SOUND4 IMPACT/FIRST/PULSE/Eco v2.x – Cross-Site Request Forgery
# Exploit Title: SOUND4 IMPACT/FIRST/PULSE/Eco v2.x - Cross-Site Request Forgery
windows
windows 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
SOUND4 Server Service 4.1.102 – Local Privilege Escalation
# Exploit Title: SOUND4 Server Service 4.1.102 - Local Privilege Escalation
CoolerMaster MasterPlus 1.8.5 – ‘MPService’ Unquoted Service Path
# Exploit Title: CoolerMaster MasterPlus 1.8.5 - 'MPService' Unquoted Service Path
Zillya Total Security 3.0.2367.0 – Local Privilege Escalation
# Exploit Title: Zillya Total Security 3.0.2367.0 - Local Privilege Escalation
CrowdStrike Falcon AGENT 6.44.15806 – Uninstall without Installation Token
# Exploit Title: CrowdStrike Falcon AGENT 6.44.15806 - Uninstall without Installation Token
Lavasoft web companion 4.1.0.409 – ‘DCIservice’ Unquoted Service Path
#Exploit Title: Lavasoft web companion 4.1.0.409 - 'DCIservice' Unquoted Service Path
Internet Download Manager v6.41 Build 3 – Remote Code Execution (RCE)
# Exploit Title: Internet Download Manager v6.41 Build 3 - Remote Code Execution (RCE)
Outline V1.6.0 – Unquoted Service Path
# Exploit Title: Outline V1.6.0 - Unquoted Service Path
Inbit Messenger v4.9.0 – Unauthenticated Remote Command Execution (RCE)
# Exploit Title: Inbit Messenger v4.9.0 - Unauthenticated Remote Command Execution (RCE)
Inbit Messenger v4.9.0 – Unauthenticated Remote SEH Overflow
# Exploit Title: Inbit Messenger v4.9.0 - Unauthenticated Remote SEH Overflow
Tunnel Interface Driver – Denial of Service
// Exploit Title: Tunnel Interface Driver - Denial of Service
SugarSync 4.1.3 – ‘SugarSync Service’ Unquoted Service Path
# Exploit Title: SugarSync 4.1.3 - 'SugarSync Service' Unquoted Service Path
HDD Health 4.2.0.112 – ‘HDDHealth’ Unquoted Service Path
# Exploit Title: HDD Health 4.2.0.112 - 'HDDHealth' Unquoted Service Path
SuperMailer v11.20 – Buffer overflow DoS
# Exploit Title: SuperMailer v11.20 - Buffer overflow DoS
VMware Workstation 15 Pro – Denial of Service
#Title: VMware Workstation 15 Pro - Denial of Service
AVS Audio Converter 10.3 – Stack Overflow (SEH)
# Exploit Title: AVS Audio Converter 10.3 - Stack Overflow (SEH)
Scdbg 1.0 – Buffer overflow DoS
# Exploit Title: Scdbg 1.0 - Buffer overflow DoS
Hex Workshop v6.7 – Buffer overflow DoS
# Exploit Title: Hex Workshop v6.7 - Buffer overflow DoS
Resource Hacker v3.6.0.92 – Buffer overflow
# Exploit Title: Resource Hacker 3.6.0.92 - Buffer overflow
Frhed (Free hex editor) v1.6.0 – Buffer overflow
# Exploit Title: Frhed (Free hex editor) v1.6.0 - Buffer overflow
Explorer32++ v1.3.5.531 – Buffer overflow
# Exploit Title: Explorer32++ 1.3.5.531 - Buffer overflow
Tftpd32_SE 4.60 – ‘Tftpd32_svc’ Unquoted Service Path
# Exploit Title: Tftpd32_SE 4.60 - 'Tftpd32_svc' Unquoted Service Path
WiFi Mouse 1.8.3.2 – Remote Code Execution (RCE)
# Exploit Title: WiFi Mouse 1.8.3.2 - Remote Code Execution (RCE)
Sysax Multi Server 6.95 – ‘Password’ Denial of Service (PoC)
# Exploit Title: Sysax Multi Server 6.95 - 'Password' Denial of Service (PoC)
Gestionale Open 12.00.00 – ‘DB_GO_80’ Unquoted Service Path
# Exploit Title: Gestionale Open 12.00.00 - 'DB_GO_80' Unquoted Service Path
Mediconta 3.7.27 – ‘servermedicontservice’ Unquoted Service Path
