windows

windows 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

Avira – Heap Underflow Parsing PE Section Headers

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=765

2016-03-23 Google Security Research dos

Comodo AntiVirus – Forwards Emulated API Calls to the Real API During Scans

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=769

2016-03-23 Google Security Research remote

CoolPlayer (Standalone) build 2.19 – ‘.m3u’ Local Stack Overflow

# Exploit Title: CoolPlayer (Standalone) build 2.19 - .m3u Stack Overflow

2016-03-22 Charley Celice local

Sysax Multi Server 6.50 – HTTP File Share Overflow Remote Code Execution (SEH)

# Exploit Title: Sysax Multi Server 6.50 HTTP File Share SEH Overflow RCE Exploit

2016-03-21 Paul Purcell remote

Internet Download Manager 6.25 Build 14 – ‘Find file’ Unicode (SEH)

#!/usr/bin/python

2016-03-21 Rakan Alotaibi local

Wildfly – ‘WEB-INF’ / ‘META-INF’ Information Disclosure via Filter Restriction Bypass

Exploit Title: Wildfly: WEB-INF and META-INF Information Disclosure via Filter Restriction Bypass

2016-03-20 Tal Solomon of Palantir Security webapps

Netwrix Auditor 7.1.322.0 – ActiveX ‘sourceFile’ Stack Buffer Overflow

Netwrix Auditor 7.1.322.0 ActiveX (sourceFile) Stack Buffer Overflow Vulnerability

2016-03-16 LiquidWorm dos

Microsoft Internet Explorer – Read AV in MSHTML!Layout::LayoutBuilderDivider::BuildPageLayout (MS16-023)

2016-03-14 Google Security Research dos

Microsoft Windows Kernel – ‘ATMFD.dll’ OTF Font Processing Stack Corruption (MS16-026)

Source: https://code.google.com/p/google-security-research/issues/detail?id=682

2016-03-14 Google Security Research dos

Microsoft Windows Kernel – ‘ATMFD.dll’ OTF Font Processing Pool-Based Buffer Overflow (MS16-026)

Source: https://code.google.com/p/google-security-research/issues/detail?id=683

2016-03-14 Google Security Research dos

Zortam Mp3 Media Studio 20.15 – Overflow (PoC) (SEH)

#-*- coding: utf-8 -*-

2016-03-14 INSECT.B dos

Nitro Pro 10.5.7.32 / Nitro Reader 5.5.3.1 – Heap Memory Corruption

#####################################################################################

2016-03-10 Francis Provencher dos

Adobe Digital Editions 4.5.0 – ‘.pdf’ Critical Memory Corruption

########################################################################################

2016-03-09 Pier-Luc Maltais dos

McAfee VirusScan Enterprise 8.8 – Security Restrictions Bypass

Security Advisory @ Mediaservice.net Srl

2016-03-07 Maurizio Agazzini local

Avast! – Authenticode Parsing Memory Corruption

Source: https://code.google.com/p/google-security-research/issues/detail?id=668

2016-03-07 Google Security Research dos

AppLocker – Execution Prevention Bypass (Metasploit)

##

2016-03-03 Metasploit local

PictureTrails Photo Editor GE.exe 2.0.0 – ‘.bmp’ Crash (PoC)

# Exploit Title: PictureTrail Photo Editor GE.exe 2.00 - ./bmp Crash PoC

2016-03-02 redknight99 dos

FreeProxy Internet Suite 4.10 – Denial of Service

# Exploit Title: Freeproxy Internet Suite 4.10 Remote DoS

2016-03-02 Guillaume Kaddouch dos

Quick Tftp Server Pro 2.3 – Read Mode Denial of Service

# Exploit Title: Quick Tftp Server Pro 2.3 TFTP mode Remote Overflow (DoS)

2016-03-02 Guillaume Kaddouch dos

Netgear NMS300 ProSafe Network Management System – Arbitrary File Upload (Metasploit)

##

2016-03-01 Metasploit remote

Viscomsoft Calendar Active-X 2.0 – Multiple Crashes (PoC)

# Exploit Title: Viscomsoft Calendar Active-X 2.0 - Multiple Crash PoCs

2016-03-01 Shantanu Khandelwal dos

Crouzet em4 soft 1.1.04 / M3 soft 3.1.2.0 – Insecure File Permissions

Crouzet em4 soft 1.1.04 and M3 soft 3.1.2.0 Insecure File Permissions

2016-03-01 LiquidWorm local

Crouzet em4 soft 1.1.04 – ‘.pm4’ Integer Division By Zero

Crouzet em4 soft 1.1.04 Integer Division By Zero

2016-03-01 LiquidWorm dos

Comodo Anti-Virus – ‘SHFolder.dll’ Local Privilege Escalation

2016-02-29 Laughing_Mantis local

Microsoft Windows – ‘srv2.sys’ SMB Code Execution (Python) (MS09-050)

