…0
Rejected
03/12/2021170592CVE-2021-26855There are 2 different exploits at the moment, one written in python and another in go. The exploit code of Jang was removed by GitHub, and was later made available on Web Archive and GitLab. Here are two links to the exploit code: https://git.blackmarble.s…0
Accepted
03/09/2021170592CVE-2021-26855Nmap script from Microsoft to detect if an Exchange Server is vulnerable: https://github.com/microsoft/CSS-Exchange/blob/main/Security/http-vuln-cve2021-26855.nse1
Accepted
01/31/2021168695CVE-2021-3156The exploit in the previous comment is also available on GitHub: https://github.com/blasty/CVE-2021-31561
Accepted
01/31/2021168695CVE-2021-3156There is another exploit available under the URL https://haxx.in/CVE-2021-3156.tar.gz.1
Accepted
09/14/2020159502CVE-2020-1472And here is another exploit from dirkjanm: https://github.com/dirkjanm/CVE-2020-1472/blob/master/cve-2020-1472-exploit.py0
Accepted
09/14/2020159502CVE-2020-1472After SecuraBV had published a testing script, there is now a proof of concept exploit from BlackArrow: https://github.com/blackarrowsec/redteam-research/blob/master/CVE-2020-1472/CVE-2020-1472.py0
Accepted
08/12/2020159525CVE-2020-1337There is another exploit for this vulnerability: https://github.com/sailay1996/cve-2020-1337-poc1
Accepted
01/12/2020147804CVE-2019-19781Additional exploit and scanner from TrustedSec: https://github.com/trustedsec/cve-2019-197811
Accepted
01/05/2020133407CVE-2019-0232The exploit is available in Metasploit as well: "https://www.rapid7.com/db/modules/exploit/windows/http/tomcat_cgi_cmdlineargs"0
Accepted
01/05/2020136570CVE-2019-12181The exploit is available in Metasploit as well: "https://www.rapid7.com/db/modules/exploit/linux/local/servu_ftp_server_prepareinstallation_priv_esc"0
Accepted
12/30/2019143087CVE-2019-1322There is now a Metasploit module for this vulnerability (https://www.rapid7.com/db/modules/exploit/windows/local/comahawk).0
Accepted
12/30/2019145369CVE-2019-1405There is now a Metasploit module for this vulnerability (https://www.rapid7.com/db/modules/exploit/windows/local/comahawk).0
Accepted
12/30/2019147035CVE-2019-19726There is now a Metasploit module for this vulnerability (https://www.rapid7.com/db/modules/exploit/openbsd/local/dynamic_loader_chpass_privesc) 0
Accepted
12/17/201994127CVE-2016-6277There is another exploit for this vulnerability: https://www.exploit-db.com/exploits/477820
Accepted
12/15/2019146798CVE-2019-25065The exploit is available in Metasploit as well: https://www.exploit-db.com/exploits/477720
Accepted
11/21/2019125954CVE-2018-14665There is now an exploit available in Metasploit called "Xorg X11 Server Local Privilege Escalation", see https://www.exploit-db.com/exploits/477011
Accepted
11/08/2019144257CVE-2019-16662The exploit was ported to Metasploit Framework as "rConfig install Command Execution" on 2019-11-08.0
Accepted
10/29/2019142917CVE-2019-11932Additional exploit on GitHub available: https://github.com/dorkerdevil/CVE-2019-11932. This exploit is based on the work of awakened1712.0
Accepted
10/26/2019138210CVE-2019-13272The exploit is also now part of the Metasploit Framework.0
Accepted

Do you know our Splunk app?

Download it now for free!