Core FTP Lite 1.3 – Denial of Service (PoC)
# Exploit Title : Core FTP Lite 1.3 - Denial of Service (PoC)
windows
windows 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
Cuckoo Clock v5.0 – Buffer Overflow
# Exploit Title: Cuckoo Clock 5.0 - Buffer Overflow
TFTP Turbo 4.6.1273 – ‘TFTP Turbo 4’ Unquoted Service Path
# Exploit Title: TFTP Turbo 4.6.1273 - 'TFTP Turbo 4' Unquoted Service Path
DHCP Turbo 4.61298 – ‘DHCP Turbo 4’ Unquoted Service Path
Exploit Title: DHCP Turbo 4.61298 - 'DHCP Turbo 4' Unquoted Service Path
MSI Packages Symbolic Links Processing – Windows 10 Privilege Escalation
# Exploit Title: MSI Packages Symbolic Links Processing - Windows 10 Privilege Escalation
BOOTP Turbo 2.0.1214 – ‘BOOTP Turbo’ Unquoted Service Path
# Exploit Title: BOOTP Turbo 2.0.1214 - 'BOOTP Turbo' Unquoted Service Path
HP System Event 1.2.9.0 – ‘HPWMISVC’ Unquoted Service Path
# Exploit Title: HP System Event 1.2.9.0 - 'HPWMISVC' Unquoted Service Path
SprintWork 2.3.1 – Local Privilege Escalation
# Exploit Title: SprintWork 2.3.1 - Local Privilege Escalation
EPSON EasyMP Network Projection 2.81 – ‘EMP_NSWLSV’ Unquoted Service Path
# Exploit Title: EPSON EasyMP Network Projection 2.81 - 'EMP_NSWLSV' Unquoted Service Path
HomeGuard Pro 9.3.1 – Insecure Folder Permissions
# Exploit Title: HomeGuard Pro 9.3.1 - Insecure Folder Permissions
OpenTFTP 1.66 – Local Privilege Escalation
# Exploit Title: OpenTFTP 1.66 - Local Privilege Escalation
HP System Event Utility – Local Privilege Escalation
# Exploit Title: HP System Event Utility - Local Privilege Escalation
MyVideoConverter Pro 3.14 – ‘TVSeries’ Buffer Overflow
# Exploit Title: MyVideoConverter Pro 3.14 - 'TVSeries' Buffer Overflow
MyVideoConverter Pro 3.14 – ‘Output Folder’ Buffer Overflow
#Exploit Title: MyVideoConverter Pro 3.14 - 'Output Folder' Buffer Overflow
MyVideoConverter Pro 3.14 – ‘Movie’ Buffer Overflow
#Exploit Title: MyVideoConverter Pro 3.14 - 'Movie' Buffer Overflow
Wedding Slideshow Studio 1.36 – ‘Name’ Buffer Overflow
#Exploit Title: Wedding Slideshow Studio 1.36 - 'Name' Buffer Overflow
Disk Savvy Enterprise 12.3.18 – Unquoted Service Path
Exploit Title: Disk Savvy Enterprise 12.3.18 - Unquoted Service Path
Disk Sorter Enterprise 12.4.16 – ‘Disk Sorter Enterprise’ Unquoted Service Path
Exploit Title: Disk Sorter Enterprise 12.4.16 - 'Disk Sorter Enterprise' Unquoted Service Path
DVD Photo Slideshow Professional 8.07 – ‘Name’ Buffer Overflow
#Exploit Title: DVD Photo Slideshow Professional 8.07 - 'Name' Buffer Overflow
Sync Breeze Enterprise 12.4.18 – ‘Sync Breeze Enterprise’ Unquoted Service Path
Exploit Title: Sync Breeze Enterprise 12.4.18 - 'Sync Breeze Enterprise' Unquoted Service Path
FreeSSHd 1.3.1 – ‘FreeSSHDService’ Unquoted Service Path
Exploit Title: FreeSSHd 1.3.1 - 'FreeSSHDService' Unquoted Service Path
freeFTPd v1.0.13 – ‘freeFTPdService’ Unquoted Service Path
Exploit Title: freeFTPd v1.0.13 - 'freeFTPdService' Unquoted Service Path
DVD Photo Slideshow Professional 8.07 – ‘Key’ Buffer Overflow
