dos

dos 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

Oracle Java Runtime Environment – Heap Out-of-Bounds Read During TTF Font Rendering in AlternateSubstitutionSubtable::process

A heap-based out-of-bounds read was observed in Oracle Java Runtime Environment version 8u202 (latest at the time of ...

2019-02-18 Google Security Research dos

Oracle Java Runtime Environment – Heap Out-of-Bounds Read During TTF Font Rendering in ExtractBitMap_blocClass

A heap-based out-of-bounds read was observed in Oracle Java Runtime Environment version 8u202 (latest at the time of ...

2019-02-18 Google Security Research dos

Oracle Java Runtime Environment – Heap Out-of-Bounds Read During TTF Font Rendering in OpenTypeLayoutEngine::adjustGlyphPositions

A heap-based out-of-bounds read was observed in Oracle Java Runtime Environment version 8u202 (latest at the time of ...

2019-02-18 Google Security Research dos

Oracle Java Runtime Environment – Heap Out-of-Bounds Read During OTF Font Rendering in glyph_CloseContour

A heap-based out-of-bounds read was observed in Oracle Java Runtime Environment version 8u202 (latest at the time of ...

2019-02-18 Google Security Research dos

NBMonitor 1.6.5.0 – ‘Key’ Denial of Service (PoC)

# -*- coding: utf-8 -*-

2019-02-18 Alejandra Sánchez dos

Realterm Serial Terminal 2.0.0.70 – Local Buffer Overflow (SEH)

# -*- coding: utf-8 -*-

2019-02-18 Alejandra Sánchez dos

Realterm Serial Terminal 2.0.0.70 – Denial of Service

# -*- coding: utf-8 -*-

2019-02-18 Alejandra Sánchez dos

Linux – ‘kvm_ioctl_create_device()’ NULL Pointer Dereference

kvm_ioctl_create_device() contains the following code:

2019-02-15 Google Security Research dos

VSCO 1.1.1.0 – Denial of Service (PoC)

# Exploit Title: VSCO 1.1.1.0 - Denial of Service (PoC)

2019-02-15 0xB9 dos

Navicat for Oracle 12.1.15 – “Password” Denial of Service (PoC)

#Exploit Title: Navicat for Oracle 12.1.15 - "Password" Denial of Service (PoC)

2019-02-15 Victor Mondragón dos

Free IP Switcher 3.1 – ‘Computer Name’ Denial of Service (PoC)

#Exploit Title: Free IP Switcher 3.1 - Denial of Service (PoC)

2019-02-15 Victor Mondragón dos

AirMore 1.6.1 – Denial of Service (PoC)

#!/usr/bin/python

2019-02-15 s4vitar dos

ApowerManager 3.1.7 – Phone Manager Remote Denial of Service (PoC)

#!/usr/bin/python

2019-02-14 s4vitar dos

MediaMonkey 4.1.23 – ‘.mp3’ URL Denial of Service (PoC)

# -*- coding: utf-8 -*-

2019-02-14 Alejandra Sánchez dos

Core FTP/SFTP Server 1.2 Build 589.42 – ‘User domain’ Denial of Service (PoC)

#Exploit Title: Core FTP/SFTP Server 1.2 - Build 589.42 - Denial of Service (PoC)

2019-02-14 Victor Mondragón dos

NetworkSleuth 3.0 – ‘Name’ Denial of Service (PoC)

# -*- coding: utf-8 -*-

2019-02-13 Alejandra Sánchez dos

Skyworth GPON HomeGateways and Optical Network Terminals – Stack Overflow

'''

2019-02-12 Kaustubh G. Padwad dos

Android – binder Use-After-Free of VMA via race Between reclaim and munmap

The following bug report solely looks at the situation on the upstream master

2019-02-12 Google Security Research dos

Android – binder Use-After-Free via fdget() Optimization

This bug report describes *two* different issues in different branches of the

2019-02-12 Google Security Research dos

NordVPN 6.19.6 – Denial of Service (PoC)

# -*- coding: utf-8 -*-

2019-02-11 Alejandra Sánchez dos

FutureDj Pro 1.7.2.0 – Denial of Service

# Exploit Title: FutureDj Pro Local Dos Exploit

2019-02-11 Achilles dos

AirDroid 4.2.1.6 – Denial of Service

#!/bin/bash

2019-02-11 s4vitar dos

Skia – Incorrect Convexity Assumptions Leading to Buffer Overflows

I was looking into the root cause of https://bugs.chromium.org/p/chromium/issues/detail?id=850350. In that bug, due t...

2019-02-06 Google Security Research dos

River Past Audio Converter 7.7.16 – Denial of Service (PoC)

# Exploit Title: River_Past_Audio_Converter(DoS)

2019-02-05 Achilles dos

Device Monitoring Studio 8.10.00.8925 – Denial of Service (PoC)

#Exploit Title: Device Monitoring Studio 8.10.00.8925 - Denial of Service (PoC)

2019-02-05 Victor Mondragón dos

TaskInfo 8.2.0.280 – Denial of Service (PoC)

# Exploit Title: TaskInfo v8.2.0.280 - Denial of Service (PoC)

2019-02-04 Rafael Pedrero dos

SpotAuditor 3.6.7 – ‘Base64 Encrypted Password’ Denial of Service (PoC)

# Exploit Title: SpotAuditor v3.6.7 - Denial of Service (PoC)

2019-02-04 Rafael Pedrero dos

River Past Ringtone Converter 2.7.6.1601 – Denial of Service (PoC)

# Exploit Title: River Past Ringtone Converter v2.7.6.1601 - Denial of Service (PoC)

2019-02-04 Rafael Pedrero dos

MyVideoConverter Pro 3.14 – Denial of Service

# Exploit Title: MyVideoConverter Pro 3.14 Denial of Service

2019-02-04 Achilles dos

Remote Process Explorer 1.0.0.16 – Buffer Overflow (PoC) (SEH Overwrite)

# Exploit Title: Remote Process Explorer v1.0.0.16 - Denial of Service (PoC) and SEH overwritten Crash PoC

2019-02-01 Rafael Pedrero dos

macOS < 10.14.3 / iOS < 12.1.3 - Kernel Heap Overflow in PF_KEY due to Lack of Bounds Checking when Retrieving Statistics

Inspired by Ned Williamsons's fuzzer I took a look at the netkey code.

2019-01-31 Google Security Research dos

macOS < 10.14.3 / iOS < 12.1.3 XNU - 'vm_map_copy' Optimization which Requires Atomicity isn't Atomic

vm_map_copyin_internal in vm_map.c converts a region of a vm_map into "copied in" form, constructing a vm_map_copy

2019-01-31 Google Security Research dos

macOS < 10.14.3 / iOS < 12.1.3 - Sandbox Escapes due to Type Confusions and Memory Safety Issues in iohideventsystem

It's possible that this should be two separate issues but I'm filing it as one as I'm still understanding

2019-01-31 Google Security Research dos

macOS < 10.14.3 / iOS < 12.1.3 - Arbitrary mach Port Name Deallocation in XPC Services due to Invalid mach Message Parsing in _xpc_serializer_unpack

_xpc_serializer_unpack in libxpc parses mach messages which contain xpc messages.

2019-01-31 Google Security Research dos