SysAid Server – Arbitrary File Disclosure
Vantage Point Security Advisory 2014-004
windows
windows 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
jetAudio 8.1.3 Basic (mp3) – Crash (PoC)
# Exploit Title : jetAudio 8.1.3 Basic (Corrupted mp3) Crash POC
BitRaider Streaming Client 1.3.3.4098 – Local Privilege Escalation
BitRaider Streaming Client 1.3.3.4098 Local Privilege Escalation Vulnerability
PsychoStats < 2.2.4 Beta - Cross Site Scripting
PsychoStats Cross Site Scripting
Notepad++ 6.6.9 – Buffer Overflow
#!/usr/bin/python
jaangle 0.98i.977 – Denial of Service
# jaangle 0.98i.977 Denial of Service Vulnerability
Mediacoder 0.8.33 build 5680 – ‘.lst’ Buffer Overflow (PoC) (SEH Overwrite)
# Exploit Title: Mediacoder 0.8.33 build 5680 SEH Buffer Overflow Exploit Dos (.lst)
Mediacoder 0.8.33 build 5680 – ‘.m3u’ Buffer Overflow (PoC) (SEH Overwrite)
# Exploit Title: Mediacoder 0.8.33 build 5680 SEH Buffer Overflow Exploit Dos (.m3u)
Soitec SmartEnergy 1.4 – SCADA Login SQL Injection / Authentication Bypass
Soitec SmartEnergy 1.4 SCADA Login SQL Injection Authentication Bypass Exploit
Winamp 5.666 build 3516 – Corrupted .flv Crash (PoC)
# Exploit Title : Winamp 5.666 build 3516 'f263.w5s' (Corrupted flv) Crash POC
JetAudio 8.1.3 – ‘.mp4’ Crash (PoC)
# Exploit Title : jetAudio 8.1.3 Basic Use-after-free (Corrupted mp4) Crash POC
Advantech AdamView 4.30.003 – ‘.gni’ Local Buffer Overflow (SEH)
#!/usr/bin/env ruby
Microsoft Windows Kerberos – Privilege Escalation (MS14-068)
#!/usr/bin/python
BulletProof FTP Client 2010 – Local Buffer Overflow (SEH)
#!/usr/bin/env ruby
Thomson Reuters Fixed Assets CS 13.1.4 – Local Privilege Escalation
# Exploit Title: Thomson Reuters Fixed Assets CS
CCH Wolters Kluwer PFX Engagement 7.1 – Local Privilege Escalation
# Exploit Title: CCH Wolters Kluwer PFX Engagement
Elipse E3 – HTTP Denial of Service
// Exploit Http DoS Request for SCADA ATTACK Elipse 3
TRENDnet SecurView Wireless Network Camera TV-IP422WN – ‘UltraCamX.ocx’ Stack Buffer Overflow (PoC)
TRENDnet SecurView Wireless Network Camera TV-IP422WN (UltraCamX.ocx) Stack BoF
Microsoft Windows – ‘win32k.sys’ Denial of Service
# Exploit Title: Microsoft Windows Win32k.sys Denial of Service
Privacyware Privatefirewall 7.0 – Unquoted Service Path Privilege Escalation
Privacyware Privatefirewall 7.0 Unquoted Service Path Privilege Escalation
Microsoft Internet Explorer OLE Pre-IE11 – Automation Array Remote Code Execution / PowerShell VirtualAlloc (MS14-064)
|--------------------------------------------------------------------------|
.NET Remoting Services – Remote Command Execution
Source: https://github.com/tyranid/ExploitRemotingService
CorelDRAW X7 CDR File – ‘CdrTxt.dll’ Off-by-One Stack Corruption
CorelDRAW X7 CDR File (CdrTxt.dll) Off-By-One Stack Corruption Vulnerability
Microsoft Internet Explorer 11 – Denial of Service
# Exploit Title: [ IE D.O.S ]
i.Mage 1.11 – Local Crash (PoC)
#!/usr/bin/python
i.Hex 0.98 – Local Crash (PoC)
#!/usr/bin/python
i-FTP 2.20 – Local Buffer Overflow (SEH)
#!/usr/bin/python
Mini-stream RM-MP3 Converter 3.1.2.1.2010.03.30 – ‘.wax’ File Buffer Overflow (Denial of Service) (PoC) EIP Overwrite
#EDB Note: DoS - b0f isn't working.
Filemaker Pro 13.03 / Advanced 12.04 – Authentication Bypass / Privilege Escalation
Filemaker Login Bypass and Privilege Escalation
Free WMA MP3 Converter 1.8 – ‘.wav’ Local Buffer Overflow
#!/usr/bin/env python
Microsoft Windows – OLE Remote Code Execution ‘Sandworm’ (MS14-060)
# !/usr/bin/python
iBackup 10.0.0.32 – Local Privilege Escalation
# Exploit Title: iBackup icacls "C:\Program Files\IBackupWindows\ib_service.exe"
DotNetNuke DNNspot Store 3.0.0 – Arbitrary File Upload (Metasploit)
# Exploit Title: DotNetNuke DNNspot Store (UploadifyHandler.ashx) windows/shell/reverse_tcp
Microsoft Windows – OLE Package Manager SandWorm
#!/usr/bin/env python
SAP NetWeaver Enqueue Server – Denial of Service
Core Security - Corelabs Advisory
Telefonica O2 Connection Manager 8.7 – Service Trusted Path Privilege Escalation
Telefonica O2 Connection Manager 8.7 Service Trusted Path Privilege Escalation
Telefonica O2 Connection Manager 3.4 – Local Privilege Escalation
Telefonica O2 Connection Manager 3.4 Local Privilege Escalation Vulnerability
BMC Track-It! – Multiple Vulnerabilities
>> Multiple critical vulnerabilities in BMC Track-It!