Microsoft Edge Chakra JIT – ‘InlineArrayPush’ Type Confusion
This is similar to issue 1531 . The patch seems to prevent type confusion triggered from StElemI_A instructions. But...
windows
windows 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
Microsoft Edge Chakra JIT – ImplicitCallFlags Check Bypass with Intl
If the Intl object hasn't been initialized, access to any property of it will trigger the initialization process whic...
Acunetix WVS 10.0 Build 20150623 – Denial of Service (PoC)
# Exploit Title : Acunetix Web Vulnerability Scanner 10.0 Build 20150623 - Denial of Service (PoC)
Microsoft DirectX SDK – ‘Xact.exe’ Remote Code Execution
[+] Credits: John Page (aka hyp3rlinx)
Soroush IM Desktop App 0.17.0 – Authentication Bypass
# Exploit Title: Soroush IM Desktop App 0.17.0 - Authentication Bypass
Mikrotik WinBox 6.42 – Credential Disclosure (Metasploit)
# Exploit Title: Mikrotik WinBox 6.42 - Credential Disclosure (Metasploit)
osTicket 1.10.1 – Arbitrary File Upload
# Exploit Title: osTicket 1.10.1 - Arbitrary File Upload
Open-AudIT Community 2.2.6 – Cross-Site Scripting
# Exploit Title: Open-AudIT Community 2.2.6 - Cross-Site Scripting
AgataSoft Auto PingMaster 1.5 – Buffer Overflow (SEH)
# Exploit Title: AgataSoft Auto PingMaster 1.5 - Buffer Overflow (SEH)
Wedding Slideshow Studio 1.36 – Buffer Overflow
###########################################################################################
AgataSoft Auto PingMaster 1.5 – ‘Host name’ Denial of Service (PoC)
# Exploit Title: AgataSoft Auto PingMaster 1.5 - 'Host name' Denial of Service (PoC)
Seq 4.2.476 – Authentication Bypass
# Exploit Title: Seq 4.2.476 - Authentication Bypass
Allok Fast AVI MPEG Splitter 1.2 – Buffer Overflow (PoC)
# Exploit Title: Allok Fast AVI MPEG Splitter 1.2 SEH Overwrite POC
Switch Port Mapping Tool 2.81 – ‘SNMP Community Name’ Denial of Service (PoC)
# Exploit Title: Switch Port Mapping Tool 2.81 - 'SNMP Community Name' Denial of Service (PoC)
ipPulse 1.92 – ‘Licence Key’ Denial of Service (PoC)
# Exploit Title: ipPulse 1.92 - 'License Key' Denial of Service (PoC)
Microsoft Windows Kernel – ‘win32k!NtUserConsoleControl’ Denial of Service (PoC)
# Exploit Title: Microsoft Windows Kernel - 'win32k!NtUserConsoleControl' Denial of Service (PoC)
ipPulse 1.92 – ‘IP Address/HostName-Comment’ Denial of Service (PoC)
# Exploit Title: ipPulse 1.92 - 'IP Address/HostName-Comment' Denial of Service (PoC)
Allok MOV Converter 4.6.1217 – Buffer Overflow (SEH)
# Exploit Title: Allok MOV Converter 4.6.1217 - Buffer Overflow (SEH)
NetScanTools Basic Edition 2.5 – ‘Hostname’ Denial of Service (PoC)
# Exploit Title: NetScanTools Basic Edition 2.5 - 'Hostname' Denial of Service (PoC)
QNap QVR Client 5.1.1.30070 – ‘Password’ Denial of Service (PoC)
# Exploit Title: QNap QVR Client 5.1.1.30070 - 'Password' Denial of Service (PoC)
Core FTP 2.0 – ‘XRMD’ Denial of Service (PoC)
# Exploit Title: Core FTP 2.0 - 'XRMD' Denial of Service (PoC)
GetGo Download Manager 6.2.1.3200 – Denial of Service (PoC)
# Exploit Title: GetGo Download Manager 6.2.1.3200 - Buffer Overflow (Denial of Service)
10-Strike LANState 8.8 – Local Buffer Overflow (SEH)
# Exploit Title: 10-Strike LANState 8.8 - Local Buffer Overflow (SEH)
10-Strike Bandwidth Monitor 3.7 – Local Buffer Overflow (SEH)
# Title: 10-Strike Bandwidth Monitor 3.7 - Local Buffer Overflow SEH
Microsoft Windows – ‘dnslint.exe’ Drive-By Download
[+] Credits: John Page (aka hyp3rlinx)
Microsoft Windows Speech Recognition – Buffer Overflow (PoC)
# Title: Windows Speech Recognition- Buffer Overflow
Splinterware System Scheduler Pro 5.12 – Privilege Escalation
# Exploit Title: Splinterware System Scheduler Pro 5.12 - Privilege Escalation
Splinterware System Scheduler Pro 5.12 – Buffer Overflow (SEH)
#!/usr/bin/python
Microsoft Enterprise Mode Site List Manager – XML External Entity Injection
[+] Credits: John Page (aka hyp3rlinx)
Microsoft Edge Chakra JIT – BoundFunction::NewInstance Out-of-Bounds Read
BoundFunction::NewInstance is used to handle calls to a bound function. The method first allocates a new argument arr...
Microsoft Edge Chakra JIT – Out-of-Bounds Reads/Writes
It seems that this issue is similar to the issue 1429 (MSRC 42111). It might need to refresh the page several times...
Boxoft WAV to WMA Converter 1.0 – Local Buffer Overflow (SEH)
# Exploit Title: Boxoft wav-wma Converter - Local Buffer Overflow (SEH)
Activision Infinity Ward Call of Duty Modern Warfare 2 – Buffer Overflow
# Exploit Title: Stack-based buffer overflow in Activision Infinity Ward Call of Duty Modern Warfare 2
Airties AIR5444TT – Cross-Site Scripting
# Exploit Title: Airties AIR5444TT - Cross-Site Scripting
PolarisOffice 2017 8 – Remote Code Execution
[+] Credits: John Page (aka hyp3rlinx)
VLC media player 2.2.8 – Arbitrary Code Execution (PoC)
# Exploit Title: VLC media player 2.2.8 - Arbitrary Code Execution PoC
Enhanced Mitigation Experience Toolkit (EMET) – XML External Entity Injection
[+] Credits: John Page (aka hyp3rlinx)
Core FTP LE 2.2 – Buffer Overflow (PoC)
# Exploit Title: Core FTP LE 2.2 - Buffer Overflow (PoC)
VideoInsight WebClient 5 – SQL Injection
# Title: VideoInsight WebClient 5 - SQL Injection