multiple

multiple 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

Microsoft Word (Windows/OSX) – Crash (PoC)

Source: https://twitter.com/halsten/status/740380171694280704

2016-06-09 halsten dos

Websockify (C Implementation) 0.8.0 – Buffer Overflow (PoC)

Advisory: Websockify: Remote Code Execution via Buffer Overflow

2016-06-02 RedTeam Pentesting GmbH dos

Wireshark – erf_meta_read_tag SIGSEGV

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=803

2016-06-01 Google Security Research dos

MySQL 5.5.45 – procedure analyse Function Denial of Service

#!/usr/bin/env python

2016-05-30 Osanda Malith Jayathissa dos

Graphite2 – NameTable::getName Multiple Heap Out-of-Bounds Reads

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=756

2016-05-26 Google Security Research dos

Graphite2 – TtfUtil::CmapSubtable4NextCodepoint Heap Overread

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=755

2016-05-26 Google Security Research dos

Graphite2 – TtfUtil::CheckCmapSubtable12 Heap Overread

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=752

2016-05-26 Google Security Research dos

Graphite2 – GlyphCache::Loader Heap Overreads

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=751

2016-05-26 Google Security Research dos

Graphite2 – GlyphCache::GlyphCache Heap Buffer Overflow

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=749

2016-05-26 Google Security Research dos

Dell SonicWALL Scrutinizer 11.01 – methodDetail SQL Injection (Metasploit)

##

2016-05-17 Metasploit remote

Symantec/Norton AntiVirus – ASPack Remote Heap/Pool Memory Corruption

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=820

2016-05-17 Google Security Research dos

Microsoft Windows – ‘gdi32.dll’ Heap Buffer Overflow in ExtEscape() Triggerable via EMR_EXTESCAPE EMF Record (MS16-055)

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=731

2016-05-17 Google Security Research dos

Adobe Flash – SetNative Use-After-Free

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=800

2016-05-17 Google Security Research dos

Adobe Flash – addProperty Use-After-Free

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=801

2016-05-17 Google Security Research dos

Adobe Flash – Type Confusion in FileReference Constructor

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=799

2016-05-17 Google Security Research dos

Adobe Flash – ‘.MP4’ Stack Corruption

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=760

2016-05-17 Google Security Research dos

Adobe Flash – Heap Overflow in ATF Processing Image Reading

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=789

2016-05-17 Google Security Research dos

Adobe Flash – Overflow in Processing Raw 565 Textures

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=792

2016-05-17 Google Security Research dos

Adobe Flash – Out-of-Bounds Read when Placing Object

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=794

2016-05-17 Google Security Research dos

Adobe Flash – JXR Processing Out-of-Bounds Read

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=791

2016-05-17 Google Security Research dos

Meteocontrol WEB’log – Admin Password Disclosure (Metasploit)

# Exploit Title: [Meteocontrol WEB'log - Extract Admin password]

2016-05-17 Karn Ganeshen webapps

Wireshark – ‘AirPDcapDecryptWPABroadcastKey’ Heap Out-of-Bounds Read (2)

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=740

2016-05-13 Google Security Research dos

Adobe Reader DC 15.010.20060 – Memory Corruption

########################################################################################

2016-05-10 Pier-Luc Maltais dos

ImageMagick 6.9.3-9 / 7.0.1-0 – ‘ImageTragick’ Delegate Arbitrary Command Execution (Metasploit)

##

2016-05-09 Metasploit local

WordPress Plugin Ninja Forms 2.9.36 < 2.9.42 - File Upload (Metasploit)

##

2016-05-04 Metasploit webapps

OpenSSL – Padding Oracle in AES-NI CBC MAC Check

Source: http://web-in-security.blogspot.ca/2016/05/curious-padding-oracle-in-openssl-cve.html

2016-05-04 Juraj Somorovsky dos

ImageMagick 7.0.1-0 / 6.9.3-9 – ‘ImageTragick ‘ Multiple Vulnerabilities

Nikolay Ermishkin from the Mail.Ru Security Team discovered several

2016-05-04 Nikolay Ermishkin dos

Wireshark – ett_zbee_zcl_pwr_prof_enphases Static Out-of-Bounds Read

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=806

2016-04-29 Google Security Research dos

Wireshark – alloc_address_wmem Assertion Failure

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=804

2016-04-29 Google Security Research dos

Wireshark – dissect_2008_16_security_4 Stack Buffer Overflow

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=802

2016-04-29 Google Security Research dos

EMC ViPR SRM – Cross-Site Request Forgery

2016-04-27 Han Sahin webapps

Novell ServiceDesk – (Authenticated) Arbitrary File Upload (Metasploit)

##

2016-04-18 Metasploit remote

Hexchat IRC Client 2.11.0 – CAP LS Handling Buffer Overflow

#!/usr/bin/python

2016-04-04 PizzaHatHacker dos

Hexchat IRC Client 2.11.0 – Directory Traversal

#!/usr/bin/python

2016-04-04 PizzaHatHacker local

Adobe Flash – Color.setTransform Use-After-Free

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=451

2016-04-01 Google Security Research dos

Adobe Flash – textfield.maxChars Use-After-Free

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=581

2016-04-01 Google Security Research dos

Adobe Flash – URLStream.readObject Use-After-Free

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=611

2016-04-01 Google Security Research dos

PHP 5.5.33/7.0.4 – SNMP Format String

2016-04-01 Andrew Kramer remote

Wireshark – dissect_pktc_rekey Heap Out-of-Bounds Read

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=754

2016-03-31 Google Security Research dos

Apple QuickTime < 7.7.79.80.95 - '.PSD' Parsing Memory Corruption

#####################################################################################

2016-03-30 Francis Provencher dos

Apple QuickTime < 7.7.79.80.95 - '.FPX' Parsing Memory Corruption (2)

#####################################################################################

2016-03-30 Francis Provencher dos

Apple QuickTime < 7.7.79.80.95 - '.FPX' Parsing Memory Corruption (1)

#####################################################################################

2016-03-30 Francis Provencher dos

Adobe Flash – Object.unwatch Use-After-Free

Sources:

2016-03-29 Google Security Research remote

Liferay Portal 5.1.2 – Persistent Cross-Site Scripting

#Exploit Title: Liferay Portal 5.1.2 - Persistent XSS

2016-03-28 Sarim Kiani webapps

Wireshark – dissect_ber_integer Static Out-of-Bounds Write

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=750

2016-03-23 Google Security Research dos

MiCollab 7.0 – SQL Injection

================

2016-03-23 Goran Tuzovic webapps

Apple Mac OSX / iOS – SUID Binary Logic Error Kernel Code Execution

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=676

2016-03-23 Google Security Research local

OpenSSH 7.2p1 – (Authenticated) xauth Command Injection

'''

2016-03-16 tintinweb remote

Putty pscp 0.66 – Stack Buffer Overwrite

Source: https://github.com/tintinweb/pub/tree/master/pocs/cve-2016-2563

2016-03-10 tintinweb dos

libotr 4.1.0 – Memory Corruption

'''

2016-03-10 X41 D-Sec GmbH dos