Wireshark – ‘AirPDcapDecryptWPABroadcastKey’ Heap Out-of-Bounds Read (1)
Source: https://code.google.com/p/google-security-research/issues/detail?id=657
multiple
multiple 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
Wireshark – ‘infer_pkt_encap’ Heap Out-of-Bounds Read
Source: https://code.google.com/p/google-security-research/issues/detail?id=658
Google Chrome – Renderer Process to Browser Process Privilege Escalation
Source: https://code.google.com/p/google-security-research/issues/detail?id=664
Wireshark – getRate Stack Out-of-Bounds Read
Source: https://code.google.com/p/google-security-research/issues/detail?id=641
Wireshark – AirPDcapPacketProcess Stack Buffer Overflow
Source: https://code.google.com/p/google-security-research/issues/detail?id=642
Wireshark – find_signature Stack Out-of-Bounds Read
Source: https://code.google.com/p/google-security-research/issues/detail?id=643
Wireshark – dissect_diameter_base_framed_ipv6_prefix Stack Buffer Overflow
Source: https://code.google.com/p/google-security-research/issues/detail?id=644
Wireshark – addresses_equal ‘dissect_rsvp_common’ Use-After-Free
Source: https://code.google.com/p/google-security-research/issues/detail?id=645
Wireshark – ascend_seek Static Out-of-Bounds Read
Source: https://code.google.com/p/google-security-research/issues/detail?id=646
Wireshark – my_dgt_tbcd_unpack Static Buffer Overflow
Source: https://code.google.com/p/google-security-research/issues/detail?id=649
Wireshark – dissect_nbap_MACdPDU_Size SIGSEGV
Source: https://code.google.com/p/google-security-research/issues/detail?id=652
Wireshark – memcpy ‘get_value / dissect_btatt’ SIGSEGV
Source: https://code.google.com/p/google-security-research/issues/detail?id=653
Wireshark – file_read ‘wtap_read_bytes_or_eof/mp2t_find_next_pcr’ Stack Buffer Overflow
Source: https://code.google.com/p/google-security-research/issues/detail?id=655
Wireshark – dissct_rsl_ipaccess_msg Static Out-of-Bounds Read
Source: https://code.google.com/p/google-security-research/issues/detail?id=660
Wireshark – dissect_zcl_pwr_prof_pwrprofstatersp Static Out-of-Bounds Read
Source: https://code.google.com/p/google-security-research/issues/detail?id=661
Wireshark – wmem_alloc Assertion Failure
Source: https://code.google.com/p/google-security-research/issues/detail?id=662
Wireshark – dissect_tds7_colmetadata_token Stack Buffer Overflow
Source: https://code.google.com/p/google-security-research/issues/detail?id=663
Wireshark – iseries_parse_packet Heap Buffer Overflow
Source: https://code.google.com/p/google-security-research/issues/detail?id=650
Adobe Flash – Type Confusion in Serialization with ObjectEncoder.dynamicPropertyWriter
Source: https://code.google.com/p/google-security-research/issues/detail?id=545
Adobe Flash – Type Confusion in IExternalizable.readExternal When Performing Local Serialization
Source: https://code.google.com/p/google-security-research/issues/detail?id=548
Avast! – Heap Overflow Unpacking MoleBox Archives
Source: https://code.google.com/p/google-security-research/issues/detail?id=552
Avast! – JetDb::Ised4x Performs Unbounded Search on Input
Source: https://code.google.com/p/google-security-research/issues/detail?id=551
Avast! – Out-of-Bounds Write Decrypting PEncrypt Packed executables
Source: https://code.google.com/p/google-security-research/issues/detail?id=554
Rar – CmdExtract::UnstoreFile Integer Truncation Memory Corruption
Source: https://code.google.com/p/google-security-research/issues/detail?id=550
ntop-ng 2.0.151021 – Privilege Escalation
# Vulnerability title: ntop-ng
abrt (Centos 7.1 / Fedora 22) – Local Privilege Escalation
#!/usr/bin/python
SAP Sybase Adaptive Server Enterprise – XML External Entity Information Disclosure
source: https://www.securityfocus.com/bid/63193/info
VideoLAN VLC Media Player Web Interface 2.2.1 – Metadata Title Cross-Site Scripting
##################################
FreeType 2.6.1 – TrueType tt_sbit_decoder_load_bit_aligned Heap Out-of-Bounds Read
Source: https://code.google.com/p/google-security-research/issues/detail?id=614
JSSE – SKIP-TLS
#!/usr/bin/env ruby
OpenSSL – Alternative Chains Certificate Forgery
#!/usr/bin/env ruby
Python 2.7 – ‘array.fromstring’ Method Use-After-Free
Title: Python 2.7 array.fromstring Use After Free
Adobe Flash – ‘IExternalizable.writeExternal’ Type Confusion
Source: https://code.google.com/p/google-security-research/issues/detail?id=547
Linux/MIPS Kernel 2.6.36 – ‘NetUSB’ Remote Code Execution
#!/usr/bin/env python
libsndfile 1.0.25 – Local Heap Overflow
#!/usr/bin/env perl
Kallithea 0.2.9 – ‘came_from’ HTTP Response Splitting
Kallithea 0.2.9 (came_from) HTTP Response Splitting Vulnerability
ManageEngine OpManager 11.5 – Multiple Vulnerabilities
Exploit Title: ManageEngine OpManager multiple vulnerabilities
ManageEngine EventLog Analyzer < 10.6 build 10060 - SQL Execution
Exploit Title: ManageEngine EventLog Analyzer SQL query execution
Oracle GlassFish Server 4.1 – Directory Traversal
Trustwave SpiderLabs Security Advisory TWSL2015-016:
QEMU – Programmable Interrupt Timer Controller Heap Overflow
Source: https://code.google.com/p/google-security-research/issues/detail?id=419#c4
Adobe Flash – Overflow in ID3 Tag Parsing
Source: https://code.google.com/p/google-security-research/issues/detail?id=443&can=1&q=label%3AProduct-Flash%20modif...
Adobe Flash – FileReference Class Type Confusion
Source: https://code.google.com/p/google-security-research/issues/detail?id=422&can=1&q=label%3AProduct-Flash%20modif...
Adobe Flash – textfield.gridFitType Use-After-Free
Source: https://code.google.com/p/google-security-research/issues/detail?id=418&can=1&q=label%3AProduct-Flash%20modif...
Adobe Flash – Type Confusion in TextRenderer.setAdvancedAntialiasingTable
Source: https://code.google.com/p/google-security-research/issues/detail?id=409&can=1&q=label%3AProduct-Flash%20modif...