Microsoft Windows 11 – Kernel Privilege Escalation
# Exploit Title: Microsoft Windows 11 - Kernel Privilege Escalation
windows
windows 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
Microsoft Windows 11 23h2 – CLFS.sys Elevation of Privilege
# Exploit Title: Microsoft Windows 11 23h2 - CLFS.sys Elevation of Privilege
AnyDesk 9.0.1 – Unquoted Service Path
# Exploit Title: AnyDesk 9.0.1 - Unquoted Service Path
Fortinet FortiOS, FortiProxy, and FortiSwitchManager 7.2.0 – Authentication bypass
# Exploit Title: Fortinet FortiOS, FortiProxy, and FortiSwitchManager 7.2.0 - Authentication bypass
WebMethods Integration Server 10.15.0.0000-0092 – Improper Access on Login Page
# Exploit Title: WebMethods Integration Server 10.15.0.0000-0092 - Improper Access on Login Page
Microsoft Office 2019 MSO Build 1808 – NTLMv2 Hash Disclosure
# Exploit Title: Microsoft Office 2019 MSO Build 1808 - NTLMv2 Hash Disclosure
Solstice Pod 6.2 – API Session Key Extraction via API Endpoint
# Exploit Title: Solstice Pod API Session Key Extraction via API Endpoint
Microsoft Windows – NTLM Hash Leak Malicious Windows Theme
# Exploit Title: CVE-2024-21320 - NTLM Hash Leak via Malicious Windows Theme
VeeVPN 1.6.1 – Unquoted Service Path
# Exploit Title: VeeVPN 1.6.1 - 'VeePNService' Unquoted Service Path
Windows TCP/IP – RCE Checker and Denial of Service
#!/usr/bin/env python3
Genexus Protection Server 9.7.2.10 – ‘protsrvservice’ Unquoted Service Path
#Exploit Title: Genexus Protection Server 9.7.2.10 - 'protsrvservice' Unquoted Service Path Service Path
SolarWinds Kiwi Syslog Server 9.6.7.1 – Unquoted Service Path
# Exploit Title: SolarWinds Kiwi Syslog Server 9.6.7.1 - Unquoted Service Path
Oracle Database 12c Release 1 – Unquoted Service Path
# Exploit Title: Oracle Database 12c Release 1 - Unquoted Service Path
Bonjour Service ‘mDNSResponder.exe’ – Unquoted Service Path Privilege Escalation
# Exploit Title: Bonjour Service - 'mDNSResponder.exe' Unquoted Service
Plantronics Hub 3.25.1 – Arbitrary File Read
# Exploit Title: Plantronics Hub 3.25.1 – Arbitrary File Read
AnyDesk 7.0.15 – Unquoted Service Path
# Exploit Title: AnyDesk 7.0.15 - Unquoted Service Path
ESET NOD32 Antivirus 17.0.16.0 – Unquoted Service Path
# Exploit Title: ESET NOD32 Antivirus 17.0.16.0 - Unquoted Service Path
Microsoft Windows Defender – Detection Mitigation Bypass TrojanWin32Powessere.G
[+] Credits: John Page (aka hyp3rlinx)
Microsoft Windows 10.0.17763.5458 – Kernel Privilege Escalation
#############################################
Rapid7 nexpose – ‘nexposeconsole’ Unquoted Service Path
# Exploit Title: Rapid7 nexpose - 'nexposeconsole' Unquoted Service Path
ASUS Control Center Express 01.06.15 – Unquoted Service Path
# Exploit Title: ASUS Control Center Express 01.06.15 - Unquoted Service Path
WinRAR version 6.22 – Remote Code Execution via ZIP archive
################################################################################################
minaliC 2.0.0 – Denied of Service
#!/usr/bin/perl
LaborOfficeFree 19.10 – MySQL Root Password Calculator
# Exploit Title: LaborOfficeFree 19.10 MySQL Root Password Calculator - CVE-2024-1346
KiTTY 0.76.1.13 – Command Injection
