Blog RSSExploits RSSFacebook

REMOTE

Date D   Description Plat. Author
2017-12-12   Vivotek IP Cameras - Remote Stack Overflow (PoC) 41 REMOTE bashis
2017-12-22   Vitek - Remote Command Execution / Information Disclosure (PoC) 41 REMOTE bashis
2017-10-28   Uniview - Remote Command Execution / Export Config (PoC) 36 REMOTE bashis
2018-01-22   Herospeed - 'TelnetSwitch' Remote Stack Overflow / Overwrite Password / Enable TelnetD 37 REMOTE bashis
2018-02-07   Adobe Coldfusion 11.0.03.292866 - BlazeDS Java Object Deserialization Remote Code Execution 41 REMOTE Faisal Tameesh
2017-11-30   Axis Communications MPQT/PACS - Heap Overflow / Information Leakage 53 REMOTE bashis
2017-10-20   Axis SSI - Remote Command Execution / Read Files 44 REMOTE bashis
2018-02-01   Geovision Inc. IP Camera & Video - Remote Command Execution 40 REMOTE bashis
2018-02-01   Geovision Inc. IP Camera/Video/Access Control - Multiple Remote Command Execution / Stack Overflow / 40 REMOTE bashis
2018-02-05   Microsoft Windows - 'EternalRomance'/'EternalSynergy'/'EternalChampion' SMB Remote Code Execution (M 51 REMOTE Metasploit
2018-02-01   BMC Server Automation RSCD Agent - NSH Remote Command Execution (Metasploit) 48 REMOTE Metasploit
2018-02-01   Sync Breeze Enterprise 10.4.18 - Remote Buffer Overflow (SEH) 41 REMOTE Daniel Teixeira
2018-01-30   HPE iMC 7.3 - RMI Java Deserialization 37 REMOTE Chris Lyne
2018-01-29   Oracle WebLogic - wls-wsat Component Deserialization Remote Code Execution (Metasploit) 41 REMOTE Metasploit
2018-01-29   Oracle WebLogic - wls-wsat Component Deserialization Remote Code Execution (Metasploit) 43 REMOTE Metasploit
2018-01-28   Trend Micro Threat Discovery Appliance 2.6.1062r1 - 'dlp_policy_upload.cgi' Remote Code Execution 40 REMOTE mr_me
2018-01-28   Werkzeug - 'Debug Shell' Command Execution 40 REMOTE Ali BawazeEer
2018-01-26   BMC BladeLogic 8.3.00.64 - Remote Command Execution 40 REMOTE Paul Taylor
2018-01-25   Exodus Wallet (ElectronJS Framework) - Remote Code Execution 35 REMOTE Wflki
2018-01-22   AsusWRT Router < 3.0.0.4.380.7743 - LAN Remote Code Execution 47 REMOTE Pedro Ribeiro
2018-01-24   GoAhead Web Server 2.5 < 3.6.5 - HTTPd 'LD_PRELOAD' Arbitrary Module Load (Metasploit) 43 REMOTE Metasploit
2018-01-24   Kaltura - Remote PHP Code Execution over Cookie (Metasploit) 44 REMOTE Metasploit
2018-01-24   RAVPower 2.000.056 - Root Remote Code Execution 44 REMOTE Daniele Linguaglossa & Stefano Farletti
2018-01-17   Master IP CAM 01 - Multiple Vulnerabilities 44 REMOTE Raffaele Sabato
2018-01-11   Transmission - RPC DNS Rebinding 35 REMOTE Google Security Research
2018-01-11   Seagate Personal Cloud - Multiple Vulnerabilities 34 REMOTE SecuriTeam
2018-01-15   Synology Photo Station 6.8.2-3461 - 'SYNOPHOTO_Flickr_MultiUpload' Race Condition File Write Remote 42 REMOTE mr_me
2018-01-15   Disk Pulse Enterprise 10.1.18 - Remote Buffer Overflow 38 REMOTE Ahmad Mahfouz
2018-01-15   SysGauge Server 3.6.18 - Remote Buffer Overflow 35 REMOTE Ahmad Mahfouz
2018-01-11   ALLMediaServer 0.95 - Remote Buffer Overflow 43 REMOTE Mario Kartone Ciccarelli
