Microsoft Word 2013/2016 – sprmSdyaTop Denial of Service (MS16-099)
#####################################################################################
dos
dos 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
SAP SAPCAR – Multiple Vulnerabilities
1. Advisory Information
Kodi Web Server 16.1 – Denial of Service
# Exploit Title: Kodi 16.1 Web Server Remote DoS
Wireshark 1.12.0 < 1.12.12 / 2.0.0 < 2.0.4 - WSP Dissector Denial of Service
Sample generated with AFL
Wireshark 1.12.0 < 1.12.12 / 2.0.0 < 2.0.4 - PacketBB Dissector Denial of Service
Sample generated by AFL
Wireshark 1.12.0 < 1.12.12 - NDS Dissector Denial of Service
Sample generated with AFL
Halliburton LogView Pro 9.7.5 – ‘.cgm’ / ‘.tif’ / ‘.tiff’ / ‘.tifh’ Crash (PoC)
# Exploit Title: [Haliburton LogView Pro v9.7.5]
Linux Kernel (ARM/ARM64) – ‘perf_event_open()’ Arbitrary Memory Read
perf_event_open() offers to collect various pieces of information when an event occurs, including a user stack backtr...
AppArmor securityfs < 4.8 - 'aa_fs_seq_hash_show' Reference Count Leak
There's a reference count leak in aa_fs_seq_hash_show that can be used to overflow the reference counter and trigger ...
Adobe Flash Player 22.0.0.192 – TAG Memory Corruption
#####################################################################################
Adobe Flash Player 22.0.0.192 – SceneAndFrameData Memory Corruption
#####################################################################################
Adobe Flash Player 22.0.0.192 – DefineSprite Memory Corruption
#####################################################################################
Adobe Flash Player 22.0.0.192 – DefineBitsJPEG2 Memory Corruption
#####################################################################################
Adobe Acrobat Reader DC 15.016.20045 – Invalid Font ‘.ttf’ Memory Corruption (7)
#####################################################################################
Adobe Acrobat Reader DC 15.016.20045 – Invalid Font ‘.ttf’ Memory Corruption (6)
#####################################################################################
Adobe Acrobat Reader DC 15.016.20045 – Invalid Font ‘.ttf’ Memory Corruption (5)
#####################################################################################
Adobe Acrobat Reader DC 15.016.20045 – Invalid Font ‘.ttf’ Memory Corruption (4)
#####################################################################################
Adobe Acrobat Reader DC 15.016.20045 – Invalid Font ‘.ttf’ Memory Corruption (3)
#####################################################################################
Adobe Acrobat Reader DC 15.016.20045 – Invalid Font ‘.ttf’ Memory Corruption (2)
#####################################################################################
Adobe Acrobat Reader DC 15.016.20045 – Invalid Font ‘.ttf’ Memory Corruption (1)
#####################################################################################
Adobe Flash – ATF Image Packing Overflow
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=793
Adobe Flash – LMZA Property Decoding Heap Corruption
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=790
Adobe Flash – JXR Processing Double-Free
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=788
Adobe Flash – ATF Processing Overflow
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=786
Microsoft WinDbg – ‘logviewer.exe’ Crash (PoC)
[+] Credits: HYP3RLINX
Symantec AntiVirus – PowerPoint Misaligned Stream-cache Remote Stack Buffer Overflow (PoC)
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=823
Symantec AntiVirus – Missing Bounds Checks in dec2zip ALPkOldFormatDecompressor::UnShrink
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=821
Symantec AntiVirus – TNEF Decoder Integer Overflow
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=819
Symantec AntiVirus – Heap Overflow Modifying MIME Messages
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=818
Symantec AntiVirus – ‘dec2lha Library’ Remote Stack Buffer Overflow (PoC)
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=814
Symantec AntiVirus – Unpacking RAR Multiple Remote Memory Corruptions
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=810
Magnet Networks Tesley CPVA 642 Router – Weak WPA-PSK Passphrase Algorithm
# Exploit Title: Magnet Networks – Weak WPA-PSK passphrases used in Tesley CPVA 642 Router
Microsoft Windows – Custom Font Disable Policy Bypass
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=779
Microsoft Windows Kernel – ‘ATMFD.dll’ NamedEscape 0x250C Pool Corruption (MS16-074)
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=785
Microsoft Windows – ‘gdi32.dll’ Multiple DIB-Related EMF Record Handlers Heap Out-of-Bounds Reads/Memory Disclosure (MS16-074)
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=757
Blat 3.2.14 – Stack Overflow
1. Vulnerable Product Version:
Google Chrome – GPU Process MailboxManagerImpl Double-Read
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=780
Microsoft Windows 7 – win32k Bitmap Use-After-Free (MS16-062) (2)
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=747
Microsoft Windows 7 – win32k Bitmap Use-After-Free (MS16-062) (1)
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=746