windows

windows 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

Microsoft Windows – ‘USP10!MergeLigRecords’ Uniscribe Font Processing Heap Memory Corruption

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1198

2017-06-23 Google Security Research dos

Microsoft Windows – ‘nt!NtQueryInformationTransaction (information class 1)’ Kernel Stack Memory Disclosure

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1196

2017-06-22 Google Security Research dos

Microsoft Windows – ‘nt!NtQueryInformationJobObject (information class 28)’ Kernel Stack Memory Disclosure

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1194

2017-06-22 Google Security Research dos

Microsoft Windows – ‘nt!NtQueryInformationJobObject (information class 12)’ Kernel Stack Memory Disclosure

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1193

2017-06-22 Google Security Research dos

Microsoft Windows – ‘win32k!NtGdiMakeFontDir’ Kernel Stack Memory Disclosure

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1191

2017-06-22 Google Security Research dos

Microsoft Windows – ‘nt!NtQueryInformationProcess (ProcessVmCounters)’ Kernel Stack Memory Disclosure

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1190&desc=2

2017-06-22 Google Security Research dos

Microsoft Windows – ‘nt!NtQueryInformationJobObject (BasicLimitInformation, ExtendedLimitInformation)’ Kernel Stack Memory Disclosure

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1189&desc=2

2017-06-22 Google Security Research dos

Microsoft Windows – ‘win32k!ClientPrinterThunk’ Kernel Stack Memory Disclosure

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1186

2017-06-22 Google Security Research dos

Microsoft Windows – ‘win32k!NtGdiGetRealizationInfo’ Kernel Stack Memory Disclosure

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1181

2017-06-22 Google Security Research dos

Microsoft Windows – ‘win32k!NtGdiGetTextMetricsW’ Kernel Stack Memory Disclosure

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1180

2017-06-22 Google Security Research dos

Microsoft Windows – ‘win32k!NtGdiGetOutlineTextMetricsInternalW’ Kernel Stack Memory Disclosure

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1179

2017-06-22 Google Security Research dos

Microsoft Windows – ‘win32k!NtGdiExtGetObjectW’ Kernel Stack Memory Disclosure

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1178

2017-06-22 Google Security Research dos

Microsoft Windows – ‘nt!KiDispatchException’ Kernel Stack Memory Disclosure in Exception Handling

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1177

2017-06-21 Google Security Research dos

Microsoft Windows – ‘nt!NtNotifyChangeDirectoryFile’ Kernel Pool Memory Disclosure

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1169

2017-06-21 Google Security Research dos

Microsoft Windows – ‘nt!NtQueryVolumeInformationFile (FileFsVolumeInformation)’ Kernel Pool Memory Disclosure

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1166

2017-06-21 Google Security Research dos

Microsoft Windows – ‘IOCTL_DISK_GET_DRIVE_LAYOUT_EX’ Kernel partmgr Pool Memory Disclosure

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1159

2017-06-21 Google Security Research dos

Microsoft Windows – ‘IOCTL_DISK_GET_DRIVE_GEOMETRY_EX’ Kernel partmgr Pool Memory Disclosure

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1156&desc=2

2017-06-21 Google Security Research dos

Microsoft Windows – ‘IOCTL_VOLUME_GET_VOLUME_DISK_EXTENTS’ volmgr Pool Memory Disclosure

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1154

2017-06-21 Google Security Research dos

Microsoft Windows – ‘win32k!NtGdiEnumFonts’ Kernel Pool Memory Disclosure

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1153

2017-06-21 Google Security Research dos

Microsoft Windows – ‘0x224000 IOCTL (WmiQueryAllData)’ Kernel WMIDataDevice Pool Memory Disclosure

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1152

2017-06-21 Google Security Research dos

Microsoft Windows – ‘IOCTL_MOUNTMGR_QUERY_POINTS’ Kernel Mountmgr Pool Memory Disclosure

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1150&desc=2

2017-06-21 Google Security Research dos

Microsoft Windows – ‘IOCTL 0x390400, operation code 0x00020000’ Kernel KsecDD Pool Memory Disclosure

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1147

2017-06-21 Google Security Research dos

Microsoft Windows – ‘win32k!NtGdiGetOutlineTextMetricsInternalW’ Kernel Pool Memory Disclosure

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1144

2017-06-21 Google Security Research dos

SpyCamLizard 1.230 – Remote Buffer Overflow

#!/usr/bin/python

2017-06-20 abatchy17 remote

Easy File Sharing HTTP Server 7.2 – POST Buffer Overflow (Metasploit)

