multiple

multiple 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

Adobe Flash – ATF Thumbnailing Heap Overflow

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1015

2017-03-15 Google Security Research dos

Adobe Flash – MovieClip Attach init Object Use-After-Free

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1006

2017-03-15 Google Security Research dos

Adobe Flash – Metadata Parsing Out-of-Bounds Read

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1005

2017-03-15 Google Security Research dos

APNGDis 2.8 – ‘filename’ Stack Buffer Overflow (PoC)

# Exploit Title: APNGDis filename Buffer Overflow

2017-03-14 Alwin Peppels dos

APNGDis 2.8 – ‘image width / height chunk’ Heap Buffer Overflow

# Exploit Title: APNGDis image width / height Buffer Overflow

2017-03-14 Alwin Peppels dos

APNGDis 2.8 – ‘chunk size descriptor’ Heap Buffer Overflow

# Exploit Title: APNGDis chunk size descriptor Buffer Overflow

2017-03-14 Alwin Peppels dos

Navetti PricePoint 4.6.0.0 – SQL Injection / Cross-Site Scripting / Cross-Site Request Forgery

2017-03-08 SEC Consult webapps

MDwiki < 0.6.2 - Cross-Site Scripting

Originally thought that only a problem with Tencent's site implementation, the black brother reminded me to look at t...

2017-03-02 evi1m0 webapps

Apple WebKit 10.0.2 – ‘Frame::setDocument’ Universal Cross-Site Scripting

"use strict";

2017-02-24 Google Security Research webapps

Apple WebKit 10.0.2 – Cross-Origin or Sandboxed IFRAME Pop-up Blocker Bypass

2017-02-24 Google Security Research webapps

Fibaro Home Center 2 – Remote Command Execution / Privilege Escalation

#!/usr/bin/python

2017-02-22 forsec webapps

Google Chrome – ‘layout’ Out-of-Bounds Read

aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa

2017-02-22 Google Security Research dos

Adobe Flash – YUVPlane Decoding Heap Overflow

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1008

2017-02-21 Google Security Research dos

Adobe Flash – Use-After-Free in Applying Bitmap Filter

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1007

2017-02-21 Google Security Research dos

Adobe Flash – SWF Stack Corruption

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1013

2017-02-21 Google Security Research dos

Adobe Flash – MP4 AMF Parsing Overflow

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1018

2017-02-21 Google Security Research dos

HP Smart Storage Administrator 2.30.6.0 – Remote Command Injection (Metasploit)

##

2017-02-10 MaKyOtOx remote

Apple WebKit – Type Confusion in RenderBox with Accessibility Enabled

foo

2017-02-01 Google Security Research dos

Apple WebKit – ‘HTMLKeygenElement’ Type Confusion

2017-02-01 Google Security Research dos

Google Chrome – ‘HTMLKeygenElement::shadowSelect()’ Type Confusion

2017-02-01 Google Security Research dos

OpenSSL 1.1.0 – Remote Client Denial of Service

// Source: https://guidovranken.wordpress.com/2017/01/26/cve-2017-3730-openssl-1-1-0-remote-client-denial-of-service-...

2017-01-26 Guido Vranken dos

Apple macOS 10.12.1 / iOS Kernel – ‘host_self_trap’ Use-After-Free

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1034

2017-01-26 Google Security Research dos

Apple macOS 10.12.1 / iOS Kernel – ‘IOService::matchPassive’ Use-After-Free

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=973

2017-01-26 Google Security Research dos

Apple macOS 10.12.1 / iOS 10.2 – Kernel Userspace Pointer Memory Corruption

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1004

2017-01-26 Google Security Research dos

Oracle OpenJDK Runtime Environment 1.8.0_112-b15 – Java Serialization Denial Of Service

'''

2017-01-23 ERPScan dos

Trend Micro InterScan Messaging Security (Virtual Appliance) < 9.1.-1600 - Remote Code Execution (Metasploit)

