Adobe Flash – createTextField Use-After-Free
Source: https://code.google.com/p/google-security-research/issues/detail?id=408&can=1&q=label%3AProduct-Flash%20modif...
multiple
multiple 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
Adobe Flash – Bad Write in XML When Callback Modifies XML Tree During Property Delete
Source: https://code.google.com/p/google-security-research/issues/detail?id=404&can=1&q=label%3AProduct-Flash%20modif...
Adobe Flash – swapDepths Use-After-Free
Source: https://code.google.com/p/google-security-research/issues/detail?id=403&can=1&q=label%3AProduct-Flash%20modif...
Adobe Flash – attachMovie Use-After-Free
Source: https://code.google.com/p/google-security-research/issues/detail?id=391&can=1&q=label%3AProduct-Flash%20modif...
Adobe Flash – Drawing Methods ‘this’ Use-After-Free
Source: https://code.google.com/p/google-security-research/issues/detail?id=388&can=1&q=label%3AProduct-Flash%20modif...
Adobe Flash – scale9Grid Use-After-Free
Source: https://code.google.com/p/google-security-research/issues/detail?id=380&can=1&q=label%3AProduct-Flash%20modif...
Adobe Flash – XML.childNodes Use-After-Free
Source: https://code.google.com/p/google-security-research/issues/detail?id=365&can=1&q=label%3AProduct-Flash%20modif...
Adobe Flash – Setting Value Use-After-Free
Source: https://code.google.com/p/google-security-research/issues/detail?id=360&can=1&q=label%3AProduct-Flash%20modif...
Adobe Flash – ‘Setting’ Use-After-Free
Source: https://code.google.com/p/google-security-research/issues/detail?id=355&can=1&q=label%3AProduct-Flash%20modif...
Flash Boundless Tunes – Universal SOP Bypass Through ActionSctipt’s Sound Object
Source: https://code.google.com/p/google-security-research/issues/detail?id=354&can=1&q=label%3AProduct-Flash%20modif...
Adobe Flash – NetConnection.connect Use-After-Free
Source: https://code.google.com/p/google-security-research/issues/detail?id=352&can=1&q=label%3AProduct-Flash%20modif...
Cisco Unified Communications Manager – Multiple Vulnerabilities
Vantage Point Security Advisory 2015-001
Mozilla Firefox < 39.03 - 'pdf.js' Same Origin Policy
# Exploit Title: Firefox < 39.03 pdf.js same origin policy exploit
Joomla! Component com_jem 2.1.4 – Multiple Vulnerabilities
# Exploit Title: Joomla Event Manager 2.1.4 - Multiple Vulnerabilities
Google Chrome 43.0 – Certificate MIME Handling Integer Overflow
#!/usr/bin/python2
Zend Framework 2.4.2 – PHP FPM XML eXternal Entity Injection
=============================================
Geoserver < 2.7.1.1 / < 2.6.4 / < 2.5.5.1 - XML External Entity
# Exploit Title : GeoServer XXE
ISC BIND 9 – TKEY Remote Denial of Service (PoC)
#!/usr/bin/env python
ISC BIND 9 – TKEY (PoC)
PoC for BIND9 TKEY assert Dos (CVE-2015-5477)
Hawkeye-G 3.0.1.4912 – Persistent Cross-Site Scripting / Information Leakage
# Exploit Title: Persistent XSS, Information Leakage IDS / IPS
Hawkeye-G 3.0.1.4912 – Cross-Site Request Forgery
# Exploit Title: CSRF, Network Threat Appliance IDS / IPS
AirDroid iOS / Android / Win 3.1.3 – Persistent
Document Title:
NTPD – MON_GETLIST Query Amplification Denial of Service
#!/usr/bin/perl
UPNPD M-SEARCH – ssdp:discover Reflection Denial of Service
#!/usr/bin/perl
Thycotic Secret Server 8.8.000004 – Persistent Cross-Site Scripting
#############################################################
CUPS < 2.0.3 - Multiple Vulnerabilities
Source: http://googleprojectzero.blogspot.se/2015/06/owning-internet-printing-case-study-in.html
Lively Cart – SQL Injection
##################################################################################################
ManageEngine SupportCenter Plus 7.90 – Multiple Vulnerabilities
Document Title:
Opsview 4.6.2 – Multiple Cross-Site Scripting Vulnerabilities
# Exploit title: Opsview 4.6.2 - Multiple XSS
ICU library 52 < 54 - Multiple Vulnerabilities
>> Heap overflow and integer overflow in ICU library (v52 to v54)
OYO File Manager 1.1 (iOS / Android) – Multiple Vulnerabilities
Document Title:
QEMU – Floppy Disk Controller (FDC) (PoC)
// Source: https://marc.info/?l=oss-security&m=143155206320935&w=2
WordPress Plugin Freshmail 1.5.8 – SQL Injection
# Exploit Title: Unauthenticated SQL Injection on Wordpress Freshmail (#1)
Wireshark 1.12.4 – Memory Corruption and Access Violation (PoC)
#!/usr/bin/python
MiniUPnPd 1.0 (MIPS) – Remote Stack Overflow Remote Code Execution for AirTies RT Series
#!/usr/bin/env python
SevenIT SevDesk 3.10 – Multiple Web Vulnerabilities
Document Title:
w3tw0rk / Pitbull Perl IRC Bot – Remote Code Execution
# thehunter.py
Kemp Load Master 7.1.16 – Multiple Vulnerabilities
# Exploit Title: Kemp Load Master - Multiple Vulnerabilities (RCE, CSRF, XSS, DoS)
Airties Air5650TT – Remote Stack Overflow
#!/usr/bin/env python