Realterm Serial Terminal 2.0.0.70 – Denial of Service
# -*- coding: utf-8 -*-
windows
windows 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
VSCO 1.1.1.0 – Denial of Service (PoC)
# Exploit Title: VSCO 1.1.1.0 - Denial of Service (PoC)
Navicat for Oracle 12.1.15 – “Password” Denial of Service (PoC)
#Exploit Title: Navicat for Oracle 12.1.15 - "Password" Denial of Service (PoC)
Free IP Switcher 3.1 – ‘Computer Name’ Denial of Service (PoC)
#Exploit Title: Free IP Switcher 3.1 - Denial of Service (PoC)
MediaMonkey 4.1.23 – ‘.mp3’ URL Denial of Service (PoC)
# -*- coding: utf-8 -*-
Core FTP/SFTP Server 1.2 Build 589.42 – ‘User domain’ Denial of Service (PoC)
#Exploit Title: Core FTP/SFTP Server 1.2 - Build 589.42 - Denial of Service (PoC)
exacqVision ESM 5.12.2 – Privilege Escalation
# Exploit Title: exacqVision ESM 5.12.2 - Privilege Escalation
NetworkSleuth 3.0 – ‘Name’ Denial of Service (PoC)
# -*- coding: utf-8 -*-
River Past Video Cleaner 7.6.3 – Local Buffer Overflow (SEH)
# Exploit Title: River Past Video Cleaner Buffer Overflow (SEH)
Avast Anti-Virus < 19.1.2360 - Local Credentials Disclosure
# Exploit Title: Avast Anti-Virus Local Credentials Disclosure < 19.1.2360
NordVPN 6.19.6 – Denial of Service (PoC)
# -*- coding: utf-8 -*-
FutureDj Pro 1.7.2.0 – Denial of Service
# Exploit Title: FutureDj Pro Local Dos Exploit
River Past Cam Do 3.7.6 – Local Buffer Overflow (SEH)
# Exploit Title: River Past CamDo SEH Local Exploit
IP-Tools 2.5 – ‘Log to file’ Local Buffer Overflow (SEH) (Egghunter)
#!/usr/bin/env python
River Past Audio Converter 7.7.16 – Buffer Overflow (SEH)
# Exploit Title: River_Past_Audio_Converter - Buffer Overflow (SEH)
River Past Audio Converter 7.7.16 – Denial of Service (PoC)
# Exploit Title: River_Past_Audio_Converter(DoS)
Device Monitoring Studio 8.10.00.8925 – Denial of Service (PoC)
#Exploit Title: Device Monitoring Studio 8.10.00.8925 - Denial of Service (PoC)
TaskInfo 8.2.0.280 – Denial of Service (PoC)
# Exploit Title: TaskInfo v8.2.0.280 - Denial of Service (PoC)
SpotAuditor 3.6.7 – ‘Base64 Encrypted Password’ Denial of Service (PoC)
# Exploit Title: SpotAuditor v3.6.7 - Denial of Service (PoC)
River Past Ringtone Converter 2.7.6.1601 – Denial of Service (PoC)
# Exploit Title: River Past Ringtone Converter v2.7.6.1601 - Denial of Service (PoC)
MyVideoConverter Pro 3.14 – Denial of Service
# Exploit Title: MyVideoConverter Pro 3.14 Denial of Service
SureMDM < 2018-11 Patch - Local / Remote File Inclusion
# Exploit Title: SureMDM LFI/RFI (Prior to 2018-11 Patch)
Remote Process Explorer 1.0.0.16 – Buffer Overflow (PoC) (SEH Overwrite)
# Exploit Title: Remote Process Explorer v1.0.0.16 - Denial of Service (PoC) and SEH overwritten Crash PoC
PassFab Excel Password Recovery 8.3.1 – SEH Local Exploit
# Exploit Title: PassFab Excel Password Recovery SEH Local Exploit
LanHelper 1.74 – Denial of Service (PoC)
# Exploit Title: LanHelper v1.74 - Denial of Service (PoC)
FlexHEX 2.46 – Buffer Overflow (PoC) (SEH Overwrite)
# Exploit Title: FlexHEX v2.46 - Denial of Service (PoC) and SEH overwritten Crash PoC
ASPRunner Professional 6.0.766 – Denial of Service (PoC)
# Exploit Title: ASPRunner Professional v6.0.766 - Denial of Service (PoC)
AMAC Address Change 5.4 – Denial of Service (PoC)
# Exploit Title: a-Mac Address Change v5.4 - Denial of Service (PoC)
Advanced Host Monitor 11.90 Beta – ‘Registration number’ Denial of Service (PoC)
# Exploit Title: Advanced Host Monitor 11.90 Beta - 'Registration number' Denial of Service (PoC)
UltraISO 9.7.1.3519 – ‘Output FileName’ Local Buffer Overflow (SEH)
#!/usr/bin/python
Anyburn 4.3 – ‘Convert image to file format’ Denial of Service
#!/usr/bin/python
R 3.5.0 – Local Buffer Overflow (SEH)
#!/usr/bin/python
Necrosoft DIG 0.4 – Buffer Overflow (PoC) (SEH Overwrite)
# Exploit Title: Necrosoft DIG v0.4 - Denial of Service (PoC) SEH overwritten Crash PoC
IP-Tools 2.50 – Local Buffer Overflow (PoC)
# Exploit Title: IP TOOLS v2.50 - Denial of Service (PoC) and SEH overwritten Crash PoC
Advanced File Manager 3.4.1 – Denial of Service (PoC)
# Exploit Title: Advanced File Manager v3.4.1 - Denial of Service (PoC)
HTML5 Video Player 1.2.5 – Local Buffer Overflow (Non SEH)
#!/usr/bin/python
Smart VPN 1.1.3.0 – Denial of Service (PoC)
# Exploit Title: Smart VPN 1.1.3.0 - Denial of Service (PoC)
Faleemi Desktop Software 1.8 – Local Buffer Overflow (SEH) (DEP Bypass)
#!/usr/bin/python
BEWARD Intercom 2.3.1 – Credentials Disclosure
#!/usr/bin/env python
R 3.4.4 XP SP3 – Buffer Overflow (Non SEH)
#!/usr/bin/python
Easy Video to iPod Converter 1.6.20 – Buffer Overflow (SEH)
# Exploit Title: Easy Video to iPod Converter - Local Buffer Overflow (SEH)
Microsoft Windows CONTACT – HTML Injection / Remote Code Execution
[+] Credits: John Page (aka hyp3rlinx)
Microsoft Windows VCF or Contact’ File – URL Manipulation-Spoof Arbitrary Code Execution
# Exploit Title: Microsoft Windows 'VCF' or 'Contact' File URL Manipulation-Spoof Arbitrary Code Execution Vulnerabi...
CloudMe Sync 1.11.2 – Buffer Overflow + Egghunt
#######################################################
Echo Mirage 3.1 – Buffer Overflow (PoC)
#!/usr/bin/python
Microsoft Edge Chakra – ‘JsBuiltInEngineInterfaceExtensionObject::InjectJsBuiltInLibraryCode’ Use-After-Free
The JsBuiltInEngineInterfaceExtensionObject::InjectJsBuiltInLibraryCode method is used to execute JsBuiltIn.js which ...
Microsoft Edge Chakra – ‘InitClass’ Type Confusion
Issue description
Microsoft Edge Chakra – ‘NewScObjectNoCtor’ or ‘InitProto’ Type Confusion
NewScObjectNoCtor and InitProto opcodes are treated as having no side effects, but actually they can have via the Set...