InTouch Machine Edition 8.1 SP1 – ‘Nombre del Tag’ Buffer Overflow (SEH)
# Exploit Title: InTouch Machine Edition 8.1 SP1 - 'Nombre del Tag' Buffer Overflow (SEH)
windows_x86-64
windows_x86-64 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
Cisco Umbrella Roaming Client 2.0.168 – Local Privilege Escalation
# Exploit Title: Cisco Umbrella Roaming Client 2.0.168 - Privilege Escalation
Microsoft People 10.1807.2131.0 – Denial of service (PoC)
# Exploit Title: Microsoft people 10.1807.2131.0 - Denial of service (PoC)
Visual Ping 0.8.0.0 – ‘Host’ Denial of Service (PoC)
# Exploit Title: Visual Ping 0.8.0.0 - 'Host' Denial of Service (PoC)
Acunetix WVS Reporter 10.0 – Denial of Service (PoC)
# Exploit Title: Acunetix WVS Reporter 10.0 - Denial of Service (PoC)
Cybrotech CyBroHttpServer 1.0.3 – Cross-Site Scripting
# Exploit Title: Cybrotech CyBroHttpServer 1.0.3 - Cross-Site Scripting
Nord VPN 6.14.31 – Denial of Service (PoC)
# Exploit Title: Nord VPN
Cybrotech CyBroHttpServer 1.0.3 – Directory Traversal
# Exploit Title: Cybrotech CyBroHttpServer 1.0.3 - Directory Traversal
NetworkActiv Web Server 4.0 Pre-Alpha-3.7.2 – ‘Username’ Denial of Service (PoC)
#Exploit Title: NetworkActiv Web Server 4.0 Pre-Alpha-3.7.2 - 'Username' Denial of Service (PoC)
Trillian 6.1 Build 16 – ‘Sign In’ Denial of service (PoC)
#Exploit Title: Trillian 6.1 Build 16 - "Sign In" Denial of service (PoC)
Skype Empresarial Office 365 16.0.10730.20053 – ‘Dirección de inicio de sesión’ Denial of service (PoC)
# Exploit Title: Skype Empresarial Office 365 16.0.10730.20053 - 'Dirección de inicio de sesión' Denial of service (PoC)
NASA openVSP 3.16.1 – Denial of Service (PoC)
# Exploit Title: NASA openVSP 3.16.1 - Denial of Service (PoC)
Instagram App 41.1788.50991.0 – Denial of Service (PoC)
# Exploit Title: Instagram App 41.1788.50991.0 - Denial of Service (PoC)
Firefox 55.0.3 – Denial of Service (PoC)
# Exploit Title: Firefox 55.0.3 - Denial of Service (PoC)
ManageEngine ADManager Plus 6.5.7 – Cross-Site Scripting
# Exploit Title: ManageEngine ADManager Plus 6.5.7 - Cross-Site Scripting
SkypeApp 12.8.487.0 – ‘Cuenta de Skype o Microsoft’ Denial of Service (PoC)
# Exploit Title: SkypeApp 12.8.487.0 - 'Cuenta de Skype o Microsoft' Denial of Service (PoC)
CuteFTP 8.3.1 – Denial of Service (PoC)
# Exploit Title : CuteFTP 8.3.1 - Denial Of Service (PoC)
UltraISO 9.7.1.3519 – Denial Of Service (PoC)
# Exploit Title : UltraISO 9.7.1.3519 - Denial Of Service (PoC)
Restorator 1793 – Denial of Service (PoC)
# Exploit Title: Restorator 1793 - Denial of Service (PoC)
Zortam MP3 Media Studio 23.95 – Denial of Service (PoC)
# Exploit Title: Zortam MP3 Media Studio 23.95 - Denial of Service (PoC)
CEWE Photoshow 6.3.4 – Denial of Service (PoC)
# Exploit Title: CEWE Photoshow 6.3.4 - Denial of Service (PoC)
Central Management Software 1.4.13 – Denial of Service (PoC)
# Exploit Title: Central Management Software v1.4.13 - Denial of Service (PoC)
ObserverIP Scan Tool 1.4.0.1 – Denial of Service (PoC)
# Exploit Title: ObserverIP Scan Tool 1.4.0.1 - Denial of Service (PoC)
Cloudme 1.9 – Buffer Overflow (DEP) (Metasploit)
# Exploit Title: Cloudme 1.9 - Buffer Overflow (DEP) (Metasploit)
Wansview 1.0.2 – Denial of Service (PoC)
# Exploit Title: Wansview 1.0.2 - Denial of Service (PoC)
iSmartViewPro 1.5 – ‘Password’ Buffer Overflow
# Exploit Title: iSmartViewPro 1.5 - 'Password' Buffer Overflow
iSmartViewPro 1.5 – ‘Account’ Buffer Overflow
# Exploit Title: iSmartViewPro 1.5 - 'Account' Buffer Overflow
iSmartViewPro 1.5 – ‘Device Alias’ Buffer Overflow
# Exploit Title: iSmartViewPro 1.5 - 'Device Alias' Buffer Overflow
QNap QVR Client 5.0.3.23100 – Denial of Service (PoC)
# Exploit Title : QNap QVR Client 5.0.3.23100 - Denial of Service (PoC)
CloudMe Sync 1.10.9 – Buffer Overflow (SEH)(DEP Bypass)
# Exploit Title: CloudMe Sync 1.10.9 - Buffer Overflow (SEH)(DEP Bypass)
CloudMe Sync < 1.11.0 - Buffer Overflow (SEH) (DEP Bypass)
# Exploit: CloudMe Sync < 1.11.0 - Buffer Overflow (SEH) (DEP Bypass)
Microsoft Windows – Desktop Bridge VFS Privilege Escalation
Windows: Windows: Desktop Bridge VFS EoP
Microsoft Windows Kernel – ‘nt!NtWaitForDebugEvent’ 64-bit Stack Memory Disclosure
We have discovered that the nt!NtWaitForDebugEvent system call discloses portions of uninitialized kernel stack memor...
Microsoft Windows Kernel – ‘nt!KiDispatchException’ 64-bit Stack Memory Disclosure
We have discovered a new Windows kernel memory disclosure vulnerability in the creation and copying of a EXCEPTION_RE...
Microsoft Windows Kernel – ‘NtQueryInformationThread(ThreadBasicInformation)’ 64-bit Stack Memory Disclosure
We have discovered that the nt!NtQueryInformationThread system call invoked with the 0 information class (ThreadBasic...
Microsoft Windows Kernel – ‘NtQueryVirtualMemory(MemoryMappedFilenameInformation)’ 64-bit Pool Memory Disclosure
We have discovered that the nt!NtQueryVirtualMemory system call invoked with the 2 information class (MemoryMappedFil...
DEWESoft X3 SP1 (x64) – Remote Command Execution
[+] Credits: John Page (aka hyp3rlinx)
NoMachine < 6.0.80 (x64) - 'nxfuse' Privilege Escalation
from ctypes import *
IKARUS anti.virus 2.16.7 – ‘ntguard_x64’ Local Privilege Escalation
Exploit Title - IKARUS anti.virus Arbitrary Write Privilege Escalation
Microsoft Internet Explorer – ‘mshtml.dll’ Remote Code Execution (MS17-007)
aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
Microsoft Windows Server 2008 R2 (x64) – ‘SrvOs2FeaToNt’ SMB Remote Code Execution (MS17-010)
# Exploit Author: Juan Sacco at KPN Red Team - http://www.kpn.com
Oracle VM VirtualBox 5.0.32 r112930 (x64) – Windows Process COM Injection Privilege Escalation
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1103