Exploitdb Exploits
50,076 exploits tracked across all sources.
CUPS < 2.0.3 - Remote Code Execution via IPP Job Request
The add_job function in scheduler/ipp.c in cupsd in CUPS before 2.0.3 performs incorrect free operations for multiple-value job-originating-host-name attributes, which allows remote attackers to trigger data corruption for reference-counted strings via a crafted (1) IPP_CREATE_JOB or (2) IPP_PRINT_JOB request, as demonstrated by replacing the configuration file and consequently executing arbitrary code.
by @0x00string
Debian/Ubuntu ntfs-3g Local Privilege Escalation
Jann Horn of Google Project Zero discovered that NTFS-3G, a read-write NTFS driver for FUSE, does not scrub the environment before executing modprobe with elevated privileges. A local user can take advantage of this flaw for local root privilege escalation.
by Kristian Erik Hermansen
CVSS 7.8
Itech Inventory Management Software 3.77 - SQL Injection
by Ihsan Sencan
WordPress Core 4.7.0/4.7.1 - Content Injection (Ruby)
by Harsh Jaiswal
Google Android - 'rkp_set_init_page_ro' RKP Memory Corruption
by Google Security Research
Microsoft Windows 10 - SMBv3 Tree Connect (PoC)
by laurent gaffie
Apple <10.2.1, <10.0.3, <10.1.1 - RCE
An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. tvOS before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
by Google Security Research
CVSS 8.8
Google Chrome - 'HTMLKeygenElement::shadowSelect()' Type Confusion
by Google Security Research
Apple <10.2.1, <10.0.3, <10.1.1 - RCE
An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. tvOS before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
by Google Security Research
CVSS 8.8
Apple <10.2.1, <10.0.3, <10.1.1 - RCE
An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. tvOS before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
by Google Security Research
CVSS 8.8
Google Android - RKP EL1 Code Loading Bypass
by Google Security Research
Google Android - Unprotected MSRs in EL1 RKP Privilege Escalation
by Google Security Research
By Source