Microsoft Windows 10 – Desktop Bridge Virtual Registry CVE-2018-0880 Incomplete Fix Privilege Escalation
Windows: Windows: Desktop Bridge Virtual Registry CVE-2018-0880 Incomplete Fix EoP
windows
windows 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
Microsoft Windows 10 – Desktop Bridge Activation Arbitrary Directory Creation Privilege Escalation
Windows: Desktop Bridge Activation Arbitrary Directory Creation EoP
Mirasys DVMS Workstation 5.12.6 – Path Traversal
# Exploit Title: Path Traversal in Gateway in Mirasys DVMS Workstation
Microsoft COM for Windows – Privilege Escalation
Writeup: https://codewhitesec.blogspot.com/2018/06/cve-2018-0624.html
Redatam Web Server < 7 - Directory Traversal
# Exploit Title: Redatam Web Server < 7 - Directory Traversal
Audiograbber 1.83 – Local Buffer Overflow (SEH)
# Exploit Title: Audiograbber 1.83 - Local Buffer Overflow (SEH)
Pale Moon Browser < 27.9.3 - Use After Free (PoC)
# Exploit Title: Pale Moon Browser < 27.9.3 - Use After Free (PoC)
Soroush IM Desktop App 0.15 (beta) – Authentication Bypass
# Exploit Title: Soroush IM Desktop app 0.15 - Authentication Bypass
RSLinx Classic and FactoryTalk Linx Gateway – Privilege Escalation
# Title: RSLinx Classic and FactoryTalk Linx Gateway - Privilege Escalation
Microsoft Windows 10 – Child Process Restriction Mitigation Bypass
Windows: Child Process Restriction Mitigation Bypass
TrendMicro OfficeScan XG 11.0 – Change Prevention Bypass
[+] Credits: John Page (aka hyp3rlinx)
Clone2GO Video converter 2.8.2 – Buffer Overflow
#!/usr/bin/python
Zip-n-Go 4.9 – Buffer Overflow (SEH)
#!/usr/bin/python
Microsoft Edge Chakra – EntrySimpleObjectSlotGetter Type Confusion
function opt(w, arr) {
FTPShell Server 6.80 – Buffer Overflow (SEH)
#!/usr/bin/python
Microsoft Windows – ‘POP/MOV SS’ Privilege Escalation
Demo exploitation of the POP SS vulnerability (CVE-2018-8897), leading to unsigned code execution with kernel privila...
Microsoft Edge Chakra JIT – Magic Value Type Confusion
BOOL JavascriptNativeFloatArray::SetItem(uint32 index, double dValue)
Schneider Electric PLCs – Cross-Site Request Forgery
# Exploit Title: Schneider Electric PLCs - Cross-Site Request Forgery
Microsoft Edge Chakra JIT – Bound Check Elimination Bug
Chakra uses the InvariantBlockBackwardIterator class to backpropagate the information about the hoisted bound checks....
Prime95 29.4b8 – Stack Buffer Overflow (SEH)
# Exploit Title: Prime95 Local Buffer Overflow (SEH)
HPE iMC 7.3 – Remote Code Execution (Metasploit)
# Exploit Title: HPE iMC EL Injection Unauthenticated RCE
Nanopool Claymore Dual Miner 7.3 – Remote Code Execution
# Exploit Title: Nanopool Claymore Dual Miner >= 7.3 Remote Code Execution
Microsoft Windows – Token Process Trust SID Access Check Bypass Privilege Escalation
Windows: Token Trust SID Access Check Bypass EOP
Rockwell Scada System 27.011 – Cross-Site Scripting
# Exploit Title: Rockwell Scada System - Cross-Site Scripting
2345 Security Guard 3.7 – ‘2345NsProtect.sys’ Denial of Service
# Exploit Title: [BSOD by IOCTL 0x8000200D in 2345NsProtect.sys of 2345 Security Guard 3.7]
Microsoft Windows 2003 SP2 – ‘RRAS’ SMB Remote Code Execution
#!/usr/bin/env python
2345 Security Guard 3.7 – ‘2345BdPcSafe.sys’ Denial of Service
# Exploit Title: [BSOD by IOCTL 0x002220e0 in 2345BdPcSafe.sys of 2345 Security Guard 3.7]
EMC RecoverPoint 4.3 – ‘Admin CLI’ Command Injection
# Exploit Title: EMC RecoverPoint 4.3 - Admin CLI Command Injection
Open-AudIT Community 2.2.0 – Cross-Site Scripting
# Exploit Title: Open-AudIT Community - 2.2.0 – Cross-Site Scripting
Open-AudIT Professional – 2.1.1 – Cross-Site Scripting
# Exploit Title: Open-AudIT Professional 2.1.1 – Multiple Cross-Site Scripting
Dell Touchpad – ‘ApMsgFwd.exe’ Denial of Service
Title: Dell Touchpad - ApMsgFwd.exe Denial Of Service
Allok Video Splitter 3.1.12.17 – Denial of Service
###########################################################################################
Microsoft Windows FxCop 10/12 – XML External Entity Injection
# Exploit Title: Microsoft Windows FxCop 10/12 - XML External Entity Injection
FTPShell Client 6.7 – Buffer Overflow
# -*- coding: utf-8 -*-
HWiNFO 5.82-3410 – Denial of Service
#!/usr/bin/python
DeviceLock Plug and Play Auditor 5.72 – Unicode Buffer Overflow (SEH)
# Exploit Title: DeviceLock Plug and Play Auditor 5.72 - Unicode Buffer Overflow (SEH)
Call of Duty Modern Warefare 2 – Buffer Overflow
A few years ago, I became aware of a security issue in most Call of Duty games.
Adobe Reader PDF – Client Side Request Injection
% a PDF file using an XFA
Schneider Electric InduSoft Web Studio and InTouch Machine Edition – Denial of Service
What do you need to know? Tenable Research has discovered a critical remote code execution vulnerability in Schneider...
Easy MPEG to DVD Burner 1.7.11 – Local Buffer Overflow (SEH)
#!/usr/bin/python
LibreOffice/Open Office – ‘.odt’ Information Disclosure
#!/usr/bin/python
Navicat < 12.0.27 - Oracle Connection Overflow
#!/usr/bin/python
Allok AVI to DVD SVCD VCD Converter 4.0.1217 – Buffer Overflow (SEH)
#######################################################
Microsoft Windows – Local Privilege Escalation
#include "stdafx.h"
Easy File Sharing Web Server 7.2 – ‘UserID’ Remote Buffer Overflow (DEP Bypass)
#!/usr/bin/env python