dos

dos 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

Mozilla Firefox < 53 - 'gfxTextRun' Out-of-Bounds Read

aaaaaaaaaaaaaaaaaa

2017-05-25 Google Security Research dos

Skia Graphics Library – Heap Overflow due to Rounding Error in SkEdge::setLine

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1155

2017-05-25 Google Security Research dos

Apple WebKit / Safari 10.0.3(12602.4.8) – ‘WebCore::FrameView::scheduleRelayout’ Use-After-Free

2017-05-25 Google Security Research dos

Apple macOS – Lack of Bounds Checking in HIServices Custom CFObject Serialization Local Privilege Escalation

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1219

2017-05-23 Google Security Research dos

Apple macOS/iOS Kernel – Memory Disclosure Due to Lack of Bounds Checking in netagent Socket Option Handling

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1140

2017-05-23 Google Security Research dos

Apple macOS/iOS Kernel – Use-After-Free Due to Bad Locking in Unix Domain Socket File Descriptor Externalization

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1123

2017-05-23 Google Security Research dos

Apple macOS/iOS – ‘CAMediaTimingFunctionBuiltin’ NSKeyedArchiver Memory Corruption Due to Lack of Bounds Checking

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1175

2017-05-23 Google Security Research dos

Apple macOS/iOS – ‘TIKeyboardLayout initWithCoder:’ NSKeyedArchiver Heap Corruption Due to Rounding Error

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1172

2017-05-23 Google Security Research dos

Apple macOS/iOS – NSUnarchiver Heap Corruption Due to Lack of Bounds Checking in [NSBuiltinCharacterSet initWithCoder:]

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1170

2017-05-23 Google Security Research dos

Apple macOS/iOS – Memory Corruption Due to Bad Bounds Checking in NSCharacterSet Coding for NSKeyedUnarchiver

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1168

2017-05-23 Google Security Research dos

Linux Kernel 4.11 – eBPF Verifier Log Leaks Lower Half of map Pointer

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1251

2017-05-22 Google Security Research dos

Apple macOS – ‘stackshot’ Raw Frame Pointers

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1164

2017-05-22 Google Security Research dos

Apple macOS – ’32-bit syscall exit’ Kernel Register Leak

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1149

2017-05-22 Google Security Research dos

Sure Thing Disc Labeler 6.2.138.0 – Buffer Overflow (PoC)

# Exploit Title: Sure Thing Disc Labeler - Stack Buffer Overflow (PoC)

2017-05-19 Chance Johnson dos

Mozilla Firefox 50 < 55 - Stack Overflow Denial of Service

2017-05-17 Geeknik Labs dos

Microsoft Windows – Running Object Table Register ROTFLAGS_ALLOWANYCLIENT Privilege Escalation

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1112

2017-05-17 Google Security Research dos

Adobe Flash – Out-of-Bounds Read in Getting TextField Width

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1211

2017-05-17 Google Security Research dos

Adobe Flash – Margin Handling Heap Corruption

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1174

2017-05-17 Google Security Research dos

Adobe Flash – AVC Deblocking Out-of-Bounds Read

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1171

2017-05-17 Google Security Research dos

Apple iOS < 10.3.2 - Notifications API Denial of Service

# Exploit Title: Apple iOS < 10.3.2 - Notifications API Denial of Service

2017-05-17 CoffeeBreakers dos

Microsoft Windows 7 Kernel – Pool-Based Out-of-Bounds Reads Due to bind() Implementation Bugs in afd.sys / tcpip.sys

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1127

2017-05-15 Google Security Research dos

Microsoft Windows 7 Kernel – ‘win32k!xxxClientLpkDrawTextEx’ Stack Memory Disclosure

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1182

2017-05-15 Google Security Research dos

Microsoft Windows 10 Kernel – ‘nt!NtTraceControl (EtwpSetProviderTraits)’ Pool Memory Disclosure

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1161

2017-05-15 Google Security Research dos

Microsoft Windows 7 Kernel – Uninitialized Memory in the Default dacl Descriptor of System Processes Token

