windows

windows 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

Moxa MX AOPC-Server 1.5 – XML External Entity Injection

[+] Credits: John Page AKA HYP3RLINX

2017-04-10 hyp3rlinx remote

Moxa MXview 2.8 – Denial of Service

[+] Credits: John Page AKA hyp3rlinx

2017-04-10 hyp3rlinx dos

Moxa MXview 2.8 – Private Key Disclosure

[+] Credits: John Page AKA HYP3RLINX

2017-04-10 hyp3rlinx remote

SpiceWorks 7.5 TFTP – Remote File Overwrite / Upload

[+] Credits: John Page AKA HYP3RLINX

2017-04-05 hyp3rlinx remote

Sync Breeze Enterprise 9.5.16 – ‘GET’ Remote Buffer Overflow (SEH)

#!/usr/bin/env python

2017-03-29 Daniel Teixeira remote

Sync Breeze Enterprise 9.5.16 – ‘Import Command’ Local Buffer Overflow

#!/usr/bin/env python

2017-03-29 Daniel Teixeira local

DiskBoss Enterprise 7.8.16 – ‘Import Command’ Local Buffer Overflow

#!/usr/bin/env python

2017-03-29 Daniel Teixeira local

Disk Sorter Enterprise 9.5.12 – ‘Import Command’ Local Buffer Overflow

#!/usr/bin/env python

2017-03-29 Daniel Teixeira local

Microsoft Outlook – HTML Email Denial of Service

Source: https://justhaifei1.blogspot.ca/2017/03/an-interesting-outlook-bug.html

2017-03-28 Haifei Li dos

VX Search Enterprise 9.5.12 – ‘Verify Email’ Buffer Overflow

author = '''

2017-03-28 ScrR1pTK1dd13 dos

DzSoft PHP Editor 4.2.7 – File Enumeration

[+] Credits: John Page AKA hyp3rlinx

2017-03-28 hyp3rlinx remote

Microsoft IIS 6.0 – WebDAV ‘ScStoragePathFromUrl’ Remote Buffer Overflow

'''

2017-03-27 Zhiniang Peng & Chen Wu remote

Disk Sorter Enterprise 9.5.12 – Local Buffer Overflow

[+] Title: Disk Sorter Server v9.5.12 - Local Stack-based buffer overflow

2017-03-27 Nassim Asrir dos

Microsoft Visual Studio 2015 update 3 – Denial of Service

# Exploit Title: Microsoft Visual Studio 2015 update 3 – Stack overflow

2017-03-26 Peter Baris dos

SpyCamLizard 1.230 – Denial of Service

import socket

2017-03-22 ScrR1pTK1dd13 dos

Disk Sorter Enterprise 9.5.12 – ‘GET’ Remote Buffer Overflow (SEH)

#!/usr/bin/env python

2017-03-22 Daniel Teixeira remote

Microsoft Internet Explorer 11 – ‘textarea.defaultValue’ Memory Disclosure (MS17-006)

aaaaaaaaaaaaaaaaaaaaaaaa

2017-03-20 Google Security Research dos

Microsoft Color Management Module ‘icm32.dll’ – ‘icm32!LHCalc3toX_Di16_Do16_Lut8_G32’ Out-of-Bounds Read (MS17-013)

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1054

2017-03-20 Google Security Research dos

Microsoft Windows – Uniscribe Heap Out-of-Bounds Read in ‘USP10!ScriptApplyLogicalWidth’ Triggered via EMF (MS17-013)

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1053

2017-03-20 Google Security Research dos

Microsoft Color Management Module ‘icm32.dll’ – ‘icm32!Fill_ushort_ELUTs_from_lut16Tag’ Out-of-Bounds Read (MS17-013)

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1052

2017-03-20 Google Security Research dos

Microsoft GDI+ – ‘gdiplus!GetRECTSForPlayback’ Out-of-Bounds Read (MS17-013)

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1042

2017-03-20 Google Security Research dos

Microsoft Windows – Uniscribe Font Processing Multiple Heap Out-of-Bounds and Wild Reads (MS17-011)

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1031

2017-03-20 Google Security Research dos

Microsoft Windows – Uniscribe Font Processing Buffer Overflow in ‘USP10!FillAlternatesList’ (MS17-011)

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1030

2017-03-20 Google Security Research dos

Microsoft Windows – Uniscribe Font Processing Heap Memory Corruption Around ‘USP10!BuildFSM’ (MS17-011)

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1029

2017-03-20 Google Security Research dos

Microsoft Windows – Uniscribe Font Processing Heap Out-of-Bounds Write in ‘USP10!UpdateGlyphFlags’ (MS17-011)

