Advisory

EvilFingers advisory page is created with an intent to share our analysis and findings with you. Our listings will be published in SecurityFocus and our exploits will be shared with milw0rm website.

Advisory List: Nov 2009

Nov 14, 2009

  • Avast aswRdr.sys Kernel Pool Corruption and Local Privilege Vuln.
    [HTML]

    • Advisory List: Sep 2009

    Sep 23, 2009

  • Avast aswMon2.sys Kernel Memory Corruption Vuln.
    [HTML]

    • Advisory List: Aug 2009

    Aug 15, 2009

  • TheGreenBow VPN Client tgbvpn.sys DoS Vuln.
    [HTML]

    • Advisory List: Apr 2009

    Apr 28, 2009

  • Google Chrome 1.0.154.59 "throw exception" Memory Exhaustion Vuln.
    [HTML] [PDF]

    • Advisory List: Mar 2009

    Mar 14, 2009

  • Google Chrome 1.0.154.48 Single Thread Alert Out of Bound Memory PoC
    [HTML] [PDF]

    • Advisory List: Jan 2009

    Jan 28, 2009

  • Google Chrome 1.0.154.43 ClickJacking Vulnerability
    [HTML] [PDF]

    • Jan 18, 2009

  • Oracle EBusiness Suite Sensitive Information Disclosure Vulnerability
    [HTML] [PDF]

    • Jan 04, 2009

  • Google Chrome FTP PASV IP Malicious Scanning Vulnerability
    [HTML] [PDF]

    • Advisory List: Dec 2008

    Dec 23, 2008

  • PGP Desktop 9.0.6 Denial Of Service Vulnerability PoC
    [HTML] [PDF]

    • Advisory List: Nov 2008

    Nov 24, 2008

  • Google Chrome MetaCharacter URI Obfuscation Vulnerability
    [HTML] [PDF]

    • Advisory List: Oct 2008

    Oct 20, 2008

  • Google Chrome OnbeforeUload and OnUnload Null Check Vuln
    [HTML] [PDF]

    • Advisory List: Sep 2008

    Sep 28, 2008

  • Opera Window Object Suppressing Remote DoS
    [HTML] [PDF]

    • Sep 27, 2008

  • Firefox Null Pointer Dereference Dispatcher Crash and Remote DoS.
    [HTML] [PDF]
  • Google Chrome Window Object Suppressing Remote DoS
    [HTML] [PDF]

    • Sep 23, 2008

  • Google Chrome Carriage Return Null Obj. Memory Exhaustion Remote DoS
    [HTML] [PDF]

    • Sep 19, 2008

  • Achievo-1.3.2-STABLE Cross Site Scripting (XSS)
    [HTML] [PDF]

    • Sep 18, 2008

  • AssetMan v2.5-b SQL Injection using Session Fixation Attack
    [HTML] [PDF]

    • Sep 17, 2008

  • Skype IM Client Password Disclosure Vulnerability
    [HTML] [PDF]
  • Miranda IM Client Password Disclosure Vulnerability
    [HTML] [PDF]
  • PidginIM Client Password Disclosure Vulnerability
    [HTML] [PDF]
  • Microsoft Internet Explorer DoS in Rendering Malicious PNG File
    [HTML] [PDF]

    • Sep 2, 2008

  • Google Chrome Browser 0.2.149.27 in chrome.dll
    [HTML] [PDF]