Microsoft NET USE win10 – Insufficient Authentication Logic
# Title: Microsoft NET USE win10 - Insufficient Authentication Logic
windows
windows 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
Triologic Media Player 8 – ‘.m3l’ Buffer Overflow (Unicode) (SEH)
# Exploit Title: Triologic Media Player 8 - '.m3l' Buffer Overflow (Unicode) (SEH)
ZOC Terminal v7.25.5 – ‘Private key file’ Denial of Service (PoC)
# Exploit Title: ZOC Terminal v7.25.5 - 'Private key file' Denial of Service (PoC)
UltraVNC Viewer 1.2.4.0 – ‘VNCServer’ Denial of Service (PoC)
# Exploit Title: UltraVNC Viewer 1.2.4.0 - 'VNCServer' Denial of Service (PoC)
UltraVNC Launcher 1.2.4.0 – ‘Password’ Denial of Service (PoC)
# Exploit Title: UltraVNC Launcher 1.2.4.0 - 'Password' Denial of Service (PoC)
UltraVNC Launcher 1.2.4.0 – ‘RepeaterHost’ Denial of Service (PoC)
# Exploit Title: UltraVNC Launcher 1.2.4.0 - 'RepeaterHost' Denial of Service (PoC)
Frigate 3.36 – Denial of Service (PoC)
# Exploit Title: Frigate 3.36 - Denial of Service (PoC)
Nsauditor 3.2.0.0 – ‘Name’ Denial of Service (PoC)
# Exploit Title: Nsauditor 3.2.0.0 - 'Name' Denial of Service (PoC)
SpotAuditor 5.3.4 – ‘Name’ Denial of Service (PoC)
# Exploit Title: SpotAuditor 5.3.4 - 'Name' Denial of Service (PoC)
Product Key Explorer 4.2.2.0 – ‘Key’ Denial of Service (PoC)
# Exploit Title: Product Key Explorer 4.2.2.0 - 'Key' Denial of Service (PoC)
Memu Play 7.1.3 – Insecure Folder Permissions
# Exploit Title: Memu Play 7.1.3 - Insecure Folder Permissions
AIDA64 Engineer 6.20.5300 – ‘Report File’ filename Buffer Overflow (SEH)
# Exploit Title: AIDA64 Engineer 6.20.5300 - 'Report File' filename Buffer Overflow (SEH)
DiskBoss 7.7.14 – ‘Input Directory’ Local Buffer Overflow (PoC)
# Exploit Title: DiskBoss 7.7.14 - 'Input Directory' Local Buffer Overflow (PoC)
10Strike LANState 9.32 – ‘Force Check’ Buffer Overflow (SEH)
# Exploit Title: 10Strike LANState 9.32 - 'Force Check' Buffer Overflow (SEH)
DiskBoss 7.7.14 – Denial of Service (PoC)
# Exploit Title: DiskBoss 7.7.14 - Denial of Service (PoC)
SharePoint Workflows – XOML Injection (Metasploit)
# This module requires Metasploit: https://metasploit.com/download
FlashFXP 4.2.0 Build 1730 – Denial of Service (PoC)
# Exploit Title: FlashFXP 4.2.0 Build 1730 - Denial of Service (PoC)
10-Strike Network Inventory Explorer 9.03 – ‘Read from File’ Buffer Overflow (SEH) (ROP)
# Exploit Title: 10-Strike Network Inventory Explorer 9.03 - 'Read from File' Buffer Overflow (SEH)(ROP)
Odin Secure FTP Expert 7.6.3 – ‘Site Info’ Denial of Service (PoC)
# Exploit Title: Odin Secure FTP Expert 7.6.3 - 'Site Info' Denial of Service (PoC)
Everest 5.50.2100 – ‘Open File’ Denial of Service (PoC)
# Exploit Title: Everest 5.50.2100 - 'Open File' Denial of Service (PoC)
Easy RM to MP3 Converter 2.7.3.700 – ‘Input’ Local Buffer Overflow (SEH)
# Exploit Title: Easy RM to MP3 Converter 2.7.3.700 - 'Input' Local Buffer Overflow (SEH)
10-Strike Network Inventory Explorer 8.54 – ‘Add’ Local Buffer Overflow (SEH)
# Exploit Title: 10-Strike Network Inventory Explorer 8.54 - 'Add' Local Buffer Overflow (SEH)
10-Strike Network Inventory Explorer – ‘srvInventoryWebServer’ Unquoted Service Path
