multiple

multiple 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

Wireshark – wtap_optionblock_free Use-After-Free

Source: https://code.google.com/p/google-security-research/issues/detail?id=739

2016-03-07 Google Security Research dos

Wireshark – print_hex_data_buffer / print_packet Use-After-Free

Source: https://code.google.com/p/google-security-research/issues/detail?id=651

2016-02-26 Google Security Research dos

Wireshark – vwr_read_s2_s3_W_rec Heap Buffer Overflow

Source: https://code.google.com/p/google-security-research/issues/detail?id=647

2016-02-24 Google Security Research dos

libquicktime 1.2.4 – Integer Overflow

#!/usr/bin/env python

2016-02-23 Marco Romano dos

Wireshark – dissect_ber_set Static Out-of-Bounds Read

Source: https://code.google.com/p/google-security-research/issues/detail?id=648

2016-02-22 Google Security Research dos

Wireshark – add_ff_vht_compressed_beamforming_report Static Out-of-Bounds Read

Source: https://code.google.com/p/google-security-research/issues/detail?id=654

2016-02-22 Google Security Research dos

Wireshark – dissect_oml_attrs Static Out-of-Bounds Read

Source: https://code.google.com/p/google-security-research/issues/detail?id=656

2016-02-22 Google Security Research dos

Adobe Flash – SimpleButton Creation Type Confusion

Source: https://code.google.com/p/google-security-research/issues/detail?id=640

2016-02-19 Google Security Research dos

Adobe Flash – BitmapData.drawWithQuality Heap Overflow

Source: https://code.google.com/p/google-security-research/issues/detail?id=609

2016-02-17 Google Security Research dos

Adobe Flash – H264 File Stack Corruption

Source: https://code.google.com/p/google-security-research/issues/detail?id=633

2016-02-17 Google Security Research dos

Adobe Flash – ATF Processing Heap Overflow

Source: https://code.google.com/p/google-security-research/issues/detail?id=635

2016-02-17 Google Security Research dos

Adobe Flash – H264 Parsing Out-of-Bounds Read

Source: https://code.google.com/p/google-security-research/issues/detail?id=632

2016-02-17 Google Security Research dos

Adobe Flash – LoadVars.decode Use-After-Free

Source: https://code.google.com/p/google-security-research/issues/detail?id=667

2016-02-17 Google Security Research dos

Adobe Flash – Sound.loadPCMFromByteArray Dangling Pointer

Source: https://code.google.com/p/google-security-research/issues/detail?id=698

2016-02-17 Google Security Research dos

Adobe Flash – textfield Constructor Type Confusion

Source: https://code.google.com/p/google-security-research/issues/detail?id=701

2016-02-17 Google Security Research dos

Adobe Flash – Out-of-Bounds Image Read

Source: https://code.google.com/p/google-security-research/issues/detail?id=630

2016-02-17 Google Security Research dos

JMX2 Email Tester – ‘save_email.php’ Arbitrary File Upload

# Exploit Title: JMX2 Email Tester - Web Shell Upload(save_email.php)

2016-02-17 HaHwul webapps

Inductive Automation Ignition 7.8.1 – Remote Leakage Of Shared Buffers

Inductive Automation Ignition 7.8.1 Remote Leakage Of Shared Buffers

2016-02-17 LiquidWorm remote

ManageEngine Network Configuration Management Build 11000 – Privilege Escalation

===================================================================================

2016-02-16 Kaustubh G. Padwad webapps

ManageEngine OPutils 8.0 – Multiple Vulnerabilities

===================================================================================

2016-02-16 Kaustubh G. Padwad webapps

Apache Sling Framework (Adobe AEM) 2.3.6 – Information Disclosure

Document Title:

2016-02-10 Vulnerability-Lab webapps

Adobe Flash – Processing AVC Causes Stack Corruption

Source: https://code.google.com/p/google-security-research/issues/detail?id=634

2016-02-08 Google Security Research dos

dotDefender Firewall 5.00.12865/5.13-13282 – Cross-Site Request Forgery

[+] Credits: hyp3rlinx

2016-02-08 hyp3rlinx webapps

pdfium – opj_t2_read_packet_header ‘libopenjpeg’ Heap Use-After-Free

Source: https://code.google.com/p/google-security-research/issues/detail?id=613

2016-02-02 Google Security Research dos

Manage Engine Network Configuration Manager Build 11000 – Cross-Site Request Forgery

=========================================================================================

