Adobe Photoshop CS2 – ‘Wintab32.dll’ DLL Hijacking
Exploit Title: Adobe Photoshop CS2 DLL Hijacking Exploit (Wintab32.dll)
windows
windows 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
Adobe Dreamweaver CS5 11.0 build 4909 – ‘mfc90loc.dll’ DLL Hijacking
# Exploit Title: Adobe Dreamweaver CS5 DLL Hijacking Exploit (mfc90loc.dll)
BS.Player 2.56 build 1043 – ‘mfc71loc.dll’ DLL Hijacking
# Exploit Title: BS.Player DLL Hijacking Exploit (mfc71loc.dll)
Adobe Dreamweaver CS4 – ‘ibfs32.dll’ DLL Hijacking
Exploit Title: Adobe Dreamweaver CS4 DLL Hijacking Exploit (ibfs32.dll)
TeamViewer 5.0.8703 – ‘dwmapi.dll’ DLL Hijacking
Exploit Title: TeamViewer
Microsoft Windows 7 – ‘wab32res.dll wab.exe’ DLL Hijacking
Exploit Title: Microsoft Windows 7 wab.exe DLL Hijacking Exploit (wab32res.dll)
Opera 10.61 – ‘dwmapi.dll’ DLL Hijacking
Exploit Title: Opera DLL Hijacking Exploit ( dwmapi.dll )
Microsoft Windows Movie Maker 2.6.4038.0 – ‘hhctrl.ocx’ DLL Hijacking
Exploit Title: Microsoft Windows Movie Maker
Mozilla Firefox 3.6.8 – ‘dwmapi.dll’ DLL Hijacking
Exploit Title: Firefox
Microsoft Windows Live Email – ‘dwmapi.dll’ DLL Hijacking
Exploit Title: Windows Live Email DLL Hijacking Exploit ( dwmapi.dll )
μTorrent (uTorrent) 2.0.3 – ‘plugin_dll.dll’ DLL Hijacking
Exploit Title: uTorrent
Microsoft PowerPoint 2010 – ‘pptimpconv.dll’ DLL Hijacking
Exploit Title: Microsoft PowerPoint 2010 DLL Hijacking Exploit (pptimpconv.dll)
Wireshark 1.2.10 – ‘airpcap.dll’ DLL Hijacking
Exploit Title: Wireshark
MicroP 0.1.1.1600 – ‘mppl’ Local Buffer Overflow
# Exploit Title: MicroP malicious MPPL Buffer Overflow
Abyssal Metal Player 2.0.9 – Denial of Service
# Exploit Title: Abyssal Metal Player 2.0.9 DoS
Tplayer V1R10 – Denial of Service
#!/usr/bin/python
Microsoft Excel – FEATHEADER Record (MS09-067)
#MS Excel Malformed FEATHEADER Record Exploit
Microsoft Windows – IcmpSendEcho2Ex Interrupting Denial of Service
Microsoft Windows DoS (IcmpSendEcho2Ex interrupting)
Crystal Player 1.98 – ‘.mls’ Buffer Overflow
source: https://www.securityfocus.com/bid/42727/info
PlayPad Music Player 1.12 – ‘.mp3’ Denial of Service
# Exploit Title: PlayPad Music Player v1.12 .mp3 File Processing BoF/Crash
AV Music Morpher Gold 5.0.38 – ‘.m3u’ Denial of Service
#!/usr/bin/python
Karaoke Video Creator 2.2.8 – Denial of Service
# Exploit Title: Karaoke Video Creator Denial of Service Vulnerability
Fennec 1.2 Beta 3 – Denial of Service
# Exploit Title: Fennec 1.2 Beta 3 Denial of Service Vulnerability
Tuniac 100723 – Denial of Service
# Exploit Title: Tuniac 100723 Denial of Service Vulnerability
SonicWALL E-Class SSL-VPN – ActiveX Control Format String Overflow
-------------------------- NSOADV-2010-005 ---------------------------
Enemy Territory: Quake Wars 1.5.12642.33243 – Remote Buffer Overflow
