Wing FTP Server 6.0.7 – Unquoted Service Path
# Exploit Title: Wing FTP Server 6.0.7 - Unquoted Service Path
windows
windows 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
FTP Navigator 8.03 – Stack Overflow (SEH)
# Exploit Title: FTP Navigator 8.03 - Stack Overflow (SEH)
elearning-script 1.0 – Authentication Bypass
# Exploit Title: elearning-script 1.0 - Authentication Bypass
AVS Audio Converter 9.1.2.600 – Stack Overflow (PoC)
# Exploit Title: AVS Audio Converter 9.1.2.600 - Stack Overflow (PoC)
Prime95 Version 29.8 build 6 – Buffer Overflow (SEH)
# Exploit Title: Prime95 Version 29.8 build 6 - Buffer Overflow (SEH)
XnConvert 1.82 – Denial of Service (PoC)
# Exploit Title: XnConvert 1.82 - Denial of Service (PoC)
FreeSWITCH 1.10.1 – Command Execution
# Exploit Title: FreeSWITCH 1.10.1 - Command Execution
Microsoft Windows 10 BasicRender.sys – Denial of Service (PoC)
# Exploit Title: Microsoft Windows 10 BasicRender.sys - Denial of Service (PoC)
SurfOffline Professional 2.2.0.103 – ‘Project Name’ Denial of Service (SEH)
# Exploit Title: SurfOffline Professional 2.2.0.103 - 'Project Name' Denial of Service (SEH)
FTP Navigator 8.03 – ‘Custom Command’ Denial of Service (SEH)
# Exploit Title: FTP Navigator 8.03 - 'Custom Command' Denial of Service (SEH)
AVS Audio Converter 9.1 – ‘Exit folder’ Buffer Overflow
# Exploit Title: AVS Audio Converter 9.1 - 'Exit folder' Buffer Overflow
XnView 2.49.1 – ‘Research’ Denial of Service (PoC)
# Exploit Title: XnView 2.49.1 - 'Research' Denial of Service (PoC)
Tautulli 2.1.9 – Cross-Site Request Forgery (ShutDown)
# Exploit Title: Tautulli 2.1.9 - Cross-Site Request Forgery (ShutDown)
FTP Commander Pro 8.03 – Local Stack Overflow
# Exploit Title: FTP Commander Pro 8.03 - Local Stack Overflow
Lenovo Power Management Driver 1.67.17.48 – ‘pmdrvs.sys’ Denial of Service (PoC)
# Exploit Title: Lenovo Power Management Driver 1.67.17.48 - 'pmdrvs.sys' Denial of Service (PoC)
Adobe Acrobat Reader DC – Heap-Based Memory Corruption due to Malformed TTF Font
We have observed the following access violation exception in the latest version of Adobe Acrobat Reader DC for Window...
AppXSvc 17763 – Arbitrary File Overwrite (DoS)
# Exploit Title: AppXSvc 17763 - Arbitrary File Overwrite (DoS)
Product Key Explorer 4.2.0.0 – ‘Key’ Denial of Service (PoC)
# Exploit Title: Product Key Explorer 4.2.0.0 - 'Key' Denial of Service (POC)
Product Key Explorer 4.2.0.0 – ‘Name’ Denial of Service (POC)
# Exploit Title: Product Key Explorer 4.2.0.0 - 'Name' Denial of Service (POC)
SpotAuditor 5.3.2 – ‘Base64’ Local Buffer Overflow (SEH)
# Exploit Title: SpotAuditor 5.3.2 - 'Base64' Local Buffer Overflow (SEH)
Microsoft Windows – Multiple UAC Protection Bypasses
Windows 10 UAC bypass for all executable files which are autoelevate true.
