dos

dos 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

Microsoft Windows – ‘win32k.sys’ TTF Processing win32k!sbit_Embolden / win32k!ttfdCloseFontContext Use-After-Free (MS16-120)

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=868

2016-10-20 Google Security Research dos

Microsoft Windows – ‘win32k.sys’ TTF Processing RCVT TrueType Instruction Handler Out-of-Bounds Read (MS16-120)

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=864

2016-10-20 Google Security Research dos

SAP Adaptive Server Enterprise 16 – Denial of Service

'''

2016-10-20 ERPScan dos

SAP NetWeaver KERNEL 7.0 < 7.5 - Denial of Service

'''

2016-10-20 ERPScan dos

The Unarchiver 3.11.1 – ‘.tar.Z’ Crash (PoC)

# Exploit Title: The Unarchiver 3.11.1 '.tar.Z' Local Crash PoC

2016-10-18 Antonio Z. dos

Linux Kernel < 4.5.1 - Off-By-One (PoC)

EDB Note ~ Download: http://cyseclabs.com/exploits/matreshka.c

2016-10-16 Vitaly Nikolenko dos

Mozilla Firefox 49.0.1 – Denial of Service

'''

2016-10-14 sultan albalawi dos

VOX Music Player 2.8.8 – ‘.pls’ Denial of Service

# Exploit Title: VOX Music Player 2.8.8 '.pls' Local Crash PoC

2016-10-13 Antonio Z. dos

Google Android – Binder Generic ASLR Leak

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=889

2016-10-12 Google Security Research dos

Adobe Flash Player 23.0.0.162 – ‘.SWF’ ConstantPool Critical Memory Corruption

#####################################################################################

2016-10-12 COSIG dos

Cisco Webex Player T29.10 – ‘.ARF’ Out-of-Bounds Memory Corruption

#####################################################################################

2016-10-12 COSIG dos

Cisco Webex Player T29.10 – ‘.WRF’ Use-After-Free Memory Corruption

#####################################################################################

2016-10-12 COSIG dos

Google Android – ‘gpsOneXtra’ Data Files Denial of Service

Original at:

2016-10-11 Nightwatch Cybersecurity Research dos

ISC BIND 9 – Denial of Service

import socket

2016-10-04 Infobyte dos

Google Android – Insufficient Binder Message Verification Pointer Leak

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=860

2016-10-03 Google Security Research dos

VideoLAN VLC Media Player 2.2.1 – Buffer Overflow

Exploit Title: VLC Media Player 2.2.1 Buffer Overflow

2016-09-28 sultan albalawi dos

Adobe Flash – Crash When Freeing Memory After AVC decoding

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=859

2016-09-23 Google Security Research dos

Adobe Flash – Video Decompression Memory Corruption

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=857

2016-09-23 Google Security Research dos

Linux SELinux – W+X Protection Bypass via AIO

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=854

2016-09-23 Google Security Research dos

JCraft/JSch Java Secure Channel 0.1.53 – Recursive sftp-get Directory Traversal

Ref: https://github.com/tintinweb/pub/tree/master/pocs/cve-2016-5725

2016-09-22 tintinweb dos

Microsoft Office PowerPoint 2010 – Invalid Pointer Reference

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=866

2016-09-21 Google Security Research dos

Symantec RAR Decomposer Engine (Multiple Products) – Out-of-Bounds Read / Out-of-Bounds Write

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=867

2016-09-21 Google Security Research dos

VMware Workstation – ‘vprintproxy.exe’ JPEG2000 Images Multiple Memory Corruptions

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=850

2016-09-19 Google Security Research dos

VMware Workstation – ‘vprintproxy.exe’ TrueType NAME Tables Heap Buffer Overflow (PoC)

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=849

2016-09-19 Google Security Research dos

Google Android – getpidcon Usage binder Service Replacement Race Condition

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=851

2016-09-14 Google Security Research dos

Microsoft Internet Explorer 11.0.9600.18482 – Use After Free

Use After Free

2016-09-13 Marcin Ressel dos

Adobe Flash – Method Calls Use-After-Free

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=846

2016-09-08 Google Security Research dos

Adobe Flash – Transform.colorTranform Getter Infomation Leak

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=845

2016-09-08 Google Security Research dos

PHP 7.0 – JsonSerializable::jsonSerialize json_encode Local Denial of Service

2016-08-31 Yakir Wizman dos

PHP 7.0 – ‘AppendIterator::append’ Local Denial of Service

2016-08-31 Yakir Wizman dos

PHP 5.0.0 – ‘snmpset()’ Local Denial of Service

2016-08-31 Yakir Wizman dos

PHP 5.0.0 – ‘snmprealwalk()’ Local Denial of Service

2016-08-31 Yakir Wizman dos

PHP 5.0.0 – ‘snmpwalk()’ Local Denial of Service

2016-08-31 Yakir Wizman dos

PHP 5.0.0 – ‘fbird_[p]connect()’ Local Denial of Service

2016-08-31 Yakir Wizman dos

PHP 5.0.0 – ‘snmpwalkoid()’ Local Denial of Service

2016-08-31 Yakir Wizman dos

PHP 5.0.0 – ‘html_doc_file()’ Local Denial of Service

2016-08-30 Yakir Wizman dos

PHP 5.0.0 – ‘hw_docbyanchor()’ Local Denial of Service

2016-08-30 Yakir Wizman dos