windows

windows 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

Microsoft Windows Kernel – ‘win32k!OffsetChildren’ Null Pointer Dereference

Source: https://code.google.com/p/google-security-research/issues/detail?id=544

2015-12-17 Nils Sommer dos

Adobe Flash GradientFill – Use-After-Frees

Source: https://code.google.com/p/google-security-research/issues/detail?id=557

2015-12-17 Google Security Research dos

Adobe Flash MovieClip.lineStyle – Use-After-Frees

Source: https://code.google.com/p/google-security-research/issues/detail?id=558

2015-12-17 Google Security Research dos

Adobe Flash TextField.gridFitType Setter – Use-After-Free

Source: https://code.google.com/p/google-security-research/issues/detail?id=559

2015-12-17 Google Security Research dos

Adobe Flash TextField.antiAliasType Setter – Use-After-Free

Source: https://code.google.com/p/google-security-research/issues/detail?id=560

2015-12-17 Google Security Research dos

Easy File Sharing Web Server 7.2 – HEAD Request Buffer Overflow (SEH)

# Exploit Title: Easy File Sharing Web Server 7.2 - HEAD HTTP request SEH Buffer Overflow

2015-12-16 ArminCyber remote

Easy File Sharing Web Server 7.2 – GET Buffer Overflow (SEH)

# Exploit Title: Easy File Sharing Web Server 7.2 - GET HTTP request SEH Buffer Overflow

2015-12-16 ArminCyber remote

IBM Tivoli Storage Manager FastBack Server 5.5.4.2 – ‘_FXCLI_GetConfFileChunk’ Stack Buffer Overflow (PoC)

#!/usr/bin/python

2015-12-15 Ptrace Security dos

IBM Tivoli Storage Manager FastBack Server 5.5.4.2 – ‘_FXCLI_SetConfFileChunk’ Stack Buffer Overflow (PoC)

#!/usr/bin/python

2015-12-15 Ptrace Security dos

IBM Tivoli Storage Manager FastBack Server 5.5.4.2 – Invalid Pointer Dereference

#!/usr/bin/python

2015-12-15 Ptrace Security dos

Microsoft Internet Explorer 11 – MSHTML!CObjectElement Use-After-Free (MS15-124)

bluefrost

2015-12-14 Moritz Jodeit dos

Microsoft Office / COM Object – DLL Planting with ‘comsvcs.dll’ Delay Load of ‘mqrt.dll’ (MS15-132)

Source: https://code.google.com/p/google-security-research/issues/detail?id=556

2015-12-14 Google Security Research remote

Avast! – Integer Overflow Verifying numFonts in TTC Header

Source: https://code.google.com/p/google-security-research/issues/detail?id=549

2015-12-10 Google Security Research dos

Microsoft Office / COM Object – ‘els.dll’ DLL Planting (MS15-134)

Source: https://code.google.com/p/google-security-research/issues/detail?id=514

2015-12-09 Google Security Research remote

Microsoft Internet Explorer 11.0.9600.18097 – COmWindowProxy::SwitchMarkup NULL PTR

IE11 11.0.9600.18097 NULL PTR

2015-12-09 Marcin Ressel dos

Microsoft Windows Media Center – ‘.Link’ File Incorrectly Resolved Reference (MS15-134)

1. Advisory Information

2015-12-09 Core Security remote

Microsoft Windows Media Center Library – Parsing Remote Code Execution aka ‘self-executing’ MCL File

Title: Microsoft Windows Media Center Library Parsing RCE Vuln aka "self-executing" MCL file (CVE-2015-6131)

2015-12-09 Eduardo Braun Prado remote

Microsoft Office – OLE Multiple DLL Side Loading Vulnerabilities (MS15-132/MS16-014/MS16-025/MS16-041/MS16-070) (Metasploit)

require 'zip'

2015-12-08 Metasploit local

iniNet SpiderControl PLC Editor Simatic 6.30.04 – Insecure File Permissions

iniNet SpiderControl PLC Editor Simatic 6.30.04 Insecure File Permissions

2015-12-08 LiquidWorm local

iniNet SpiderControl SCADA Web Server Service 2.02 – Insecure File Permissions

iniNet SpiderControl SCADA Web Server Service 2.02 Insecure File Permissions

2015-12-08 LiquidWorm local

WinAsm Studio 5.1.8.8 – Buffer Overflow Crash (PoC)