2018-01-11   phpCollab 2.5.1 - File Upload (Metasploit) 36 REMOTE Metasploit
2018-01-11   LabF nfsAxe 3.7 FTP Client - Stack Buffer Overflow (Metasploit) 39 REMOTE Metasploit
2018-01-10   HPE iMC - dbman 'RestartDB' Remote Command Execution (Metasploit) 37 REMOTE Metasploit
2018-01-10   HPE iMC - dbman 'RestoreDBase' Remote Command Execution (Metasploit) 39 REMOTE Metasploit
2018-01-10   DiskBoss Enterprise 8.8.16 - Remote Buffer Overflow 36 REMOTE Arris Huijgen
2018-01-09   Commvault Communications Service (cvd) - Command Injection (Metasploit) 36 REMOTE Metasploit
2018-01-03   Oracle WebLogic < 10.3.6 - 'wls-wsat' Component Deserialisation Remote Command Execution 45 REMOTE Kevin Kirsche
2018-01-05   Cisco IOS - Remote Code Execution 42 REMOTE Artem Kondratenko
2018-01-05   Ayukov NFTP FTP Client 2.0 - Remote Buffer Overflow (Metasploit) 42 REMOTE Metasploit
2018-01-03   WDMyCloud < 2.30.165 - Multiple Vulnerabilities 37 REMOTE GulfTech Security
2018-01-03   D-Link DNS-320 ShareCenter < 1.06 - Backdoor Access 40 REMOTE GulfTech Security
2018-01-04   Xplico - Remote Code Execution (Metasploit) 43 REMOTE Mehmet Ince
2018-01-04   Linksys WVBR0-25 - User-Agent Command Execution (Metasploit) 37 REMOTE Metasploit
2017-12-23   Iopsys Router - 'dhcp' Remote Code Execution 40 REMOTE neonsea
2018-01-01   Cambium ePMP1000 - 'get_chart' Shell via Command Injection (Metasploit) 41 REMOTE Metasploit
2018-01-01   Cambium ePMP1000 - 'ping' Shell via Command Injection (Metasploit) 41 REMOTE Metasploit
2018-01-01   HP Mercury LoadRunner Agent magentproc.exe - Remote Command Execution (Metasploit) 47 REMOTE Metasploit
2017-12-29   NetTransport 2.96L - Remote Buffer Overflow (DEP Bypass) 51 REMOTE Aloyce J. Makalanga
2017-12-28   ALLMediaServer 0.95 - Remote Buffer Overflow (Metasploit) 47 REMOTE Anurag Srivastava
2017-12-26   Oracle WebLogic Server 10.3.6.0.0 / 12.x - Remote Command Execution 44 REMOTE 1337g
2017-12-19   Trend Micro Smart Protection Server - Session Hijacking / Log File Disclosure / Remote Command Execu 40 REMOTE CoreLabs
2016-12-15   Netcore / Netis Routers - UDP Backdoor Access 43 REMOTE nixawk
2016-01-09   Fortinet FortiGate 4.x < 5.0.7 - SSH Backdoor Access 43 REMOTE operator8203
2017-05-10   Intel Active Management Technology - System Privileges 40 REMOTE nixawk
2017-05-05   Technicolor DPC3928SL - SNMP Authentication Bypass 39 REMOTE nixawk
2017-03-17   Cisco IOS 12.2 < 12.4 / 15.0 < 15.6 - Security Association Negotiation Request Device Memory 48 REMOTE nixawk
2017-06-06   Apache Struts - REST Plugin With Dynamic Method Invocation Remote Code Execution 46 REMOTE nixawk
2017-12-20   Samsung Internet Browser - SOP Bypass (Metasploit) 40 REMOTE Dhiraj Mishra
2017-12-19   Jenkins - XStream Groovy classpath Deserialization (Metasploit) 42 REMOTE Metasploit
2017-12-19   Tuleap 9.6 - Second-Order PHP Object Injection (Metasploit) 41 REMOTE Metasploit
2017-12-19   Tuleap 9.6 - Second-Order PHP Object Injection (Metasploit) 48 REMOTE Metasploit
2017-12-18   GoAhead Web Server 2.5 < 3.6.5 - HTTPd 'LD_PRELOAD' Remote Code Execution 42 REMOTE Daniel Hodson