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1028

2017-03-20 Google Security Research dos

Microsoft Windows – Uniscribe Font Processing Heap Buffer Overflow in ‘USP10!ttoGetTableData’ (MS17-011)

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1027

2017-03-20 Google Security Research dos

Microsoft Windows – Uniscribe Font Processing Heap Memory Corruption in ‘USP10!MergeLigRecords’ (MS17-011)

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1026&desc=2

2017-03-20 Google Security Research dos

Microsoft Windows – Uniscribe Font Processing Heap Memory Corruption in ‘USP10!otlCacheManager::GlyphsSubstituted’ (MS17-011)

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1025

2017-03-20 Google Security Research dos

Microsoft Windows – Uniscribe Font Processing Heap Out-of-Bounds Read/Write in ‘USP10!AssignGlyphTypes’ (MS17-011)

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1023

2017-03-20 Google Security Research dos

Microsoft Windows – ‘USP10!otlList::insertAt’ Uniscribe Font Processing Heap Buffer Overflow (MS17-011)

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1022

2017-03-20 Google Security Research dos

Microsoft Windows – Uniscribe Font Processing Out-of-Bounds Read in usp10!otlChainRuleSetTable::rule (MS17-011)

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1019

2017-03-20 Google Security Research dos

Microsoft Windows Kernel – Registry Hive Loading Crashes in nt!nt!HvpGetBinMemAlloc / nt!ExpFindAndRemoveTagBigPages (MS17-017)

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=993

2017-03-20 Google Security Research dos

ExtraPuTTY 0.29-RC2 – Denial of Service

[+] Credits: John Page AKA hyp3rlinx

2017-03-20 hyp3rlinx dos

HttpServer 1.0 – Directory Traversal

# Exploit Title: HttpServer 1.0 DolinaySoft Directory Traversal

2017-03-19 malwrforensics remote

FTPShell Server 6.56 – ‘ChangePassword’ Buffer Overflow

print '''

2017-03-19 ScrR1pTK1dd13 dos

FTPShell Client 6.53 – ‘Session name’ Local Buffer Overflow

print '''

2017-03-17 ScrR1pTK1dd13 dos

CommVault Edge 11 SP6 – Stack Buffer Overflow (PoC)

import socket

2017-03-16 redr2e dos

Microsoft Edge 38.14393.0.0 – JavaScript Engine Use-After-Free

[crayon-6ac6f756d1e91209013605/]

2017-03-16 Google Security Research dos

Cerberus FTP Server 8.0.10.3 – ‘MLST’ Buffer Overflow (PoC)

[+] Title: Cerberus FTP Server 8.0.10.3 – 'MLST' Remote Buffer Overflow

2017-03-16 Nassim Asrir dos

Microsoft Windows DVD Maker 6.1.7 – XML External Entity Injection

[+] Credits: John Page AKA hyp3rlinx

2017-03-16 hyp3rlinx local

Microsoft Windows – ‘LoadUvsTable()’ Heap Buffer Overflow

# Date: 15-03-2017

2017-03-15 Hossein Lotfi dos

IBM WebSphere – RCE Java Deserialization (Metasploit)

##

2017-03-15 Metasploit remote

Microsoft Windows – COM Session Moniker Privilege Escalation (MS17-012)

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1021

2017-03-15 Google Security Research local

Cerberus FTP Server 8.0.10.1 – Denial of Service

# Exploit Title: Cerberus FTP server – Denial of Service

2017-03-13 Peter Baris dos

Easy MOV Converter 1.4.24 – Local Buffer Overflow (SEH)

#!/usr/bin/python

2017-03-12 Muhann4d dos

MobaXterm Personal Edition 9.4 – Directory Traversal

[+] Credits: John Page AKA hyp3rlinx

2017-03-11 hyp3rlinx remote

Azure Data Expert Ultimate 2.2.16 – Remote Buffer Overflow

# Exploit Title: Azure Data Expert Ultimate 2.2.16 – buffer overflow

2017-03-07 Peter Baris remote

USBPcap 1.1.0.0 (WireShark 2.2.5) – Local Privilege Escalation

Exploit Title - USBPcap Null Pointer Dereference Privilege Escalation

2017-03-07 Parvez Anwar local

CyberGhost 6.0.4.2205 – Local Privilege Escalation

# Exploit CyberGhost 6.0.4.2205 Privilege Escalation

2017-03-06 Kacper Szurek local

FTPShell Client 6.53 – Remote Buffer Overflow

# Exploit Title: FTPShell Client 6.53 buffer overflow on making initial connection

2017-03-04 Peter Baris remote