Menu

Search for hundreds of thousands of exploits

"VMWare Fusion - Local Privilege Escalation"

Author

Exploit author

Grimm

Platform

Exploit platform

macos

Release date

Exploit published date

2020-03-17

Release DateTitleTypePlatformAuthor
2020-03-30"Zen Load Balancer 3.10.1 - Remote Code Execution"webappscgi"Cody Sixteen"
2020-03-30"10-Strike Network Inventory Explorer 9.03 - 'Read from File' Buffer Overflow (SEH)(ROP)"localwindowsHodorsec
2020-03-30"Multiple DrayTek Products - Pre-authentication Remote Root Code Execution"remotelinux0xsha
2020-03-30"Joomla! com_fabrik 3.9.11 - Directory Traversal"webappsphpqw3rTyTy
2020-03-30"Microsoft Windows 10 (1903/1909) - 'SMBGhost' SMB3.1.1 'SMB2_COMPRESSION_CAPABILITIES' Local Privilege Escalation"localwindows"Daniel García Gutiérrez"
2020-03-30"Odin Secure FTP Expert 7.6.3 - 'Site Info' Denial of Service (PoC)"doswindows"Ivan Marmolejo"
2020-03-27"ECK Hotel 1.0 - Cross-Site Request Forgery (Add Admin)"webappsphp"Mustafa Emre Gül"
2020-03-27"Jinfornet Jreport 15.6 - Unauthenticated Directory Traversal"webappsjavahongphukt
2020-03-27"Everest 5.50.2100 - 'Open File' Denial of Service (PoC)"doswindows"Ivan Marmolejo"
2020-03-27"rConfig 3.9.4 - 'searchField' Unauthenticated Root Remote Code Execution"webappsphpvikingfr
2020-03-27"Easy RM to MP3 Converter 2.7.3.700 - 'Input' Local Buffer Overflow (SEH)"localwindows"Felipe Winsnes"
2020-03-26"TP-Link Archer C50 3 - Denial of Service (PoC)"webappshardwarethewhiteh4t
2020-03-26"Centreo 19.10.8 - 'DisplayServiceStatus' Remote Code Execution"webappsphp"Engin Demirbilek"
2020-03-25"AVAST SecureLine 5.5.522.0 - 'SecureLine' Unquoted Service Path"localwindows"Roberto Piña"
2020-03-25"10-Strike Network Inventory Explorer - 'srvInventoryWebServer' Unquoted Service Path"localwindows"Felipe Winsnes"
2020-03-25"Joomla! Component GMapFP 3.30 - Arbitrary File Upload"webappsphpThelastVvV
2020-03-25"10-Strike Network Inventory Explorer 8.54 - 'Add' Local Buffer Overflow (SEH)"localwindows"Felipe Winsnes"
2020-03-25"LeptonCMS 4.5.0 - Persistent Cross-Site Scripting"webappsphpSunCSR
2020-03-24"UliCMS 2020.1 - Persistent Cross-Site Scripting"webappsphpSunCSR
2020-03-24"Wordpress Plugin WPForms 1.5.8.2 - Persistent Cross-Site Scripting"webappsphp"Jinson Varghese Behanan"
2020-03-24"Veyon 4.3.4 - 'VeyonService' Unquoted Service Path"localwindows"Víctor García"
2020-03-24"UCM6202 1.0.18.13 - Remote Command Injection"webappshardware"Jacob Baines"
2020-03-23"ProficySCADA for iOS 5.0.25920 - 'Password' Denial of Service (PoC)"dosios"Ivan Marmolejo"
2020-03-23"FIBARO System Home Center 5.021 - Remote File Include"webappsmultipleLiquidWorm
2020-03-23"Joomla! com_hdwplayer 4.2 - 'search.php' SQL Injection"webappsphpqw3rTyTy
2020-03-23"rConfig 3.9.4 - 'search.crud.php' Remote Command Injection"webappsphp"Matthew Aberegg"
2020-03-23"Google Chrome 80.0.3987.87 - Heap-Corruption Remote Denial of Service (PoC)"doswindows"Cem Onat Karagun"
2020-03-23"CyberArk PSMP 10.9.1 - Policy Restriction Bypass"remotemultiple"LAHBAL Said"
2020-03-20"VMware Fusion 11.5.2 - Privilege Escalation"localmacos"Rich Mirch"
2020-03-20"Exagate Sysguard 6001 - Cross-Site Request Forgery (Add Admin)"webappsphp"Metin Yunus Kandemir"
Release DateTitleTypePlatformAuthor
2020-03-20"VMware Fusion 11.5.2 - Privilege Escalation"localmacos"Rich Mirch"