Trend Micro Deep Security Agent 11 – Arbitrary File Overwrite
# Exploit Title: Trend Micro Deep Security Agent 11 - Arbitrary File Overwrite
Integard Pro NoJs 2.2.0.9026 – Remote Buffer Overflow
Exploit Title: Integard Pro NoJs 2.2.0.9026 - Remote Buffer Overflow
Broadcom CA Privilged Access Manager 2.8.2 – Remote Command Execution
# Title: Broadcom CA Privilged Access Manager 2.8.2 - Remote Command Execution
Amiti Antivirus 25.0.640 – Unquoted Service Path
#Exploit Title: Amiti Antivirus 25.0.640 - Unquoted Service Path
NETGATE Data Backup 3.0.620 – ‘NGDatBckpSrv’ Unquoted Service Path
#Exploit Title: NETGATE Data Backup 3.0.620 - 'NGDatBckpSrv' Unquoted Service Path
Anviz CrossChex 4.3.12 – Local Buffer Overflow
# Exploit Title: Anviz CrossChex 4.3.12 - Local Buffer Overflow
Max Secure Anti Virus Plus 19.0.4.020 – Insecure File Permissions
# Exploit Title: Max Secure Anti Virus Plus 19.0.4.020 - Insecure File Permissions
Nsauditor 3.1.8.0 – ‘Key’ Denial of Service (PoC)
# Exploit Title: Nsauditor 3.1.8.0 - 'Key' Denial of Service (PoC)
Nsauditor 3.1.8.0 – ‘Name’ Denial of Service (PoC)
# Exploit Title: Nsauditor 3.1.8.0 - 'Name' Denial of Service (PoC)
SpotAuditor 5.3.2 – ‘Name’ Denial of Service
#Exploit Title: SpotAuditor 5.3.2 - 'Name' Denial Of Service
TexasSoft CyberPlanet 6.4.131 – ‘CCSrvProxy’ Unquoted Service Path
# Exploit Title: TexasSoft CyberPlanet 6.4.131 - 'CCSrvProxy' Unquoted Service Path
SpotAuditor 5.3.2 – ‘Key’ Denial of Service
#Exploit Title: SpotAuditor 5.3.2 - 'Key' Denial of Service
SpotAuditor 5.3.2 – ‘Base64’ Denial Of Service (PoC)
#Exploit Title: SpotAuditor 5.3.2 - 'Base64' Denial Of Service (PoC)
Microsoft DirectX SDK 2010 – ‘.PIXrun’ Denial Of Service (PoC)
#Exploit Title: Microsoft DirectX SDK 2010 - '.PIXrun' Denial Of Service (PoC)
InduSoft Web Studio 8.1 SP1 – “Atributos” Denial of Service (PoC)
# Exploit Title: InduSoft Web Studio 8.1 SP1 - "Atributos" Denial of Service (PoC)
Microsoft Windows AppXsvc Deployment Extension – Privilege Escalation
# Exploit Title: Microsoft Windows AppXsvc Deployment Extension - Privilege Escalation
Easy-Hide-IP 5.0.0.3 – ‘EasyRedirect’ Unquoted Service Path
# Exploit Title: Easy-Hide-IP 5.0.0.3 - 'EasyRedirect' Unquoted Service Path
InTouch Machine Edition 8.1 SP1 – ‘Atributos’ Denial of Service (PoC)
# Exploit Title: InTouch Machine Edition 8.1 SP1 - 'Atributos' Denial of Service (PoC)
Waves MaxxAudio Drivers 1.1.6.0 – ‘WavesSysSvc64’ Unquoted Service Path
# Exploit Title: Waves MaxxAudio Drivers 1.1.6.0 - 'WavesSysSvc64' Unquoted Service Path
SMPlayer 19.5.0 – Denial of Service (PoC)
# Title : SMPlayer 19.5.0 - Denial of Service (PoC)
Internet Explorer – Use-After-Free in JScript Arguments During toJSON Callback
There is a use-after-free issue in JSCript (triggerable via Internet Explorer) where the members of the 'arguments' o...
LiteManager 4.5.0 – Insecure File Permissions
# Exploit Title: LiteManager 4.5.0 - Insecure File Permissions
ProShow Producer 9.0.3797 – (‘ScsiAccess’) Unquoted Service Path
#Exploit Title: ProShow Producer 9.0.3797 - ('ScsiAccess') Unquoted Service Path
XMedia Recode 3.4.8.6 – ‘.m3u’ Denial Of Service
#Exploit Title: XMedia Recode 3.4.8.6 - '.m3u' Denial Of Service
Studio 5000 Logix Designer 30.01.00 – ‘FactoryTalk Activation Service’ Unquoted Service Path
# Exploit Title: Studio 5000 Logix Designer 30.01.00 - 'FactoryTalk Activation Service' Unquoted Service Path
BartVPN 1.2.2 – ‘BartVPNService’ Unquoted Service Path
#Exploit Title: BartVPN 1.2.2 - 'BartVPNService' Unquoted Service Path