dos

dos 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

K7 Total Security 15.1.0.305 – Device Driver Arbitrary Memory Read

## Vulnerability Summary

2017-10-23 SecuriTeam dos

ArGoSoft Mini Mail Server 1.0.0.2 – Denial of Service

#!/usr/bin/env python

2017-10-21 Berk Cem Göksel dos

Mozilla Firefox < 55 - Denial of Service

# Exploit Title: Mozilla Firefox < 55 - Forcibly make someone view a web content

2017-10-20 Amit Sangra dos

Xen – Pagetable De-typing Unbounded Recursion

Xen allows pagetables of the same level to map each other as readonly

2017-10-18 Google Security Research dos

Linux Kernel – ‘AF_PACKET’ Use-After-Free (2)

## Vulnerabilities summary

2017-10-17 SecuriTeam dos

Linux Kernel – ‘AF_PACKET’ Use-After-Free (1)

Source: https://blogs.securiteam.com/index.php/archives/3484

2017-10-17 SecuriTeam dos

Microsoft Windows – ‘nt!NtQueryObject (ObjectNameInformation)’ Kernel Pool Memory Disclosure

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1303&desc=2

2017-10-17 Google Security Research dos

Microsoft Edge Chakra JIT – ‘RegexHelper::StringReplace’ Must Call the Callback Function with Updating ImplicitCallFlags

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1334

2017-10-17 Google Security Research dos

Microsoft Edge Chakra – ‘StackScriptFunction::BoxState::Box’ Accesses to Uninitialized Pointers (Denial of Service)

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1338

2017-10-17 Google Security Research dos

Microsoft Edge Chakra JIT – Incorrect GenerateBailOut Calling Patterns

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1333

2017-10-17 Google Security Research dos

Microsoft Windows 10 – WLDP/MSHTML CLSID UMCI Bypass

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1328

2017-10-17 Google Security Research dos

binutils 2.29.51.20170921 – ‘read_1_byte’ Heap Buffer Overflow

Source: https://blogs.gentoo.org/ago/2017/09/26/binutils-heap-based-buffer-overflow-in-read_1_byte-dwarf2-c/

2017-10-10 Agostino Sarubbo dos

PyroBatchFTP 3.17 – Buffer Overflow (SEH)

#!/usr/bin/python

2017-10-07 Kevin McGuigan dos

WebKit JSC – ‘BytecodeGenerator::emitGetByVal’ Incorrect Optimization (2)

function f() {

2017-10-04 Google Security Research dos

Dnsmasq < 2.78 - Integer Underflow

'''

2017-10-02 Google Security Research dos

Dnsmasq < 2.78 - Lack of free() Denial of Service

'''

2017-10-02 Google Security Research dos

Dnsmasq < 2.78 - Information Leak

'''

2017-10-02 Google Security Research dos

Dnsmasq < 2.78 - Stack Overflow

'''

2017-10-02 Google Security Research dos

Dnsmasq < 2.78 - Heap Overflow

'''

2017-10-02 Google Security Research dos

Dnsmasq < 2.78 - 2-byte Heap Overflow

'''

2017-10-02 Google Security Research dos

Linux Kernel < 4.14.rc3 - Local Denial of Service

# Exploit Title: Linux Kernelnr_frags was overwritten by ev->iferror = err

2017-10-02 Wang Chenyu dos

Microsoft Excel – OLE Arbitrary Code Execution

Title: MS Office Excel (all versions) Arbitrary Code Execution Vulnerability

2017-09-30 Eduardo Braun Prado dos

Trend Micro OfficeScan 11.0/XG (12.0) – Memory Corruption

[+] Credits: John Page (aka hyp3rlinx)

2017-09-29 hyp3rlinx dos

Microsoft Office Groove – ‘Workspace Shortcut’ Arbitrary Code Execution

Title: MS Office Groove 'Workspace Shortcut' Arbitrary Code Execution Vulnerability

2017-09-28 Eduardo Braun Prado dos

DiskBoss Enterprise 8.4.16 – Local Buffer Overflow (PoC)

#!/usr/bin/python

2017-09-28 Touhid M.Shaikh dos

Sync Breeze Enterprise 10.0.28 – Denial of-Service (PoC)

#!/usr/bin/python

2017-09-27 Mr Bruce dos

Adobe Flash – Out-of-Bounds Read in applyToRange

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1323

2017-09-25 Google Security Research dos

Adobe Flash – Out-of-Bounds Write in MP4 Edge Processing

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1322

2017-09-25 Google Security Research dos

Adobe Flash – Out-of-Bounds Memory Read in MP4 Parsing

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1321

2017-09-25 Google Security Research dos

Microsoft Edge Chakra – ‘JavascriptFunction::ReparseAsmJsModule’ Incorrectly Re-parses

function Module() {

2017-09-21 Google Security Research dos

Microsoft Edge Chakra – ‘Parser::ParseCatch’ Does Not Handle ‘eval()’ (Denial of Service)

function f() {

2017-09-21 Google Security Research dos

Microsoft Edge Chakra – Deferred Parsing Makes Wrong Scopes

let h = function f(a0 = (function () {

2017-09-21 Google Security Research dos

Microsoft Edge – Chakra Incorrectly Parses Object Patterns

function f() {

2017-09-21 Google Security Research dos

Linux Kernel < 4.13.1 - BlueTooth Buffer Overflow (PoC)

# Exploit Title: BlueBorne - Proof of Concept - Unarmed/Unweaponized -

2017-09-21 Marcin Kozlowski dos

Microsoft Edge 38.14393.1066.0 – ‘COptionsCollectionCacheItem::GetAt’ Out-of-Bounds Read

2017-09-19 Google Security Research dos

Microsoft Edge 38.14393.1066.0 – Memory Corruption with Partial Page Loading

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1309

2017-09-19 Google Security Research dos