2020-03-17"VMWare Fusion - Local Privilege Escalation"localmacosGrimm
2019-12-18"macOS 10.14.6 (18G87) - Kernel Use-After-Free due to Race Condition in wait_for_namespace_event()"dosmacos"Google Security Research"
2019-11-22"macOS 10.14.6 - root->kernel Privilege Escalation via update_dyld_shared_cache"localmacos"Google Security Research"
2019-11-05"macOS XNU - Missing Locking in checkdirs_callback() Enables Race with fchdir_common()"dosmacos"Google Security Research"
2019-11-04"Apple macOS 10.15.1 - Denial of Service (PoC)"dosmacos08Tc3wBB
2019-10-09"XNU - Remote Double-Free via Data Race in IPComp Input Path"dosmacos"Google Security Research"
2019-09-19"macOS 18.7.0 Kernel - Local Privilege Escalation"localmacosA2nkF
2019-08-05"macOS iMessage - Heap Overflow when Deserializing"dosmacos"Google Security Research"
2019-07-02"Mac OS X TimeMachine - 'tmdiagnose' Command Injection Privilege Escalation (Metasploit)"localmacosMetasploit
2019-05-27"Typora 0.9.9.24.6 - Directory Traversal"remotemacos"Dhiraj Mishra"
2019-05-23"Apple Mac OS X - Feedback Assistant Race Condition (Metasploit)"localmacosMetasploit
2019-04-18"Evernote 7.9 - Code Execution via Path Traversal"localmacos"Dhiraj Mishra"
2019-03-01"macOS XNU - Copy-on-Write Behavior Bypass via Mount of User-Owned Filesystem Image"dosmacos"Google Security Research"
2019-02-20"FaceTime - Texture Processing Memory Corruption"dosmacos"Google Security Research"
2019-02-13"Apple macOS 10.13.5 - Local Privilege Escalation"localmacosSynacktiv
2019-01-31"macOS XNU - Copy-on-Write Behaviour Bypass via Partial-Page Truncation of File"dosmacos"Google Security Research"
2019-01-24"Microsoft Remote Desktop 10.2.4(134) - Denial of Service (PoC)"dosmacos"Saeed Hasanzadeh"
2018-12-14"Safari - Proxy Object Type Confusion (Metasploit)"remotemacosMetasploit
2018-11-29"Mac OS X - libxpc MITM Privilege Escalation (Metasploit)"localmacosMetasploit
2018-11-20"Apple macOS 10.13 - 'workq_kernreturn' Denial of Service (PoC)"dosmacos"Fabiano Anemone"
2018-11-14"SwitchVPN for macOS 2.1012.03 - Privilege Escalation"localmacos"Bernd Leitner"
2018-11-13"CuteFTP Mac 3.1 - Denial of Service (PoC)"dosmacos"Yair Rodríguez Aparicio"
2018-11-06"FaceTime - 'readSPSandGetDecoderParams' Stack Corruption"dosmacos"Google Security Research"
2018-11-06"FaceTime - 'VCPDecompressionDecodeFrame' Memory Corruption"dosmacos"Google Security Research"
2018-11-05"LiquidVPN 1.36 / 1.37 - Privilege Escalation"localmacos"Bernd Leitner"
2018-10-22"Apple Intel GPU Driver - Use-After-Free/Double-Delete due to bad Locking"dosmacos"Google Security Research"
2018-09-12"Apple macOS 10.13.4 - Denial of Service (PoC)"dosmacosSriram
2018-07-30"Charles Proxy 4.2 - Local Privilege Escalation"localmacos"Mark Wadham"
2018-06-06"Apple macOS Kernel - Use-After-Free Due to Lack of Locking in nvidia GeForce Driver"dosmacos"Google Security Research"
Release DateTitleTypePlatformAuthor
2020-03-17"VMWare Fusion - Local Privilege Escalation"localmacosGrimm
import requests
response = requests.get('https://www.nmmapper.com/api/exploitdetails/48232/?format=json')

For full documentation follow the link above

Cipherscan. A very simple way to find out which SSL ciphersuites are supported by a target.

Identify and fingerprint Web Application Firewall (WAF) products protecting a website.

Browse exploit APIBrowse