windows

windows 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

HP Intelligent Management Center – Arbitrary File Upload (Metasploit)

##

2013-03-26 Metasploit remote

ActFax 5.01 – RAW Server Buffer Overflow (Metasploit)

##

2013-03-26 Metasploit remote

KingView – Log File Parsing Buffer Overflow (Metasploit)

##

2013-03-25 Metasploit remote

Mitsubishi MX ActiveX Component 3 – ‘ActUWzd.dll’ ‘WzTitle’ Remote Heap Spray

2013-03-25 Dr_IDE remote

LiquidXML Studio 2010 – ActiveX Code Execution

LiquidXML Studio 2010 ActiveX Insecure Method Executable File Creation 0-day

2013-03-25 Dr_IDE local

LiquidXML Studio 2012 – ActiveX Insecure Method Executable File Creation

LiquidXML Studio 2012 ActiveX Insecure Method Executable File Creation 0-day

2013-03-25 Dr_IDE local

IconCool MP3 WAV Converter 3.00 Build 120518 – Stack Buffer Overflow

# Exploit Title: IconCool MP3 WAV Converter Stack Buffer Overflow Vulnerability

2013-03-25 G0li47h dos

Cool PDF Image Stream – Remote Buffer Overflow (Metasploit)

##

2013-03-22 Metasploit remote

Sami FTP Server – ‘LIST’ Buffer Overflow (Metasploit)

##

2013-03-22 Metasploit remote

Photodex ProShow Gold/Producer 5.0.3310/6.0.3410 – ‘ScsiAccess.exe’ Local Privilege Escalation

## Exploit-DB Note: Vuln still in 6.0.3410 as well as 'Photodex ProShow Gold'

2013-03-22 Julien Ahrens local

EastFTP 4.6.02 – ActiveX Control

#################################################################

2013-03-20 Dr_IDE local

BlazeVideo HDTV Player Standard – ‘.plf’ File Remote Buffer Overflow

source: https://www.securityfocus.com/bid/58624/info

2013-03-19 metacom remote

aktiv-player 2.9.0 – Crash (PoC)

# !/usr/bin/python

2013-03-15 metacom dos

Nitro Pro 8.0.3.1 – Crash (PoC)

#!C:\Python27\python.exe

2013-03-15 John Cobb dos

QlikView – ‘.qvw’ File Remote Integer Overflow

source: https://www.securityfocus.com/bid/58463/info

2013-03-13 A. Antukh remote

Honeywell HSC Remote Deployer – ActiveX Remote Code Execution (Metasploit)

##

2013-03-13 Metasploit remote

Cam2pc 4.6.2 – ‘.BMP’ Image Processing Integer Overflow

Application: Cam2pc BMP Image Processing Integer Overflow Vulnerability

2013-03-13 coolkaveh dos

TagScanner 5.1 – Stack Buffer Overflow (PoC)

Title:

2013-03-13 Vulnerability-Lab dos

Microsoft Silverlight – ScriptObject Unsafe Memory Access (MS13-022/MS13-087) (Metasploit)

##

2013-03-12 Metasploit local

Kaspersky Internet Security 2013 – Denial of Service

I usually do not write security advisories unless absolutely necessary.

2013-03-05 Marc Heuse dos

Sami FTP Server 2.0.1 – ‘LIST’ Buffer Overflow

#!/usr/bin/env python

2013-03-01 superkojiman remote

Hanso Player 2.1.0 – ‘.m3u’ Buffer Overflow

#!/usr/bin/python

2013-03-01 metacom dos

Photodex ProShow Producer – Multiple DLL Loading Arbitrary Code Execution Vulnerabilities

source: https://www.securityfocus.com/bid/58131/info

2013-02-23 Julien Ahrens remote

Microsoft Internet Explorer – SLayoutRun Use-After-Free (MS13-009) (Metasploit) (2)