2016-02-02 Kaustubh G. Padwad webapps

ManageEngine EventLog Analyzer 4.0 < 10 - Privilege Escalation

-----BEGIN PGP SIGNED MESSAGE-----

2016-02-01 GraphX webapps

SAP HANA 1.00.095 – hdbindexserver Memory Corruption

[ERPSCAN-15-024] SAP HANA hdbindexserver - Memory corruption

2016-01-28 ERPScan webapps

Apple Mac OSX / iOS – Double-Delete IOHIDEventQueue::start Code Execution

Source: https://code.google.com/p/google-security-research/issues/detail?id=542

2016-01-28 Google Security Research dos

Apple Mac OSX / iOS – NECP System Control Socket Packet Parsing Kernel Code Execution Integer Overflow

Source: https://code.google.com/p/google-security-research/issues/detail?id=543

2016-01-28 Google Security Research dos

Apple Mac OSX / iOS – Unsandboxable Kernel Use-After-Free in Mach Vouchers

Source: https://code.google.com/p/google-security-research/issues/detail?id=553

2016-01-28 Google Security Research dos

Apple Mac OSX / iOS Kernel – iokit Registry Iterator Manipulation Double-Free

Source: https://code.google.com/p/google-security-research/issues/detail?id=598

2016-01-28 Google Security Research dos

Apple Mac OSX / iOS Kernel – IOHDIXControllUserClient::clientClose Use-After-Free/Double-Free

Source: https://code.google.com/p/google-security-research/issues/detail?id=599

2016-01-28 Google Security Research dos

Apple Mac OSX / iOS – Multiple Kernel Uninitialized Variable Bugs Leading to Code Execution Vulnerabilities

Source: https://code.google.com/p/google-security-research/issues/detail?id=618

2016-01-28 Google Security Research dos

Wireshark – dissect_ber_constrained_bitstring Heap Out-of-Bounds Read

Source: https://code.google.com/p/google-security-research/issues/detail?id=659

2016-01-26 Google Security Research dos

Wireshark – ‘nettrace_3gpp_32_423_file_open’ Stack Out-of-Bounds Read

Source: https://code.google.com/p/google-security-research/issues/detail?id=694

2016-01-26 Google Security Research dos

Wireshark – hiqnet_display_data Static Out-of-Bounds Read

Source: https://code.google.com/p/google-security-research/issues/detail?id=695

2016-01-26 Google Security Research dos

Wireshark – dissect_nhdr_extopt Stack Buffer Overflow

Source: https://code.google.com/p/google-security-research/issues/detail?id=696

2016-01-26 Google Security Research dos

Wireshark – ‘iseries_check_file_type’ Stack Out-of-Bounds Read

Source: https://code.google.com/p/google-security-research/issues/detail?id=697

2016-01-26 Google Security Research dos

pdfium – opj_j2k_read_mcc ‘libopenjpeg’ Heap Out-of-Bounds Read

Source: https://code.google.com/p/google-security-research/issues/detail?id=624

2016-01-26 Google Security Research dos

pdfium – opj_jp2_apply_pclr ‘libopenjpeg’ Heap Out-of-Bounds Read

Source: https://code.google.com/p/google-security-research/issues/detail?id=626

2016-01-26 Google Security Research dos

Manage Engine Application Manager 12.5 – Arbitrary Command Execution

#!C:/Python27/python.exe -u

2016-01-14 Bikramaditya Guha webapps

Manage Engine Applications Manager 12 – Multiple Vulnerabilities

Manage Engine Applications Manager 12 Multiple Vulnerabilities

2016-01-14 Bikramaditya Guha webapps

SedSystems D3 Decimator – Multiple Vulnerabilities

SedSystems D3 Decimator Multiple Vulnerabilities

2016-01-11 prdelka webapps

Adobe Flash BlurFilter Processing – Out-of-Bounds Memset

Source: https://code.google.com/p/google-security-research/issues/detail?id=627

2016-01-11 Google Security Research dos

Ganeti – Multiple Vulnerabilities

=begin

2016-01-05 Pierre Kim dos

pdfium – CPDF_Function::Call Stack Buffer Overflow

Source: https://code.google.com/p/google-security-research/issues/detail?id=612

2016-01-04 Google Security Research dos

pdfium IsFlagSet (v8 memory management) – SIGSEGV

Source: https://code.google.com/p/google-security-research/issues/detail?id=622

2016-01-04 Google Security Research dos

pdfium – CPDF_TextObject::CalcPositionData Heap Out-of-Bounds Read

Source: https://code.google.com/p/google-security-research/issues/detail?id=623

2016-01-04 Google Security Research dos

pdfium – CPDF_DIBSource::DownSampleScanline32Bit Heap Out-of-Bounds Read

Source: https://code.google.com/p/google-security-research/issues/detail?id=625

2016-01-04 Google Security Research dos

PHP 7.0.0 – Format String

Overview

2015-12-23 Andrew Kramer dos