windows

windows 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

Jaangle 0.98e.971 – Denial of Service

#!/usr/bin/perl

2010-08-02 s-dz dos

Xerver 4.32 – Source Disclosure / HTTP Authentication Bypass (Metasploit)

# Exploit Title: Xerver Source Disclosure and HTTP Auth Bypass

2010-08-01 Ben Schmidt remote

Barcodewiz Barcode ActiveX Control 3.29 – Remote HeapSpray (Internet Explorer 6/7)

2010-07-31 Dr_IDE remote

Xion Audio Player 1.0.125 – Denial of Service

#!/usr/bin/perl

2010-07-31 s-dz dos

Xmyplay 3.5.1 – Denial of Service

#!/usr/bin/perl

2010-07-31 s-dz dos

SigPlus Pro 3.74 – ActiveX ‘LCDWriteString()’ Remote Buffer Overflow JIT Spray (ASLR + DEP Bypass)

~ mr_me presents ~

2010-07-31 mr_me remote

ChordPulse 1.4 – Denial of Service

# Vendor: http://www.chordpulse.com/

2010-07-30 Madjix dos

Barcodewiz Barcode ActiveX Control 3.29 – Remote Buffer Overflow (SEH)

# BarCodeWiz Barcode ActiveX Control 3.29 BoF (SEH)

2010-07-30 loneferret remote

Barcodewiz BarCode ActiveX 3.29 – Denial of Service (PoC)

# BarCodeWiz Barcode ActiveX Control 3.29 PoC (SEH)

2010-07-30 loneferret dos

HTML Email Creator 2.42 build 718 – Local Buffer Overflow (SEH)

########################################################################################

2010-07-29 Madjix local

WM Downloader 3.1.2.2 2010.04.15 – Local Buffer Overflow (SEH)

#!/usr/bin/python

2010-07-28 fdiskyou local

UPlusFTP Server 1.7.1.01 – (Authenticated) HTTP Remote Buffer Overflow

#!/usr/bin/python

2010-07-28 Karn Ganeshen & corelanc0d3r remote

Symantec Ams Intel Alert Handler Service – Design Flaw

// Remote command execution at System level without authentication

2010-07-28 Spider remote

Zemana AntiLogger ‘AntiLog32.sys’ 1.5.2.755 – Local Privilege Escalation

Zemana AntiLogger AntiLog32.sys OptionalHeader.DataDirectory[IMAGE_DIRECTORY_ENTRY_SECURITY].VirtualAddress ;

2010-07-28 th_decoder local

EasyFTP Server 1.7.0.11 – ‘MKD’ Stack Buffer Overflow (Metasploit)

##

2010-07-27 Metasploit remote

Hyleos ChemView – ActiveX Control Stack Buffer Overflow (Metasploit)

##

2010-07-27 Metasploit remote

Microsoft Internet Explorer 6/7 – Remote Denial of Service

# Exploit Title: IE6 / 7 Remote Dos vulnerability

2010-07-27 Richard leahy dos

QQPlayer 2.3.696.400p1 – ‘.smi’ File Buffer Overflow

#!/usr/bin/env python

2010-07-27 Lufeng Li local

httpdx – ‘h_handlepeer()’ Remote Buffer Overflow (Metasploit)

##

2010-07-26 Metasploit remote

CommuniCrypt Mail 1.16 – SMTP ActiveX Stack Buffer Overflow (Metasploit)

##

2010-07-26 Metasploit remote

Media Player Classic – Heap Overflow / Denial of Service

Tested on:

2010-07-26 Praveen Darshanam dos

Novell ZENworks 6.5 – Desktop/Server Management Overflow (Metasploit)

##

2010-07-25 Metasploit remote

Apache Tomcat mod_jk 1.2.20 – Remote Buffer Overflow (Metasploit)

##

2010-07-25 Metasploit remote

Microsoft Message Queueing Service – DNS Name Path Overflow (MS07-065) (Metasploit)

##

2010-07-25 Metasploit remote

Microsoft DNS RPC Service – ‘extractQuotedChar()’ TCP Overflow (MS07-029) (Metasploit)

##

2010-07-25 Metasploit remote

Microsoft IIS 5.0 – WebDAV ‘ntdll.dll’ Path Overflow (MS03-007) (Metasploit)

##

2010-07-25 Metasploit remote

Microsoft Windows – ASN.1 Library Bitstring Heap Overflow (MS04-007) (Metasploit)