# Exploit Title: 10-Strike Network Inventory Explorer - 'srvInventoryWebServer' Unquoted Service Path
AVAST SecureLine 5.5.522.0 – ‘SecureLine’ Unquoted Service Path
# Exploit Title: AVAST SecureLine 5.5.522.0 - 'SecureLine' Unquoted Service Path
Veyon 4.3.4 – ‘VeyonService’ Unquoted Service Path
# Exploit Title: Veyon 4.3.4 - 'VeyonService' Unquoted Service Path
Google Chrome 80.0.3987.87 – Heap-Corruption Remote Denial of Service (PoC)
# Exploit Title: Google Chrome 80.0.3987.87 - Heap-Corruption Remote Denial of Service (PoC)
NetBackup 7.0 – ‘NetBackup INET Daemon’ Unquoted Service Path
# Exploit Title: NetBackup 7.0 - 'NetBackup INET Daemon' Unquoted Service Path
Microsoft Windows 10 (1903/1909) – ‘SMBGhost’ SMB3.1.1 ‘SMB2_COMPRESSION_CAPABILITIES’ Buffer Overflow (PoC)
# CVE-2020-0796 PoC aka CoronaBlue aka SMBGhost
AnyBurn 4.8 – Buffer Overflow (SEH)
# Exploit Title: AnyBurn 4.8 - Buffer Overflow (SEH)
ASUS AAHM 1.00.22 – ‘asHmComSvc’ Unquoted Service Path
# Exploit Title: ASUS AAHM 1.00.22 - 'asHmComSvc' Unquoted Service Path
CoreFTP 2.0 Build 674 MDTM – Directory Traversal (Metasploit)
class MetasploitModule < Msf::Auxiliary
CoreFTP 2.0 Build 674 SIZE – Directory Traversal (Metasploit)
class MetasploitModule < Msf::Auxiliary
ASUS AXSP 1.02.00 – ‘asComSvc’ Unquoted Service Path
# Exploit Title: ASUS AXSP 1.02.00 - 'asComSvc' Unquoted Service Path
Deep Instinct Windows Agent 1.2.29.0 – ‘DeepMgmtService’ Unquoted Service Path
# Exploit Title: Deep Instinct Windows Agent 1.2.29.0 - 'DeepMgmtService' Unquoted Service Path
ASUS GiftBox Desktop 1.1.1.127 – ‘ASUSGiftBoxDesktop’ Unquoted Service Path
# Exploit Title: ASUS GiftBox Desktop 1.1.1.127 - 'ASUSGiftBoxDesktop' Unquoted Service Path
SpyHunter 4 – ‘SpyHunter 4 Service’ Unquoted Service Path
# Exploit Title: SpyHunter 4 - 'SpyHunter 4 Service' Unquoted Service Path
Iskysoft Application Framework Service 2.4.3.241 – ‘IsAppService’ Unquoted Service Path
# Exploit Title: Iskysoft Application Framework Service 2.4.3.241 - 'IsAppService' Unquoted Service Path
Wing FTP Server 6.2.3 – Privilege Escalation
# Exploit Title: Wing FTP Server 6.2.3 - Privilege Escalation
CA Unified Infrastructure Management Nimsoft 7.80 – Remote Buffer Overflow
# Exploit Title: CA Unified Infrastructure Management Nimsoft 7.80 - Remote Buffer Overflow
Microsoft Exchange 2019 15.2.221.12 – Authenticated Remote Code Execution
# Exploit Title: Microsoft Exchange 2019 15.2.221.12 - Authenticated Remote Code Execution
Cyberoam Authentication Client 2.1.2.7 – Buffer Overflow (SEH)
# Exploit Title: Cyberoam Authentication Client 2.1.2.7 - Buffer Overflow (SEH)
Core FTP LE 2.2 – Denial of Service (PoC)
# Exploit Title: Core FTP LE 2.2 - Denial of Service (PoC)
Odin Secure FTP Expert 7.6.3 – Denial of Service (PoC)
# Exploit Title : Odin Secure FTP Expert 7.6.3 - Denial of Service (PoC)
aSc TimeTables 2020.11.4 – Denial of Service (PoC)
# Exploit Title: aSc TimeTables 2020.11.4 - Denial of Service (PoC)
SpotFTP-FTP Password Recover 2.4.8 – Denial of Service (PoC)
# Exploit Title: SpotFTP-FTP Password Recover 2.4.8 - Denial of Service (PoC)
Quick N Easy Web Server 3.3.8 – Denial of Service (PoC)
# Title: Quick N Easy Web Server 3.3.8 - Denial of Service (PoC)