Samsung Galaxy S6 Samsung Gallery – GIF Parsing Crash
Source: https://code.google.com/p/google-security-research/issues/detail?id=500
dos
dos 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
Microsoft Windows – NtCreateLowBoxToken Handle Capture Local Denial of Service / Privilege Escalation (MS15-111)
Source: https://code.google.com/p/google-security-research/issues/detail?id=483
NetUSB – Kernel Stack Buffer Overflow
#!/usr/bin/env python
Sam Spade 1.14 – Scan From IP Address Field Overflow Crash (SEH) (PoC)
#!/usr/bin/env python
Samsung – SecEmailComposer QUICK_REPLY_BACKGROUND Permissions
Source: https://code.google.com/p/google-security-research/issues/detail?id=490
Samsung fimg2d – FIMG2D_BITBLT_BLIT ioctl Concurrency Flaw
Source: https://code.google.com/p/google-security-research/issues/detail?id=492
Samsung – ‘seiren’ Kernel Driver Buffer Overflow
Source: https://code.google.com/p/google-security-research/issues/detail?id=491
Samsung – ‘m2m1shot’ Kernel Driver Buffer Overflow
Source: https://code.google.com/p/google-security-research/issues/detail?id=493
Adobe Flash – ‘IExternalizable.writeExternal’ Type Confusion
Source: https://code.google.com/p/google-security-research/issues/detail?id=547
VideoLAN VLC Media Player 2.2.1 – libvlccore ‘.mp3’ Stack Overflow
# Exploit Title: VLC | libvlccore - (.mp3) Stack Overflow
ZHONE < S3.0.501 - Multiple Remote Code Execution Vulnerabilities
Vantage Point Security Advisory 2015-003
PHPMyLicense 3.0.0 < 3.1.4 - Denial of Service
Hello, I want to report following exploit:
Adobe Flash – ‘uint’ Capacity Field
Source: https://code.google.com/p/google-security-research/issues/detail?id=504
Adobe Acrobat Reader – AFParseDate JavaScript API Restrictions Bypass
# Title: Adobe Acrobat Reader AFParseDate Javascript API Restrictions
Telegram 3.2 – Input Length Handling Crash (PoC)
#[+] Title: Telegram - Input Length Handling Denial of Service Vulnerability
FreshFTP 5.52 – ‘.qfl’ Crash (PoC)
# Exploit Title: FreshFTP .QFL Local DOS(While Parsing).
Microsoft Windows Kernel – ‘NtGdiBitBlt’ Buffer Overflow (MS15-097)
Source: https://code.google.com/p/google-security-research/issues/detail?id=474
Kaspersky AntiVirus – Yoda’s Protector Unpacking Memory Corruption
Source: https://code.google.com/p/google-security-research/issues/detail?id=528
Kaspersky AntiVirus – UPX Parsing Memory Corruption
Source: https://code.google.com/p/google-security-research/issues/detail?id=527
Kaspersky AntiVirus – CHM Parsing Stack Buffer Overflow
Source: https://code.google.com/p/google-security-research/issues/detail?id=524
Kaspersky AntiVirus – ‘.DEX’ File Format Parsing Memory Corruption
Source: https://code.google.com/p/google-security-research/issues/detail?id=519
Kaspersky AntiVirus – PE Unpacking Integer Overflow
Source: https://code.google.com/p/google-security-research/issues/detail?id=526
Kaspersky AntiVirus – ExeCryptor Parsing Memory Corruption
Source: https://code.google.com/p/google-security-research/issues/detail?id=525
Kaspersky AntiVirus – VB6 Parsing Integer Overflow
Source: https://code.google.com/p/google-security-research/issues/detail?id=522
Microsoft Windows Kernel – ‘NtGdiStretchBlt’ Pool Buffer Overflow (MS15-097)
Source: https://code.google.com/p/google-security-research/issues/detail?id=415
Microsoft Windows Kernel – Use-After-Free with Printer Device Contexts (MS15-097)
Source: https://code.google.com/p/google-security-research/issues/detail?id=433
Microsoft Windows Kernel – Use-After-Free with Cursor Object (MS15-097)
Source: https://code.google.com/p/google-security-research/issues/detail?id=457
Microsoft Windows Kernel – ‘bGetRealizedBrush’ Use-After-Free (MS15-097)
Source: https://code.google.com/p/google-security-research/issues/detail?id=458
Microsoft Windows Kernel – ‘FlashWindowEx’ Memory Corruption (MS15-097)
Source: https://code.google.com/p/google-security-research/issues/detail?id=475
Microsoft Windows Kernel – Bitmap Handling Use-After-Free (MS15-061) (1)
Source: https://code.google.com/p/google-security-research/issues/detail?id=293
Microsoft Windows Kernel – Null Pointer Dereference with Window Station and Clipboard (MS15-061)
Source: https://code.google.com/p/google-security-research/issues/detail?id=294
Microsoft Windows Kernel – WindowStation Use-After-Free (MS15-061)
Source: https://code.google.com/p/google-security-research/issues/detail?id=295
Microsoft Windows Kernel – Brush Object Use-After-Free (MS15-061)
Source: https://code.google.com/p/google-security-research/issues/detail?id=304
Microsoft Windows Kernel – ‘SURFOBJ’ Null Pointer Dereference (MS15-061)
Source: https://code.google.com/p/google-security-research/issues/detail?id=312
Microsoft Windows Kernel – ‘win32k!vSolidFillRect’ Buffer Overflow (MS15-061)
Source: https://code.google.com/p/google-security-research/issues/detail?id=313
Microsoft Windows Kernel – ‘HmgAllocateObjectAttr’ Use-After-Free (MS15-061)
Source: https://code.google.com/p/google-security-research/issues/detail?id=320
Microsoft Windows Kernel – Pool Buffer Overflow Drawing Caption Bar (MS15-061)
Source: https://code.google.com/p/google-security-research/issues/detail?id=321
Microsoft Windows Kernel – ‘UserCommitDesktopMemory’ Use-After-Free (MS15-073)
Source: https://code.google.com/p/google-security-research/issues/detail?id=335
Microsoft Windows Kernel – ‘DeferWindowPos’ Use-After-Free (MS15-073)
Source: https://code.google.com/p/google-security-research/issues/detail?id=339
Microsoft Windows Kernel – Bitmap Handling Use-After-Free (MS15-061) (2)
Source: https://code.google.com/p/google-security-research/issues/detail?id=311
Apple qlmanage – SceneKit::daeElement::setElementName Heap Overflow
Source: https://code.google.com/p/google-security-research/issues/detail?id=467
Apple Mac OSX Regex Engine (TRE) – Stack Buffer Overflow (PoC)
Source: https://code.google.com/p/google-security-research/issues/detail?id=428
Apple Mac OSX Regex Engine (TRE) – Integer Signedness / Overflow
Source: https://code.google.com/p/google-security-research/issues/detail?id=429
MASM32 11R – Crash (PoC)
# EXPLOIT TITLE: Masm32v11r Buffer Overflow(SEH overwrite) crash POC
Wireshark 1.12.7 – Division by Zero Crash (PoC)
# Exploit Title: Wireshark 1.12.7 Division by zero DOS PoC