dos

Microsoft Edge 11.0.10240.16384 – ‘edgehtml’ CAttr­Array::Destroy Use-After-Free

Microsoft Internet Explorer 11 – MSHTML CMap­Element::Notify Use-After-Free (MS15-009)

Microsoft Internet Explorer 11/10/9 – MSHTML ‘PROPERTYDESC::Handle­Style­Component­Property’ Out-of-Bounds Read (MS16-104)

Microsoft WININET.dll – ‘CHttp­Header­Parser::Parse­Status­Line’ Out-of-Bounds Read (MS16-104/MS16-105)

Microsoft Windows Kernel – ‘win32k’ Denial of Service (MS16-135)

Source: https://github.com/tinysec/public/tree/master/CVE-2016-7255

Microsoft Windows – LSASS SMB NTLM Exchange Null-Pointer Dereference (MS16-137)

MS16-137: LSASS Remote Memory Corruption Advisory

VBScript 5.8.7600.16385/5.8.9600.16384 – RegExpComp::PnodeParse Out-of-Bounds Read

Microsoft Windows Server 2008/2012 – LDAP RootDSE Netlogon Denial of Service

#!/usr/bin/perl

Microsoft Internet Explorer 9 – MSHTML CPtsTextParaclient::CountApes Out-of-Bounds Read

Axessh 4.2 – Denial of Service

[+] Credits: John Page aka hyp3rlinx

Microsoft Internet Explorer 11 – MSHTML CView::CalculateImageImmunity Use-After-Free

SunellSecurity NVR / Camera – Denial of Service

# Exploit Title: SunellSecurity NVR / Cams - Buffer overflow in CGI

Microsoft Internet Explorer 9 – MSHTML CAttrArray Use-After-Free (MS14-056)

Memcached 1.4.33 – ‘sasl’ (PoC)

# Source: http://paper.seebug.org/95/

Memcached 1.4.33 – ‘Crash’ (PoC)

# Source: http://paper.seebug.org/95/

Memcached 1.4.33 – ‘Add’ (PoC)

# Source: http://paper.seebug.org/95/

NVIDIA Driver – Stack Buffer Overflow in Escape 0x10000e9

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=947

NVIDIA Driver – Stack Buffer Overflow in Escape 0x7000014

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=946

NVIDIA Driver – Missing Bounds Check in Escape 0x70000d5

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=944

NVIDIA Driver – Missing Bounds Check in Escape 0x100009a

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=942

NVIDIA Driver – Incorrect Bounds Check in Escape 0x70001b2

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=940

NVIDIA Driver – Unchecked User-Provided Pointer in Escape 0x5000027

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=937

NVIDIA Driver – No Bounds Checking in Escape 0x7000170

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=936

NVIDIA Driver – Escape 0x100010b Missing Bounds Check

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=927

NVIDIA Driver – Unchecked Write to User-Provided Pointer in Escape 0x600000D

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=911

NVIDIA Driver – No Bounds Checking in Escape 0x7000194

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=895

NVIDIA Driver – Unchecked Write to User-Provided Pointer in Escape 0x700010d

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=894

NVIDIA Driver – Escape Code Leaks Uninitialised ExAllocatePoolWithTag Memory to Userspace

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=892

Apple OS X/iOS – ‘mach_ports_register’ Multiple Memory Safety s

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=882

Apple OS X Kernel – IOBluetoothFamily.kext Use-After-Free

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=830

Micro Focus Rumba 9.3 – ActiveX Stack Buffer Overflow (PoC)

# Exploit Title: Micro Focus Rumba

Micro Focus Rumba 9.4 – Local Denial of Service

# Exploit Title: Micro Focus Rumba 9.4 Multiple Local Stack-overflow

freeFTPd 1.0.8 – ‘mkd’ Denial of Service

from ftplib import FTP

Baby FTP server 1.24 – Denial of Service (2)

#!/usr/bin/python

CherryTree 0.36.9 – Memory Corruption (PoC)

#!/usr/bin/python

uSQLite 1.0.0 – Denial of Service

#!/usr/bin/python

SmallFTPd 1.0.3 – ‘mkd’ Denial of Service

from ftplib import FTP

Oracle VM VirtualBox 4.3.28 – ‘.ovf’ Crash (PoC)

#Exploit Title: Oracle VM VirtualBox 4.3.28 Crash

RealPlayer 18.1.5.705 – ‘.QCP’ Crash (PoC)

Tested on: Win7 / Win10 x64

Microsoft Edge – Spread Operator Stack Overflow (MS16-119)

Microsoft Edge – ‘Array.join’ Infomation Leak (MS16-119)

Microsoft Edge – ‘Function.apply’ Information Leak (MS16-119)

Microsoft Edge – ‘Array.map’ Heap Overflow (MS16-119)

Microsoft Windows Kernel – Registry Hive Loading Relative Arbitrary Read in nt!RtlValidRelativeSecurityDescriptor (MS16-123)

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=876

Microsoft Windows Kernel – Registry Hive Loading Negative RtlMoveMemory Size in nt!CmpCheckValueList (MS16-124)

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=873

Microsoft Windows – ‘win32k.sys’ TTF Processing win32k!sbit_Embolden / win32k!ttfdCloseFontContext Use-After-Free (MS16-120)

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=868

Microsoft Windows – ‘win32k.sys’ TTF Processing RCVT TrueType Instruction Handler Out-of-Bounds Read (MS16-120)

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=864

SAP Adaptive Server Enterprise 16 – Denial of Service

'''

SAP NetWeaver KERNEL 7.0 < 7.5 - Denial of Service

'''

The Unarchiver 3.11.1 – ‘.tar.Z’ Crash (PoC)

# Exploit Title: The Unarchiver 3.11.1 '.tar.Z' Local Crash PoC