# Exploit Title: Mediconta 3.7.27 - 'servermedicontservice' Unquoted Service Path
System Mechanic v15.5.0.61 – Arbitrary Read/Write
# Exploit Title: System Mechanic v15.5.0.61 - Arbitrary Read/Write
IOTransfer V4 – Unquoted Service Path
# Exploit Title: IOTransfer V4 - Unquoted Service Path
WiFiMouse 1.8.3.4 – Remote Code Execution (RCE)
# Exploit Title: WiFiMouse 1.8.3.4 - Remote Code Execution (RCE)
Mobile Mouse 3.6.0.4 – Remote Code Execution (RCE)
# Exploit Title: Mobile Mouse 3.6.0.4 - Remote Code Execution (RCE)
Easy Chat Server 3.1 – Remote Stack Buffer Overflow (SEH)
# Exploit Title: Easy Chat Server 3.1 - Remote Stack Buffer Overflow (SEH)
Asus GameSDK v1.0.0.4 – ‘GameSDK.exe’ Unquoted Service Path
# Exploit Title: Asus GameSDK v1.0.0.4 - 'GameSDK.exe' Unquoted Service Path
Dr. Fone 4.0.8 – ‘net_updater32.exe’ Unquoted Service Path
# Exploit Title: Dr. Fone v4.0.8- 'net_updater32.exe' Unquoted Service Path
Kite 1.2021.610.0 – Unquoted Service Path
# Exploit Title: Kite 1.2021.610.0 - Unquoted Service Path
IOTransfer 4.0 – Remote Code Execution (RCE)
# Exploit Title: IOTransfer V4 – Remote Code Execution (RCE)
WiFi Mouse 1.7.8.5 – Remote Code Execution(v2)
# Exploit Title: WiFi Mouse 1.7.8.5 - Remote Code Execution
HP LaserJet Professional M1210 MFP Series Receive Fax Service – Unquoted Service Path
# Exploit Title: HP LaserJet Professional M1210 MFP Series Receive Fax Service - Unquoted Service Path
Virtua Software Cobranca 12S – SQLi
# Exploit Title: Virtua Software Cobranca 12S - SQLi
Marval MSM v14.19.0.12476 – Cross-Site Request Forgery (CSRF)
# Exploit Title: Marval MSM v14.19.0.12476 - Cross-Site Request Forgery (CSRF)
Marval MSM v14.19.0.12476 – Remote Code Execution (RCE) (Authenticated)
# Exploit Title: Marval MSM v14.19.0.12476 - Remote Code Execution (RCE) (Authenticated)
Real Player 16.0.3.51 – ‘external::Import()’ Directory Traversal to Remote Code Execution (RCE)
# Exploit Title: Real Player 16.0.3.51 - 'external::Import()' Directory Traversal to Remote Code Execution (RCE)
Real Player v.20.0.8.310 G2 Control – ‘DoGoToURL()’ Remote Code Execution (RCE)
# Exploit Title: Real Player v.20.0.8.310 G2 Control - 'DoGoToURL()' Remote Code Execution (RCE)
Wondershare Dr.Fone 12.0.7 – Remote Code Execution (RCE)
# Exploit Title: Wondershare Dr.Fone 12.0.7 - Remote Code Execution (RCE)
Wondershare Dr.Fone 12.0.7 – Privilege Escalation (ElevationService)
# Exploit Title: Wondershare Dr.Fone 12.0.7 - Privilege Escalation (ElevationService)
Prime95 Version 30.7 build 9 – Remote Code Execution (RCE)
# Exploit Title: Prime95 Version 30.7 build 9 - Remote Code Execution (RCE)
ManageEngine ADSelfService Plus Build 6118 – NTLMv2 Hash Exposure
# Exploit Title: ManageEngine ADSelfService Plus Build 6118 - NTLMv2 Hash Exposure
Wondershare Dr.Fone 11.4.10 – Insecure File Permissions
# Exploit Title: Wondershare Dr.Fone 11.4.10 - Insecure File Permissions
TCQ – ITeCProteccioAppServer.exe – Unquoted Service Path
# Exploit Title: TCQ - 'ITeCProteccioAppServer.exe' Unquoted Service Path
UDisk Monitor Z5 Phone – ‘MonServiceUDisk.exe’ Unquoted Service Path
# Exploit Title: UDisk Monitor Z5 Phone - 'MonServiceUDisk.exe' Unquoted Service Path
EaseUS Data Recovery – ‘ensserver.exe’ Unquoted Service Path
# Exploit Title: EaseUS Data Recovery - 'ensserver.exe' Unquoted Service Path