dos

TwistedBrush Pro Studio 24.06 – ‘.srp’ Denial of Service (PoC)

# -*- coding: utf-8 -*-

TwistedBrush Pro Studio 24.06 – ‘Script Recorder’ Denial of Service (PoC)

# -*- coding: utf-8 -*-

TwistedBrush Pro Studio 24.06 – ‘Resize Image’ Denial of Service (PoC)

# -*- coding: utf-8 -*-

Selfie Studio 2.17 – ‘Resize Image’ Denial of Service (PoC)

# -*- coding: utf-8 -*-

Google Chrome V8 – Turbofan JSCallReducer::ReduceArrayIndexOfIncludes Out-of-Bounds Read/Write

DNSS 2.1.8 – Denial of Service (PoC)

#Exploit Title: DNSS Domain Name Search Software 2.1.8 - Denial of Service (PoC)

SpotMSN 2.4.6 – Denial of Service (PoC)

#Exploit Title: SpotMSN 2.4.6 - 'Name/Key' Denial of Service (PoC)

PHPRunner 10.1 – Denial of Service (PoC)

#Exploit Title: PHPRunner 10.1 - Denial of Service (PoC)

ASPRunner.NET 10.1 – Denial of Service (PoC)

#Exploit Title: ASPRunner.NET 10.1 - Denial of Service (PoC)

SpotPaltalk 1.1.5 – Denial of Service (PoC)

# -*- coding: utf-8 -*-

SpotIM 2.2 – Denial of Service (PoC)

# -*- coding: utf-8 -*-

jetCast Server 2.0 – Denial of Service (PoC)

#Exploit Title: jetCast Server 2.0 - Denial of Service (PoC)

Convert Video jetAudio 8.1.7 – Denial of Service (PoC)

# -*- coding: utf-8 -*-

Lyric Maker 2.0.1.0 – Denial of Service (PoC)

# -*- coding: utf-8 -*-

Lyric Video Creator 2.1 – ‘.mp3’ Denial of Service (PoC)

# -*- coding: utf-8 -*-

jetAudio 8.1.7.20702 Basic – ‘Enter URL’ Denial of Service (PoC)

#Exploit Title: jetAudio 8.1.7.20702 Basic - Denial of Service (PoC)

Easy Chat Server 3.1 – ‘message’ Denial of Service (PoC)

#!/usr/bin/python

iOS 12.1.3 – ‘cfprefsd’ Memory Corruption

// (c) 2019 ZecOps, Inc. - https://www.zecops.com - Find Attackers' Mistakes

SolarWinds DameWare Mini Remote Control 10.0 – Denial of Service

#Vendor: Solarwinds

Linux – Missing Locking Between ELF coredump code and userfaultfd VMA Modification

elf_core_dump() has a comment back from something like 2.5.43-C3 that says:

SpotAuditor 5.2.6 – ‘Name’ Denial of Service (PoC)

#Exploit Title: SpotAuditor 5.2.6 - 'Name' Denial of Service (PoC)

Intelbras IWR 3000N – Denial of Service (Remote Reboot)

#/bin/bash

systemd – DynamicUser can Create setuid Binaries when Assisted by Another Process

This bug report describes a bug in systemd that allows a service with

NSauditor 3.1.2.0 – ‘Name’ Denial of Service (PoC)

#Exploit Title: NSauditor 3.1.2.0 - 'Name' Denial of Service (PoC)

NSauditor 3.1.2.0 – ‘Community’ Denial of Service (PoC)

#Exploit Title: NSauditor 3.1.2.0 - 'Community' Denial of Service (PoC)

AnMing MP3 CD Burner 2.0 – Denial of Service (PoC)

# Exploit Title: AnMing MP3 CD Burner 2.0 Local Dos Exploit

JioFi 4G M2S 1.0.2 – Denial of Service

# Exploit Title: cgi-bin/qcmap_web_cgi on JioFi 4G M2S 1.0.2 devices allows a DoS (Hang) via the mask POST parameter

Backup Key Recovery 2.2.4 – Denial of Service (PoC)

