windows

Asx to Mp3 2.7.5 – Local Stack Overflow

###########################################################################################

TeamSpeak Client 3.0.14 – Buffer Overflow

#################################################################################################

Kolibri WebServer 2.0 – Remote Buffer Overflow (EMET 5.0 / EMET 4.1 Partial Bypass)

#!/bin/python

Rejetto HTTP File Server (HFS) 2.3a/2.3b/2.3c – Remote Command Execution

==========================================================

Microsoft Exchange – IIS HTTP Internal IP Address Disclosure (Metasploit)

# Exploit Title: Microsoft Exchange IIS HTTP Internal IP Disclosure Vulnerability

Microsoft Internet Explorer 8 – Fixed Col Span ID (Full ASLR + DEP + EMET 5.0 Bypass) (MS12-037)

dbPowerAmp < 2.0/10.0 - Local Buffer Overflow

dbPowerAmp Buffer Overflow

Advantech Webaccess – dvs.ocx GetColor Buffer Overflow (Metasploit)

##

EMC AlphaStor Device Manager Opcode 0x75 – Command Injection (Metasploit)

require 'msf/core'

WS10 Data Server – SCADA Overflow (PoC)

## Exploit Title: WS10 Data Server SCADA Exploit Overflow PoC

Seafile-server 3.1.5 – Remote Denial of Service

# Exploit Title: ccnet-server remote DoS (assert) seafile-server

Fast Image Resizer 098 – Local Crash (PoC)

#!/usr/bin/perl

Rejetto HTTP File Server (HFS) 2.3.x – Remote Command Execution (1)

# Exploit Title: HttpFileServer 2.3.x Remote Command Execution

Comodo Internet Security – HIPS/Sandbox Escape

Exploit: http://www.joxeankoret.com/download/comodo_sandbox_escape/sandbox_test1.tar.gz

Ammyy Admin 3.5 – Remote Code Execution (Metasploit)

Mirror: https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/34647.zip (aa0day.zip)

ManageEngine Desktop Central StatusUpdate – Arbitrary File Upload (Metasploit)

##

BulletProof FTP Client 2010 – Buffer Overflow (SEH)

# !/usr/bin/python

Wing FTP Server – (Authenticated) Command Execution (Metasploit)

##

LeapFTP 3.1.0 – URL Handling Buffer Overflow (SEH)

# Exploit Title: LeapFTP 3.1.0 URL Handling SEH Exploit

HTML Help Workshop 1.4 – Local Buffer Overflow (SEH)

import subprocess

HTML Help Workshop 1.4 – Buffer Overflow (SEH) (PoC)

#----------------------------------------------------------------------------------------------------#

Microsoft Internet Explorer – Memory Corruption (PoC) (MS14-029)

func​tion stc()

BlazeDVD Pro Player 7.0 – ‘.plf’ Local Buffer Overflow (SEH)

# BlazeDVD Pro v7.0 - (.plf) Buffer Overflow SEH

Oracle VM VirtualBox Guest Additions 4.3.10r93012 – ‘VBoxGuest.sys’ Local Privilege Escalation (Metasploit)

##

BlazeDVD Pro Player 7.0 – ‘.plf’ Direct RET Local Stack Buffer Overflow

# BlazeDVD Pro v7.0 - (.plf) Stack Based Buffer Overflow (direct RET) - ALSR/DEP bypass on Win8.1 Pro

Symantec Endpoint Protection 11.x/12.x – Kernel Pool Overflow / Local Privilege Escalation

# Symantec Endpoint Protection 11.x, 12.x - Kernel Pool Overflow

BulletProof FTP Client 2010 – Buffer Overflow (SEH) (PoC)

#-----------------------------------------------------------------------------#

DjVuLibre 3.5.25.3 – Out of Bounds Access Violation

from shutil import copyfile

Microsoft Windows XP SP3 – ‘BthPan.sys’ Arbitrary Write Privilege Escalation

"""

World Of Warcraft 3.3.5a – ‘macros-cache.txt’ Stack Overflow

# Exploit Title: World Of Warcraft 3.3.5a Stack Overflow (macros-cache.txt)

Microsoft Windows XP SP3 – ‘MQAC.sys’ Arbitrary Write Privilege Escalation

Title: Microsoft XP SP3 MQAC.sys Arbitrary Write Privilege Escalation

HP Data Protector Manager 8.10 – Remote Command Execution

#!/usr/bin/python

Kolibri Web Server 2.0 – GET (SEH)

#!/usr/bin/python

Yokogawa CS3000 – ‘BKFSim_vhfd.exe’ Remote Buffer Overflow (Metasploit)

##

Oracle Event Processing FileUploadServlet – Arbitrary File Upload (Metasploit)

##

Ubisoft Uplay 4.6 – Insecure File Permissions Privilege Escalation

Ubisoft Uplay 4.6 Insecure File Permissions Local Privilege Escalation

Baidu Spark Browser 26.5.9999.3511 – Remote Stack Overflow (Denial of Service)

Baidu Spark Browser v26.5.9999.3511 Remote Stack Overflow DoS PoC

Microsoft Internet Explorer 8 – Fixed Col Span ID (Full ASLR + DEP + EMET 4.1.x Bypass) (MS12-037)

Microsoft Registry Symlink – IE Sandbox Escape (MS13-097) (Metasploit)

##

Microsoft .NET Deployment Service – IE Sandbox Escape (MS14-009) (Metasploit)

##

Cogent DataHub – Command Injection (Metasploit)

##

Microsoft Internet Explorer 8/9/10 – ‘CInput’ Use-After-Free Crash (PoC) (MS14-035)

MS14-035 Internet Explorer CInput Use-after-free POC

Ericom AccessNow Server – Remote Buffer Overflow (Metasploit)

##

Ubisoft Rayman Legends 1.2.103716 – Remote Stack Buffer Overflow (PoC)

#!/usr/bin/perl

Easy File Management Web Server – Remote Stack Buffer Overflow (Metasploit)

##

netKar PRO 1.1 – ‘.nkuser’ File Creation Null Pointer Denial of Service

source: https://www.securityfocus.com/bid/39558/info

Core FTP LE 2.2 – Heap Overflow (PoC)

#-----------------------------------------------------------------------------#

IPSwitch IMail Server WEB client 12.4 – Persistent Cross-Site Scripting

# Exploit Title: IPSwitch IMail Server WEB client 12.4 persistent XSS

Easy File Management Web Server 5.3 – ‘UserID’ Remote Buffer Overflow (ROP)

#!/usr/bin/python

Microsoft Internet Explorer 11 – WeakMap Integer Divide-by-Zero