Spidermonkey – IonMonkey Leaks JS_OPTIMIZED_OUT Magic Value to Script
IonMonkey can, during a bailout, leak an internal JS_OPTIMIZED_OUT magic value to the running script. This magic valu...
dos
dos 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
Free SMTP Server 2.5 – Denial of Service (PoC)
#Exploit Title: Free SMTP Server - Local Denial of Service Crash (PoC)
Pidgin 2.13.0 – Denial of Service (PoC)
# -*- coding: utf-8 -*-
Fast AVI MPEG Joiner – ‘License Name’ Denial of Service (PoC)
# Exploit Title: Fast AVI MPEG Joiner Dos Exploit
Cyberoam General Authentication Client 2.1.2.7 – ‘Server Address’ Denial of Service (PoC)
#Exploit Title: Cyberoam General Authentication Client 2.1.2.7 - Denial of Service (PoC)
Cyberoam Transparent Authentication Suite 2.1.2.5 – ‘NetBIOS Name’ Denial of Service (PoC)
#Exploit Title: Cyberoam Transparent Authentication Suite 2.1.2.5 - 'NetBIOS Name' Denial of Service (PoC)
Cyberoam Transparent Authentication Suite 2.1.2.5 – ‘Fully Qualified Domain Name’ Denial of Service (PoC)
#Exploit Title: Cyberoam Transparent Authentication Suite 2.1.2.5 - 'Fully Qualified Domain Name' Denial of Service (...
Cyberoam SSLVPN Client 1.3.1.30 – ‘HTTP Proxy’ Denial of Service (PoC)
#Exploit Title: Cyberoam SSLVPN Client 1.3.1.30 - 'HTTP Proxy' Denial of Service (PoC)
Cyberoam SSLVPN Client 1.3.1.30 – ‘Connect To Server’ Denial of Service (PoC)
#Exploit Title: Cyberoam SSLVPN Client 1.3.1.30 - 'Connect To Server' Denial of Service (PoC)
Visual Voicemail for iPhone – IMAP NAMESPACE Processing Use-After-Free
Visual Voicemail (VVM) is a feature of mobile devices that allows voicemail to be read in an email-like format. Carri...
Terminal Services Manager 3.2.1 – Denial of Service
# -*- coding: utf-8 -*-
NetAware 1.20 – ‘Share Name’ Denial of Service (PoC)
# -*- coding: utf-8 -*-
NetAware 1.20 – ‘Add Block’ Denial of Service (PoC)
# -*- coding: utf-8 -*-
TapinRadio 2.11.6 – ‘Uername’ Denial of Service (PoC)
#Exploit Title: TapinRadio 2.11.6 - 'Uername' Denial of Service (PoC)
TapinRadio 2.11.6 – ‘Address’ Denial of Service (PoC)
#Exploit Title: TapinRadio 2.11.6 - 'Address' Denial of Service (PoC)
RarmaRadio 2.72.3 – ‘Username’ Denial of Service (PoC)
#Exploit Title: RarmaRadio 2.72.3 - 'Username' Denial of Service (PoC)
RarmaRadio 2.72.3 – ‘Server’ Denial of Service (PoC)
#Exploit Title: RarmaRadio 2.72.3 - 'Server' Denial of Service (PoC)
BlueStacks 4.80.0.1060 – Denial of Service (PoC)
# -*- coding: utf-8 -*-
Apple macOS < 10.14.5 / iOS < 12.3 JavaScriptCore - AIR Optimization Incorrectly Removes Assignment to Register
While fuzzing JavaScriptCore, I encountered the following JavaScript program which crashes jsc from current HEAD (git...
Apple macOS < 10.14.5 / iOS < 12.3 JavaScriptCore - Loop-Invariant Code Motion (LICM) in DFG JIT Leaves Stack Variable Uninitialized
While fuzzing JavaScriptCore, I encountered the following (modified and commented) JavaScript program which crashes j...
Apple macOS < 10.14.5 / iOS < 12.3 DFG JIT Compiler - 'HasIndexedProperty' Use-After-Free
See also https://bugs.chromium.org/p/project-zero/issues/detail?id=1699 for a similar issue.