2017-12-18   Western Digital MyCloud - 'multi_uploadify' File Upload (Metasploit) 40 REMOTE Metasploit
2017-12-18   Outlook for Android - Attachment Download Directory Traversal 44 REMOTE Google Security Research
2017-12-14   Palo Alto Networks Firewalls - Root Remote Code Execution 44 REMOTE Philip Pettersson
2017-12-14   pfSense 2.4.1 - Cross-Site Request Forgery Error Page Clickjacking (Metasploit) 38 REMOTE Metasploit
2017-12-14   Dup Scout Enterprise - 'Login' Buffer Overflow (Metasploit) 35 REMOTE Metasploit
2017-12-14   Microsoft Office - Dynamic Data Exchange 'DDE' Payload Delivery (Metasploit) 42 REMOTE Metasploit
2017-12-08   LabF nfsAxe FTP Client 3.7 - Remote Buffer Overflow (DEP Bypass) 41 REMOTE wetw0rk
2017-12-07   Claymore Dual ETH + DCR/SC/LBC/PASC GPU Miner - Stack Buffer Overflow / Path Traversal 44 REMOTE tintinweb
2017-12-07   Polycom Shell HDX Series - Traceroute Command Execution (Metasploit) 35 REMOTE Metasploit
2017-12-07   LaCie 5big Network 2.2.8 - Command Injection 44 REMOTE Timo Sablowski
2017-12-05   VX Search 10.2.14 - 'command_name' Buffer Overflow 46 REMOTE W01fier00t
2017-11-29   Dup Scout Enterprise 10.0.18 - 'Input Directory' Local Buffer Overflow (SEH) 42 REMOTE Miguel Mendez Z
2017-11-29   HP iMC Plat 7.2 - Remote Code Execution (2) 41 REMOTE Chris Lyne
2017-11-28   HP iMC Plat 7.2 - Remote Code Execution 44 REMOTE Chris Lyne
2017-11-29   pfSense - (Authenticated) Group Member Remote Command Execution (Metasploit) 47 REMOTE Metasploit
2017-11-20   Microsoft Office - OLE Remote Code Execution 45 REMOTE embedi
2017-11-14   Dup Scout Enterprise 10.0.18 - 'Login' Remote Buffer Overflow 39 REMOTE sickness
2017-11-14   D-Link DIR-850L - OS Command Execution (Metasploit) 47 REMOTE Metasploit
2017-03-08   Wireless IP Camera (P2P) WIFICAM - Remote Code Execution 54 REMOTE PierreKimSec
2017-11-13   Ulterius Server < 1.9.5.0 - Directory Traversal 40 REMOTE Rick Osgood
2017-11-09   Mako Server 2.5 - OS Command Injection Remote Command Execution (Metasploit) 39 REMOTE Metasploit
2017-10-17   Microsoft Internet Explorer 11 (Windows 7 x86) - 'mshtml.dll' Remote Code Execution (MS17-007) 43 REMOTE mschenk
2017-11-05   Avaya IP Office (IPO) < 10.1 - 'SoftConsole' Remote Buffer Overflow (SEH) 36 REMOTE hyp3rlinx
2017-11-04   Actiontec C1000A Modem - Backdoor Account 34 REMOTE Joseph McDonagh
2017-11-03   tnftp - 'savefile' Arbitrary Command Execution (Metasploit) 38 REMOTE Metasploit
2017-10-31   ZyXEL PK5001Z Modem - Backdoor Account 41 REMOTE Matthew Sheimo
2017-10-28   MitraStar DSL-100HN-T1/GPT-2541GNAC - Privilege Escalation 40 REMOTE j0lama
2016-04-03   DameWare Remote Controller < 12.0.0.520 - Remote Code Execution 35 REMOTE Securifera
2017-10-25   Netgear DGN1000 1.1.00.48 - 'Setup.cgi' Remote Code Execution (Metasploit) 38 REMOTE Metasploit
2017-10-23   Polycom - Command Shell Authorization Bypass (Metasploit) 40 REMOTE Metasploit
2017-10-23   Unitrends UEB 9 - bpserverd Authentication Bypass Remote Command Execution (Metasploit) 31 REMOTE Metasploit