# Exploit: WinAsm Studio 5.1.8.8 BOF.

2015-12-06 Un_N0n dos

Cyclope Employee Surveillance 8.6.1 – Insecure File Permissions

# Author: loneferret of Offensive Security

2015-12-06 loneferret local

Oracle BeeHive 2 – ‘voice-servlet prepareAudioToPlay()’ Arbitrary File Upload (Metasploit)

##

2015-12-03 Metasploit remote

Oracle BeeHive 2 – ‘voice-servlet processEvaluation()’ Write File (Metasploit)

##

2015-12-03 Metasploit remote

Malwarebytes AntiVirus 2.2.0 – Denial of Service (PoC)

#####################################################################################

2015-12-03 Francis Provencher dos

Acunetix WVS 10 – Local Privilege Escalation

'''

2015-12-02 Daniele Linguaglossa local

Easy File Sharing Web Server 7.2 – Remote Buffer Overflow (SEH) (DEP Bypass + ROP)

#!/usr/bin/env python

2015-11-30 Knaps remote

SysAid Help Desk Software 14.4.32 b25 – SQL Injection (Metasploit)

# Exploit Title: Sysaid Helpdesk Software Unauthenticated SQLi

2015-11-28 hland webapps

Microsoft Windows Kernel – Device Contexts and NtGdiSelectBitmap Use-After-Free (MS15-115)

Source: https://code.google.com/p/google-security-research/issues/detail?id=505

2015-11-23 Nils Sommer dos

Microsoft Windows – Race Condition DestroySMWP Use-After-Free (MS15-115)

Source: https://code.google.com/p/google-security-research/issues/detail?id=509

2015-11-23 Nils Sommer dos

Microsoft Windows – Cursor Object Memory Leak (MS15-115)

Source: https://code.google.com/p/google-security-research/issues/detail?id=510

2015-11-23 Nils Sommer dos

Microsoft Windows – ‘ndis.sys’ IOCTL 0x170034 (ndis!ndisNsiGetIfNameForIfIndex) Pool Buffer Overflow (MS15-117)

Source: https://code.google.com/p/google-security-research/issues/detail?id=516

2015-11-23 Nils Sommer dos

Nvidia Stereoscopic 3D Driver Service 7.17.13.5382 – Arbitrary Run Key Creation

Source: https://code.google.com/p/google-security-research/issues/detail?id=515

2015-11-23 Google Security Research local

Audacious 3.7 – ID3 Local Crash (PoC)

# Exploit Title: Audacious 3.7 ID3 Local Crash PoC

2015-11-23 Antonio Z. dos

Oracle Outside In PDF 8.5.2 – Parsing Memory Corruption (2)

#####################################################################################

2015-11-23 Francis Provencher dos

Oracle Outside In PDF 8.5.2 – Parsing Memory Corruption (1)

#####################################################################################

2015-11-23 Francis Provencher dos

Acrobat Reader DC 15.008.20082.15957 – ‘.PDF’ Parsing Memory Corruption

#####################################################################################

2015-11-23 Francis Provencher dos

Netwin SurgeFTP Sever 23d6 – Persistent Cross-Site Scripting

# Exploit Netwin SurgeFTP Sever Stored Cross Site Scripting Vulnerabilities

2015-11-19 Un_N0n webapps

Sam Spade 1.14 – Decode URL Buffer Overflow Crash (PoC)

#!/usr/bin/env python

2015-11-19 Vivek Mahajan dos

SuperScan 4.1 – Windows Enumeration Hostname/IP/URL Field Overflow (SEH)

#!/usr/bin/env python

2015-11-19 Luis Martínez dos

SuperScan 4.1 – Tools Hostname/IP/URL Field Buffer Overflow

#!/usr/bin/env python

2015-11-19 Luis Martínez dos

SuperScan 4.1 – Scan Hostname/IP Field Buffer Overflow

#!/usr/bin/env python

2015-11-19 Luis Martínez dos

IBM i Access 7.1 – Local Buffer Overflow / Code Execution

[+] Credits: John Page aka hyp3rlinx

2015-11-18 hyp3rlinx local