multiple

multiple 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

Emby MediaServer 3.2.5 – Password Reset

Emby MediaServer 3.2.5 Password Reset Vulnerability

2017-04-30 LiquidWorm webapps

Emby MediaServer 3.2.5 – SQL Injection

Emby MediaServer 3.2.5 Boolean-based Blind SQL Injection Vulnerability

2017-04-30 LiquidWorm webapps

Oracle VirtualBox Guest Additions 5.1.18 – Unprivileged Windows User-Mode Guest Code Double-Free

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1227

2017-04-25 Google Security Research dos

Apple Safari – Array concat Memory Corruption

2017-04-25 Google Security Research dos

HPE OpenCall Media Platform (OCMP) 4.3.2 – Cross-Site Scripting / Remote File Inclusion

Source: https://blogs.securiteam.com/index.php/archives/3087

2017-04-25 Paolo Stagno webapps

OpenText Documentum Content Server – dm_bp_transition.ebs docbase Method Arbitrary Code Execution

'''

2017-04-25 Andrey B. Panfilov webapps

Oracle VM VirtualBox – ‘virtio-net’ Guest-to-Host Out-of-Bounds Write

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1136

2017-04-20 Google Security Research dos

Oracle VM VirtualBox – Environment and ioctl Unprivileged Host User to Host Kernel Privilege Escalation

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1091

2017-04-20 Google Security Research dos

Oracle VM VirtualBox – Guest-to-Host Privilege Escalation via Broken Length Handling in slirp Copy

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1086

2017-04-20 Google Security Research local

Apple WebKit / Safari 10.0.2(12602.3.12.0.1) – ‘operationSpreadGeneric’ Universal Cross-Site Scripting

2017-04-20 Google Security Research webapps

Apple WebKit / Safari 10.0.2(12602.3.12.0.1) – ‘PrototypeMap::createEmptyStructure’ Universal Cross-Site Scripting

2017-04-20 Google Security Research webapps

Mozilla Firefox – Address Bar Spoofing

2017-04-14 649 local

agorum core Pro 7.8.1.4-251 – Persistent Cross-Site Scripting

2017-04-13 SySS GmbH webapps

agorum core Pro 7.8.1.4-251 – Cross-Site Request Forgery

2017-04-13 SySS GmbH webapps

Xen – Broken Check in ‘memory_exchange()’ Permits PV Guest Breakout

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1184

2017-04-11 Google Security Research local

Apple WebKit – ‘JSC::SymbolTableEntry::isWatchable’ Heap Buffer Overflow

(function (x = 0) {

2017-04-11 Google Security Research dos

Apple WebKit – ‘Document::adoptNode’ Use-After-Free

2017-04-11 Google Security Research dos

Apple WebKit – ‘JSC::B3::Procedure::resetReachability’ Use-After-Free

(function () {

2017-04-11 Google Security Research dos

Apple WebKit / Safari 10.0.3 (12602.4.8) – Universal Cross-Site Scripting via a Focus Event and a Link Element

2017-04-11 Google Security Research webapps

Apple WebKit / Safari 10.0.3 (12602.4.8) – Synchronous Page Load Universal Cross-Site Scripting

click anywhere

2017-04-11 Google Security Research webapps

Apple WebKit – ‘WebCore::toJS’ Use-After-Free

2017-04-04 Google Security Research dos

Apple WebKit – ‘table’ Use-After-Free

foo

2017-04-04 Google Security Research dos

Apple WebKit – ‘ComposedTreeIterator::traverseNextInShadowTree’ Use-After-Free

foo

2017-04-04 Google Security Research dos

Apple WebKit – ‘FormSubmission::create’ Use-After-Free

a

2017-04-04 Google Security Research dos

Apple WebKit – Negative-Size memmove in HTMLFormElement

aaaaaaaa

2017-04-04 Google Security Research dos

Apple WebKit – ‘RenderLayer’ Use-After-Free

2017-04-04 Google Security Research dos

Apple WebKit 10.0.2 – HTMLInputElement Use-After-Free

2017-04-04 Google Security Research dos

Apple macOS/iOS Kernel 10.12.3 (16D32) – Double-Free Due to Bad Locking in fsevents Device

