VBox Satellite Express 2.3.17.3 – Arbitrary Write
KL-001-2015-005 : VBox Satellite Express Arbitrary Write Privilege Escalation
dos
dos 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
Microsoft Office 2007 – ‘OGL.dll’ ValidateBitmapInfo Bounds Check Failure (MS15-097)
Source: https://code.google.com/p/google-security-research/issues/detail?id=469
Microsoft Office 2007 – OLESSDirectyEntry.CreateTime Type Confusion
Source: https://code.google.com/p/google-security-research/issues/detail?id=465
Microsoft Office 2007 – BIFFRecord Length Use-After-Free
Source: https://code.google.com/p/google-security-research/issues/detail?id=464
Microsoft Excel 2007/2010/2013 – BIFFRecord Use-After-Free
Source: https://code.google.com/p/google-security-research/issues/detail?id=462
IKEView.exe R60 – Stack Buffer Overflow (PoC)
[+] Credits: hyp3rlinx
IKEView.exe Fox Beta 1 – Stack Buffer Overflow (PoC)
[+] Credits: hyp3rlinx
OpenLDAP 2.4.42 – ber_get_next Denial of Service
# Exploit Title: OpenLDAP 2.4.42 ber_get_next DOS
PHP 5.4/5.5/5.6 – ‘Unserialize()’ Use-After-Free
Use After Free Vulnerabilities in unserialize()
PHP Session Deserializer – Use-After-Free
Use After Free Vulnerabilities in Session Deserializer
PHP 5.4/5.5/5.6 – SplObjectStorage ‘Unserialize()’ Use-After-Free
Yet Another Use After Free Vulnerability in unserialize() with SplObjectStorage
PHP GMP – ‘unserialize()’ Use-After-Free
Use After Free Vulnerability in unserialize() with GMP
PHP 5.4/5.5/5.6 – SplDoublyLinkedList ‘Unserialize()’ Use-After-Free
Yet Another Use After Free Vulnerability in unserialize() with SplDoublyLinkedList
ActiveState Perl.exe x64 Client 5.20.2 – Crash (PoC)
# Exploit Title: [ActiveState] Perl.exe x64 Client Denial of Service (v5.20.2)
SphereFTP Server 2.0 – Crash (PoC)
#!/usr/bin/python
XGI Windows VGA Display Manager 6.14.10.1090 – Arbitrary Write (PoC)
KL-001-2015-004 : XGI Windows VGA Display Manager Arbitrary Write
SiS Windows VGA Display Manager 6.14.10.3930 – Write-What-Where (PoC)
KL-001-2015-003 : SiS Windows VGA Display Manager Multiple Privilege
Mpxplay MultiMedia Commander 2.00a – ‘.m3u’ Stack Buffer Overflow (PoC)
# Exploit Title: Mpxplay Multimedia Commander Stack-based BOF
Ricoh DC (SR10) 1.1.0.8 – Denial of Service
# Exploit Title: Rocoh DC FTP (SR10) v1.1.0.8 DoS
Viber 4.2.0 – Non-Printable Characters Handling Denial of Service
#!/usr/bin/perl -w
Microsoft Office 2007 – ‘msxml5.dll’ Crash (PoC)
#!/usr/bin/perl -w
PFTP Server 8.0f Lite – textfield Local Buffer Overflow (SEH) (PoC)
#*************************************************************************************************************
Photo Transfer (2) 1.0 iOS – Denial of Service
Document Title:
QEMU – Programmable Interrupt Timer Controller Heap Overflow
Source: https://code.google.com/p/google-security-research/issues/detail?id=419#c4
