dos

dos 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

Microsoft Windows – NtImpersonateAnonymousToken AC to Non-AC Privilege Escalation

Windows: NtImpersonateAnonymousToken AC to Non-AC EoP

2018-01-11 Google Security Research dos

Microsoft Windows – NTFS Owner/Mandatory Label Privilege Bypass

Windows: NTFS Owner/Mandatory Label Privilege Bypass EoP

2018-01-11 Google Security Research dos

Android – Hardware Service Manager Arbitrary Service Replacement due to getpidcon

This bug is similar to Jann Horn's issue (https://bugs.chromium.org/p/project-zero/issues/detail?id=851) -- credit sh...

2018-01-11 Google Security Research dos

Microsoft Edge Chakra JIT – ‘Lowerer::LowerSetConcatStrMultiItem’ Missing Integer Overflow Check

The method "Lowerer::LowerSetConcatStrMultiItem" is used to generate machine code to concatenate strings.

2018-01-10 Google Security Research dos

Multiple CPUs – Information Leak Using Speculative Execution

== INTRODUCTION ==

2018-01-10 Google Security Research dos

Microsoft Windows – ‘nt!NtQuerySystemInformation (information class 138, QueryMemoryTopologyInformation)’ Kernel Pool Memory Disclosure

We have discovered that the nt!NtQuerySystemInformation system call invoked with the 138 information class discloses ...

2018-01-09 Google Security Research dos

Microsoft Windows – ‘nt!NtQueryInformationProcess (information class 76, QueryProcessEnergyValues)’ Kernel Stack Memory Disclosure

We have discovered that the nt!NtQueryInformationProcess system call invoked with the 76 information class discloses ...

2018-01-09 Google Security Research dos

Microsoft Edge Chakra JIT – Escape Analysis Bug

Escape analysis: https://en.wikipedia.org/wiki/Escape_analysis

2018-01-09 Google Security Research dos

Microsoft Edge Chakra – ‘asm.js’ Out-of-Bounds Read

Here's a snippet of AsmJSByteCodeGenerator::EmitAsmJsFunctionBody.

2018-01-09 Google Security Research dos

Microsoft Edge Chakra JIT – BackwardPass::RemoveEmptyLoopAfterMemOp Does not Insert Branches

The optimizations for memory operations may leave empty loops as follows:

2018-01-09 Google Security Research dos

Microsoft Edge Chakra JIT – Op_MaxInAnArray and Op_MinInAnArray can Explicitly call User-Defined JavaScript Functions

1. Call patterns like "Math.max.apply(Math, [1, 2, 3, 4, 5])" and "Math.max.apply(Math, arr)" can be optimized to dir...

2018-01-09 Google Security Research dos

Android – Inter-Process munmap due to Race Condition in ashmem

The MemoryIntArray class allows processes to share an in-memory array of integers backed by an "ashmem" file descript...

2018-01-08 Google Security Research dos

BarcodeWiz ActiveX Control < 6.7 - Buffer Overflow (PoC)

[+] Credits: John Page (aka hyp3rlinx)

2018-01-08 hyp3rlinx dos

DiskBoss Enterprise 8.5.12 – Denial of Service

# Exploit Title: DiskBoss Enterprise Server 8.5.12 - Denial of Service

2018-01-08 Ahmad Mahfouz dos

Sync Breeze Enterprise 10.1.16 – Denial of Service

# Exploit Title: Sync Breeze Enterprise Server v10.1.16 - Denial of Service

2018-01-08 Ahmad Mahfouz dos

Disk Pulse Enterprise 10.1.18 – Denial of Service

# Exploit Title: Disk Pulse Enterprise Server v10.1.18 - DOS,

2018-01-08 Ahmad Mahfouz dos

VX Search Enterprise 10.1.12 – Denial of Service

# Exploit Title: VX Search Enterprise Server v10.1.12 - Denial of Service

2018-01-08 Ahmad Mahfouz dos

Microsoft Windows win32k – Using SetClassLong to Switch Between CS_CLASSDC and CS_OWNDC Corrupts DC Cache

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1389&desc=6

2018-01-05 Google Security Research dos

GetGo Download Manager 5.3.0.2712 – ‘Proxy’ Buffer Overflow

# Exploit Title: Buffer overflow vulnerability in GetGo Download Manager proxy options 5.3.0.2712

2018-01-05 devcoinfet dos

Apple macOS – IOHIDSystem Kernel Read/Write

Sources:

2018-01-01 Siguza dos

D3DGear 5.00 Build 2175 – Buffer Overflow (PoC)

#!/usr/bin/python

2017-12-31 bzyo dos

ALLMediaServer 0.95 – Buffer Overflow (PoC)

# Exploit Title: Buffer overflow in ALLPlayer ALLMediaServer 0.95 and earlier

2017-12-27 Aloyce J. Makalanga dos

SysGauge Server 3.6.18 – Denial of Service

# Exploit Title: SysGauge Server 3.6.18 - DOS

2017-12-27 Ahmad Mahfouz dos

Telesquare SKT LTE Router SDT-CS3B1 – Denial of Service

#!/usr/bin/env python

2017-12-27 LiquidWorm dos

GetGo Download Manager 5.3.0.2712 – Buffer Overflow

# Exploit Title: Buffer overflow vulnerability in GetGo Download Manager 5.3.0.2712

2017-12-26 Aloyce J. Makalanga dos

Microsoft Windows Kernel – ‘NtQueryVirtualMemory(MemoryMappedFilenameInformation)’ Double-Write Ring-0 Address Leak

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1456

2017-12-20 Google Security Research dos