SpotAuditor 5.2.6 – ‘Name’ Denial of Service (PoC)
#Exploit Title: SpotAuditor 5.2.6 - 'Name' Denial of Service (PoC)
windows
windows 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
Freefloat FTP Server 1.0 – ‘STOR’ Remote Buffer Overflow
# Exploit Title: Free Float FTP 1.0 "STOR" Remote Buffer Overflow
Freefloat FTP Server 1.0 – ‘SIZE’ Remote Buffer Overflow
# Exploit Title: Free Float FTP 1.0 "SIZE" Remote Buffer Overflow
NSauditor 3.1.2.0 – ‘Name’ Denial of Service (PoC)
#Exploit Title: NSauditor 3.1.2.0 - 'Name' Denial of Service (PoC)
NSauditor 3.1.2.0 – ‘Community’ Denial of Service (PoC)
#Exploit Title: NSauditor 3.1.2.0 - 'Community' Denial of Service (PoC)
Lavavo CD Ripper 4.20 – ‘License Activation Name’ Buffer Overflow (SEH)
# Exploit Title: Lavavo CD Ripper 4.20 Local Seh Exploit
AnMing MP3 CD Burner 2.0 – Denial of Service (PoC)
# Exploit Title: AnMing MP3 CD Burner 2.0 Local Dos Exploit
Backup Key Recovery 2.2.4 – Denial of Service (PoC)
#Exploit Title: Backup Key Recovery 2.2.4 - 'Name' Denial of Service (PoC)
HeidiSQL 10.1.0.5464 – Denial of Service (PoC)
#Exploit Title: HeidiSQL Portable 10.1.0.5464 - Denial of Service (PoC)
VirtualBox 6.0.4 r128413 – COM RPC Interface Code Injection Host Privilege Escalation
VirtualBox: COM RPC Interface Code Injection Host EoP
Ross Video DashBoard 8.5.1 – Insecure Permissions
Ross Video DashBoard 8.5.1 Insecure Permissions
LabF nfsAxe 3.7 Ping Client – ‘Host IP’ Buffer Overflow (Direct Ret)
#!/usr/bin/python
Ease Audio Converter 5.30 – ‘.mp4’ Denial of Service (PoC)
# Exploit Title: Ease Audio Converter 5.30 Audio Cutter Dos Exploit
Oracle Business Intelligence / XML Publisher 11.1.1.9.0 / 12.2.1.3.0 / 12.2.1.4.0 – XML External Entity Injection
# Exploit Title: XXE in Oracle Business Intelligence and XML Publisher
Oracle Business Intelligence 11.1.1.9.0 / 12.2.1.3.0 / 12.2.1.4.0 – Directory Traversal
# Exploit Title: Directory traversal in Oracle Business Intelligence
DHCP Server 2.5.2 – Denial of Service (PoC)
#Exploit Title: DHCP Server 2.5.2 - Denial of Service (PoC)
MailCarrier 2.51 – POP3 ‘RETR’ SEH Buffer Overflow
#!/usr/bin/python
Microsoft Windows 10 1809 – LUAFV PostLuafvPostReadWrite SECTION_OBJECT_POINTERS Race Condition Privilege Escalation
Windows: LUAFV PostLuafvPostReadWrite SECTION_OBJECT_POINTERS Race Condition EoP
Microsoft Windows 10 1809 – LUAFV Delayed Virtualization Cache Manager Poisoning Privilege Escalation
Windows: LUAFV Delayed Virtualization Cache Manager Poisoning EoP
Microsoft Windows 10 1809 – LUAFV NtSetCachedSigningLevel Device Guard Bypass
Windows: LUAFV NtSetCachedSigningLevel Device Guard Bypass
Microsoft Windows 10 1809 – LUAFV LuafvCopyShortName Arbitrary Short Name Privilege Escalation
Windows: LUAFV LuafvCopyShortName Arbitrary Short Name EoP
Microsoft Windows 10 1809 – LUAFV Delayed Virtualization Cross Process Handle Duplication Privilege Escalation
Windows: LUAFV Delayed Virtualization Cross Process Handle Duplication EoP
Microsoft Windows 10 1809 – LUAFV Delayed Virtualization MAXIMUM_ACCESS DesiredAccess Privilege Escalation
Windows: LUAFV Delayed Virtualization MAXIMUM_ACCESS DesiredAccess EoP
Microsoft Windows 10 1809 / 1709 – CSRSS SxSSrv Cached Manifest Privilege Escalation
Windows: CSRSS SxSSrv Cached Manifest EoP
AdminExpress 1.2.5 – ‘Folder Path’ Denial of Service (PoC)
# -*- coding: utf-8 -*-
PCHelpWare V2 1.0.0.5 – ‘Group’ Denial of Service (PoC)
# -*- coding: utf-8 -*-
PCHelpWare V2 1.0.0.5 – ‘SC’ Denial of Service (PoC)
# -*- coding: utf-8 -*-
Zoho ManageEngine ADManager Plus 6.6 (Build < 6659) - Privilege Escalation
# Exploit Title: Zoho ManageEngine ADManager Plus 6.6 (Build < 6659) Privilege Escalation
UltraVNC Launcher 1.2.2.4 – ‘Path’ Denial of Service (PoC)
#Exploit Title: UltraVNC Launcher 1.2.2.4 - Denial of Service (PoC)
UltraVNC Viewer 1.2.2.4 – ‘VNC Server’ Denial of Service (PoC)
#Exploit Title: UltraVNC Viewer 1.2.2.4 - Denial of Service (PoC)
MailCarrier 2.51 – POP3 ‘TOP’ SEH Buffer Overflow
#!/usr/bin/python
MailCarrier 2.51 – POP3 ‘LIST’ SEH Buffer Overflow
#!/usr/bin/python
MailCarrier 2.51 – POP3 ‘USER’ Buffer Overflow
#!/usr/bin/python
RemoteMouse 3.008 – Arbitrary Remote Command Execution
# Exploit Title: Remote Mouse 3.008 - Failure to Authenticate
MailCarrier 2.51 – ‘RCPT TO’ Buffer Overflow
#!/usr/bin/python
Microsoft Internet Explorer 11 – XML External Entity Injection
[+] Credits: John Page (aka hyp3rlinx)
CyberArk EPM 10.2.1.603 – Security Restrictions Bypass
# Exploit Title: CyberArk Endpoint bypass
FTPShell Server 6.83 – ‘Virtual Path Mapping’ Local Buffer
#!/usr/bin/python
FTPShell Server 6.83 – ‘Account name to ban’ Local Buffer
#!/usr/bin/python
Microsoft Windows – AppX Deployment Service Privilege Escalation
This vulnerability allows low privileged users to hijack file that are owned by NT AUTHORITY\SYSTEM by overwriting pe...
Download Accelerator Plus (DAP) 10.0.6.0 – SEH Buffer Overflow
#!/usr/bin/python #
River Past Cam Do 3.7.6 – ‘Activation Code’ Local Buffer Overflow
#!/usr/bin/python -w
AllPlayer 7.4 – SEH Buffer Overflow (Unicode)
#!/usr/bin/python -w
FlexHEX 2.71 – SEH Buffer Overflow (Unicode)
#!/usr/bin/python -w
AIDA64 Extreme 5.99.4900 – ‘Logging’ SEH Buffer Overflow
#!/usr/bin/python #
AIDA64 Engineer 5.99.4900 – ‘Load from file’ Field Buffer Overflow (SEH)
#!/usr/bin/python
Magic ISO Maker 5.5(build 281) – ‘Serial Code’ Denial of Service (PoC)
# -*- coding: utf-8 -*-