AIDA64 Business 5.99.4900 – SEH Buffer Overflow (EggHunter)
#!/usr/bin/python #
windows
windows 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
Base64 Decoder 1.1.2 – Local Buffer Overflow (SEH Egghunter)
#!/usr/bin/env python
Microsoft Visio 2016 16.0.4738.1000 – ‘Log in accounts’ Denial of Service
# -⋆- coding: utf-8 -⋆-
Titan FTP Server Version 2019 Build 3505 – Directory Traversal / Local File Inclusion
# Exploit Title: Titan FTP Server Version 2019 Build 3505 Directory Traversal/Local File Inclusion
Microsoft Windows 7/2008 – ‘Win32k’ Denial of Service (PoC)
# Exploit Title: Microsoft Windows Win32k CVE-2019-0808 Local Privilege Escalation Vulnerability
VMware Workstation 14.1.5 / VMware Player 15 – Host VMX Process COM Class Hijack Privilege Escalation
VMware: Host VMX Process COM Class Hijack EoP
VMware Workstation 14.1.5 / VMware Player 15.0.2 – Host VMX Process Impersonation Hijack Privilege Escalation
VMware: Host VMX Process Impersonation Hijack EoP
X-NetStat Pro 5.63 – Local Buffer Overflow
#!/usr/bin/env python
Canarytokens 2019-03-01 – Detection Bypass
## Exploit Title: Canarytokens 2019-03-01 - Detection Bypass
DVD X Player 5.5.3 – ‘.plf’ Buffer Overflow
#!/usr/bin/env python
NetShareWatcher 1.5.8.0 – Local SEH Buffer Overflow
# Exploit Title: NetShareWatcher 1.5.8.0 - SEH Buffer Overflow
Microsoft Edge – Flash click2play Bypass with CObjectElement::FinalCreateObject
Attached is a PoC file that bypasses Flash click2play in Microsoft Edge. This was tested on Windows 10 64bit v 1809 w...
Advanced Host Monitor 11.92 beta – Local Buffer Overflow
#!/usr/bin/env python
WinAVI iPod/3GP/MP4/PSP Converter 4.4.2 – Denial of Service
# Exploit Title: WinAVI iPod/3GP/MP4/PSP Converter 4.4.2 Local Dos Exploit
WinMPG Video Convert 9.3.5 – Denial of Service
# Exploit Title: WinMPG Video Convert Local Dos Exploit
Mail Carrier 2.5.1 – ‘MAIL FROM’ Buffer Overflow
# Exploit Title: Tabs Mail Carrier 2.5.1 MAIL FROM: Buffer Overflow
FTPGetter Standard 5.97.0.177 – Remote Code Execution
# Exploit Title: FTPGetter Standard - v.5.97.0.177 Remote Code Execution
Apache Tika-server < 1.18 - Command Injection
######################################################################################################
Microsoft Windows MSHTML Engine – ‘Edit’ Remote Code Execution
# Exploit Title: Microsoft Windows (CVE-2019-0541) MSHTML Engine "Edit" Remote Code Execution Vulnerability
Core FTP Server FTP / SFTP Server v2 Build 674 – ‘SIZE’ Directory Traversal
# Exploit Title: CoreFTP Server FTP / SFTP Server v2 - Build 674 SIZE Directory Traversal
Core FTP Server FTP / SFTP Server v2 Build 674 – ‘MDTM’ Directory Traversal
# Exploit Title: CoreFTP Server FTP / SFTP Server v2 - Build 674 MDTM Directory Traversal
Microsoft Windows – ‘.reg’ File / Dialog Box Message Spoofing
[+] Credits: John Page (aka hyp3rlinx)
Core FTP 2.0 build 653 – ‘PBSZ’ Denial of Service (PoC)
# Exploit Title: Core FTP 2.0 build 653 - 'PBSZ' - Unauthenticated - Denial of Service (PoC)
NetSetMan 4.7.1 – Local Buffer Overflow (SEH Unicode)
#Exploit Title: NetSetMan 4.7.1 - Local Buffer Overflow (SEH Unicode)
McAfee ePO 5.9.1 – Registered Executable Local Access Bypass
# Exploit Title: McAfee ePO 5.9.1 Registered Executable Local Access Bypass
MarcomCentral FusionPro VDP Creator < 10.0 - Directory Traversal
#!/usr/bin/env python
Cisco WebEx Meetings < 33.6.6 / < 33.9.1 - Privilege Escalation
SecureAuth - SecureAuth Labs Advisory
TransMac 12.3 – Denial of Service (PoC)
# -*- coding: utf-8 -*-
Xlight FTP Server 3.9.1 – Buffer Overflow (PoC)
# Exploit Title: Xlight 3.9.1 FTP Server SEH Overwrite
WinRAR 5.61 – Path Traversal
#!/usr/bin/env python3
Virtual VCR Max .0a – ‘.vcr’ Buffer Overflow (PoC)
#!/usr/bin/python
RealTerm Serial Terminal 2.0.0.70 – ‘Echo Port’ Buffer Overflow (SEH)
# Exploit Title: RealTerm: Serial Terminal 2.0.0.70 - 'Echo Port' Buffer Overflow - (SEH)
Memu Play 6.0.7 – Privilege Escalation
# Exploit Title: Memu Play 6.0.7 - Privilege Escalation (PoC)
WinRAR 5.61 – ‘.lng’ Denial of Service
# Exploit Title: WinRAR 5.61 - Denial of Service
FTPShell Server 6.83 – ‘Account name to ban’ Denial of Service (PoC)
#Exploit Title: FTPShell Server 6.83 - Denial of Service (PoC)
BulletProof FTP Server 2019.0.0.50 – ‘SMTP Server’ Denial of Service (PoC)
#Exploit Title: BulletProof FTP Server 2019.0.0.50 - Denial of Service (PoC)
Valentina Studio 9.0.4 – ‘Host’ Denial of Service (PoC)
#Exploit Title: Valentina Studio 9.0.4 - Denial of Service (PoC)
NetSetMan 4.7.1 – ‘Workgroup’ Denial of Service (PoC)
#Exploit Title: NetSetMan 4.7.1 'Workgroup' - Denial of Service (PoC)
MaxxAudio Drivers WavesSysSvc64.exe 1.6.2.0 – Local Privilege Escalation
# Exploit Title: MaxxAudio Drivers WavesSysSvc64.exe File Permissions SYSTEM Privilege Escalation
NBMonitor 1.6.5.0 – ‘Key’ Denial of Service (PoC)
# -*- coding: utf-8 -*-
mIRC < 7.55 - 'Custom URI Protocol Handlers' Remote Command Execution
# Exploit Title: RCE on mIRC
Realterm Serial Terminal 2.0.0.70 – Local Buffer Overflow (SEH)
# -*- coding: utf-8 -*-