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1129

2017-04-04 Google Security Research local

Apple WebKit 10.0.2 (12602.3.12.0.1, r210800) – ‘constructJSReadableStreamDefaultReader’ Type Confusion

let rs = new ReadableStream();

2017-04-04 Google Security Research webapps

Apple WebKit 10.0.2 (12602.3.12.0.1) – ‘disconnectSubframes’ Universal Cross-Site Scripting

var d = document.body.appendChild(document.createElement("div"));

2017-04-04 Google Security Research webapps

Apple Webkit – Universal Cross-Site Scripting by Accessing a Named Property from an Unloaded Window

"use strict";

2017-04-04 Google Security Research webapps

Apple Webkit – ‘JSCallbackData’ Universal Cross-Site Scripting

"use strict";

2017-04-04 Google Security Research webapps

Apple WebKit 10.0.2(12602.3.12.0.1) – ‘Frame::setDocument (1)’ Universal Cross-Site Scripting

"use strict";

2017-04-04 Google Security Research webapps

Apple macOS/iOS Kernel 10.12.3 (16D32) – ‘bpf’ Heap Overflow

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1125

2017-04-04 Google Security Research dos

Apple macOS/iOS Kernel 10.12.3 (16D32) – Bad Locking in necp_open Use-After-Free

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1116

2017-04-04 Google Security Research dos

Apple macOS/iOS Kernel 10.12.3 (16D32) – SIOCGIFORDER Socket ioctl Off-by-One Memory Corruption

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1111

2017-04-04 Google Security Research dos

Apple macOS/iOS Kernel 10.12.3 (16D32) – SIOCSIFORDER Socket ioctl Memory Corruption Due to Bad Bounds Checking

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1108

2017-04-04 Google Security Research dos

Apache Tomcat 6/7/8/9 – Information Disclosure

# Exploit Title:Apache Tomcat CVE-2016-6816 Security Bypass Vulnerability

2017-04-04 justpentest remote

Splunk Enterprise – Information Disclosure

[+] Credits: John Page AKA hyp3rlinx

2017-03-31 hyp3rlinx webapps

Apple macOS/IOS 10.12.2 (16C67) – ‘mach_msg’ Heap Overflow

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1083

2017-03-30 Google Security Research dos

Apple Safari – Out-of-Bounds Read when Calling Bound Function

2017-03-27 Google Security Research dos

Apple Safari – Builtin JavaScript Allows Function.caller to be Used in Strict Mode

2017-03-27 Google Security Research dos

Apple Safari – ‘DateTimeFormat.format’ Type Confusion

2017-03-27 Google Security Research dos

Samba 4.5.2 – Symlink Race Permits Opening Files Outside Share Directory

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1039

2017-03-27 Google Security Research remote

Mozilla Firefox – ‘table’ Use-After-Free

u~Z1Cqn`aA}SOkre=]{

2017-03-20 Google Security Research dos

Oracle Knowledge Management 12.1.1 < 12.2.5 - XML External Entity Leading To Remote Code Execution

# SSD Advisory – Oracle Knowledge Management XXE Leading to a RCE

2017-03-17 SecuriTeam webapps

GitHub Enterprise < 2.8.7 - Remote Code Execution

#!/usr/bin/python

2017-03-15 orange webapps

Apache Struts 2.3.5 < 2.3.31 / 2.5 < 2.5.10 - 'Jakarta' Multipart Parser OGNL Injection (Metasploit)

##

2017-03-15 Metasploit remote

Adobe Flash – AVC Header Slicing Heap Overflow

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1017

2017-03-15 Google Security Research dos

Adobe Flash – ATF Planar Decompression Heap Overflow

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1016

2017-03-15 Google Security Research dos