Deluge 1.3.15 – ‘Webseeds’ Denial of Service (PoC)
#Exploit Title: Deluge 1.3.15 - 'Webseeds' Denial of Service (PoC)
Deluge 1.3.15 – ‘URL’ Denial of Service (PoC)
#Exploit Title: Deluge 1.3.15 - 'URL' Denial of Service (PoC)
BulletProof FTP Server 2019.0.0.50 – ‘Storage-Path’ Denial of Service (PoC)
#Exploit Title: BulletProof FTP Server 2019.0.0.50 - 'Storage-Path' Denial of Service (PoC)
BulletProof FTP Server 2019.0.0.50 – ‘DNS Address’ Denial of Service (PoC)
#Exploit Title: BulletProof FTP Server 2019.0.0.50 - 'DNS Address' Denial of Service (PoC)
AbsoluteTelnet 10.16 – ‘License name’ Denial of Service (PoC)
#Exploit Title: AbsoluteTelnet 10.16 - 'License name' Denial of Service (PoC)
docPrint Pro 8.0 – Denial of Service (PoC)
# -*- coding: utf-8 -*-
PCL Converter 2.7 – Denial of Service (PoC)
# -*- coding: utf-8 -*-
Encrypt PDF 2.3 – Denial of Service (PoC)
# -*- coding: utf-8 -*-
Huawei eSpace 1.1.11.103 – ‘ContactsCtrl.dll’ / ‘eSpaceStatusCtrl.dll’ ActiveX Heap Overflow
Huawei eSpace Meeting ContactsCtrl.dll and eSpaceStatusCtrl.dll ActiveX Heap Overflow
Huawei eSpace 1.1.11.103 – Image File Format Handling Buffer Overflow
Huawei eSpace Meeting Image File Format Handling Buffer Overflow Vulnerability
Huawei eSpace Meeting 1.1.11.103 – ‘cenwpoll.dll’ SEH Buffer Overflow (Unicode)
#!/usr/bin/env python
CEWE Photo Importer 6.4.3 – ‘.jpg’ Denial of Service (PoC)
# -*- coding: utf-8 -*-
CEWE Photoshow 6.4.3 – ‘Password’ Denial of Service (PoC)
# -*- coding: utf-8 -*-
Sandboxie 5.30 – ‘Programs Alerts’ Denial of Service (PoC)
# -*- coding: utf-8 -*-
SEL AcSELerator Architect 2.2.24 – CPU Exhaustion Denial of Service
#!/usr/bin/env python
Axessh 4.2 – ‘Log file name’ Denial of Service (PoC)
#Exploit Title: Axessh 4.2 'Log file name' - Denial of Service (PoC)
ZOC Terminal v7.23.4 – ‘Shell’ Denial of Service (PoC)
#Exploit Title: ZOC Terminal v7.23.4 - 'Shell' Denial of Service (PoC)
ZOC Terminal v7.23.4 – ‘Private key file’ Denial of Service (PoC)
#Exploit Title: ZOC Terminal v7.23.4 - 'Private key file' Denial of Service (PoC)
ZOC Terminal 7.23.4 – ‘Script’ Denial of Service (PoC)
#Exploit Title: ZOC Terminal v7.23.4 - 'Script' Denial of Service (PoC)
WeChat for Android 7.0.4 – ‘vcodec2_hls_filter’ Denial of Service
# Exploit Title: DoS Wechat with an emoji
Tomabo MP4 Converter 3.25.22 – Denial of Service (PoC)
# -*- coding: utf-8 -*-
TwistedBrush Pro Studio 24.06 – ‘.srp’ Denial of Service (PoC)
# -*- coding: utf-8 -*-
TwistedBrush Pro Studio 24.06 – ‘Script Recorder’ Denial of Service (PoC)
# -*- coding: utf-8 -*-
TwistedBrush Pro Studio 24.06 – ‘Resize Image’ Denial of Service (PoC)
# -*- coding: utf-8 -*-
Selfie Studio 2.17 – ‘Resize Image’ Denial of Service (PoC)
# -*- coding: utf-8 -*-