2017-10-23   Unitrends UEB 9 - http api/storage Remote Root (Metasploit) 35 REMOTE Metasploit
2017-10-21   Ayukov NFTP FTP Client < 2.0 - Remote Buffer Overflow 38 REMOTE Berk Cem Göksel
2017-10-17   Tomcat - Remote Code Execution via JSP Upload Bypass (Metasploit) 45 REMOTE Metasploit
2017-10-17   Apple iOS 10.2 (14C92) - Remote Code Execution 36 REMOTE Google Security Research
2017-10-13   Sync Breeze Enterprise 10.1.16 - Remote Buffer Overflow (SEH) (Metasploit) 33 REMOTE wetw0rk
2017-10-09   VX Search Enterprise 10.1.12 - Remote Buffer Overflow 37 REMOTE Revnic Vasile
2017-10-09   OrientDB 2.2.2 < 2.2.22 - Remote Code Execution (Metasploit) 43 REMOTE Metasploit
2017-10-09   Rancher Server - Docker Daemon Code Execution (Metasploit) 54 REMOTE Metasploit
2017-08-08   Unitrends UEB 9.1 - Authentication Bypass / Remote Command Execution 41 REMOTE Jared Arave
2017-08-08   Unitrends UEB 9.1 - 'Unitrends bpserverd' Remote Command Execution 38 REMOTE Jared Arave
2017-09-21   ERS Data System 1.8.1 - Java Deserialization 38 REMOTE West Shepherd
2017-10-02   UCOPIA Wireless Appliance < 5.1 (Captive Portal) - Root Remote Code Execution 43 REMOTE agix
2017-10-02   Qmail SMTP - Bash Environment Variable Injection (Metasploit) 42 REMOTE Metasploit
2017-09-30   Sync Breeze Enterprise 10.0.28 - Remote Buffer Overflow 37 REMOTE Owais Mehtab
2017-09-28   Trend Micro OfficeScan 11.0/XG (12.0) - Man In The Middle Remote Code Execution 41 REMOTE hyp3rlinx
2017-09-27   Cisco Prime Collaboration Provisioning < 12.1 - Authentication Bypass / Remote Code Execution 37 REMOTE Adam Brown
2017-10-20   Sync Breeze Enterprise 10.1.16 - 'POST' Remote Buffer Overflow 32 REMOTE mschenk
2017-09-27   LAquis SCADA 4.1.0.2385 - Directory Traversal (Metasploit) 34 REMOTE James Fitts
2017-09-27   Oracle WebLogic Server 10.3.6.0 - Java Deserialization Remote Code Execution 37 REMOTE SlidingWindow
2017-09-26   NodeJS Debugger - Command Injection (Metasploit) 34 REMOTE Metasploit
2017-09-26   Tiny HTTPd 0.1.0 - Directory Traversal 32 REMOTE Touhid M.Shaikh
2017-09-25   FLIR Thermal Camera F/FC/PT/D - SSH Backdoor Access 43 REMOTE LiquidWorm
2017-09-25   Apple iOS 10.2 - Broadcom Out-of-Bounds Write when Handling 802.11k Neighbor Report Response 39 REMOTE Google Security Research
2017-09-25   Oracle 9i XDB 9.2.0.1 - HTTP PASS Buffer Overflow 33 REMOTE Charles Dardaman
2017-09-25   Supervisor 3.0a1 < 3.3.2 - XML-RPC (Authenticated) Remote Code Execution (Metasploit) 37 REMOTE Metasploit
2017-09-25   Disk Pulse Enterprise 10.0.12 - GET Buffer Overflow (SEH) 42 REMOTE sickness
2017-09-21   Disk Pulse Enterprise 9.9.16 - GET Buffer Overflow (Metasploit) 34 REMOTE Metasploit
2017-09-19   HPE < 7.2 - Java Deserialization 34 REMOTE Raphael Kuhn
2017-05-19   Tecnovision DLX Spot - SSH Backdoor Access 39 REMOTE Simon Brannstrom
2017-09-13   Astaro Security Gateway 7 - Remote Code Execution 34 REMOTE Jakub Palaczynski
2017-09-14   Cloudview NMS 2.00b - Writable Directory Traversal Execution (Metasploit) 38 REMOTE James Fitts
2017-09-14   KingScada AlarmServer 3.1.2.13 - Remote Stack Buffer Overflow (Metasploit) 32 REMOTE James Fitts