windows

windows 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

Adobe Acrobat Reader DC for Windows – Double Free due to Malformed JP2 Stream

We have observed the following crash in the latest version of Adobe Acrobat Reader DC for Windows, when opening a mal...

2019-08-15 Google Security Research dos

Adobe Acrobat Reader DC for Windows – free() of Uninitialized Pointer due to Malformed JBIG2Globals Stream

We have observed the following access violation exception in the latest version of Adobe Acrobat Reader DC for Window...

2019-08-15 Google Security Research dos

Adobe Acrobat Reader DC for Windows – Heap-Based Buffer Overflow due to Malformed JP2 Stream

We have observed the following access violation exception in the latest version of Adobe Acrobat Reader DC for Window...

2019-08-15 Google Security Research dos

Adobe Acrobat Reader DC for Windows – Heap-Based Memory Corruption due to Malformed TTF Font

We have observed the following access violation exception in the latest version of Adobe Acrobat Reader DC for Window...

2019-08-15 Google Security Research dos

Adobe Acrobat Reader DC for Windows – Heap-Based Buffer Overflow in CoolType.dll

We have observed the following access violation exception in the latest version of Adobe Acrobat Reader DC for Window...

2019-08-15 Google Security Research dos

Adobe Acrobat Reader DC for Windows – Heap-Based Buffer Overflow due to Malformed Font Stream

We have observed the following access violation exception in the latest version of Adobe Acrobat Reader DC for Window...

2019-08-15 Google Security Research dos

Adobe Acrobat Reader DC for Windows – Static Buffer Overflow due to Malformed Font Stream

We have observed the following access violation exception in the latest version of Adobe Acrobat Reader DC for Window...

2019-08-15 Google Security Research dos

Adobe Acrobat Reader DC for Windows – Heap-Based Buffer Overflow While Processing Malformed PDF

We have observed the following access violation exception in the latest version of Adobe Acrobat Reader DC for Window...

2019-08-15 Google Security Research dos

Adobe Acrobat Reader DC for Windows – Use-After-Free due to Malformed JP2 Stream

We have observed the following access violation exception in the latest version of Adobe Acrobat Reader DC for Window...

2019-08-15 Google Security Research dos

Adobe Acrobat Reader DC for Windows – Heap-Based Out-of-Bounds read due to Malformed JP2 Stream

We have observed the following access violation exception in the latest version of Adobe Acrobat Reader DC for Window...

2019-08-15 Google Security Research dos

Microsoft Font Subsetting – DLL Heap-Based Out-of-Bounds read in FixSbitSubTableFormat1

-----=====[ Background ]=====-----

2019-08-15 Google Security Research dos

Microsoft Font Subsetting – DLL Heap Corruption in MakeFormat12MergedGlyphList

-----=====[ Background ]=====-----

2019-08-15 Google Security Research dos

Microsoft Font Subsetting – DLL Heap-Based Out-of-Bounds read in WriteTableFromStructure

-----=====[ Background ]=====-----

2019-08-15 Google Security Research dos

Microsoft Font Subsetting – DLL Heap Corruption in ReadAllocFormat12CharGlyphMapList

-----=====[ Background ]=====-----

2019-08-15 Google Security Research dos

Microsoft Font Subsetting – DLL Heap Corruption in ReadTableIntoStructure

-----=====[ Background ]=====-----

2019-08-15 Google Security Research dos

Microsoft Font Subsetting – DLL Heap Corruption in FixSbitSubTables

-----=====[ Background ]=====-----

2019-08-15 Google Security Research dos

Microsoft Font Subsetting – DLL Double Free in MergeFormat12Cmap / MakeFormat12MergedGlyphList

-----=====[ Background ]=====-----

2019-08-15 Google Security Research dos

Microsoft Font Subsetting – DLL Heap-Based Out-of-Bounds read in GetGlyphIdx

-----=====[ Background ]=====-----

2019-08-15 Google Security Research dos

Microsoft Font Subsetting – DLL Returning a Dangling Pointer via MergeFontPackage

-----=====[ Background ]=====-----

2019-08-15 Google Security Research dos

Adobe Acrobat CoolType (AFDKO) – Call from Uninitialized Memory due to Empty FDArray in Type 1 Fonts

-----=====[ Background ]=====-----

2019-08-15 Google Security Research dos

Adobe Acrobat CoolType (AFDKO) – Memory Corruption in the Handling of Type 1 Font load/store Operators

-----=====[ Background ]=====-----

2019-08-15 Google Security Research dos

Microsoft Windows Text Services Framework MSCTF – Multiple Vulnerabilities

The msctf subsystem is part of the Text Services Framework, The TSF manages things like input methods, keyboard layou...