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1145

2017-05-15 Google Security Research dos

Larson VizEx Reader 9.7.5 – Local Buffer Overflow (SEH)

#!/usr/bin/python

2017-05-14 Muhann4d dos

Halliburton LogView Pro 10.0.1 – Local Buffer Overflow (SEH)

#!/usr/bin/python

2017-05-14 Muhann4d dos

MiniUPnP MiniUPnPc < 2.0 - Remote Denial of Service

VuNote

2017-05-11 tintinweb dos

OpenVPN 2.4.0 – Denial of Service

#!/usr/bin/env python3

2017-05-11 QuarksLab dos

SAP SAPCAR 721.510 – Heap Buffer Overflow

'''

2017-05-10 Core Security dos

wolfSSL 3.10.2 – x509 Certificate Text Parsing Off-by-One

TALOS-2017-0293

2017-05-09 Talos dos

LG G4 MRA58K – ‘mkvparser::Block::Block’ Heap Buffer Overflow

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1124

2017-05-09 Google Security Research dos

LG G4 MRA58K – ‘mkvparser::Tracks constructor’ Failure to Initialise Pointers

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1117

2017-05-09 Google Security Research dos

LG G4 MRA58K – ‘liblg_parser_mkv.so’ Bad Allocation Calls

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1102

2017-05-09 Google Security Research dos

RPCBind / libtirpc – Denial of Service

#!/usr/bin/ruby

2017-05-08 Guido Vranken dos

CloudBees Jenkins 2.32.1 – Java Deserialization

Source: https://blogs.securiteam.com/index.php/archives/3171

2017-05-05 SecuriTeam dos

Microsoft Internet Explorer 11 – ‘CMarkup::DestroySplayTree’ Use-After-Free

IE11 MSHTML!CMarkup::DestroySplayTree Use-After-Free

2017-05-03 Marcin Ressel dos

MySQL < 5.6.35 / < 5.7.17 - Integer Overflow

'''

2017-05-01 Rodrigo Marcos dos

IrfanView 4.44 – Denial of Service

# Exploit Title: Irfanview - OtherExtensions Input Overflow

2017-04-29 Dreivan Orprecio dos

Panda Free Antivirus – ‘PSKMAD.sys’ Denial of Service

# Exploit Title: Panda Cloud Antivirus Free - 'PSKMAD.sys' - BSoD - denial of service

2017-04-29 Peter Baris dos

Microsoft Internet Explorer 11.576.14393.0 – ‘CStyleSheetArray::BuildListOfMatchedRules’ Memory Corruption

aaaaaaaaaaaaa

2017-04-27 Google Security Research dos

Oracle VirtualBox Guest Additions 5.1.18 – Unprivileged Windows User-Mode Guest Code Double-Free

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1227

2017-04-25 Google Security Research dos

Apple Safari – Array concat Memory Corruption

2017-04-25 Google Security Research dos

PrivateTunnel Client 2.8 – Local Buffer Overflow (SEH)

#!/usr/bin/python

2017-04-25 Muhann4d dos

Oracle VM VirtualBox – ‘virtio-net’ Guest-to-Host Out-of-Bounds Write

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1136

2017-04-20 Google Security Research dos

Oracle VM VirtualBox – Environment and ioctl Unprivileged Host User to Host Kernel Privilege Escalation

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1091

2017-04-20 Google Security Research dos

Dmitry 1.3a – Local Buffer Overflow (PoC)

################

2017-04-19 FarazPajohan dos

pinfo 0.6.9 – Local Buffer Overflow (PoC)

# Title: pinfo v0.6.9 - Local Buffer Overflow

2017-04-18 Nassim Asrir dos

Microsoft Windows – SMB Remote Code Execution Scanner (MS17-010) (Metasploit)

##

2017-04-17 Sean Dillon dos

WinSCP 5.9.4 – ‘LIST’ Denial of Service (Metasploit)

##

2017-04-16 mohammed Mohammed dos

Microsoft Windows Kernel – ‘win32kfull!SfnINLPUAHDRAWMENUITEM’ Stack Memory Disclosure

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1192

2017-04-13 Google Security Research dos