#Exploit Title: Backup Key Recovery 2.2.4 - 'Name' Denial of Service (PoC)

HeidiSQL 10.1.0.5464 – Denial of Service (PoC)

#Exploit Title: HeidiSQL Portable 10.1.0.5464 - Denial of Service (PoC)

Linux – ‘page->_refcount’ Overflow via FUSE

Linux: page->_refcount overflow via FUSE with ~140GiB RAM usage

Linux – Missing Locking in Siemens R3964 Line Discipline Race Condition

The Siemens R3964 line discipline code in drivers/tty/n_r3964.c has a few races

systemd – Lack of Seat Verification in PAM Module Permits Spoofing Active Session to polkit

As documented at

Google Chrome 73.0.3683.103 V8 JavaScript Engine – Out-of-Memory in Invalid Table Size Denial of Service (PoC)

QNAP myQNAPcloud Connect 1.3.4.0317 – ‘Username/Password’ Denial of Service

#!/usr/bin/python

Ease Audio Converter 5.30 – ‘.mp4’ Denial of Service (PoC)

# Exploit Title: Ease Audio Converter 5.30 Audio Cutter Dos Exploit

Netwide Assembler (NASM) 2.14rc15 – NULL Pointer Dereference (PoC)

# Exploit Title: Netwide Assembler (NASM) 2.14rc15 NULL Pointer Dereference (PoC)

Oracle Java Runtime Environment – Heap Corruption During TTF font Rendering in GlyphIterator::setCurrGlyphID

A heap corruption was observed in Oracle Java Runtime Environment version 8u202 (latest at the time of this writing) ...

Oracle Java Runtime Environment – Heap Corruption During TTF font Rendering in sc_FindExtrema4

A heap corruption was observed in Oracle Java Runtime Environment version 8u202 (latest at the time of this writing) ...

DHCP Server 2.5.2 – Denial of Service (PoC)

#Exploit Title: DHCP Server 2.5.2 - Denial of Service (PoC)

ASUS HG100 – Denial of Service

# Exploit Title:ASUS HG100 devices denial of service(DOS) via IPv4 packets/SlowHTTPDOS

AdminExpress 1.2.5 – ‘Folder Path’ Denial of Service (PoC)

# -*- coding: utf-8 -*-

PCHelpWare V2 1.0.0.5 – ‘Group’ Denial of Service (PoC)

# -*- coding: utf-8 -*-

PCHelpWare V2 1.0.0.5 – ‘SC’ Denial of Service (PoC)

# -*- coding: utf-8 -*-

UltraVNC Launcher 1.2.2.4 – ‘Path’ Denial of Service (PoC)

#Exploit Title: UltraVNC Launcher 1.2.2.4 - Denial of Service (PoC)

UltraVNC Viewer 1.2.2.4 – ‘VNC Server’ Denial of Service (PoC)

#Exploit Title: UltraVNC Viewer 1.2.2.4 - Denial of Service (PoC)

Magic ISO Maker 5.5(build 281) – ‘Serial Code’ Denial of Service (PoC)

# -*- coding: utf-8 -*-

Google Chrome 73.0.3683.39 / Chromium 74.0.3712.0 – ‘ReadableStream’ Internal Object Leak Type Confusion

Click to start AudioContext

Google Chrome 72.0.3626.81 – ‘V8TrustedTypePolicyOptions::ToImpl’ Type Confusion

VULNERABILITY DETAILS

WebKitGTK+ – ‘ThreadedCompositor’ Race Condition

WebKit JavaScriptCore – CodeBlock Dangling Watchpoints Use-After-Free

While fuzzing JavaScriptCore, I encountered the following (simplified and commented) JavaScript program which crashes...