Microsoft Remote Desktop 10.2.4(134) – Denial of Service (PoC)
# Exploit Title: Microsoft Remote Desktop 10.2.4(134) - Denial of Service (PoC)
dos
dos 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
Echo Mirage 3.1 – Buffer Overflow (PoC)
#!/usr/bin/python
Linux Kernel 4.13 – ‘compat_get_timex()’ Leak Kernel Pointer
#define _GNU_SOURCE
Microsoft Edge Chakra – ‘JsBuiltInEngineInterfaceExtensionObject::InjectJsBuiltInLibraryCode’ Use-After-Free
The JsBuiltInEngineInterfaceExtensionObject::InjectJsBuiltInLibraryCode method is used to execute JsBuiltIn.js which ...
Microsoft Edge Chakra – ‘InitClass’ Type Confusion
Issue description
Microsoft Edge Chakra – ‘NewScObjectNoCtor’ or ‘InitProto’ Type Confusion
NewScObjectNoCtor and InitProto opcodes are treated as having no side effects, but actually they can have via the Set...
Microsoft Edge Chakra – ‘InlineArrayPush’ Type Confusion
In Chakra, if you add a numeric property to an object having inlined properties, it will start transition to a new ty...
FastTube 1.0.1.0 – Denial of Service (PoC)
# Exploit Title: FastTube 1.0.1.0 - Denial of Service (PoC)
VPN Browser+ 1.1.0.0 – Denial of Service (PoC)
# Exploit Title: VPN Browser+ 1.1.0.0 - Denial of Service (PoC)
7 Tik 1.0.1.0 – Denial of Service (PoC)
# Exploit Title: 7 Tik 1.0.1.0 - Denial of Service (PoC)
Eco Search 1.0.2.0 – Denial of Service (PoC)
# Exploit Title: Eco Search 1.0.2.0 - Denial of Service (PoC)
One Search 1.1.0.0 – Denial of Service (PoC)
# Exploit Title: One Search 1.1.0.0 - Denial of Service (PoC)
Watchr 1.1.0.0 – Denial of Service (PoC)
# Exploit Title: Watchr 1.1.0.0 - Denial of Service (PoC)
Microsoft Windows 10 – ‘RestrictedErrorInfo’ Unmarshal Section Handle Use-After-Free
Windows: RestrictedErrorInfo Unmarshal Section Handle UAF EoP
WebKit JSC JIT – GetIndexedPropertyStorage Use-After-Free
The doesGC function simply takes a node, and tells if it might cause a garbage collection. This function is used to d...
NTPsec 1.1.2 – ‘config’ (Authenticated) Out-of-Bounds Write Denial of Service (PoC)
#!/usr/bin/env python
NTPsec 1.1.2 – ‘ntp_control’ (Authenticated) NULL Pointer Dereference (PoC)
#!/usr/bin/env python
NTPsec 1.1.2 – ‘ntp_control’ Out-of-Bounds Read (PoC)
#!/usr/bin/env python
NTPsec 1.1.2 – ‘ctl_getitem’ Out-of-Bounds Read (PoC)
#!/usr/bin/env python
Spotify 1.0.96.181 – ‘Proxy configuration’ Denial of Service (PoC)
# Exploit Title: Spotify 1.0.96.181 - "Proxy configuration" Denial of Service (PoC)
1Password < 7.0 - Denial of Service
############
Luminance Studio 2.17 – Denial of Service (PoC)
# Exploit Title: Luminance Studio 2.17 - Denial of Service (PoC)
Blob Studio 2.17 – Denial of Service (PoC)
# Exploit Title: Blob Studio 2.17 - Denial of Service (PoC)
Liquid Studio 2.17 – Denial of Service (PoC)
# Exploit Title: Liquid Studio 2.17 - Denial of Service (PoC)
Pixel Studio 2.17 – Denial of Service (PoC)
# Exploit Title: Pixel Studio 2.17 - Denial of Service (PoC)
Paint Studio 2.17 – Denial of Service (PoC)
# Exploit Title: Paint Studio 2.17 - Denial of Service (PoC)
Tree Studio 2.17 – Denial of Service (PoC)
# Exploit Title: Tree Studio 2.17 - Denial of Service (PoC)
Selfie Studio 2.17 – Denial of Service (PoC)
# Exploit Title: Selfie Studio 2.17 - Denial of Service (PoC)
polkit – Temporary auth Hijacking via PID Reuse and Non-atomic Fork
When a (non-root) user attempts to e.g. control systemd units in the system
Wireshark – ‘get_t61_string’ Heap Out-of-Bounds Read
The following crash due to a heap-based out-of-bounds memory read can be observed in an ASAN build of Wireshark, by f...
Foscam Video Management System 1.1.4.9 – ‘Username’ Denial of Service (PoC)
# Exploit Title: Foscam Video Management System 1.1.4.9 - 'Username' Denial of Service (PoC)
SpotFTP Password Recover 2.4.2 – ‘Name’ Denial of Service (PoC)
# Exploit Title: SpotFTP Password Recover 2.4.2 - 'Name' Denial of Service (PoC)
BlueAuditor 1.7.2.0 – ‘Key’ Denial of Service (PoC)
# Exploit Title: BlueAuditor 1.7.2.0 - 'Key' Denial of Service (PoC)
WebKit JSC – ‘JSArray::shiftCountWithArrayStorage’ Out-of-Bounds Read/Write
bool JSArray::shiftCountWithArrayStorage(VM& vm, unsigned startIndex, unsigned count, ArrayStorage* storage)
WebKit JSC – ‘AbstractValue::set’ Use-After-Free
// ./jsc --useConcurrentJIT=false ~/test.js
NetworkSleuth 3.0.0.0 – ‘Key’ Denial of Service (PoC)
# Exploit Title: NetworkSleuth 3.0.0.0 - 'Key' Denial of Service (PoC)
EZ CD Audio Converter 8.0.7 – Denial of Service (PoC)
# Exploit Title: EZ CD Audio Converter 8.0.7 - Denial of Service (PoC)
NBMonitor Network Bandwidth Monitor 1.6.5.0 – ‘Name’ Denial of Service (PoC)
# Exploit Title: NBMonitor Network Bandwidth Monitor 1.6.5.0 - 'Name' Denial of Service (PoC)
ShareAlarmPro 2.1.4 – Denial of Service (PoC)
# Exploit Title:ShareAlarmPro 2.1.4 - Denial of Service (PoC)
NetShareWatcher 1.5.8 – Denial of Service (PoC)
# Exploit Title: NetShareWatcher 1.5.8 - Denial of Service (PoC)
Product Key Explorer 4.0.9 – Denial of Service (PoC)
# Exploit Title: Product Key Explorer 4.0.9 - Denial of Service (PoC)
Angry IP Scanner for Linux 3.5.3 – Denial of Service (PoC)
# Exploit Title: Angry IP Scanner for Linux 3.5.3 - Denial of Service (PoC)
Netatalk 3.1.12 – Authentication Bypass (PoC)
import socket
SQLScan 1.0 – Denial of Service (PoC)
# Exploit Title: McAfee Foundstone SQLScan - Denial of Service (PoC) and EIP record overwrite
Microsoft Edge 42.17134.1.0 – ‘Tree::ANode::DocumentLayout’ Denial of Service
# Exploit Title: Microsoft Edge edgehtml.dll!Tree::ANode::DocumentLayout. Denial of Service (PoC)
VBScript – MSXML Execution Policy Bypass
According to https://blogs.windows.com/msedgedev/2017/07/07/update-disabling-vbscript-internet-explorer-11/, Starting...