VBScript – VbsErase Reference Leak Use-After-Free
There is an reference leak in Microsoft VBScript that can be turned into an use-after-free given sufficient time. The...
windows
windows 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
Base64 Decoder 1.1.2 – Local Buffer Overflow (SEH)
#!/usr/bin/env python
XMPlay 3.8.3 – ‘.m3u’ Local Stack Overflow Code Execution
#!/usr/bin/env python
PDF Explorer 1.5.66.2 – Buffer Overflow (SEH)
# Exploit Title: PDF Explorer SEH Local Exploit
LanSpy 2.0.1.159 – Local Buffer Overflow
#!/usr/bin/python
PassFab RAR 9.3.2 – Buffer Overflow (SEH)
# Exploit Title: PassFab RAR Password Recovery SEH Local Exploit
Nsauditor 3.0.28.0 – Local SEH Buffer Overflow
# Exploit Title: Nsauditor Local SEH Buffer Overflow
MegaPing – Local Buffer Overflow Denial of Service
# Exploit Title: MegaPing
Exel Password Recovery 8.2.0.0 – Local Buffer Overflow Denial of Service
# Exploit Title: Excel Password Recovery Professional
AnyBurn 4.3 – Local Buffer Overflow (PoC)
# Exploit Title: AnyBurn
MiniShare 1.4.1 – ‘HEAD/POST’ Remote Buffer Overflow
Not only the GET method is vulnerable to BOF (CVE-2004-2271). HEAD and POST
UltraISO 9.7.1.3519 – ‘Output FileName’ Denial of Service (PoC)
# Exploit Title: UltraISO 9.7.1.3519 - 'Output FileName' Denial of Service (PoC) and Pointer to next SEH and SE handl...
Angry IP Scanner 3.5.3 – Denial of Service (PoC)
#!/usr/bin/python
Zortam MP3 Media Studio 24.15 – Local Buffer Overflow (SEH)
#Exploit Title: Zortam MP3 Media Studio Version 24.15 Exploit (SEH)
LanSpy 2.0.1.159 – Local Buffer Overflow (PoC)
# Exploit Title: LanSpy 2.0.1.159 - Local BoF (PoC)
SmartFTP Client 9.0.2623.0 – Denial of Service (PoC)
# -*- coding: utf-8 -*-
McAfee True Key – McAfee.TrueKey.Service Privilege Escalation
McAfee True Key: Multiple Issues with McAfee.TrueKey.Service Implementation
Microsoft Lync for Mac 2011 – Injection Forced Browsing/Download
# Exploit Title: Microsoft Lync for Mac 2011 Injection Forced Browsing/Download
Mozilla Firefox 63.0.1 – Denial of Service (PoC)
# Exploit Title: Mozilla Firefox 63.0.1 - Denial of Service (PoC)
CyberArk 9.7 – Memory Disclosure
# Exploit Title: CyberArk 9.7 - Memory Disclosure
ELBA5 5.8.0 – Remote Code Execution
# Exploit Title: ELBA5 5.8.0 - Remote Code Execution
Microsoft Windows – DfMarshal Unsafe Unmarshaling Privilege Escalation
Windows: DfMarshal Unsafe Unmarshaling Elevation of Privilege (Master)
Microsoft Edge Chakra – OP_Memset Type Confusion
Since the patch for CVE-2018-8372, it checks all inputs to native arrays, and if any input equals to the MissingItem ...
XMPlay 3.8.3 – ‘.m3u’ Denial of Service (PoC)
# Exploit Title: XMPlay 3.8.3 - '.m3u' Denial of Service (PoC)
Bosch Video Management System 8.0 – Configuration Client Denial of Service (PoC)
# Exploit Title: Bosch Video Management System 8.0-Configuration Client-Denial of Service (Poc)
Cisco Immunet < 6.2.0 / Cisco AMP For Endpoints 6.2.0 - Denial of Service
[+] Credits: John Page (aka hyp3rlinx)
XAMPP Control Panel 3.2.2 – Buffer Overflow (SEH) (Unicode)
# Exploit Title: XAMPP Control Panel 3.2.2 - Buffer Overflow (SEH) (Unicode)
HeidiSQL 9.5.0.5196 – Denial of Service (PoC)
# Exploit Title: HeidiSQL 9.5.0.5196 - Denial of Service (PoC)
Microsoft Windows 10 (Build 17134) – Local Privilege Escalation (UAC Bypass)
#include "stdafx.h"
VSAXESS V2.6.2.70 build20171226_053 – ‘organization’ Denial of Service (PoC)
# Exploit Title: VSAXESS V2.6.2.70 build20171226_053 - 'organization' Denial of Service (PoC)
Microsoft Internet Explorer 11 – Null Pointer Dereference
# Exloit Title: Microsoft Internet Explorer 11 - Null Pointer Difference
Anviz AIM CrossChex Standard 4.3 – CSV Injection
# Exploit Title: Anviz AIM CrossChex Standard 4.3 - CSV Injection
QNAP NetBak Replicator 4.5.6.0607 – Denial of Service (PoC)
# Exploit Title: QNAP NetBak Replicator 4.5.6.0607 Denial of Service (PoC)
Modbus Slave 7.0.0 – Denial of Service (PoC)
# Exploit Title: Modbus Slave 7.0.0 - Denial of Service (PoC)
ASRock Drivers – Privilege Escalation
SecureAuth - SecureAuth Labs Advisory
Microsoft Data Sharing – Local Privilege Escalation (PoC)
Bug description:
MGB OpenSource Guestbook 0.7.0.2 – ‘id’ SQL Injection
# Exploit Title: MGB OpenSource Guestbook 0.7.0.2 - 'id' SQL Injection
ServersCheck Monitoring Software 14.3.3 – ‘id’ SQL Injection
# Exploit Title: ServersCheck Monitoring Software 14.3.3 - 'id' SQL Injection
ServersCheck Monitoring Software 14.3.3 – Arbitrary File Write
# Exploit Title: ServersCheck Monitoring Software 14.3.3 - Denial of Service (PoC)
Microsoft Windows 10 – Local Privilege Escalation (UAC Bypass)
#!/usr/bin/env python