Freefloat FTP Server 1.0 – ‘RENAME’ Remote Buffer Overflow
#!/usr/bin/env python
windows
windows 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
Freefloat FTP Server 1.0 – ‘ABOR’ Remote Buffer Overflow
#!/usr/bin/env python
Freefloat FTP Server 1.0 – ‘HOST’ Remote Buffer Overflow
#!/usr/bin/env python
Freefloat FTP Server 1.0 – ‘RMD’ Remote Buffer Overflow
#!/usr/bin/env python
PCMan FTP Server 2.0.7 – ‘DELETE’ Remote Buffer Overflow
from ftplib import FTP
NVIDIA Driver – Stack Buffer Overflow in Escape 0x10000e9
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=947
NVIDIA Driver – Stack Buffer Overflow in Escape 0x7000014
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=946
NVIDIA Driver – Missing Bounds Check in Escape 0x70000d5
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=944
NVIDIA Driver – Missing Bounds Check in Escape 0x100009a
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=942
NVIDIA Driver – Incorrect Bounds Check in Escape 0x70001b2
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=940
NVIDIA Driver – Unchecked User-Provided Pointer in Escape 0x5000027
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=937
NVIDIA Driver – No Bounds Checking in Escape 0x7000170
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=936
NVIDIA Driver – Escape 0x100010b Missing Bounds Check
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=927
NVIDIA Driver – NvStreamKms ‘PsSetCreateProcessNotifyRoutineEx Local Stack Buffer Overflow Callback / Local Privilege Escalation
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=918
NVIDIA Driver – Unchecked Write to User-Provided Pointer in Escape 0x600000D
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=911
NVIDIA Driver – No Bounds Checking in Escape 0x7000194
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=895
NVIDIA Driver – Unchecked Write to User-Provided Pointer in Escape 0x700010d
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=894
NVIDIA Driver – Escape Code Leaks Uninitialised ExAllocatePoolWithTag Memory to Userspace
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=892
NVIDIA Driver – UVMLiteController ioctl Handling Unchecked Input/Output Lengths Privilege Escalation
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=880
Rumba FTP Client 4.x – Remote Stack Buffer Overflow (SEH)
# Exploit Title: Rumba FTP 4.x Client Stackoverflow SEH
Micro Focus Rumba 9.3 – ActiveX Stack Buffer Overflow (PoC)
# Exploit Title: Micro Focus Rumba
Micro Focus Rumba 9.4 – Local Denial of Service
# Exploit Title: Micro Focus Rumba 9.4 Multiple Local Stack-overflow
freeFTPd 1.0.8 – ‘mkd’ Denial of Service
from ftplib import FTP
Baby FTP server 1.24 – Denial of Service (2)
#!/usr/bin/python
CherryTree 0.36.9 – Memory Corruption (PoC)
#!/usr/bin/python
HP TouchSmart Calendar 4.1.4245 – Insecure File Permissions Privilege Escalation
[+] Credits: John Page aka hyp3rlinx
uSQLite 1.0.0 – Denial of Service
#!/usr/bin/python
SmallFTPd 1.0.3 – ‘mkd’ Denial of Service
from ftplib import FTP
Network Scanner 4.0.0 – Local Buffer Overflow (SEH)
#!/usr/bin/python
Oracle VM VirtualBox 4.3.28 – ‘.ovf’ Crash (PoC)
#Exploit Title: Oracle VM VirtualBox 4.3.28 Crash
RealPlayer 18.1.5.705 – ‘.QCP’ Crash (PoC)
Tested on: Win7 / Win10 x64
Microsoft Windows – NtLoadKeyEx Read Only Hive Arbitrary File Write Privilege Escalation (MS16-124)
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=871
Microsoft Windows Edge/Internet Explorer – Isolated Private Namespace Insecure Boundary Descriptor Privilege Escalation (MS16-118)
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=878
Microsoft Windows Edge/Internet Explorer – Isolated Private Namespace Insecure DACL Privilege Escalation (MS16-118)
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=879
Microsoft Windows Kernel – Registry Hive Loading Relative Arbitrary Read in nt!RtlValidRelativeSecurityDescriptor (MS16-123)
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=876
Microsoft Windows Kernel – Registry Hive Loading Negative RtlMoveMemory Size in nt!CmpCheckValueList (MS16-124)
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=873
Microsoft Windows – ‘win32k.sys’ TTF Processing win32k!sbit_Embolden / win32k!ttfdCloseFontContext Use-After-Free (MS16-120)
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=868
Microsoft Windows – ‘win32k.sys’ TTF Processing RCVT TrueType Instruction Handler Out-of-Bounds Read (MS16-120)
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=864
Realtek High Definition Audio Driver 6.0.1.6730 – Unquoted Service Path Privilege Escalation
# Exploit Title: Realtek High Definition Audio Driver - Unquoted Service Path Privilege Escalation
PDF Complete 4.1.12 Corporate Edition – Unquoted Service Path Privilege Escalation
# Exploit Title: PDF Complete Corporate Edition - Unquoted Service Path Privilege Escalation
Lenovo ThinkVantage Communications Utility 3.0.42.0 – Unquoted Service Path Privilege Escalation
# Exploit Title: Lenovo ThinkVantage Communications Utility - Unquoted Service Path Privilege Escalation
Intel(R) PROSet/Wireless for Bluetooth(R) + High Speed 15.1.0.0096 – Unquoted Service Path Privilege Escalation
# Exploit Title: Intel(R) PROSet/Wireless for Bluetooth(R) + High Speed - Unquoted Service Path Privilege Escalation
Vembu StoreGrid 4.0 – Unquoted Service Path Privilege Escalation
# Exploit Title: Vembu StoreGrid - Unquoted Service Path Privilege Escalation