GraphicsMagick – Memory Disclosure / Heap Overflow
'''Vulnerabilities summary
multiple
multiple 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
Mozilla Firefox < 55 - Denial of Service
# Exploit Title: Mozilla Firefox < 55 - Forcibly make someone view a web content
OpenText Documentum Content Server – Arbitrary File Download
#!/usr/bin/env python
OpenText Documentum Content Server – ‘dmr_content’ Privilege Escalation
#!/usr/bin/env python
OpenText Documentum Content Server – Arbitrary File Download Privilege Escalation
#!/usr/bin/env python
OpenText Documentum Content Server – Privilege Escalation
#!/usr/bin/env python
Logitech Media Server – Cross-Site Scripting
# Exploit Title: DOM Based Cross Site Scripting (XSS) - Logitech Media Server
Webkit (Chome < 61) - 'MHTML' Universal Cross-site Scripting
MIME-Version: 1.0
LAquis SCADA 4.1.0.2385 – Directory Traversal (Metasploit)
require 'msf/core'
Adobe Flash – Out-of-Bounds Read in applyToRange
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1323
Adobe Flash – Out-of-Bounds Write in MP4 Edge Processing
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1322
Adobe Flash – Out-of-Bounds Memory Read in MP4 Parsing
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1321
WebKit JSC – ‘BytecodeGenerator::emitGetByVal’ Incorrect Optimization (1)
Let's start with JS code.
CodeMeter 6.50 – Cross-Site Scripting
Document Title:
IBM Notes 8.5.x/9.0.x – Denial of Service
# Exploit Title: IBM Notes is affected by a denial of service vulnerability
IBM Notes 8.5.x/9.0.x – Denial of Service (2)
# Exploit Title: IBM Notes is affected by a denial of service vulnerability
Symantec Messaging Gateway < 10.6.3-267 - Cross-Site Request Forgery
# Exploit Title: CSRF
Apple macOS/iOS – ‘xpc_data’ Objects Sandbox Escape Privilege Escalation
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1247
WebKit JSC – ‘ObjectPatternNode::appendEntry’ Stack Use-After-Free
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1256
WebKit JSC – ‘ArgumentsEliminationPhase::transform’ Incorrect LoadVarargs Handling
const kArgsLength = 0x101;
WebKit JSC – ‘JSArray::appendMemcpy’ Uninitialized Memory Copy
function optNewArrayAndConcat() {
Apache Struts 2.3.x Showcase – Remote Code Execution
#!/usr/bin/python
Yaws 1.91 – Remote File Disclosure
[+] Credits: John Page aka hyp3rlinx
Zookeeper 3.5.2 Client – Denial of Service
#!/usr/bin/python