##

2013-02-23 Metasploit remote

Alt-N MDaemon WorldClient 13.0.3 – Multiple Vulnerabilities

======================================================================

2013-02-21 QSecure & Demetris Papapetrou webapps

Alt-N MDaemon 12.5.6/13.0.3 – Email Body HTML/JS Injection

==============================================================

2013-02-21 QSecure & Demetris Papapetrou webapps

BigAnt Server 2.97 – DUPF Command Arbitrary File Upload (Metasploit)

##

2013-02-20 Metasploit remote

BigAnt Server 2.97 – SCH / DUPF Buffer Overflow (Metasploit)

##

2013-02-20 Metasploit remote

Microsoft Office 2010 – Download Execute

#!/usr/bin/python

2013-02-20 g11tch remote

Alt-N MDaemon WorldClient And WebAdmin – Cross-Site Request Forgery

source: https://www.securityfocus.com/bid/58076/info

2013-02-18 QSecure remote

SAP NetWeaver Message Server – Multiple Vulnerabilities

1. *Advisory Information*

2013-02-17 Core Security dos

Photodex ProShow Producer 5.0.3297 – ‘.pxs’ Memory Corruption

#!/usr/bin/python

2013-02-15 Julien Ahrens local

Foxit Reader Plugin – URL Processing Buffer Overflow (Metasploit)

##

2013-02-14 Metasploit remote

SonicWALL OEM Scrutinizer 9.5.2 – Multiple Vulnerabilities

Title:

2013-02-14 Vulnerability-Lab webapps

SonicWALL Scrutinizer 9.5.2 – SQL Injection

Title:

2013-02-14 Vulnerability-Lab webapps

Microsoft Internet Explorer – SLayoutRun Use-After-Free (MS13-009) (Metasploit) (1)

##

2013-02-14 Scott Bell remote

Novell Groupwise Client – ‘gwcls1.dll’ ActiveX Remote Code Execution (Metasploit)

##

2013-02-12 Metasploit remote

VMware OVF Tools – Format String (Metasploit) (2)

##

2013-02-12 Metasploit remote

Microsoft Windows – HWND_BROADCAST (PoC) (MS13-005)

ms13-005-funz-poc.cpp - Drive a Medium IL cmd.exe via a Low IL

2013-02-11 0vercl0k dos

Freefloat FTP Server 1.0 – ‘Raw’ Remote Buffer Overflow

#!/usr/bin/env python

2013-02-11 superkojiman remote

Schneider Electric Accutech Manager – Heap Overflow (PoC)

#Schneider Electric

2013-02-10 Evren Yalçın dos

KMPlayer – Denial of Service

Title : KMPlayer (PlayList M3U) Denial Of Service PoC All Versions

2013-02-10 Jigsaw dos

ActFax 5.01 – RAW Server (Metasploit)

##

2013-02-07 Craig Freyman remote

Cool PDF Reader 3.0.2.256 – Buffer Overflow

# Exploit Title: Cool PDF Reader 3.0.2.256 buffer overflow

2013-02-07 Chris Gabriel dos

VMware OVF Tools – Format String (Metasploit) (1)

##

2013-02-06 Metasploit remote

Opera SVG – Use-After-Free

2013-02-05 Cons0ul dos

CADA 3S CoDeSys Gateway Server – Directory Traversal (Metasploit)

##

2013-02-02 Metasploit local

Firebird – Relational Database CNCT Group Number Buffer Overflow (Metasploit)

##

2013-01-31 Metasploit local

Apple Quick Time Player (Windows) 7.7.3 – Out of Bound Read

# Title: Apple Quick Time Player (Windows)Version 7.7.3 Out of Bound Read

2013-01-29 Debasish Mandal dos

Microsoft Internet Explorer 8/9 – Steal Any Cookie

# Exploit Title: Internet Explorer 8 & Internet Explorer 9 steal any Cookie

2013-01-28 Christian Haider webapps