Microsoft Edge Chakra – ‘InlineArrayPush’ Type Confusion
In Chakra, if you add a numeric property to an object having inlined properties, it will start transition to a new ty...
windows
windows 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
FastTube 1.0.1.0 – Denial of Service (PoC)
# Exploit Title: FastTube 1.0.1.0 - Denial of Service (PoC)
VPN Browser+ 1.1.0.0 – Denial of Service (PoC)
# Exploit Title: VPN Browser+ 1.1.0.0 - Denial of Service (PoC)
7 Tik 1.0.1.0 – Denial of Service (PoC)
# Exploit Title: 7 Tik 1.0.1.0 - Denial of Service (PoC)
Eco Search 1.0.2.0 – Denial of Service (PoC)
# Exploit Title: Eco Search 1.0.2.0 - Denial of Service (PoC)
One Search 1.1.0.0 – Denial of Service (PoC)
# Exploit Title: One Search 1.1.0.0 - Denial of Service (PoC)
Watchr 1.1.0.0 – Denial of Service (PoC)
# Exploit Title: Watchr 1.1.0.0 - Denial of Service (PoC)
Check Point ZoneAlarm 8.8.1.110 – Local Privilege Escalation
# Exploit Title: Check Point ZoneAlarm Local Privilege Escalation
Microsoft Windows CONTACT – Remote Code Execution
[+] Credits: John Page (aka hyp3rlinx)
Microsoft Windows 10 – XmlDocument Insecure Sharing Privilege Escalation
Windows: XmlDocument Insecure Sharing Elevation of Privilege
Microsoft Windows 10 – ‘RestrictedErrorInfo’ Unmarshal Section Handle Use-After-Free
Windows: RestrictedErrorInfo Unmarshal Section Handle UAF EoP
Spotify 1.0.96.181 – ‘Proxy configuration’ Denial of Service (PoC)
# Exploit Title: Spotify 1.0.96.181 - "Proxy configuration" Denial of Service (PoC)
Microsoft Windows VCF – Remote Code Execution
[+] Credits: John Page (aka hyp3rlinx)
Portier Vision 4.4.4.2 / 4.4.4.6 – SQL Injection
-----BEGIN PGP SIGNED MESSAGE-----
Microsoft Windows 10 – COM Desktop Broker Privilege Escalation
Windows: COM Desktop Broker Elevation of Privilege
Microsoft Windows 10 – Browser Broker Cross Session Privilege Escalation
Windows: Browser Broker Cross Session EoP
Microsoft Windows 10 – DSSVC MoveFileInheritSecurity Privilege Escalation
Windows: DSSVC MoveFileInheritSecurity Multiple Issues EoP
Microsoft Windows 10 – DSSVC CanonicalAndValidateFilePath Security Feature Bypass
Windows: DSSVC CanonicalAndValidateFilePath Security Feature Bypass
Microsoft Windows 10 – DSSVC DSOpenSharedFile Arbitrary File Delete Privilege Escalation
Windows: DSSVC DSOpenSharedFile Arbitrary File Delete EoP
Microsoft Windows 10 – DSSVC DSOpenSharedFile Arbitrary File Open Privilege Escalation
Windows: DSSVC DSOpenSharedFile Arbitrary File Open EoP
Microsoft Windows 10 – SSPI Network Authentication Session 0 Privilege Escalation
Windows: SSPI Network Authentication Session 0 EoP
Dokany 1.2.0.1000 – Stack-Based Buffer Overflow Privilege Escalation
Exploit Title - Dokany Stack-based Buffer Overflow Privilege Escalation
Luminance Studio 2.17 – Denial of Service (PoC)
# Exploit Title: Luminance Studio 2.17 - Denial of Service (PoC)
Blob Studio 2.17 – Denial of Service (PoC)
# Exploit Title: Blob Studio 2.17 - Denial of Service (PoC)
Liquid Studio 2.17 – Denial of Service (PoC)
# Exploit Title: Liquid Studio 2.17 - Denial of Service (PoC)
Pixel Studio 2.17 – Denial of Service (PoC)
# Exploit Title: Pixel Studio 2.17 - Denial of Service (PoC)
Paint Studio 2.17 – Denial of Service (PoC)
# Exploit Title: Paint Studio 2.17 - Denial of Service (PoC)
Tree Studio 2.17 – Denial of Service (PoC)
# Exploit Title: Tree Studio 2.17 - Denial of Service (PoC)
Selfie Studio 2.17 – Denial of Service (PoC)
# Exploit Title: Selfie Studio 2.17 - Denial of Service (PoC)
Code Blocks 17.12 – Local Buffer Overflow (SEH) (Unicode)
#!/usr/bin/python
RGui 3.5.0 – Local Buffer Overflow (SEH)(DEP Bypass)
#!/usr/bin/python
BlogEngine 3.3 – XML External Entity Injection
XML External Entity Injection Vulnerability in BlogEngine 3.3
Microsoft Windows – DSSVC CheckFilePermission Arbitrary File Deletion
Windows: DSSVC CheckFilePermission Arbitrary File Delete EoP
KioWare Server Version 4.9.6 – Weak Folder Permissions Privilege Escalation
# Exploit Title : KioWare Server Version 4.9.6 - Weak Folder Permissions Privilege Escalation
Foscam Video Management System 1.1.4.9 – ‘Username’ Denial of Service (PoC)
# Exploit Title: Foscam Video Management System 1.1.4.9 - 'Username' Denial of Service (PoC)
SpotFTP Password Recover 2.4.2 – ‘Name’ Denial of Service (PoC)
# Exploit Title: SpotFTP Password Recover 2.4.2 - 'Name' Denial of Service (PoC)
BlueAuditor 1.7.2.0 – ‘Key’ Denial of Service (PoC)
# Exploit Title: BlueAuditor 1.7.2.0 - 'Key' Denial of Service (PoC)
Ajera Timesheets 9.10.16 – Deserialization of Untrusted Data
# Exploit Title: Ajera Timesheets
Microsoft Windows – Windows Error Reporting Local Privilege Escalation
Make sure to copy the file report.wer found in the folder PoC-Files in the same folder as the executable before runni...
Adobe Flash ActiveX Plugin 28.0.0.137 – Remote Code Execution (PoC)
Download: https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/46051.zip
SQLScan 1.0 – Denial of Service (PoC)
# Exploit Title: McAfee Foundstone SQLScan - Denial of Service (PoC) and EIP record overwrite
Microsoft Windows – ‘MsiAdvertiseProduct’ Arbitrary File Read
The bug is in “MsiAdvertiseProduct”
Microsoft Edge 42.17134.1.0 – ‘Tree::ANode::DocumentLayout’ Denial of Service
# Exploit Title: Microsoft Edge edgehtml.dll!Tree::ANode::DocumentLayout. Denial of Service (PoC)
AnyBurn 4.3 – Local Buffer Overflow (SEH)
#!/usr/bin/env python
Microsoft Windows – ‘MsiAdvertiseProduct’ Arbitrary File Copy/Read
The bug is in “MsiAdvertiseProduct”
VBScript – MSXML Execution Policy Bypass
According to https://blogs.windows.com/msedgedev/2017/07/07/update-disabling-vbscript-internet-explorer-11/, Starting...