MySQL DoS in the Procedure Analyse Function – CVE-2015-4870

This is a crash I found in MySQL versions up to 5.5.45. In the function procedure analyse() I found this crash while passing a sub query.

Syntax:

So an Example POC would be:


(more…)

Wireshark DoS PoC

I recently found out that Wireshark 1.10.7 32-bit and 64-bit versions crashes when we input a large buffer into the

  • Filter text box
  • Statistics -> IP DESTINATIONS
  • Statistics -> IP Addresses

(more…)