##

2017-06-17 Metasploit remote

Easy File Sharing Web Server 7.2 – ‘POST’ Remote Buffer Overflow (DEP Bypass)

#!/usr/bin/python

2017-06-15 bl4ck h4ck3r remote

Avast aswSnx.sys Kernel Driver 11.1.2253 – Memory Corruption Privilege Escalation

#include

2017-06-15 bee13oy dos

VX Search Enterprise 9.7.18 – Local Buffer Overflow

import os

2017-06-15 ScrR1pTK1dd13 local

Easy MOV Converter 1.4.24 – ‘Enter User Name’ Local Buffer Overflow (SEH)

#!/usr/bin/python

2017-06-13 abatchy17 local

Easy File Sharing Web Server 7.2 – ‘POST’ Remote Buffer Overflow

#!/usr/bin/python

2017-06-12 Touhid M.Shaikh remote

Disk Pulse 9.7.26 – ‘Add Directory’ Local Buffer Overflow

#!/usr/bin/python

2017-06-12 abatchy17 local

Sync Breeze 9.7.26 – ‘Add Exclude Directory’ Local Buffer Overflow

#!/usr/bin/python

2017-06-11 abatchy17 local

DiskBoss 8.0.16 – ‘Input Directory’ Local Buffer Overflow

#!/usr/bin/python

2017-06-11 abatchy17 local

Easy File Sharing Web Server 7.2 – Authentication Bypass

# Exploit Title: EFS Web Server 7.2 Authentication Bypass

2017-06-11 Touhid M.Shaikh remote

Disk Sorter 9.7.14 – ‘Input Directory’ Local Buffer Overflow

#!/usr/bin/python

2017-06-10 abatchy17 local

EFS Easy Chat Server 3.1 – Remote Buffer Overflow (SEH)

# Exploit Title: Easy Chat Server User Registeration Buffer Overflow (SEH)

2017-06-09 Aitezaz Mohsin remote

EFS Easy Chat Server 3.1 – Password Reset

# Exploit Title: Easy Chat Server Remote Password Reset

2017-06-09 Aitezaz Mohsin webapps

EFS Easy Chat Server 3.1 – Password Disclosure

# Exploit Title: Easy Chat Server Remote Password Disclosure

2017-06-09 Aitezaz Mohsin webapps

IDERA Uptime Monitor 7.8 – Multiple Vulnerabilities

## Vulnerabilities Summary

2017-06-08 SecuriTeam webapps

Microsoft Windows – UAC Protection Bypass via FodHelper Registry Key (Metasploit)

##

2017-06-08 Metasploit local

Net Monitor for Employees Pro < 5.3.4 - Unquoted Service Path Privilege Escalation

# Exploit Title: Unquoted Service Path Privilege Escalation - Net Monitor for Employees Pro

2017-06-08 Saeid Atabaki local

VMware Workstation 12 Pro – Denial of Service

#include "windows.h"

2017-06-08 Borja Merino dos

BIND 9.10.5 – Unquoted Service Path Privilege Escalation

[+] Credits: John Page aka hyp3rlinx

2017-06-05 hyp3rlinx local

Subsonic 6.1.1 – Cross-Site Request Forgery / Cross-Site Scripting

[+] Credits: John Page a.k.a hyp3rlinx

2017-06-05 hyp3rlinx webapps

Subsonic 6.1.1 – XML External Entity Injection

[+] Credits: John Page a.k.a hyp3rlinx

2017-06-05 hyp3rlinx local

Subsonic 6.1.1 – Server-Side Request Forgery

[+] Credits: John Page a.k.a hyp3rlinx

2017-06-05 hyp3rlinx webapps

Subsonic 6.1.1 – Cross-Site Request Forgery

[+] Credits: John Page a.k.a hyp3rlinx

2017-06-05 hyp3rlinx webapps

Parallels Desktop – Virtual Machine Escape

#[+] Title: Parallels Desktop - Virtual Machine Escape

2017-06-05 Mohammad Reza Espargham local

Disk Sorter 9.7.14 – ‘Input Directory’ Local Buffer Overflow (PoC)

#!/usr/bin/python

2017-06-02 n3ckD_ dos

Microsoft MsMpEng – Use-After-Free via Saved Callers

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1259

2017-05-30 Google Security Research dos