##

2010-07-25 Metasploit remote

Microsoft IIS – ISAPI FrontPage ‘fp30reg.dll’ Chunked Overflow (MS03-051) (Metasploit)

##

2010-07-25 Metasploit remote

Microsoft IIS – ISAPI ‘nsiislog.dll’ ISAPI POST Overflow (MS03-022) (Metasploit)

##

2010-07-25 Metasploit remote

Mediacoder 0.7.3.4682 – ‘.m3u’ Universal Buffer Overflow

#!/usr/bin/perl

2010-07-24 s-dz local

EasyFTP Server 1.7.0.11 – ‘LIST’ (Authenticated) Remote Buffer Overflow (Metasploit)

##

2010-07-23 Muhamad Fadzil Ramli remote

Multiple Browsers (FF3.6.7/SM 2.0.6) – Clickjacking

FF3.6.7/SM 2.0.6 ClickJacking Vulnerability

2010-07-23 Pouya Daneshmand remote

Quick ‘n Easy FTP Server 3.9.1 – ‘USER’ Remote Buffer Overflow

source: https://www.securityfocus.com/bid/42186/info

2010-07-22 demonalex dos

id Software id Tech 4 Engine – ‘idGameLocal::GetGameStateObject()’ Remote Code Execution

source: https://www.securityfocus.com/bid/41001/info

2010-07-21 Luigi Auriemma remote

ZipCentral – ‘.zip’ Local Buffer Overflow (SEH)

# Author : Jiten Pathy

2010-07-21 Jiten Pathy local

QQPlayer – ‘.cue’ File Buffer Overflow

#!/usr/bin/env python

2010-07-21 Lufeng Li local

QQPlayer – ‘.asx’ File Processing Buffer Overflow

#################################################################

2010-07-21 Li Qingshan local

Outlook Web Access 2003 – Cross-Site Request Forgery

# Exploit Title: Microsoft Office Outlook Web Access for Exchange Server 2003 XSRF Vulnerability

2010-07-21 anonymous webapps

Microsoft Outlook Web Access for Exchange Server 2003 – Cross-Site Request Forgery

source: https://www.securityfocus.com/bid/41843/info

2010-07-20 anonymous dos

Microsoft Office Web Components (OWC) Spreadsheet – msDataSourceObject Memory Corruption (MS09-043) (Metasploit)

##

2010-07-20 Metasploit remote

Lithtech Engine – Memory Corruption

# Original Advisory: http://aluigi.org/adv/fearless-adv.txt

2010-07-20 Luigi Auriemma dos

SapGUI BI 7100.1.400.8 – Heap Corruption

Unable to create object

2010-07-20 Elazar Broad remote

Unreal Tournament 3 2.1 – ‘STEAMBLOB’ Remote Denial of Service

#Original Advisory: http://aluigi.org/adv/ut3steamer-adv.txt

2010-07-20 Luigi Auriemma dos

Microsoft Internet Explorer 7 – Microsoft Clip Organizer Multiple Insecure ActiveX Control Denial of Service Vulnerabilities

# IE 7.0 - DoS Microsoft Clip Organizer Multiple Insecure ActiveX Control

2010-07-20 Beenu Arora dos

Hero DVD – Remote Buffer Overflow (Metasploit)

##################################################################

2010-07-19 Madjix remote

Microsoft DirectX 8/9 DirectPlay – Multiple Denial of Service Vulnerabilities

source: https://www.securityfocus.com/bid/41794/info

2010-07-18 Luigi Auriemma dos

Really Simple IM 1.3beta – Denial of Service (PoC)

#!/usr/bin/python

2010-07-18 loneferret dos

Microsoft Windows – Automatic .LNK Shortcut File Code Execution

From: http://www.ivanlef0u.tuxfamily.org/?p=411

2010-07-18 Ivanlef0u local

EasyFTP Server 1.7.0.11 – ‘CWD’ (Authenticated) Remote Buffer Overflow

# Exploit Title: Easy FTP Server v1.7.0.11 CWD Command Remote Buffer Overflow Exploit (Post Auth)

2010-07-18 fdiskyou remote

EasyFTP Server 1.7.0.11 – ‘LIST’ (Authenticated) Remote Buffer Overflow

#!/usr/bin/python

2010-07-17 Karn Ganeshen remote