# EDB-Note: Source ~ https://raw.githubusercontent.com/ohnozzy/Exploit/master/MS09_050.py

2016-02-26 ohnozzy remote

Microsoft Windows – ‘NetAPI32.dll’ Code Execution (Python) (MS08-067)

import struct

2016-02-26 ohnozzy remote

IBM Lotus Domino R8 – Password Hash Extraction

# Exploit Title: IBM Lotus Domino

2016-02-25 Jonathan Broche webapps

Dell OpenManage Server Administrator 8.2 – (Authenticated) Directory Traversal

# Exploit Title: Dell OpenManage Server Administrator 8.2 Authenticated

2016-02-23 hantwister webapps

Core FTP Server 1.2 – Local Buffer Overflow

#-*- coding: utf-8 -*-

2016-02-22 INSECT.B local

ManageEngine Firewall Analyzer 8.5 – Multiple Vulnerabilities

================================================================

2016-02-19 Sachin Wagh webapps

QuickHeal 16.00 – ‘webssx.sys’ Driver Denial of Service

# Exploit Title: QuickHeal webssx.sys driver DOS vulnerability

2016-02-19 Fitzl Csaba dos

STIMS Cutter 1.1.3.20 – Buffer Overflow (Denial of Service) (PoC)

# Exploit Title: STIMS CUTTER OVERFLOW SEH OVERWRITE

2016-02-19 Shantanu Khandelwal dos

STIMS Buffer 1.1.20 – Buffer Overflow (PoC) (SEH Overwrite)

# Exploit Title: STIMS BUFFER OVERFLOW SEH OVERWRITE

2016-02-19 Shantanu Khandelwal dos

XM Easy Personal FTP Server 5.8.0 – ‘HELP’ Remote Denial of Service

#!/usr/bin/python

2016-02-19 Pawan Lal dos

Flash ActiveX 28.0.0.137 – Code Execution (1)

## CVE-2018-4878 (flash exploit)

2016-02-16 smgorelik local

CyberCop Scanner Smbgrind 5.5 – Buffer Overflow (PoC)

[+] Credits: hyp3rlinx

2016-02-16 hyp3rlinx dos

Network Scanner 4.0.0.0 – Crash (SEH) (PoC)

#-*- coding: utf-8 -*-

2016-02-15 INSECT.B dos

Alternate Pic View 2.150 – ‘.pgm’ Crash (PoC)

# Exploit Title: Alternate Pic View 2.150 PGM CRASH POC

2016-02-15 Shantanu Khandelwal dos

Delta Industrial Automation DCISoft 1.12.09 – Local Stack Buffer Overflow

#!/usr/bin/env python

2016-02-15 LiquidWorm local

Microsoft Windows – Kerberos Security Feature Bypass (MS16-014)

# Exploit Title: Windows Kerberos Security Feature Bypass

2016-02-15 Nabeel Ahmed local

Flash ActiveX 28.0.0.137 – Code Execution (2)

## CVE-2018-4878

2016-02-13 smgorelik local

Adobe Photoshop CC / Bridge CC – ‘.iff’ Parsing Memory Corruption

#####################################################################################

2016-02-09 Francis Provencher dos

Adobe Photoshop CC / Bridge CC – ‘.png’ Parsing Memory Corruption (2)

#####################################################################################

2016-02-09 Francis Provencher dos

Adobe Photoshop CC / Bridge CC – ‘.png’ Parsing Memory Corruption (1)

#####################################################################################

2016-02-09 Francis Provencher dos

PotPlayer 1.6.5x – ‘.mp3’ Crash (PoC)

# Exploit Title: POTPLAYER 1.6.5x MP3 CRASH POC

2016-02-09 Shantanu Khandelwal dos

FTPShell Client 5.24 – ‘Create NewFolder’ Local Buffer Overflow

#[+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+]

2016-02-04 Arash Khazaei local

Baumer VeriSens Application Suite 2.6.2 – Buffer Overflow (PoC)

#!/usr/bin/env python

2016-02-03 LiquidWorm dos

Toshiba Viewer v2 p3console – Local Denial of Service

#!/usr/bin/perl

2016-02-02 JaMbA dos

Microsoft Internet Explorer 11 – javascript Code Execution

2016-02-01 checkpoint local

WPS Office < 2016 - '.xls' Heap Memory Corruption

#####################################################################################

2016-02-01 Francis Provencher dos