windows

windows 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

Ipswitch WS_FTP LE 12.3 – Search field Overwrite (SEH) (PoC)

#!/usr/bin/python

2016-05-10 Zahid Adeel dos

MediaInfo 0.7.61 – Crash (PoC)

#!/usr/bin/perl -w

2016-05-10 Mohammad Reza Espargham dos

RPCScan 2.03 – Hostname/IP Field Overwrite (SEH) (PoC)

#!/usr/bin/python

2016-05-09 Nipun Jaswal dos

Microsoft Windows 7 – ‘WebDAV’ Local Privilege Escalation (MS16-016) (2)

# Exploit Title: WebDAV Elevation of Privilege Vulnerability (MS16)-2

2016-05-09 hex0r local

Certec EDV atvise SCADA Server 2.5.9 – Local Privilege Escalation

Certec EDV atvise SCADA server 2.5.9 Privilege Escalation Vulnerability

2016-05-09 LiquidWorm local

ASUS Memory Mapping Driver (ASMMAP/ASMMAP64) – Physical Memory Read/Write

Source: http://rol.im/asux/

2016-05-09 slipstream dos

Dell SonicWALL Scrutinizer 11.0.1 – setUserSkin/deleteTab SQL Injection Remote Code Execution

#!/usr/local/bin/python

2016-05-09 mr_me remote

i.FTP 2.21 – Host Address / URL Field (SEH)

#!/usr/bin/python

2016-05-09 Tantaryu MING dos

Adobe Flash – MovieClip.duplicateMovieClip Use-After-Free

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=759

2016-05-06 Google Security Research dos

Adobe Flash (Multiple Scripts) – Use-After-Free When Rendering Displays (2)

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=719

2016-05-06 Google Security Research dos

CIScan 1.00 – Hostname/IP Field Crash (PoC)

#!/usr/bin/env python

2016-05-06 Irving Aguilar dos

RPCScan 2.03 – Hostname/IP Field Crash (PoC)

#!/usr/bin/env python

2016-05-06 Irving Aguilar dos

Baidu Spark Browser 43.23.1000.476 – Address Bar URL Spoofing

Google Home Page

2016-05-05 liu zhu dos

McAfee LiveSafe 14.0 – Relocations Processing Memory Corruption

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=817

2016-05-04 Google Security Research dos

Acunetix WVS 10 – Remote Command Execution

'''

2016-05-02 Daniele Linguaglossa remote

Microsoft Windows Kernel – ‘win32k.sys’ TTF Processing EBLC / EBSC Tables Pool Corruption (MS16-039)

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=684

2016-04-28 Google Security Research dos

Microsoft Windows – CSRSS BaseSrvCheckVDM Session 0 Process Creation Privilege Escalation (MS16-048)

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=692

2016-04-27 Google Security Research dos

Advantech Webaccess Dashboard Viewer – Arbitrary File Upload (Metasploit)

##

2016-04-26 Metasploit remote

Microsoft Windows 7 < 10 / 2008 < 2012 (x86/x64) - Local Privilege Escalation (MS16-032)

# Exploit Title: Microsoft Windows 7-10 & Server 2008-2012 - Local Privilege Escalation (x32/x64) (MS16-032) (C#)

2016-04-25 fdiskyou local

CompuSource Systems Real Time Home Banking – Local Privilege Escalation

# Exploit Title: CompuSource Systems - Real Time Home Banking - Local

2016-04-25 Information Paradox local

Microsoft Windows 7 < 10 / 2008 < 2012 R2 (x86/x64) - Local Privilege Escalation (MS16-032) (PowerShell)

function Invoke-MS16-032 {

2016-04-21 b33f local

Hyper-V – ‘vmswitch.sys’ VmsMpCommonPvtHandleMulticastOids Guest to Host Kernel-Pool Overflow

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=688

2016-04-20 Google Security Research dos

Microsoft Internet Explorer 11 – MSHTML!CMarkupPointer::UnEmbed Use-After-Free

IE 11.0.9600.18230 MSHTML!CMarkupPointer::UnEmbed UAF POC

2016-04-15 Marcin Ressel dos

Microsoft Internet Explorer 9/10/11 – ‘CDOMStringDataList::InitFromString’ Out-of-Bounds Read (MS15-112)

IE 10-11 Windows 7 SP1 x86 - OOB Read ALSR Bypass PoC

2016-04-14 Ashfaq Ansari remote

Microsoft Excel – Out-of-Bounds Read Code Execution (MS16-042)

#######################################################################################

2016-04-14 Sébastien Morin local

CAM UnZip 5.1 – .’ZIP’ File Directory Traversal

[+] Credits: hyp3rlinx

2016-04-11 hyp3rlinx local

Express Zip 2.40 – Directory Traversal

#!/usr/bin/python -w

2016-04-08 R-73eN local

Panda Endpoint Administration Agent < 7.50.00 - Local Privilege Escalation

Description:

2016-04-06 Kyriakos Economou local

Panda Security URL Filtering < 4.3.1.9 - Local Privilege Escalation

Description:

2016-04-06 Kyriakos Economou local

Microsoft Windows Kernel – ‘win32k.sys’ Local Privilege Escalation (MS14-058)

Sources:

2016-04-05 MWR InfoSecurity local

Microsoft Internet Explorer – MSHTML!CSVGHelpers::SetAttributeStringAndPointer Use-After-Free (MS16-023)

2016-04-05 Google Security Research dos

PCMan FTP Server – ‘PUT’ Buffer Overflow (Metasploit)

##

2016-04-05 Metasploit remote

Easy File Sharing HTTP Server 7.2 – Remote Overflow (SEH) (Metasploit)

##

2016-04-05 Metasploit remote

Xion Audio Player 1.5 (build 160) – ‘.mp3’ Crash (PoC)

# Exploit Title: Xion Audio Player new('legit.mp3'); # whatever mp3 you got handy

2016-04-04 Charley Celice dos

DameWare Remote Controller < 12.0.0.520 - Remote Code Execution

# Exploit Title: Dameware Remote Controller RCE

2016-04-03 Securifera remote

Microsoft Windows Kernel – ‘NtGdiGetTextExtentExW’ Out-of-Bounds Memory Read

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=685

2016-04-01 Nils Sommer dos

Microsoft Windows Kernel – Bitmap Use-After-Free

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=686

2016-04-01 Nils Sommer dos

Cogent Datahub 7.3.9 Gamma Script – Local Privilege Escalation

# Exploit Title: Cogent Datahub

2016-03-28 mr_me local

TallSoft SNMP/TFTP Server 1.0.0 – Denial of Service

# Exploit Title: TallSoft SNMP TFTP Server 1.0.0 - DoS

2016-03-28 Charley Celice dos