Microsoft Windows – ‘nt!NtQueryVolumeInformationFile’ Kernel Stack Memory Disclosure
We have discovered that the nt!NtQueryVolumeInformationFile system call invoked against certain kernel objects disclo...
dos 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
We have discovered that the nt!NtQueryVolumeInformationFile system call invoked against certain kernel objects disclo...
We have discovered that the nt!NtQueryAttributesFile system call invoked with paths of certain kernel objects disclos...
We have discovered that the nt!NtQueryFullAttributesFile system call invoked with paths of certain kernel objects dis...
#!/usr/bin/python
################
I think this commit has introduced the bug: https://chromium.googlesource.com/v8/v8.git/+/9884bc5dee488bf206655f07b8a...
Advisory: CyberArk Password Vault Memory Disclosure
When a WebAssembly binary is parsed in ModuleParser::parse, it is expected to contain certain sections in a certain o...
Windows Defender inspects a variety of different archive formats, among others RAR.
Here's a snippet of JavascriptArray::BoxStackInstance.
Here's a snippet of JavascriptArray::BoxStackInstance. To fix issue 1420 , "deepCopy" was introduced. But it only de...
Here's a snippet of the method.
#!/usr/bin/python
# Exploit Title: SitAware NVG Denial of Service
#!/usr/bin/python
# smi_ibc_init_discovery_BoF.py
#!/usr/bin/python
# Exploit Title: XenForo CSS Loader DoS
#!/usr/bin/python
There is a vulnerability in Internet Explorer that could potentially be used for memory disclosure.
We have discovered that the nt!NtWaitForDebugEvent system call discloses portions of uninitialized kernel stack memor...
We have discovered a new Windows kernel memory disclosure vulnerability in the creation and copying of a EXCEPTION_RE...
We have discovered that the nt!NtQueryInformationThread system call invoked with the 0 information class (ThreadBasic...
We have discovered that the nt!NtQueryVirtualMemory system call invoked with the 2 information class (MemoryMappedFil...
###############################################################################
[+] Credits: John Page (aka hyp3rlinx)
In the current implementation, the bytecode generator also emits empty jump tables.
I think this commit has introduced the bug.
I think this commit has introduced the bugs: https://chromium.googlesource.com/v8/v8/+/c22ca7f73ba92f22d0cd29b06bb294...
[+] Credits: John Page (aka hyp3rlinx)
# Written by Alex Conrey
ActivePDF Toolkit < 8.1.0 multiple RCE
-----------------------------------------------------
[+] Credits: John Page (aka hyp3rlinx)
[+] Credits: John Page (aka hyp3rlinx)
PS4 5.01 WebKit Exploit PoC
#Exploit Title : netek 0.8.2 FTP Denial of Service
# Exploit Title: Microsoft Windows SMB Client Null Pointer Dereference Denial of Service