Xion Audio Player 1.5 build 155 – Stack Buffer Overflow
# Exploit Title: Xion Audio Player build 155 Stack Based BOF.
VideoLAN VLC Media Player 2.2.1 – m3u8/m3u Crash (PoC)
#!/usr/bin/python
Microsoft Office 2007 – Malformed Document Stack Buffer Overflow
Source: https://code.google.com/p/google-security-research/issues/detail?id=170&can=1
Microsoft Office 2007 – OneTableDocumentStream Invalid Object
Source: https://code.google.com/p/google-security-research/issues/detail?id=171&can=1
GOM Audio 2.0.8 – ‘.gas’ Crash (PoC)
# Exploit Title: GOM Audio 2.0.8 Crash POC
Mock SMTP Server 1.0 – Remote Crash (PoC)
#!/usr/bin/python
Microsoft Office 2007 – MSPTLS Heap Index Integer Underflow (MS15-081)
Source: https://code.google.com/p/google-security-research/issues/detail?id=431&can=1
Microsoft Windows – ‘ATMFD.dll’ CharString Stream Out-of-Bounds Reads (MS15-021)
Source: https://code.google.com/p/google-security-research/issues/detail?id=382&can=1
Microsoft Windows – ‘ATMFD.DLL’ CFF table (ATMFD+0x34072 / ATMFD+0x3407b) Invalid Memory Access
Source: https://code.google.com/p/google-security-research/issues/detail?id=383&can=1
Microsoft Windows – ‘ATMFD.dll’ CFF table (ATMFD+0x3440b / ATMFD+0x3440e) Invalid Memory Access
Source: https://code.google.com/p/google-security-research/issues/detail?id=384&can=1
Microsoft Windows – ‘ATMFD.DLL’ Write to Uninitialized Address Due to Malformed CFF Table
Source: https://code.google.com/p/google-security-research/issues/detail?id=385&can=1
Microsoft Windows – ‘win32k.sys’ TTF Font Processing IUP[] Program Instruction Pool-Based Buffer Overflow
Source: https://code.google.com/p/google-security-research/issues/detail?id=368&can=1
Microsoft Windows – ‘win32k.sys’ TTF Font Processing win32k!scl_ApplyTranslation Pool-Based Buffer Overflow
Source: https://code.google.com/p/google-security-research/issues/detail?id=370&can=1
Microsoft Windows – ‘ATMFD.DLL’ Out-of-Bounds Read Due to Malformed Name INDEX in the CFF Table
Source: https://code.google.com/p/google-security-research/issues/detail?id=386&can=1
Microsoft Windows – ‘ATMFD.DLL’ Out-of-Bounds Read Due to Malformed FDSelect Offset in the CFF Table
Source: https://code.google.com/p/google-security-research/issues/detail?id=392&can=1
Microsoft Windows – ‘win32k.sys’ TTF Font Processing win32k!fsc_RemoveDups Out-of-Bounds Pool Memory Access
Source: https://code.google.com/p/google-security-research/issues/detail?id=401&can=1
Microsoft Windows – ‘win32k.sys’ TTF Font Processing win32k!fsc_BLTHoriz Out-of-Bounds Pool Write
Source: https://code.google.com/p/google-security-research/issues/detail?id=402&can=1
Microsoft Office 2007 – ‘mso.dll’ Use-After-Free (MS15-081)
Source: https://code.google.com/p/google-security-research/issues/detail?id=414&can=1
Microsoft Office 2007 – ‘mso.dll’ Arbitrary Free (MS15-081)
Source: https://code.google.com/p/google-security-research/issues/detail?id=417&can=1
Microsoft Office 2007 – ‘OGL.dll’ DpOutputSpanStretch::OutputSpan Out of Bounds Write (MS15-080)
Source: https://code.google.com/p/google-security-research/issues/detail?id=420&can=1
Microsoft Office 2007 – ‘wwlib.dll’ Type Confusion (MS15-081)
Source: https://code.google.com/p/google-security-research/issues/detail?id=423&can=1
Microsoft Office 2007 – ‘wwlib.dll’ fcPlcfFldMom Uninitialized Heap Usage
Source: https://code.google.com/p/google-security-research/issues/detail?id=424&can=1