# Exploit Title: KiTTY 0.76.1.13 - Command Injection
KiTTY 0.76.1.13 – ‘Start Duplicated Session Username’ Buffer Overflow
# Exploit Title: KiTTY 0.76.1.13 - 'Start Duplicated Session Username' Buffer Overflow
KiTTY 0.76.1.13 – ‘Start Duplicated Session Hostname’ Buffer Overflow
# Exploit Title: KiTTY 0.76.1.13 - 'Start Duplicated Session Hostname' Buffer Overflow
Microsoft Windows Defender / Trojan.Win32/Powessere.G – Detection Mitigation Bypass
[+] Credits: John Page (aka hyp3rlinx)
XAMPP – Buffer Overflow POC
# Exploit Title: XAMPP v3.3.0 — '.ini' Buffer Overflow (Unicode + SEH)
ManageEngine ADManager Plus Build < 7183 - Recovery Password Disclosure
# Exploit Title: ManageEngine ADManager Plus Build < 7183 - Recovery Password Disclosure
PCMan FTP Server 2.0 – ‘pwd’ Remote Buffer Overflow
# Exploit Title: PCMan FTP Server 2.0 - 'pwd' Remote Buffer Overflow
WebCatalog 48.4 – Arbitrary Protocol Execution
# Exploit Title: WebCatalog 48.4 - Arbitrary Protocol Execution
Typora v1.7.4 – OS Command Injection
# Exploit Title: Typora v1.7.4 - OS Command Injection
7 Sticky Notes v1.9 – OS Command Injection
# Exploit Title: 7 Sticky Notes v1.9 - OS Command Injection
Microsoft Windows 11 – ‘apds.dll’ DLL hijacking (Forced)
#---------------------------------------------------------
SyncBreeze 15.2.24 – ‘login’ Denial of Service
# Exploit Title: SyncBreeze 15.2.24 -'login' Denial of Service
GOM Player 2.3.90.5360 – Buffer Overflow (PoC)
# Exploit Title: GOM Player 2.3.90.5360 - Buffer Overflow (PoC)
GOM Player 2.3.90.5360 – Remote Code Execution (RCE)
# Exploit Title: GOM Player 2.3.90.5360 - Remote Code Execution (RCE)
Kingo ROOT 1.5.8 – Unquoted Service Path
#Exploit Title: Kingo ROOT 1.5.8 - Unquoted Service Path
Freefloat FTP Server 1.0 – ‘PWD’ Remote Buffer Overflow
#Exploit title: Freefloat FTP Server 1.0 - 'PWD' Remote Buffer Overflow
NVClient v5.0 – Stack Buffer Overflow (DoS)
# Exploit Title: NVClient v5.0 - Stack Buffer Overflow (DoS)
Inosoft VisiWin 7 2022-2.1 – Insecure Folders Permissions
# Exploit Title: Inosoft VisiWin 7 2022-2.1 - Insecure Folders Permissions
TSPlus 16.0.0.0 – Remote Work Insecure Credential storage
# Exploit Title: TSPlus 16.0.0.0 - Remote Work Insecure Credential storage
TSplus 16.0.0.0 – Remote Work Insecure Files and Folders
# Exploit Title: TSplus 16.0.0.0 - Remote Work Insecure Files and Folders Permissions
TSplus 16.0.2.14 – Remote Access Insecure Files and Folders Permissions
# Exploit Title: TSplus 16.0.2.14 - Remote Access Insecure Files and Folders Permissions
OutSystems Service Studio 11.53.30 – DLL Hijacking
# Exploit Title: OutSystems Service Studio 11.53.30 - DLL Hijacking
Xlight FTP Server 3.9.3.6 – ‘Stack Buffer Overflow’ (DOS)
# Exploit Title: Xlight FTP Server 3.9.3.6 - 'Stack Buffer Overflow' (DOS)
General Device Manager 2.5.2.2 – Buffer Overflow (SEH)
# Exploit Title: General Device Manager 2.5.2.2 - Buffer Overflow (SEH)
mRemoteNG v1.77.3.1784-NB – Cleartext Storage of Sensitive Information in Memory
# Exploit Title: mRemoteNG v1.77.3.1784-NB - Cleartext Storage of Sensitive Information in Memory