#Exploit Title: DVD Photo Slideshow Professional 8.07 - 'Key' Buffer Overflow
Torrent iPod Video Converter 1.51 – Stack Overflow
# Exploit Title: Torrent iPod Video Converter 1.51 - Stack Overflow
Dota 2 7.23f – Denial of Service (PoC)
# Exploit Title: Dota 2 7.23f - Denial of Service (PoC)
Wedding Slideshow Studio 1.36 – ‘Key’ Buffer Overflow
#Exploit Title: Wedding Slideshow Studio 1.36 - 'Key' Buffer Overflow
RarmaRadio 2.72.4 – ‘server’ Denial of Service (PoC)
# Exploit Title: RarmaRadio 2.72.4 - 'server' Denial of Service (PoC)
RarmaRadio 2.72.4 – ‘username’ Denial of Service (PoC)
# Exploit Title: RarmaRadio 2.72.4 - 'username' Denial of Service (PoC)
TapinRadio 2.12.3 – ‘username’ Denial of Service (PoC)
# Exploit Title: TapinRadio 2.12.3 - 'username' Denial of Service (PoC)
TapinRadio 2.12.3 – ‘address’ Denial of Service (PoC)
# Exploit Title: TapinRadio 2.12.3 - 'address' Denial of Service (PoC)
AbsoluteTelnet 11.12 – ‘SSH2/username’ Denial of Service (PoC)
# Exploit Title: AbsoluteTelnet 11.12 - 'SSH2/username' Denial of Service (PoC)
ELAN Smart-Pad 11.10.15.1 – ‘ETDService’ Unquoted Service Path
#Exploit Title: ELAN Smart-Pad 11.10.15.1 - 'ETDService' Unquoted Service Path
AbsoluteTelnet 11.12 – ‘license name’ Denial of Service (PoC)
# Exploit Title: AbsoluteTelnet 11.12 - "license name" Denial of Service (PoC)
AbsoluteTelnet 11.12 – “license name” Denial of Service (PoC)
# Exploit Title: AbsoluteTelnet 11.12 - "license name" Denial of Service (PoC)
Microsoft Windows Media Center WMV / WMA 6.3.9600.16384 – Code Execution
# Exploit Title: Microsoft Windows Media Center WMV or WMA 6.3.9600.16384 - Code Execution
Microsoft Windows 10 – Theme API ‘ThemePack’ File Parsing
# Exploit Title: Microsoft Windows 10 - Theme API 'ThemePack' File Parsing
XMLBlueprint 16.191112 – XML External Entity Injection
# Exploit Title: XMLBlueprint 16.191112 - XML External Entity Injection
Kibana 6.6.1 – CSV Injection
# Exploit Title: Kibana 6.6.1 - CSV Injection
Microsoft Windows Kernel – Information Disclosure
# PoC for the SWAPGS attack ([CVE-2019-1125](https://nvd.nist.gov/vuln/detail/CVE-2019-1125))
Torrent 3GP Converter 1.51 – Stack Overflow (SEH)
# Exploit Title: Torrent 3GP Converter 1.51 - Stack Overflow (SEH)
Remote Desktop Gateway – ‘BlueGate’ Denial of Service (PoC)
#include "BlueGate.h"
Remote Desktop Gateway – ‘BlueGate’ Denial of Service (PoC)
#include "BlueGate.h"
BOOTP Turbo 2.0 – Denial of Service (SEH)(PoC)
# Exploit Title: BOOTP Turbo 2.0 - Denial of Service (SEH)(PoC)
Ricoh Printer Drivers – Local Privilege Escalation
This proof of concept code monitors file changes on Ricoh's driver DLL files and overwrites
Microsoft SharePoint – Deserialization Remote Code Execution
#!/usr/bin/env python3
NEOWISE CARBONFTP 1.4 – Weak Password Encryption
# Exploit Title: NEOWISE CARBONFTP 1.4 - Weak Password Encryption
Sysax Multi Server 5.50 – Denial of Service (PoC)
# Exploit Title: Sysax Multi Server 5.50 - Denial of Service (PoC)