Chrome V8 JIT – Simplified-lowererer IrOpcode::kStoreField, IrOpcode::kStoreElement Optimization Bug
I think this commit has introduced the bugs: https://chromium.googlesource.com/v8/v8/+/c22ca7f73ba92f22d0cd29b06bb294...
Exploits
Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
- 类型
- 漏洞条目
- 总量
- 24,950
- 页码
- 153
Chrome V8 JIT – JSBuiltinReducer::ReduceObjectCreate Fails to Ensure that the Prototype is “null”
I think this commit has introduced the bug.
Chrome V8 JIT – Empty BytecodeJumpTable Out-of-Bounds Read
In the current implementation, the bytecode generator also emits empty jump tables.
Xion 1.0.125 – ‘.m3u’ Local SEH-Based Unicode Venetian Exploit
#!/usr/bin/perl
Dup Scout Enterprise 10.5.12 – ‘Share Username’ Local Buffer Overflow
#!/usr/bin/python
Sophos UTM 9.410 – ‘loginuser’ ‘confd’ Service Privilege Escalation
KL-001-2018-007 : Sophos UTM 9 loginuser Privilege Escalation via confd Service
Suricata < 4.0.4 - IDS Detection Bypass
-----------------------------------------------------
ClipBucket < 4.0.0 - Release 4902 - Command Injection / File Upload / SQL Injection
SEC Consult Vulnerability Lab Security Advisory < 20180227-0 >
ActivePDF Toolkit < 8.1.0.19023 - Multiple Memory Corruptions
ActivePDF Toolkit < 8.1.0 multiple RCE
Memcached 1.5.5 – ‘Memcrashed’ Insufficient Control Network Message Volume Denial of Service (2)
# Written by Alex Conrey
IrfanView 4.44 Email Plugin – Buffer Overflow (SEH)
#!/usr/bin/python
IrfanView 4.50 Email Plugin – Buffer Overflow (SEH Unicode)
#!/usr/bin/python
D-Link DIR-600M Wireless – Cross-Site Scripting
########################################################################
antMan < 0.9.1a - Authentication Bypass
# Exploit Title: antMan
SEGGER embOS/IP FTP Server 3.22 – Denial of Service
[+] Credits: John Page (aka hyp3rlinx)
DualDesk 20 – ‘Proxy.exe’ Denial of Service
[+] Credits: John Page (aka hyp3rlinx)
uWSGI < 2.0.17 - Directory Traversal
# Exploit Title: uWSGI PHP Plugin Directory Traversal
TestLink Open Source Test Management < 1.9.16 - Remote Code Execution
# Title: TestLink Open Source Test Management( comment out skip-networking as well as bind-address (if any present i...
Routers2 2.24 – Cross-Site Scripting
# Exploit Title: Routers2 2.24 - Reflected Cross-Site Scripting
Transmission – Integer Overflows Parsing Torrent Files
I took a look at torrent file parsing in libtransmission, there are a few integer overflows because the tr_new/tr_new...
Chrome V8 – ‘PropertyArray’ Integer Overflow
Here's a snippet of the MigrateFastToFast function which is used to create a new PropertyArray object.
Chrome V8 – ‘TranslatedState::MaterializeCapturedObjectAt’ Type Confusion
Here'a snippet of TranslatedState::MaterializeCapturedObjectAt.
MyBB My Arcade Plugin 1.3 – Cross-Site Scripting
# Exploit Title: MyBB My Arcade Plugin v1.3 - Persistent XSS
GetGo Download Manager 5.3.0.2712 – Buffer Overflow (SEH)
#!/usr/bin/python
Microsoft Windows 8.1/2012 R2 – SMBv3 Null Pointer Dereference Denial of Service
# Exploit Title: Microsoft Windows SMB Client Null Pointer Dereference Denial of Service
netek 0.8.2 – Denial of Service
#Exploit Title : netek 0.8.2 FTP Denial of Service
School Management Script 3.0.4 – Authentication Bypass
# Exploit Title: SQL Injection exists in PHP Scripts Mall School Management Script 3.0.4.
CMS Made Simple 2.1.6 – Remote Code Execution
# Exploit Title: CMS Made Simple 2.1.6 - Remote Code Execution
Concrete5 CMS < 8.3.0 - Username / Comments Enumeration
#!/usr/bin/env python3
Sony Playstation 4 (PS4) 4.55 – ‘Jailbreak’ ‘setAttributeNodeNS’ WebKit 5.02 / ‘bpf’ Kernel Loader 4.55
# PS4 4.55 Kernel Exploit
Sony Playstation 4 (PS4) 5.01 < 5.05 - WebKit Code Execution (PoC)
PS4 5.01 WebKit Exploit PoC
Papenmeier WiFi Baby Monitor Free & Lite < 2.02.2 - Remote Audio Record
Whilst analysing a number of free communication based applications on the Google Play Store, I took a look at WiFi Ba...