ipPulse 1.92 – ‘Enter Key’ Denial of Service (PoC)
# Exploit Title: ipPulse 1.92 - 'Enter Key' Denial of Service (PoC)
windows
windows 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
Foscam Video Management System 1.1.4.9 – ‘Username’ Denial of Service (PoC)
# Exploit Title: Foscam Video Management System 1.1.4.9 - 'Username' Denial of Service (PoC)
NCP_Secure_Entry_Client 9.2 – Unquoted Service Paths
# Exploit Title: NCP_Secure_Entry_Client 9.2 - Unquoted Service Paths
MobileGo 8.5.0 – Insecure File Permissions
# Exploit Title: MobileGo 8.5.0 - Insecure File Permissions
ASUS HM Com Service 1.00.31 – ‘asHMComSvc’ Unquoted Service Path
# Exploit Title: ASUS HM Com Service 1.00.31 - 'asHMComSvc' Unquoted Service Path
iSmartViewPro 1.3.34 – Denial of Service (PoC)
# Exploit Title: iSmartViewPro 1.3.34 - Denial of Service (PoC)
Emerson PAC Machine Edition 9.70 Build 8595 – ‘FxControlRuntime’ Unquoted Service Path
# Exploit Title: Emerson PAC Machine Edition 9.70 Build 8595 - 'FxControlRuntime' Unquoted Service Path
Shrew Soft VPN Client 2.2.2 – ‘iked’ Unquoted Service Path
# Exploit Title: Shrew Soft VPN Client 2.2.2 - 'iked' Unquoted Service Path
oXygen XML Editor 21.1.1 – XML External Entity Injection
# Exploit Title: oXygen XML Editor 21.1.1 - XML External Entity Injection
ScanGuard Antivirus 2020 – Insecure Folder Permissions
# Exploit Title: ScanGuard Antivirus 2020 - Insecure Folder Permissions
Wondershare Application Framework Service – “WsAppService” Unquote Service Path
# Exploit Title: Wondershare Application Framework Service - "WsAppService" Unquote Service Path
Control Center PRO 6.2.9 – Local Stack Based Buffer Overflow (SEH)
# Exploit Title: Control Center PRO 6.2.9 - Local Stack Based BufferOverflow (SEH)
RTK IIS Codec Service 6.4.10041.133 – ‘RtkI2SCodec’ Unquote Service Path
# Exploit Title: RTK IIS Codec Service 6.4.10041.133 - 'RtkI2SCodec' Unquote Service Path
Alps Pointing-device Controller 8.1202.1711.04 – ‘ApHidMonitorService’ Unquoted Service Path
# Exploit Title: Alps Pointing-device Controller 8.1202.1711.04 - 'ApHidMonitorService' Unquoted Service Path
Wondershare Application Framework Service 2.4.3.231 – ‘WsAppService’ Unquote Service Path
# Exploit Title: Wondershare Application Framework Service 2.4.3.231 - 'WsAppService' Unquote Service Path
Acronis True Image OEM 19.0.5128 – ‘afcdpsrv’ Unquoted Service Path
# Exploit Title: Acronis True Image OEM 19.0.5128 - 'afcdpsrv' Unquoted Service Path
Adobe Acrobat Reader DC for Windows – Use of Uninitialized Pointer due to Malformed OTF Font (CFF Table)
We have observed the following access violation exception in the latest version of Adobe Acrobat Reader DC for Window...
Adobe Acrobat Reader DC for Windows – Use of Uninitialized Pointer due to Malformed JBIG2Globals Stream
We have observed the following access violation exception in the latest version of Adobe Acrobat Reader DC for Window...
