GreenShot 1.2.10 – Insecure Deserialization Arbitrary Code Execution
# Exploit Title: GreenShot 1.2.10 - Insecure Deserialization Arbitrary Code Execution
windows
windows 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
RaidenFTPD 2.4.4005 – Buffer Overflow (SEH)
# Exploit Title: RaidenFTPD 2.4.4005 - Buffer Overflow (SEH)
XAMPP 8.2.4 – Unquoted Path
# Exploit Title: XAMPP 8.2.4 - Unquoted Path
Game Jackal Server v5 – Unquoted Service Path “GJServiceV5”
# Exploit Title: Game Jackal Server v5 - Unquoted Service Path
AVG Anti Spyware 7.5 – Unquoted Service Path “AVG Anti-Spyware Guard”
# Exploit Title: AVG Anti Spyware 7.5 - Unquoted Service Path
MiniTool Partition Wizard ShadowMaker v.12.7 – Unquoted Service Path “MTSchedulerService”
# Exploit Title: MiniTool Partition Wizard ShadowMaker v.12.7 - Unquoted Service Path
MiniTool Partition Wizard ShadowMaker v.12.7 – Unquoted Service Path “MTAgentService”
# Exploit Title: MiniTool Partition Wizard ShadowMaker v.12.7 - Unquoted Service Path
Windows 10 v21H1 – HTTP Protocol Stack Remote Code Execution
## Title: Windows 10 v21H1 - HTTP Protocol Stack Remote Code Execution
Windows 11 22h2 – Kernel Privilege Elevation
// Exploit Title: Windows 11 22h2 - Kernel Privilege Elevation
NCH Express Invoice – Clear Text Password Storage and Account Takeover
# Exploit Title: NCH Express Invoice - Clear Text Password Storage and Account Takeover
USB Flash Drives Control 4.1.0.0 – Unquoted Service Path
# Exploit Title: USB Flash Drives Control 4.1.0.0 - Unquoted Service Path
Macro Expert 4.9 – Unquoted Service Path
# Exploit Title: Macro Expert 4.9 - Unquoted Service Path
Filmora 12 version ( Build 1.0.0.7) – Unquoted Service Paths Privilege Escalation
# Exploit Title: Filmora 12 version ( Build 1.0.0.7) - Unquoted Service Paths Privilege Escalation
MobileTrans 4.0.11 – Weak Service Privilege Escalation
# Exploit Title :MobileTrans 4.0.11 - Weak Service Privilege Escalation
eScan Management Console 14.0.1400.2281 – Cross Site Scripting
# Exploit Title: eScan Management Console 14.0.1400.2281 - Cross Site Scripting
eScan Management Console 14.0.1400.2281 – SQL Injection (Authenticated)
# Exploit Title: eScan Management Console 14.0.1400.2281 - SQL Injection (Authenticated)
Hubstaff 1.6.14-61e5e22e – ‘wow64log’ DLL Search Order Hijacking
Hubstaff is an employee work tracker with screenshots, timesheets, billing,
Trend Micro OfficeScan Client 10.0 – ACL Service LPE
# Exploit Title: Trend Micro OfficeScan Client 10.0 - ACL Service LPE
Advanced Host Monitor v12.56 – Unquoted Service Path
# Exploit Title: Advanced Host Monitor v12.56 - Unquoted Service Path
MilleGPG5 5.9.2 (Gennaio 2023) – Local Privilege Escalation / Incorrect Access Control
# Exploit Title: MilleGPG5 5.9.2 (Gennaio 2023) - Local Privilege Escalation / Incorrect Access Control
Wondershare Filmora 12.2.9.2233 – Unquoted Service Path
############################################################################
Arcsoft PhotoStudio 6.0.0.172 – Unquoted Service Path
##########################################################################
OCS Inventory NG 2.3.0.0 – Unquoted Service Path
#####################################################################
AspEmail v5.6.0.2 – Local Privilege Escalation
####################################################################################################################
File Replication Pro 7.5.0 – Privilege Escalation/Password reset due Incorrect Access Control