2019-08-15 Google Security Research local

ManageEngine opManager 12.3.150 – Authenticated Code Execution

#!/usr/bin/env python3

2019-08-14 kindredsec webapps

Microsoft Windows 10 AppXSvc Deployment Service – Arbitrary File Deletion

# Author : Abdelhamid Naceri

2019-08-14 Abdelhamid Naceri local

TortoiseSVN 1.12.1 – Remote Code Execution

Document Title:

2019-08-14 Vulnerability-Lab webapps

Microsoft Windows PowerShell – Unsanitized Filename Command Execution

'''

2019-08-14 hyp3rlinx dos

Steam Windows Client – Local Privilege Escalation

$SteamRegKey = "HKLM:\SOFTWARE\WOW6432Node\Valve\Steam\NSIS"

2019-08-12 AbsoZed local

Apache Tika 1.15 – 1.17 – Header Command Injection (Metasploit)

##

2019-08-05 Metasploit remote

Microsoft Windows 10 1903/1809 – RPCSS Activation Kernel Security Callback Privilege Escalation

Windows: RPCSS Activation Kernel Security Callback EoP

2019-07-18 Google Security Research local

Microsoft Windows – NtUserSetWindowFNID Win32k User Callback Privilege Escalation (Metasploit)

##

2019-07-17 Metasploit local

WinMPG iPod Convert 3.0 – ‘Register’ Denial of Service

# Exploit Title: WinMPG iPod Convert 3.0 - 'Register' Denial of Service

2019-07-17 stresser dos

MAPLE Computer WBT SNMP Administrator 2.0.195.15 – Remote Buffer Overflow

# Exploit Title: MAPLE Computer WBT SNMP Administrator 2.0.195.15 - Remote Buffer Overflow

2019-07-17 hyp3rlinx remote

Microsoft Windows 10 < build 17763 - AppXSvc Hard Link Privilege Escalation (Metasploit)

##

2019-07-16 Metasploit local

Microsoft Compiled HTML Help / Uncompiled .chm File – XML External Entity Injection

[+] Credits: John Page (aka hyp3rlinx)

2019-07-16 hyp3rlinx dos

DameWare Remote Support 12.0.0.509 – ‘Host’ Buffer Overflow (SEH)

#!/usr/bin/env python

2019-07-16 Xavi Beltran local

Microsoft Windows Remote Desktop – ‘BlueKeep’ Denial of Service (Metasploit)

# Exploit Title: Bluekeep Denial of Service (metasploit module)

2019-07-15 RAMELLA Sebastien dos

Streamripper 2.6 – ‘Song Pattern’ Buffer Overflow

#!/usr/bin/python

2019-07-15 Andrey Stoykov local

Microsoft Windows 10.0.17134.648 – HTTP -> SMB NTLM Reflection Leads to Privilege Elevation

VULNERABILITY DETAILS

2019-07-12 Google Security Research local

Microsoft Font Subsetting – DLL Heap Corruption in ComputeFormat4CmapData

-----=====[ Background ]=====-----

2019-07-12 Google Security Research dos

SNMPc Enterprise Edition 9/10 – Mapping Filename Buffer Overflow

#!/usr/bin/python

2019-07-11 xerubus local

Microsoft DirectWrite / AFDKO – Heap-Based Out-of-Bounds Read/Write in OpenType Font Handling Due to Empty ROS Strings

-----=====[ Background ]=====-----

2019-07-10 Google Security Research dos

Microsoft DirectWrite / AFDKO – NULL Pointer Dereferences in OpenType Font Handling While Accessing Empty dynarrays

-----=====[ Background ]=====-----

2019-07-10 Google Security Research dos

Microsoft DirectWrite / AFDKO – Multiple Bugs in OpenType Font Handling Related to the “post” Table

-----=====[ Background ]=====-----

2019-07-10 Google Security Research dos

Microsoft DirectWrite / AFDKO – Out-of-Bounds Read in OpenType Font Handling Due to Undefined FontName Index

-----=====[ Background ]=====-----

2019-07-10 Google Security Research dos

Microsoft DirectWrite / AFDKO – Stack Corruption in OpenType Font Handling While Processing CFF Blend DICT Operator

-----=====[ Background ]=====-----

2019-07-10 Google Security Research dos

Microsoft DirectWrite / AFDKO – Heap-Based Buffer Overflow in OpenType Font Handling in readStrings

-----=====[ Background ]=====-----

2019-07-10 Google Security Research dos

Microsoft DirectWrite / AFDKO – Heap-Based Out-of-Bounds Read/Write in OpenType Font Handling Due to Unbounded iFD

-----=====[ Background ]=====-----

2019-07-10 Google Security Research dos

Microsoft DirectWrite / AFDKO – Heap-Based Buffer Overflow Due to Integer Overflow in readTTCDirectory

-----=====[ Background ]=====-----

2019-07-10 Google Security Research dos

Microsoft DirectWrite / AFDKO – Heap-Based Buffer Overflow in OpenType Font Handling in readCharset

-----=====[ Background ]=====-----

2019-07-10 Google Security Research dos

Microsoft DirectWrite / AFDKO – Heap-Based Buffer Overflow in OpenType Font Handling in readFDSelect

-----=====[ Background ]=====-----

2019-07-10 Google Security Research dos