windows

windows 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

Registry OCX 1.5 – ActiveX Buffer Overflow

# Tested on: Windows XP SP3 IE6/7

2010-07-04 blake remote

BEA WebLogic – JSESSIONID Cookie Value Overflow (Metasploit)

##

2010-07-03 Metasploit remote

War-FTPD 1.65 – ‘Username’ Remote Overflow (Metasploit)

##

2010-07-03 Metasploit remote

ProFTP 2.9 – Banner Remote Buffer Overflow (Metasploit)

##

2010-07-03 Metasploit remote

freeFTPd 1.0 – ‘Username’ Remote Overflow (Metasploit)

##

2010-07-03 Metasploit remote

War-FTPD 1.65 – Password Overflow (Metasploit)

##

2010-07-03 Metasploit remote

NCTAudioFile2 2.x – ActiveX Control ‘SetFormatLikeSample()’ Remote Buffer Overflow (Metasploit)

##

2010-07-03 Metasploit remote

Microsoft Internet Explorer – ‘VML’ Fill Method Code Execution (MS06-055) (Metasploit)

##

2010-07-03 Metasploit remote

Microsoft Internet Explorer – WebViewFolderIcon setSlice() Overflow (MS06-057) (Metasploit) (2)

##

2010-07-03 Metasploit remote

Microsoft Internet Explorer – XML Core Services HTTP Request Handling (MS06-071) (Metasploit)

##

2010-07-03 Metasploit remote

AOL Instant Messenger AIM – goaway Overflow (Metasploit)

##

2010-07-03 Metasploit remote

McAfee Subscription Manager – Remote Stack Buffer Overflow (Metasploit)

##

2010-07-03 Metasploit remote

DoubleTake/HP StorageWorks Storage Mirroring Service – Authentication Overflow (Metasploit)

##

2010-07-03 Metasploit remote

Borland Interbase – ‘SVC_attach()’ Remote Buffer Overflow (Metasploit)

##

2010-07-03 Metasploit remote

Borland Interbase – ‘isc_attach_database()’ Remote Buffer Overflow (Metasploit)

##

2010-07-03 Metasploit remote

Firebird Relational Database – ‘isc_attach_database()’ Remote Buffer Overflow (Metasploit)

##

2010-07-03 Metasploit remote

Borland Interbase – ‘isc_create_database()’ Remote Buffer Overflow (Metasploit)

##

2010-07-03 Metasploit remote

Firebird Relational Database – ‘isc_create_database()’ Remote Buffer Overflow (Metasploit)

##

2010-07-03 Metasploit remote

BigAnt Server 2.50 SP1 – Remote Buffer Overflow (Metasploit)

##

2010-07-03 Metasploit remote

Firebird Relational Database – ‘SVC_attach()’ Remote Buffer Overflow (Metasploit)

##

2010-07-03 Metasploit remote

Microsoft NetDDE Service – Remote Overflow (MS04-031) (Metasploit)

##

2010-07-03 Metasploit remote

Microsoft LSASS Service – DsRolerUpgradeDownlevelServer Overflow (MS04-011) (Metasploit)

##

2010-07-03 Metasploit remote

Microsoft Windows – ‘srv2.sys’ SMB Negotiate ProcessID Function Table Dereference (MS09-050) (Metasploit)

##

2010-07-03 Metasploit remote

Veritas Backup Exec Windows – Remote Agent Overflow (Metasploit)

##

2010-07-03 Metasploit remote

SasCam WebCam Server 2.6.5 – ActiveX Overwrite (SEH)

2010-07-03 blake remote

Sun Java Web Server 7.0 u7 – Remote Overflow

#include "stdafx.h"

2010-07-03 dmc remote

ASX to MP3 Converter 3.1.2.1 – Local Buffer Overflow (SEH)

# Exploit Title: ASX to MP3 Converter Version 3.1.2.1 (2010-03-30) Local

2010-07-03 Madjix local

HP OpenView Network Node Manager (OV NNM) – ‘getnnmdata.exe’ CGI Invalid Hostname Remote Code Execution