source! https://www.securityfocus.com/bid/40991/info
RockN Wav Editor 1.8 – Denial of Service
# Exploit Title: RockN_Wav Editor 1.8 Buffer Overflow (POC)
httpdx 1.5.4 – Multiple Denial of Service Vulnerabilities (http-ftp) (PoC)
#!/usr/bin/env python
A-PDF WAV to MP3 1.0.0 – Universal Local (SEH)
#!/usr/bin/env python
VbsEdit 4.6.1.0 – Denial of Service
# Exploit Title: VbsEdit v4.6.1.0 DoS
A-PDF WAV to MP3 Converter 1.0.0 – ‘.m3u’ Local Stack Buffer Overflow
# Exploit Title: A-PDF WAV to MP3 Converter 1.0.0 (.m3u) Stack Buffer Overflow
Microsoft Windows – ‘srv2.sys’ SMB Negotiate ProcessID Function Table Dereference (MS09-050)
Microsoft SRV2.SYS SMB Negotiate ProcessID Function Table Dereference
Triologic Media Player 8 – ‘.m3u’ Universal Unicode Local Buffer Overflow (SEH)
# Exploit Title: Triologic Media Player 8 (.m3u) Local Universal Unicode Buffer Overflow [SEH]
Brazip 9.0 – ‘.zip’ Buffer Overflow (SEH)
#!user/bin/python
Microsoft Windows – nt!SeObjectCreateSaclAccessBits() Missed ACE Bounds Checks (MS10-047)
Microsoft Windows nt!SeObjectCreateSaclAccessBits() missed ACE bounds checks
Microsoft Windows – Win32k!GreStretchBltInternal() Does Not Handle src == dest
Microsoft Windows win32k!GreStretchBltInternal() does not handle src == dest
Microsoft Windows – Win32k!xxxRealDrawMenuItem() Missing HBITMAP Bounds Checks
Microsoft Windows win32k!xxxRealDrawMenuItem() missing HBITMAP bounds checks
Microsoft Windows – KTM Invalid Free with Reused Transaction GUID (MS10-047)
Microsoft Windows KTM Invalid Free with reused transaction GUID
Microsoft Windows – nt!NtCreateThread Race Condition with Invalid Code Segment (MS10-047)
Microsoft Windows nt!NtCreateThread race condition with invalid code segment
Xilisoft Video Converter 3.1.8.0720b – ‘.ogg’ Buffer Overflow
source: https://www.securityfocus.com/bid/42473/info
Microsoft Internet Explorer 8 – ‘toStaticHTML()’ HTML Sanitization Bypass
source: https://www.securityfocus.com/bid/42467/info
MUSE 4.9.0.006 – ‘.pls’ Universal Local Buffer Overflow (SEH)
# Exploit Title: MUSE v4.9.0.006 (.pls) Local Universal Buffer Overflow [SEH]
MUSE 4.9.0.006 – ‘.m3u’ Local Buffer Overflow
# Exploit Title: MUSE v4.9.0.006 (.m3u) Local Buffer Overflow Exploit
123 FlashChat 7.8 – Multiple Vulnerabilities
|------------------------------------------------------------------|
Rosoft Media Player 4.4.4 – Local Buffer Overflow (SEH) (2)
#!/usr/bin/python
CA Advantage Ingres 2.6 – Multiple Buffer Overflow Vulnerabilities (PoC)
# Exploit Title: Computer Associates Advantage Ingres 2.6 Multiple Buffer Overflow Vulnerabilities PoC
Acrobat Acrobat – Font Parsing Integer Overflow
From the authors site:
Microsoft Windows Kerberos – ‘Pass The Ticket’ Replay Security Bypass
source: https://www.securityfocus.com/bid/42435/info