Foxit Reader 9.7.1 – Remote Command Execution (Javascript API)
# Exploit Title: Foxit Reader 9.7.1 - Remote Command Execution (Javascript API)
windows
windows 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
IP Watcher v3.0.0.30 – ‘PACService.exe’ Unquoted Service Path
# Exploit Title: IP Watcher v3.0.0.30 - 'PACService.exe' Unquoted Service Path
Prey 1.9.6 – “CronService” Unquoted Service Path
# Exploit Title: Prey 1.9.6 - "CronService" Unquoted Service Path
Program Access Controller v1.2.0.0 – ‘PACService.exe’ Unquoted Service Path
# Exploit Title: Program Access Controller v1.2.0.0 - 'PACService.exe' Unquoted Service Path
Exploit – EPSON 1.124 – ‘seksmdb.exe’ Unquoted Service Path
# Exploit Title: EPSON 1.124 - 'seksmdb.exe' Unquoted Service Path
TDM Digital Signage PC Player 4.1 – Insecure File Permissions
# Exploit Title: TDM Digital Signage PC Player 4.1 - Insecure File Permissions
Guild Wars 2 – Insecure Folder Permissions
# Exploit Title: Guild Wars 2 - Insecure Folder Permissions
Battle.Net 1.27.1.12428 – Insecure File Permissions
# Exploit Title: Battle.Net 1.27.1.12428 - Insecure File Permissions
BACnet Test Server 1.01 – Remote Denial of Service (PoC)
# Title: BACnet Test Server 1.01 - Remote Denial of Service (PoC)
CloudMe 1.11.2 – Buffer Overflow ROP (DEP,ASLR)
# Exploit Title: CloudMe 1.11.2 - Buffer Overflow ROP (DEP,ASLR)
BearShare Lite 5.2.5 – ‘Advanced Search’Buffer Overflow in (PoC)
# Title: BearShare Lite 5.2.5 - 'Advanced Search'Buffer Overflow in (PoC)
MSI Ambient Link Driver 1.0.0.8 – Local Privilege Escalation
Exploit Title: MSI Ambient Link Driver 1.0.0.8 - Local Privilege Escalation
ForensiTAppxService 2.2.0.4 – ‘ForensiTAppxService.exe’ Unquoted Service Path
# Exploit Title: ForensiTAppxService 2.2.0.4 - 'ForensiTAppxService.exe' Unquoted Service Path
Microsoft SQL Server Reporting Services 2016 – Remote Code Execution
# Exploit Title: Microsoft SQL Server Reporting Services 2016 - Remote Code Execution
Windows TCPIP Finger Command – C2 Channel and Bypassing Security Software
# Title: Windows TCPIP Finger Command - C2 Channel and Bypassing Security Software
Pearson Vue VTS 2.3.1911 Installer – ‘VUEApplicationWrapper’ Unquoted Service Path
# Exploit Title: Pearson Vue VTS 2.3.1911 Installer - 'VUEApplicationWrapper' Unquoted Service Path
Rapid7 Nexpose Installer 6.6.39 – ‘nexposeengine’ Unquoted Service Path
# Exploit Title: Rapid7 Nexpose Installer 6.6.39 - 'nexposeengine' Unquoted Service Path
Audio Playback Recorder 3.2.2 – Local Buffer Overflow (SEH)
# Exploit Title: Audio Playback Recorder 3.2.2 - Local Buffer Overflow (SEH)
Input Director 1.4.3 – ‘Input Director’ Unquoted Service Path
# Exploit Title: Input Director 1.4.3 - 'Input Director' Unquoted Service Path
ShareMouse 5.0.43 – ‘ShareMouse Service’ Unquoted Service Path
# Exploit Title: ShareMouse 5.0.43 - 'ShareMouse Service' Unquoted Service Path
Nord VPN-6.31.13.0 – ‘nordvpn-service’ Unquoted Service Path
# Exploit Title: Nord VPN-6.31.13.0 - 'nordvpn-service' Unquoted Service Path
BarracudaDrive v6.5 – Insecure Folder Permissions
# Exploit Title: BarracudaDrive v6.5 - Insecure Folder Permissions
BlazeDVD 7.0 Professional – ‘.plf’ Local Buffer Overflow (SEH,ASLR,DEP)
## Title: BlazeDVD 7.0 Professional - '.plf' Local Buffer Overflow (SEH,ASLR,DEP)
ASX to MP3 converter 3.1.3.7.2010.11.05 – ‘.wax’ Local Buffer Overflow (DEP,ASLR Bypass) (PoC)
# Exploit Title: ASX to MP3 converter 3.1.3.7.2010.11.05 - '.wax' Local Buffer Overflow (DEP,ASLR Bypass) (PoC)
BarcodeOCR 19.3.6 – ‘BarcodeOCR’ Unquoted Service Path
