Winamp Pro 5.66.Build.3512 – Denial of Service
#!/usr/bin/perl
windows
windows 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
KMPlayer 4.2.2.4 – Denial of Service
#!/usr/bin/perl
Microsoft Windows 10 – ‘nt!NtQueryDirectoryFile (luafv!LuafvCopyDirectoryEntry)’ Pool Memory Disclosure
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1361
Microsoft Office – OLE Remote Code Execution
Source: https://github.com/embedi/CVE-2017-11882
Microsoft Windows 10 – CiSetFileCache TOCTOU Security Feature Bypass
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1332
VX Search 10.2.14 – ‘Proxy’ Local Buffer Overflow (SEH)
#!/usr/bin/env python
Microsoft Edge Chakra: JIT – ‘OP_Memset’ Type Confusion
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1357
Microsoft Edge Chakra: JIT – ‘Lowerer::LowerBoundCheck’ Incorrect Integer Overflow Check
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1343
Microsoft Edge Chakra JIT – Type Confusion with switch Statements
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1341&desc=3
Dup Scout Enterprise 10.0.18 – ‘Login’ Remote Buffer Overflow
# Tested on Windows 10 (x86)
PSFTPd Windows FTP Server 10.0.4 Build 729 – Log Injection / Use-After-Free
X41 D-Sec GmbH Security Advisory: X41-2017-006
Ulterius Server < 1.9.5.0 - Directory Traversal
# Exploit Title: Ulterius Server < 1.9.5.0 Directory Traversal Arbitrary File Access
Symantec Endpoint Protection 12.1 – Tamper-Protection Bypass
[+] Credits: John Page a.k.a hyp3rlinx
Xlight FTP Server 3.8.8.5 – Buffer Overflow (PoC)
#!/usr/bin/python
ManageEngine Applications Manager 13 – SQL Injection
ManageEngine Applications Manager version 13 suffers from multiple post-authentication SQL injection vulnerabilities.
SMPlayer 17.11.0 – ‘.m3u’ Buffer Overflow (PoC)
#!/usr/bin/python
Avaya IP Office (IPO) < 10.1 - 'SoftConsole' Remote Buffer Overflow (SEH)
[+] Credits: John Page (aka hyp3rlinx)
Avaya IP Office (IPO) < 10.1 - ActiveX Buffer Overflow
[+] Credits: John Page (aka hyp3rlinx)
Jnes 1.0.2 – Stack Buffer Overflow
#!/usr/bin/env python
Ipswitch WS_FTP Professional < 12.6.0.3 - Local Buffer Overflow (SEH)
#!/usr/bin/python
Vir.IT eXplorer Anti-Virus 8.5.39 – ‘VIAGLT64.SYS’ Local Privilege Escalation
Exploit Title - Vir.IT eXplorer Anti-Virus Arbitrary Write Privilege Escalation
Tizen Studio 1.3 Smart Development Bridge < 2.3.2 - Buffer Overflow (PoC)
# Exploit Title: Smart Development Bridge
Sync Breeze Enterprise 10.0.28 – Remote Buffer Overflow (PoC)
Sync Breeze Enterprise BOF - Ivan Ivanovic Ivanov Иван-дурак
Watchdog Development Anti-Malware / Online Security Pro – NULL Pointer Dereference
Exploit Title - Watchdog Development Anti-Malware/Online Security Pro Null Pointer Dereference
HitmanPro 3.7.15 Build 281 – Kernel Pool Overflow
Exploit-CVE-2017-6008
K7 Total Security 15.1.0.305 – Device Driver Arbitrary Memory Read
## Vulnerability Summary
Mikogo 5.4.1.160608 – Local Credentials Disclosure
#!/usr/bin/env python
ArGoSoft Mini Mail Server 1.0.0.2 – Denial of Service
#!/usr/bin/env python
Ayukov NFTP FTP Client < 2.0 - Remote Buffer Overflow
#!/usr/bin/env python
Sync Breeze Enterprise 10.1.16 – ‘POST’ Remote Buffer Overflow
#!/usr/bin/python
Microsoft Game Definition File Editor 6.3.9600 – XML External Entity Injection
[+] Credits: John Page (aka hyp3rlinx)
Microsoft Windows – ‘nt!NtQueryObject (ObjectNameInformation)’ Kernel Pool Memory Disclosure
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1303&desc=2
Microsoft Edge Chakra JIT – ‘RegexHelper::StringReplace’ Must Call the Callback Function with Updating ImplicitCallFlags
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1334
Microsoft Edge Chakra – ‘StackScriptFunction::BoxState::Box’ Accesses to Uninitialized Pointers (Denial of Service)
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1338
Microsoft Edge Chakra JIT – Incorrect GenerateBailOut Calling Patterns
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1333
Microsoft Windows 10 – WLDP/MSHTML CLSID UMCI Bypass
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1328
Ikraus Anti Virus 2.16.7 – Remote Code Execution
## Vulnerability summary
Chrome 35.0.1916.153 – Sandbox Escape / Command Execution
Sandbox escape Chrome exploit. Allows the execution of local binaries, read/write functions and exfiltration of Chrom...
ASX to MP3 3.1.3.7 – ‘.m3u’ Local Buffer Overflow
# Exploit Title: Buffer Overflow via crafted malicious .m3u file
VX Search Enterprise 10.1.12 – Remote Buffer Overflow
#!/usr/bin/env python
PyroBatchFTP 3.17 – Buffer Overflow (SEH)
#!/usr/bin/python
DiskBoss Enterprise 8.4.16 – Local Buffer Overflow
#!/usr/bin/python
Microsoft Excel – OLE Arbitrary Code Execution
Title: MS Office Excel (all versions) Arbitrary Code Execution Vulnerability
Sync Breeze Enterprise 10.0.28 – Remote Buffer Overflow
# Exploit Title: [SyncBreeze POST username overflow]