dos

dos 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

Linux Kernel 3.10.0 (CentOS 7) – Denial of Service

#####

2017-02-12 FarazPajohan dos

OpenBSD HTTPd < 6.0 - Memory Exhaustion Denial of Service

## Advisory Information

2017-02-07 PierreKimSec dos

Google Android – ‘rkp_set_init_page_ro’ RKP Memory Corruption

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=984

2017-02-02 Google Security Research dos

Microsoft Windows 10 – SMBv3 Tree Connect (PoC)

# Full Proof of Concept:

2017-02-01 laurent gaffie dos

QNAP NVR/NAS Devices – Buffer Overflow (PoC)

Device Model: QNAP VioStor NVR, QNAP NAS, Fujitsu Celvin NAS (May be additional re-branded)

2017-02-01 bashis dos

Google Android – RKP Information Disclosure via s2-remapping Physical Ranges

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=982

2017-02-01 Google Security Research dos

Apple WebKit – Type Confusion in RenderBox with Accessibility Enabled

foo

2017-02-01 Google Security Research dos

Apple WebKit – ‘HTMLKeygenElement’ Type Confusion

2017-02-01 Google Security Research dos

Google Chrome – ‘HTMLKeygenElement::shadowSelect()’ Type Confusion

2017-02-01 Google Security Research dos

Apple WebKit – ‘HTMLFormElement::reset()’ Use-After Free

foo

2017-02-01 Google Security Research dos

Google Android – Unprotected MSRs in EL1 RKP Privilege Escalation

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=980

2017-02-01 Google Security Research dos

Google Android – ‘cfp_ropp_new_key_reenc’ / ‘cfp_ropp_new_key’ RKP Memory Corruption

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=979

2017-02-01 Google Security Research dos

OpenSSL 1.1.0 – Remote Client Denial of Service

// Source: https://guidovranken.wordpress.com/2017/01/26/cve-2017-3730-openssl-1-1-0-remote-client-denial-of-service-...

2017-01-26 Guido Vranken dos

Apple macOS 10.12.1 / iOS Kernel – ‘host_self_trap’ Use-After-Free

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1034

2017-01-26 Google Security Research dos

Apple macOS 10.12.1 / iOS Kernel – ‘IOService::matchPassive’ Use-After-Free

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=973

2017-01-26 Google Security Research dos

Apple macOS 10.12.1 / iOS 10.2 – Kernel Userspace Pointer Memory Corruption

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1004

2017-01-26 Google Security Research dos

Autodesk Backburner Manager 3 < 2016.0.0.2150 - Null Dereference Denial of Service

import sys

2017-01-26 b0nd dos

Google Android – ‘pm_qos’ KASLR Bypass

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=971

2017-01-26 Google Security Research dos

Oracle OpenJDK Runtime Environment 1.8.0_112-b15 – Java Serialization Denial Of Service

'''

2017-01-23 ERPScan dos

SunOS 5.11 ICMP – Denial of Service

#include

2017-01-22 Todor Donev dos

Mozilla Firefox < 50.1.0 - Use-After-Free

Firefox < 50.1.0 Use After Free (CVE-2016-9899)

2017-01-13 Marcin Ressel dos

Boxoft Wav 1.0 – Buffer Overflow

Document Title:

2017-01-11 Vulnerability-Lab dos

Adobe Flash Player 24.0.0.186 – ‘ActionGetURL2’ Out-of-Bounds Memory Corruption (2)

Source: https://cosig.gouv.qc.ca/en/cosig-2017-01-en/

2017-01-11 COSIG dos

Adobe Flash Player 24.0.0.186 – ‘ActionGetURL2’ Out-of-Bounds Memory Corruption (1)

Source: https://cosig.gouv.qc.ca/en/cosig-2017-01-en/

2017-01-11 COSIG dos

Apple OS X Yosemite – ‘flow_divert-heap-overflow’ Kernel Panic

#include

2017-01-10 Brandon Azad dos

DirectAdmin 1.50.1 – Denial of Service

#################################

2017-01-08 IeDb ir dos

Brave Browser 1.2.16/1.9.56 – Address Bar URL Spoofing

Brave Browser Suffers from Address Bar Spoofing Vulnerability. Address Bar

2017-01-08 Aaditya Purani dos

Google Android max86902 Driver – ‘sysfs’ Interfaces Race Condition

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=963

2017-01-06 Google Security Research dos

QNAP NAS Devices – Heap Overflow

==================

2017-01-02 bashis dos

SapLPD 7.40 – Denial of Service

# Exploit Title: SAPlpd 7.40 Denial of Service

2016-12-28 Peter Baris dos

FTPShell Server 6.36 – ‘.csv’ Local Denial of Service

#Exploit FTPShell server 6.36 '.csv' Crash(PoC)

2016-12-26 sultan albalawi dos

XAMPP Control Panel – Denial Of Service

'''

2016-12-25 hyp3rlinx dos

Microsoft Internet Explorer 11 – MSHTML CPasteCommand::ConvertBitmaptoPng Heap Buffer Overflow (MS14-056)

2016-12-22 Skylined dos

Apple macOS 10.12.1 / iOS < 10.2 - syslogd Arbitrary Port Replacement

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=977

2016-12-22 Google Security Research dos

Apple macOS 10.12.1 / iOS < 10.2 - powerd Arbitrary Port Replacement

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=976

2016-12-22 Google Security Research dos

Apple macOS < 10.12.2 / iOS < 10.2 Kernel - ipc_port_t Reference Count Leak Due to Incorrect externalMethod Overrides Use-After-Free

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=926

2016-12-22 Google Security Research dos

Apple macOS 10.12 – Double vm_deallocate in Userspace MIG Code Use-After-Free

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=954

2016-12-22 Google Security Research dos

Apple macOS 10.12.1 Kernel – Writable Privileged IOKit Registry Properties Code Execution

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=974

2016-12-22 Google Security Research dos

Microsoft Edge – Internationalization Initialization Type Confusion (MS16-144)

2016-12-21 Google Security Research dos

Microsoft Edge – SIMD.toLocaleString Uninitialized Memory (MS16-145)

2016-12-21 Google Security Research dos

Microsoft Internet Explorer 11 – MSHTML CSpliceTreeEngine::RemoveSplice Use-After-Free (MS14-035)

2016-12-20 Skylined dos

Google Android – WifiNative::setHotlist Stack Overflow

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=958

2016-12-20 Google Security Research dos

Google Chrome < 31.0.1650.48 - HTTP 1xx base::StringTokenizerT<...>::QuickGetNext Out-of-Bounds Read

'''

2016-12-19 Skylined dos

Microsoft Internet Explorer 9 – IEFRAME CView::EnsureSize Use-After-Free (MS13-021)

2016-12-16 Skylined dos

Microsoft Internet Explorer 9 – IEFRAME CMarkupPointer::MoveToGap Use-After-Free

2016-12-16 Skylined dos

Horos 2.1.0 DICOM Medical Image Viewer – Denial of Service

#!/usr/bin/env python

2016-12-16 LiquidWorm dos

DCMTK 3.6.0 storescp – Stack Buffer Overflow

#!/usr/bin/env python

2016-12-16 LiquidWorm dos

ConQuest DICOM Server 1.4.17d – Stack Buffer (PoC)

#!/usr/bin/env python

2016-12-16 LiquidWorm dos

OsiriX DICOM Viewer 8.0.1 – Memory Corruption

#!/usr/bin/env python

2016-12-16 LiquidWorm dos

Orthanc DICOM Server 1.1.0 – Memory Corruption

#!/usr/bin/env python

2016-12-16 LiquidWorm dos