# Exploit Title: BarcodeOCR 19.3.6 - 'BarcodeOCR' Unquoted Service Path
CodeMeter 6.60 – ‘CodeMeter.exe’ Unquoted Service Path
# Exploit Title: CodeMeter 6.60 - 'CodeMeter.exe' Unquoted Service Path
QlikView 12.50.20000.0 – ‘FTP Server Address’ Denial of Service (PoC)
# Exploit Title: QlikView 12.50.20000.0 - 'FTP Server Address' Denial of Service (PoC)
ACTi NVR3 Standard or Professional Server 3.0.12.42 – Denial of Service (PoC)
# Exploit Title: ACTi NVR3 Standard or Professional Server 3.0.12.42 - Denial of Service (PoC) #
RTSP for iOS 1.0 – ‘IP Address’ Denial of Service (PoC)
# Exploit Title: RTSP for iOS 1.0 - 'IP Address' Denial of Service (PoC)
Mocha Telnet Lite for iOS 4.2 – ‘User’ Denial of Service (PoC)
# Exploit Title: Mocha Telnet Lite for iOS 4.2 - 'User' Denial of Service (PoC)
BacklinkSpeed 2.4 – Buffer Overflow PoC (SEH)
# Exploit Title: BacklinkSpeed 2.4 - Buffer Overflow PoC (SEH)
Calavera UpLoader 3.5 – ‘FTP Logi’ Denial of Service (PoC + SEH Overwrite)
# Exploit Title: Calavera UpLoader 3.5 - 'FTP Logi' Denial of Service (PoC + SEH Overwrite)
Free MP3 CD Ripper 2.8 – Stack Buffer Overflow (SEH + Egghunter)
# Exploit Title: Free MP3 CD Ripper 2.8 - Stack Buffer Overflow (SEH + Egghunter)
Port Forwarding Wizard 4.8.0 – Buffer Overflow (SEH)
# Exploit Title: Port Forwarding Wizard 4.8.0 - Buffer Overflow (SEH)
Socusoft Photo to Video Converter Professional 8.07 – ‘Output Folder’ Buffer Overflow (SEH Egghunter)
# Exploit Title: Socusoft Photo to Video Converter Professional 8.07 - 'Output Folder' Buffer Overflow (SEH Egghunter)
DiskBoss 7.7.14 – ‘Reports and Data Directory’ Buffer Overflow (SEH Egghunter)
# Exploit Title: DiskBoss 7.7.14 - 'Reports and Data Directory' Buffer Overflow (SEH Egghunter)
Frigate Professional 3.36.0.9 – ‘Pack File’ Buffer Overflow (SEH Egghunter)
# Exploit Title: Frigate Professional 3.36.0.9 - 'Pack File' Buffer Overflow (SEH Egghunter)
Nidesoft DVD Ripper 5.2.18 – Local Buffer Overflow (SEH)
# Exploit Title: Nidesoft DVD Ripper 5.2.18 - Local Buffer Overflow (SEH)
Snes9K 0.09z – ‘Port Number’ Buffer Overflow (SEH)
# Exploit Title: Snes9K 0.09z - 'Port Number' Buffer Overflow (SEH)
FTPDummy 4.80 – Local Buffer Overflow (SEH)
# Exploit Title: FTPDummy 4.80 - Local Buffer Overflow (SEH)
NetPCLinker 1.0.0.0 – Buffer Overflow (SEH Egghunter)
# Exploit Title: NetPCLinker 1.0.0.0 - Buffer Overflow (SEH Egghunter)
Simple Startup Manager 1.17 – ‘File’ Local Buffer Overflow (PoC)
# Exploit Title: Simple Startup Manager 1.17 - 'File' Local Buffer Overflow (PoC)
Sonar Qube 8.3.1 – ‘SonarQube Service’ Unquoted Service Path
# Title: Sonar Qube 8.3.1 - 'SonarQube Service' Unquoted Service Path
CompleteFTP Professional 12.1.3 – Remote Code Execution
# Exploit Title: CompleteFTP Professional < 12.1.3 - Remote Code Execution
Fire Web Server 0.1 – Remote Denial of Service (PoC)
# Exploit Title: Fire Web Server 0.1 - Remote Denial of Service (PoC)
RM Downloader 2.50.60 2006.06.23 – ‘Load’ Local Buffer Overflow (EggHunter) (SEH) (PoC)
# Exploit Title: RM Downloader 2.50.60 2006.06.23 - 'Load' Local Buffer Overflow (EggHunter) (SEH) (PoC)
KiteService 1.2020.618.0 – Unquoted Service Path
# Exploit Title: KiteService 1.2020.618.0 - Unquoted Service Path
Windscribe 1.83 – ‘WindscribeService’ Unquoted Service Path
# Exploit Title: Windscribe 1.83 - 'WindscribeService' Unquoted Service Path
Lansweeper 7.2 – Incorrect Access Control
# Exploit Title: Lansweeper 7.2 - Incorrect Access Control
Code Blocks 20.03 – Denial Of Service (PoC)
# Exploit Title: Code Blocks 20.03 - Denial Of Service (PoC)