# Exploit Title: File Replication Pro 7.5.0 - Privilege Escalation/Password reset due Incorrect Access Control
ESET Service 16.0.26.0 – ‘Service ekrn’ Unquoted Service Path
# Exploit Title: ESET Service 16.0.26.0 - 'Service ekrn' Unquoted Service Path
Stonesoft VPN Client 6.2.0 / 6.8.0 – Local Privilege Escalation
# Exploit Title: Stonesoft VPN Client 6.2.0 / 6.8.0 - Local Privilege Escalation
RSA NetWitness Platform 12.2 – Incorrect Access Control / Code Execution
# Exploit Title: RSA NetWitness Platform 12.2 - Incorrect Access Control / Code Execution
ActFax 10.10 – Unquoted Path Services
# Exploit Title: ActFax 10.10 - Unquoted Path Services
Wondershare Dr Fone 12.9.6 – Privilege Escalation
# Exploit Title: Wondershare Dr Fone 12.9.6 - Privilege Escalation
Unified Remote 3.13.0 – Remote Code Execution (RCE)
# Exploit Title: Unified Remote 3.13.0 - Remote Code Execution (RCE)
TitanFTP 2.0.1.2102 – Path traversal to Remote Code Execution (RCE)
# Exploit Title: TitanFTP 2.0.1.2102 - Path traversal to Remote Code Execution (RCE)
FileZilla Client 3.63.1 – ‘TextShaping.dl’ DLL Hijacking
#---------------------------------------------------------
XWorm Trojan 2.1 – Null Pointer Derefernce DoS
#Exploit Author: XWorm Trojan 2.1 - Null Pointer Derefernce DoS
Kardex Mlog MCC 5.7.12 – RCE (Remote Code Execution)
#!/usr/bin/env python3
Grand Theft Auto III/Vice City Skin File v1.1 – Buffer Overflow
# Exploit Title: Grand Theft Auto III/Vice City Skin File v1.1 - Buffer Overflow
Microsoft Exchange Active Directory Topology 15.02.1118.007 – ‘Service MSExchangeADTopology’ Unquoted Service Path
# Exploit Title: Microsoft Exchange Active Directory Topology 15.02.1118.007 - 'Service MSExchangeADTopology' Unquote...
Chromacam 4.0.3.0 – PsyFrameGrabberService Unquoted Service Path
# Exploit Title: Chromacam 4.0.3.0 - PsyFrameGrabberService Unquoted Service Path
HotKey Clipboard 2.1.0.6 – Privilege Escalation Unquoted Service Path
# Exploit Title: HotKey Clipboard 2.1.0.6 - Privilege Escalation Unquoted Service Path
Windows 11 10.0.22000 – Backup service Privilege Escalation
## Title: Windows 11 10.0.22000 - Backup service Privilege Escalation
NetIQ/Microfocus Performance Endpoint v5.1 – remote root/SYSTEM exploit
# Exploit Title: NetIQ/Microfocus Performance Endpoint v5.1 - remote root/SYSTEM exploit
AimOne Video Converter V2.04 Build 103 – Buffer Overflow (DoS)
## Title: AimOne Video Converter V2.04 Build 103 - Buffer Overflow (DoS)
Reprise Software RLM v14.2BL4 – Cross-Site Scripting (XSS)
# Exploit Title: Reprise Software RLM v14.2BL4 - Cross-Site Scripting (XSS)
Splashtop 8.71.12001.0 – Unquoted Service Path
# Exploit Title: Splashtop 8.71.12001.0 - Unquoted Service Path
SOUND4 IMPACT/FIRST/PULSE/Eco v2.x – Unauthenticated Factory Reset
# Exploit Title: SOUND4 IMPACT/FIRST/PULSE/Eco v2.x - Unauthenticated Factory Reset
SOUND4 IMPACT/FIRST/PULSE/Eco v2.x – Remote Command Execution (RCE)
# Exploit Title: SOUND4 IMPACT/FIRST/PULSE/Eco v2.x - Remote Command Execution (RCE)
SOUND4 IMPACT/FIRST/PULSE/Eco v2.x – Directory Traversal File Write Exploit
# Exploit Title: SOUND4 IMPACT/FIRST/PULSE/Eco v2.x - Directory Traversal File Write Exploit
SOUND4 IMPACT/FIRST/PULSE/Eco v2.x – Authentication Bypass
# Exploit Title: SOUND4 IMPACT/FIRST/PULSE/Eco v2.x - Authentication Bypass
SOUND4 IMPACT/FIRST/PULSE/Eco v2.x – Denial Of Service (DoS)
# Exploit Title: SOUND4 IMPACT/FIRST/PULSE/Eco v2.x - Denial Of Service (DoS)
SOUND4 IMPACT/FIRST/PULSE/Eco v2.x – Authorization Bypass (IDOR)
# Exploit Title: SOUND4 IMPACT/FIRST/PULSE/Eco v2.x - Authorization Bypass (IDOR)