windows

Sync Breeze Enterprise 9.1.16 – ‘Login’ Remote Buffer Overflow

#!/usr/bin/python

VX Search Enterprise 9.1.12 – ‘Login’ Remote Buffer Overflow

#!/usr/bin/python

Core FTP LE 2.2 – ‘SSH/SFTP’ Remote Buffer Overflow (PoC)

[+] Credits: John Page aka hyp3rlinx

Remote Utilities Host 6.3 – Denial of Service

# Exploit Title: Remote Utilities - Host 6.3 - Denial of Service

Microsoft Windows Kernel – ‘win32k.sys NtSetWindowLongPtr’ Local Privilege Escalation (MS16-135) (1)

Complete Proof of Concept:

UCanCode – Multiple Vulnerabilities

UCanCode multiple vulnerabilities

Microsoft Internet Explorer 8 – MSHTML ‘Ptls5::Ls­Find­Span­Visual­Boundaries’ Memory Corruption

[crayon-6ac701253b86e702254213/]

Huawei UTPS – Unquoted Service Path Privilege Escalation

# Exploit Title: Unquoted Service Path Vulnerability in Huawei UTPS Software

Microsoft Internet Explorer 8 – jscript ‘Reg­Exp­Base::FBad­Header’ Use-After-Free (MS15-018)

Microsoft Edge – ‘CText­Extractor::Get­Block­Text’ Out-of-Bounds Read (MS16-104)

A&#x­D;&#x­D;B

Microsoft Edge Scripting Engine – Memory Corruption (MS16-129)

Microsoft Edge – ‘Array.splice’ Heap Overflow

Microsoft Edge – ‘Array.reverse’ Overflow

Microsoft Edge – ‘Array.filter’ Information Leak

Microsoft Edge – ‘FillFromPrototypes’ Type Confusion

Moxa SoftCMS 1.5 – Denial of Service (PoC)

'''

FTPShell Client 5.24 – ‘PWD’ Remote Buffer Overflow

# -*- coding: utf-8 -*-

Microsoft Edge – ‘eval’ Type Confusion

WinaXe 7.7 FTP Client – Remote Buffer Overflow (Metasploit)

##

Microsoft Windows Kernel – Registry Hive Loading ‘nt!RtlEqualSid’ Out-of-Bounds Read (MS16-138)

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=874

Microsoft Windows – VHDMP Arbitrary Physical Disk Cloning Privilege Escalation (MS16-138)

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=916

Microsoft Windows – VHDMP ZwDeleteFile Arbitrary File Deletion Privilege Escalation (MS16-138)

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=915

Microsoft Windows – VHDMP Arbitrary File Creation Privilege Escalation (MS16-138)

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=914

Microsoft Edge 11.0.10240.16384 – ‘edgehtml’ CAttr­Array::Destroy Use-After-Free

Easy Internet Sharing Proxy Server 2.2 – Remote Overflow (SEH) (Metasploit)

##

Disk Pulse Enterprise 9.0.34 – ‘Login’ Remote Buffer Overflow (Metasploit)

##

Microsoft Internet Explorer 11 – MSHTML CMap­Element::Notify Use-After-Free (MS15-009)

Microsoft Internet Explorer 11/10/9 – MSHTML ‘PROPERTYDESC::Handle­Style­Component­Property’ Out-of-Bounds Read (MS16-104)

Microsoft WININET.dll – ‘CHttp­Header­Parser::Parse­Status­Line’ Out-of-Bounds Read (MS16-104/MS16-105)

Microsoft Windows Kernel – ‘win32k’ Denial of Service (MS16-135)

Source: https://github.com/tinysec/public/tree/master/CVE-2016-7255

Microsoft Windows – LSASS SMB NTLM Exchange Null-Pointer Dereference (MS16-137)

MS16-137: LSASS Remote Memory Corruption Advisory

VBScript 5.8.7600.16385/5.8.9600.16384 – RegExpComp::PnodeParse Out-of-Bounds Read

Adobe Connect 9.5.7 – Cross-Site Scripting

Document Title:

Avira Antivirus 15.0.21.86 – ‘.zip’ Directory Traversal / Command Execution

# Title : Avira Antivirus >= 15.0.21.86 Command Execution (SYSTEM)

Microsoft Windows Server 2008/2012 – LDAP RootDSE Netlogon Denial of Service

#!/usr/bin/perl

Microsoft Internet Explorer 9 – MSHTML CPtsTextParaclient::CountApes Out-of-Bounds Read

Microsoft Internet Explorer 8/9/10/11 / IIS / CScript.exe/WScript.exe VBScript – CRegExp..Execute Use of Uninitialized Memory (MS14-080/MS14-084)

BolinTech DreamFTP Server 1.02 – ‘RETR’ Remote Buffer Overflow

import socket

PCMan FTP Server 2.0.7 – ‘PORT’ Remote Buffer Overflow

#!/usr/bin/env python

PCMan FTP Server 2.0.7 – ‘SITE CHMOD’ Remote Buffer Overflow

#!/usr/bin/env python

PCMan FTP Server 2.0.7 – ‘NLST’ Remote Buffer Overflow

#!/usr/bin/env python

Freefloat FTP Server 1.0 – ‘SITE ZONE’ Remote Buffer Overflow

#!/usr/bin/env python

PCMan FTP Server 2.0.7 – ‘ACCT’ Remote Buffer Overflow

#!/usr/bin/env python

Axessh 4.2 – Denial of Service

[+] Credits: John Page aka hyp3rlinx

Rapid PHP Editor 14.1 – Remote Command Execution

[+] Credits: John Page aka hyp3rlinx

WinaXe 7.7 ‘FTP client’ – Remote Buffer Overflow

[+] Credits: John Page aka hyp3rlinx

Microsoft Internet Explorer 11 – MSHTML CView::CalculateImageImmunity Use-After-Free

Microsoft Internet Explorer 9 – MSHTML CAttrArray Use-After-Free (MS14-056)

Freefloat FTP Server 1.0 – ‘DIR’ Remote Buffer Overflow

import socket

PCMan FTP Server 2.0.7 – ‘UMASK’ Remote Buffer Overflow

#!/usr/bin/env python