##

2017-01-15 Mehmet Ince webapps

Adobe Flash Player – Integer Overflow

// Exploit Title: Adobe Flash Player - Integer Overflow

2017-01-14 ryujin remote

Adobe Flash Player 24.0.0.186 – ‘ActionGetURL2’ Out-of-Bounds Memory Corruption (2)

Source: https://cosig.gouv.qc.ca/en/cosig-2017-01-en/

2017-01-11 COSIG dos

Adobe Flash Player 24.0.0.186 – ‘ActionGetURL2’ Out-of-Bounds Memory Corruption (1)

Source: https://cosig.gouv.qc.ca/en/cosig-2017-01-en/

2017-01-11 COSIG dos

Cemu 1.6.4b – Information Leak / Buffer Overflow (Emulator Breakout)

For those who only care about one thing: [the PoC is here.](https://rol.im/kpwned.zip)

2017-01-09 Wack0 local

Brave Browser 1.2.16/1.9.56 – Address Bar URL Spoofing

Brave Browser Suffers from Address Bar Spoofing Vulnerability. Address Bar

2017-01-08 Aaditya Purani dos

PHPMailer < 5.2.19 - Sendmail Argument Injection (Metasploit)

##

2016-12-26 Metasploit webapps

Apache mod_session_crypto – Padding Oracle

'''

2016-12-23 RedTeam Pentesting GmbH webapps

Apple macOS 10.12.1 / iOS < 10.2 - syslogd Arbitrary Port Replacement

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=977

2016-12-22 Google Security Research dos

Apple macOS 10.12.1 / iOS < 10.2 - powerd Arbitrary Port Replacement

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=976

2016-12-22 Google Security Research dos

Apple macOS < 10.12.2 / iOS < 10.2 Kernel - ipc_port_t Reference Count Leak Due to Incorrect externalMethod Overrides Use-After-Free

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=926

2016-12-22 Google Security Research dos

Google Chrome < 31.0.1650.48 - HTTP 1xx base::StringTokenizerT<...>::QuickGetNext Out-of-Bounds Read

'''

2016-12-19 Skylined dos

Apple macOS 10.12 16A323 XNU Kernel / iOS 10.1.1 – ‘set_dp_control_port’ Lack of Locking Use-After-Free

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=965

2016-12-16 Google Security Research local

Splunk Enterprise 6.4.3 – Server-Side Request Forgery

'''

2016-12-09 Security-Assessment.com webapps

GNU Wget < 1.18 - Access List Bypass / Race Condition

'''

2016-11-24 Dawid Golunski remote

D-Link DIR-Series Routers – HNAP Login Stack Buffer Overflow (Metasploit)

##

2016-11-21 Metasploit remote

Citrix Receiver/Receiver Desktop Lock 4.5 – Authentication Bypass

# thel3l

2016-11-02 Rithwik Jayasimha local

Apple OS X/iOS – ‘mach_ports_register’ Multiple Memory Safety s

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=882

2016-10-31 Google Security Research dos

Oracle Netbeans IDE 8.1 – Directory Traversal

[+] Credits: John Page aka hyp3rlinx

2016-10-20 hyp3rlinx local

Ruby on Rails – Dynamic Render File Upload / Remote Code Execution (Metasploit)

require 'msf/core'

2016-10-17 Metasploit remote

Adobe Flash Player 23.0.0.162 – ‘.SWF’ ConstantPool Critical Memory Corruption

#####################################################################################

2016-10-12 COSIG dos

HP Client 9.1/9.0/8.1/7.9 – Command Injection

# Exploit Title: [HP Client - Automation Command Injection]

2016-10-10 SlidingWindow remote

ISC BIND 9 – Denial of Service

import socket

2016-10-04 Infobyte dos

KeepNote 0.7.8 – Command Execution

# Title : KeepNote 0.7.8 Remote Command Execution

2016-09-29 R-73eN local

Adobe Flash – Crash When Freeing Memory After AVC decoding

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=859

2016-09-23 Google Security Research dos