Alps HID Monitor Service 8.1.0.10 – ‘ApHidMonitorService’ Unquote Service Path
# Exploit Title: Alps HID Monitor Service 8.1.0.10 - 'ApHidMonitorService' Unquote Service Path
_GCafé 3.0 – ‘gbClienService’ Unquoted Service Path
# Exploit Title: _GCafé 3.0 - 'gbClienService' Unquoted Service Path
SolarWinds Kiwi Syslog Server 8.3.52 – ‘Kiwi Syslog Server’ Unquoted Service Path
# Exploit Title: SolarWinds Kiwi Syslog Server 8.3.52 - 'Kiwi Syslog Server' Unquoted Service Path
Adaware Web Companion version 4.8.2078.3950 – ‘WCAssistantService’ Unquoted Service Path
# Exploit Title: Adaware Web Companion version 4.8.2078.3950 - 'WCAssistantService' Unquoted Service Path
QNAP NetBak Replicator 4.5.6.0607 – ‘QVssService’ Unquoted Service Path
# Exploit Title: QNAP NetBak Replicator 4.5.6.0607 - 'QVssService' Unquoted Service Path
Wacom WTabletService 6.6.7-3 – ‘WTabletServicePro’ Unquoted Service Path
# Exploit Title: Wacom WTabletService 6.6.7-3 - 'WTabletServicePro' Unquoted Service Path
FileOptimizer 14.00.2524 – Denial of Service (PoC)
# Exploit Title: FileOptimizer 14.00.2524 - Denial of Service (PoC)
Network Inventory Advisor 5.0.26.0 – ‘niaservice’ Unquoted Service Path
# Exploit Title: Network Inventory Advisor 5.0.26.0 - 'niaservice' Unquoted Service Path
Blue Stacks App Player 2.4.44.62.57 – “BstHdLogRotatorSvc” Unquote Service Path
# Exploit Title: Blue Stacks App Player 2.4.44.62.57 - "BstHdLogRotatorSvc" Unquote Service Path
Launch Manager 6.1.7600.16385 – ‘DsiWMIService’ Unquoted Service Path
# Title: Launch Manager 6.1.7600.16385 'DsiWMIService' Unquoted Service Path
Ayukov NFTP client 1.71 – ‘SYST’ Buffer Overflow
# Exploit Title: Ayukov NFTP client 1.71 - 'SYST' Buffer Overflow
OpenVPN Connect 3.0.0.272 – ‘agent_ovpnconnect’ Unquoted Service Path
# Exploit Title: OpenVPN Connect 3.0.0.272 - 'ovpnagent' Unquoted Service Path
Aida64 6.10.5200 – Buffer Overflow (SEH)
# Exploit Title: Aida64 6.10.5200 - Buffer Overflow (SEH)
OpenVPN Private Tunnel 2.8.4 – ‘ovpnagent’ Unquoted Service Path
# Title: OpenVPN Private Tunnel 2.8.4 - 'ovpnagent' Unquoted Service Path
WMV to AVI MPEG DVD WMV Convertor 4.6.1217 – Buffer OverFlow (SEH)
# Exploit Title: WMV to AVI MPEG DVD WMV Convertor 4.6.1217 - Buffer OverFlow (SEH)
WMV to AVI MPEG DVD WMV Convertor 4.6.1217 – Denial of Service
# Exploit Title: WMV to AVI MPEG DVD WMV Convertor 4.6.1217 - Denial of Service
Microsoft Windows Server 2012 – ‘Group Policy’ Security Feature Bypass (MS15-014)
# Exploit Title: Microsoft Windows Server 2012 - 'Group Policy' Security Feature Bypass
Microsoft Windows Server 2012 – ‘Group Policy’ Remote Code Execution (MS15-011)
# Exploit Title: Microsoft Windows Server 2012 - 'Group Policy' Remote Code Execution
Intelligent Security System SecurOS Enterprise 10.2 – ‘SecurosCtrlService’ Unquoted Service Path
# Exploit Title: Intelligent Security System SecurOS Enterprise 10.2 - 'SecurosCtrlService' Unquoted Service Path
Win10 MailCarrier 2.51 – ‘POP3 User’ Remote Buffer Overflow
# Exploit Title: Win10 MailCarrier 2.51 - 'POP3 User' Remote Buffer Overflow
ChaosPro 2.0 – Buffer Overflow (SEH)
# Exploit Title: ChaosPro 2.0 - Buffer Overflow (SEH)
JumpStart 0.6.0.0 – ‘jswpbapi’ Unquoted Service Path
# Exploit Title: JumpStart 0.6.0.0 - 'jswpbapi' Unquoted Service Path
IObit Uninstaller 9.1.0.8 – ‘IObitUnSvr’ Unquoted Service Path
# Title: IObit Uninstaller 9.1.0.8 - 'IObitUnSvr' Unquoted Service Path
Adobe Acrobat Reader DC for Windows – Heap-Based Buffer Overflow due to Malformed JP2 Stream (2)
We have observed the following access violation exception in the latest version of Adobe Acrobat Reader DC for Window...
Trend Micro Anti-Threat Toolkit 1.62.0.1218 – Remote Code Execution
# Exploit Title: Trend Micro Anti-Threat Toolkit 1.62.0.1218 - Remote Code Execution
WorkgroupMail 7.5.1 – ‘WorkgroupMail’ Unquoted Service Path
# Exploit Title : WorkgroupMail 7.5.1 - 'WorkgroupMail' Unquoted Service Path
Web Companion versions 5.1.1035.1047 – ‘WCAssistantService’ Unquoted Service Path
# Exploit Title: Web Companion versions 5.1.1035.1047 - 'WCAssistantService' Unquoted Service Path
BlackMoon FTP Server 3.1.2.1731 – ‘BMFTP-RELEASE’ Unquoted Serive Path
# Exploit Title: BlackMoon FTP Server 3.1.2.1731 - 'BMFTP-RELEASE' Unquoted Serive Path
ThinVNC 1.0b1 – Authentication Bypass
# Exploit Title: ThinVNC 1.0b1 - Authentication Bypass
Mikogo 5.2.2.150317 – ‘Mikogo-Service’ Unquoted Serive Path
# Exploit Title : Mikogo 5.2.2.150317 - 'Mikogo-Service' Unquoted Serive Path
LiteManager 4.5.0 – ‘romservice’ Unquoted Serive Path
# Exploit Title : LiteManager 4.5.0 - 'romservice' Unquoted Serive Path