Apple QuickTime – ‘_Marshaled_pUnk’ Backdoor Client-Side Arbitrary Code Execution
Original Source: http://reversemode.com/index.php?option=com_content&task=view&id=69&Itemid=1
dos
dos 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
Mereo 1.9.2 – Remote HTTP Server Denial of Service
#!/usr/bin/python
SnackAmp 3.1.2 – ‘.wav’ Buffer Overflow (PoC)
# Exploit Title: SnackAmp 3.1.2 Malicious WAV Buffer Overflow Vulnerability (POC)
LeadTools ActiveX Raster Twain 16.5 – ‘LtocxTwainu.dll’ Buffer Overflow (PoC)
LEADTOOLS ActiveX Raster Twain v16.5 (LtocxTwainu.dll) Remote Buffer Overflow PoC
Adobe Acrobat and Reader 9.3.4 – ‘AcroForm.api’ Memory Corruption
source: https://www.securityfocus.com/bid/42701/info
Flash Movie Player 1.5 – File Magic Denial of Service
Flash Movie Player v1.5 File Magic Crash
Adobe Acrobat Reader < 9.x - Memory Corruption
---------------------------------------------------------------------------
Abyssal Metal Player 2.0.9 – Denial of Service
# Exploit Title: Abyssal Metal Player 2.0.9 DoS
Tplayer V1R10 – Denial of Service
#!/usr/bin/python
Microsoft Windows – IcmpSendEcho2Ex Interrupting Denial of Service
Microsoft Windows DoS (IcmpSendEcho2Ex interrupting)
Crystal Player 1.98 – ‘.mls’ Buffer Overflow
source: https://www.securityfocus.com/bid/42727/info
Oracle MySQL < 5.1.49 - Malformed 'BINLOG' Arguments Denial of Service
source: https://www.securityfocus.com/bid/42638/info
Oracle MySQL 5.1.48 – ‘HANDLER’ Interface Denial of Service
source: https://www.securityfocus.com/bid/42633/info
OraclMySQL 5.1.48 – ‘LOAD DATA INFILE’ Denial of Service
source: https://www.securityfocus.com/bid/42625/info
MySQL 5.1.48 – ‘EXPLAIN’ Denial of Service
source: https://www.securityfocus.com/bid/42599/info
PlayPad Music Player 1.12 – ‘.mp3’ Denial of Service
# Exploit Title: PlayPad Music Player v1.12 .mp3 File Processing BoF/Crash
AV Music Morpher Gold 5.0.38 – ‘.m3u’ Denial of Service
#!/usr/bin/python
Karaoke Video Creator 2.2.8 – Denial of Service
# Exploit Title: Karaoke Video Creator Denial of Service Vulnerability
MySQL 5.1.48 – ‘Temporary InnoDB’ Tables Denial of Service
source: https://www.securityfocus.com/bid/42598/info
Fennec 1.2 Beta 3 – Denial of Service
# Exploit Title: Fennec 1.2 Beta 3 Denial of Service Vulnerability
Tuniac 100723 – Denial of Service
# Exploit Title: Tuniac 100723 Denial of Service Vulnerability
SonicWALL E-Class SSL-VPN – ActiveX Control Format String Overflow
-------------------------- NSOADV-2010-005 ---------------------------
RockN Wav Editor 1.8 – Denial of Service
# Exploit Title: RockN_Wav Editor 1.8 Buffer Overflow (POC)
httpdx 1.5.4 – Multiple Denial of Service Vulnerabilities (http-ftp) (PoC)
#!/usr/bin/env python
VbsEdit 4.6.1.0 – Denial of Service
# Exploit Title: VbsEdit v4.6.1.0 DoS
PHP 5.3.3 – ‘ibase_gen_id()’ Off-by-One Overflow
=== Vulnerability ===
Brazip 9.0 – ‘.zip’ Buffer Overflow (SEH)
#!user/bin/python
Microsoft Windows – nt!SeObjectCreateSaclAccessBits() Missed ACE Bounds Checks (MS10-047)
Microsoft Windows nt!SeObjectCreateSaclAccessBits() missed ACE bounds checks
Microsoft Windows – Win32k!GreStretchBltInternal() Does Not Handle src == dest
Microsoft Windows win32k!GreStretchBltInternal() does not handle src == dest
Microsoft Windows – Win32k!xxxRealDrawMenuItem() Missing HBITMAP Bounds Checks
Microsoft Windows win32k!xxxRealDrawMenuItem() missing HBITMAP bounds checks
Microsoft Windows – KTM Invalid Free with Reused Transaction GUID (MS10-047)
Microsoft Windows KTM Invalid Free with reused transaction GUID
Microsoft Windows – nt!NtCreateThread Race Condition with Invalid Code Segment (MS10-047)
Microsoft Windows nt!NtCreateThread race condition with invalid code segment
Xilisoft Video Converter 3.1.8.0720b – ‘.ogg’ Buffer Overflow
source: https://www.securityfocus.com/bid/42473/info
CA Advantage Ingres 2.6 – Multiple Buffer Overflow Vulnerabilities (PoC)
# Exploit Title: Computer Associates Advantage Ingres 2.6 Multiple Buffer Overflow Vulnerabilities PoC
Acrobat Acrobat – Font Parsing Integer Overflow
From the authors site:
SmartCode ServerX VNC Server ActiveX 1.1.5.0 – ‘scvncsrvx.dll’ Denial of Service
Title: SmartCode ServerX VNC Server ActiveX 1.1.5.0 (scvncsrvx.dll) DoS Exploit
Sonique 2.0 – ‘.xpl’ Remote Stack Buffer Overflow
source: https://www.securityfocus.com/bid/42434/info
CombiWave Lite 4.0.1.4 – Denial of Service
# Exploit Title: CombiWave Lite v4.0.1.4 (.mws) DoS
JaMP Player 4.2.2.0 – Denial of Service
# Exploit Title: JaMP Player v4.2.2.0 (.m3u) DoS
Abac Karaoke 2.15 – Denial of Service
# Exploit Title: Abac Karaoke 2.15 (.mp3 , .wma ) DoS
RightMark Audio Analyzer 6.2.3 – Denial of Service
# Exploit Title: RightMark Audio Analyzer 6.2.3 (.sav , .sac) DoS
Microsoft Windows Live Messenger 14.0.8117 – Animation Remote Denial of Service
# Exploit Title: Windows Live Messenger
Microsoft Windows – ‘SfnLOGONNOTIFY’ Privilege Escalation (MS10-048)
source: https://www.securityfocus.com/bid/39630/info
Microsoft Windows – CreateWindow Function Callback (MS10-048)
-----BEGIN PGP SIGNED MESSAGE-----
Microsoft – SMB Server Trans2 Zero Size Pool Alloc (MS10-054)
#!/usr/bin/env python
Rosoft Media Player 4.4.4 – Buffer Overflow (SEH) (PoC)
#rosoft media player 4.4.4 SEH buffer overflow POC
Mthree Development MP3 to WAV Decoder – Denial of Service
# Exploit Title: Mthree Development MP3 to WAV Decoder (.mp3) DoS
Quintessential Media Player 5.0.121 – ‘.m3u’ Buffer Overflow
source: https://www.securityfocus.com/bid/42307/info
Linux Kernel 2.6.33.3 – SCTP INIT Remote Denial of Service
# From: http://jon.oberheide.org/files/sctp-boom.py