# Exploit Title: HP OpenView NNM getnnmdata.exe CGI Invalid Hostname Remote Code Execution

2010-07-02 S2 Crew remote

HP OpenView Network Node Manager (OV NNM) – ‘getnnmdata.exe’ CGI Invalid ICount Remote Code Execution

# Exploit Title: HP OpenView NNM getnnmdata.exe CGI Invalid ICount Remote Code Execution

2010-07-02 S2 Crew remote

HP OpenView Network Node Manager (OV NNM) – ‘getnnmdata.exe’ CGI Invalid MaxAge Remote Code Execution

# Exploit Title: HP OpenView NNM getnnmdata.exe CGI Invalid MaxAge Remote Code Execution

2010-07-02 S2 Crew remote

Microsoft IIS 5.0 – Authentication Bypass (MS10-065)

MS10-065 - Directory Authentication Bypass Vulnerability

2010-07-02 Soroush Dalili remote

Mp3 Digitalbox 2.7.2.0 – ‘.mp3’ Local Stack Overflow (PoC)

#!/usr/bin/perl

2010-07-02 v3n0m dos

Sumatra PDF 1.1 – Denial of Service

source: https://www.securityfocus.com/bid/41276/info

2010-07-01 Azim Poonawala dos

Alt-N MDaemon 6.8.5 – WorldClient ‘form2raw.cgi’ Remote Stack Buffer Overflow (Metasploit)

##

2010-07-01 Metasploit remote

Eudora Qualcomm WorldMail 3.0 – IMAPd ‘LIST’ Remote Buffer Overflow (Metasploit)

##

2010-07-01 Metasploit remote

Mini-stream RM-MP3 Converter 3.1.2.1 – ‘.m3u’ Local Buffer Overflow

#By Madjix Dz8[at]hotmail[dot]com

2010-07-01 Madjix local

Microsoft Windows Vista/2008 – NtUserCheckAccessForIntegrityLevel Use-After-Free

Windows Vista/Server 2008 NtUserCheckAccessForIntegrityLevel Use-after-free Vulnerability

2010-07-01 MSRC dos

Mediacoder 0.7.3.4682 – Universal Buffer Overflow (SEH)

###################################################################

2010-07-01 Madjix local

RM Downloader 3.1.3 (Windows 7) – Local ASLR + DEP Bypass (SEH)

#!/usr/bin/perl

2010-07-01 Node local

Qt 4.6.3 – Remote Denial of Service

source: https://www.securityfocus.com/bid/41250/info

2010-06-29 Luigi Auriemma dos

Gekko CMS – SQL Injection

##################################################################

2010-06-29 []0iZy5 webapps

Winamp 5.571 – ‘.avi’ Denial of Service

# Tested on Windows 7 and Winamp v5.571(x86)

2010-06-28 Praveen Darshanam dos

MemDb – Multiple Remote Denial of Service Vulnerabilities

#!/usr/bin/python

2010-06-28 Markot dos

GSM SIM Utility 5.15 – ‘.sms’ File Local Buffer Overflow (SEH)

# Exploit Title : GSM SIM Utility sms file Local SEH BoF

2010-06-28 chap0 local

Kingsoft Writer 2010 – Local Stack Buffer Overflow

DISCLAIMER

2010-06-28 fl0 fl0w local

RM Downloader 3.1.3 – Local Buffer Overflow (SEH)

#!/usr/bin/perl

2010-06-27 Madjix local

BlazeDVD 6.0 – Local Buffer Overflow (Metasploit)

##

2010-06-27 blake local

UltraISO 9.3.6.2750 – ‘.mds’ / ‘.mdf’ Buffer Overflow (PoC)

DISCLAIMER

2010-06-27 fl0 fl0w dos

FoxPlayer 2 – ‘.m3u’ Local Buffer Overflow (PoC)

###########################################################################

2010-06-26 Madjix dos

Winamp 5.572 (Windows 7) – Local Buffer Overflow (ASLR + DEP Bypass)

#!/usr/bin/python

2010-06-26 Node local