windows

windows 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

Novell ZENworks Configuration Management Preboot Service 0x21 – Remote Buffer Overflow (Metasploit)

##

2012-07-19 Metasploit remote

Novell ZENworks Configuration Management Preboot Service 0x06 – Remote Buffer Overflow (Metasploit)

##

2012-07-19 Metasploit remote

Microsoft Windows – Task Scheduler ‘.XML’ Local Privilege Escalation (MS10-092) (Metasploit)

##

2012-07-19 Metasploit local

DomsHttpd 1.0 – Remote Denial of Service

#!/usr/bin/perl

2012-07-16 Jean Pascal Pereira dos

ALLMediaServer 0.8 – Remote Buffer Overflow (Metasploit)

##

2012-07-16 Metasploit remote

Microsoft Internet Explorer 9 / SharePoint / Lync – toStaticHTML HTML Sanitizing Bypass (MS12-037/MS12-039/MS12-050)

toStaticHTML: The Second Encounter (CVE-2012-1858)

2012-07-12 Adi Cohen dos

ZipItFast PRO 3.0 – Local Heap Overflow

#!/usr/bin/perl

2012-07-12 b33f local

WaveSurfer 1.8.8p4 – Memory Corruption (PoC)

#!/usr/bin/perl

2012-07-12 Jean Pascal Pereira dos

AdminStudio – ‘LaunchHelp.dll’ ActiveX Arbitrary Code Execution (Metasploit)

##

2012-07-11 Metasploit remote

Checkpoint Abra – Multiple Vulnerabilities

#############################################################################

2012-07-10 Andrey Komarov dos

Umbraco CMS – Remote Command Execution (Metasploit)

##

2012-07-09 Metasploit webapps

ALLMediaServer 0.8 – Remote Overflow (SEH)

# Exploit Title: seh exploit, BOF

2012-07-06 motaz reda remote

Poison Ivy 2.3.2 (C2 Server) – Remote Buffer Overflow (Metasploit)

##

2012-07-06 Metasploit remote

Solar FTP Server – Denial of Service

source: https://www.securityfocus.com/bid/54306/info

2012-07-05 coolkaveh dos

IBM Rational ClearQuest CQOle – Remote Code Execution (Metasploit)

##

2012-07-05 Metasploit remote

.NET Framework – Tilde Character Denial of Service

Paper: http://www.exploit-db.com/docs/19527.pdf

2012-07-04 Soroush Dalili dos

Photodex ProShow Producer 5.0.3256 – Buffer Overflow

Inshell Security Advisory

2012-07-03 Julien Ahrens dos

Zoom Player – ‘.avi’ Divide-by-Zero Denial of Service

source: https://www.securityfocus.com/bid/54249/info

2012-07-02 Dark-Puzzle dos

Microsoft IIS – Short File/Folder Name Disclosure

PoC: https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/19525.zip

2012-07-02 Soroush Dalili webapps

IrfanView JPEG2000 4.3.2.0 – jp2 Stack Buffer Overflow (Metasploit)

##

2012-07-01 Metasploit local

HP Data Protector – Create New Folder Buffer Overflow (Metasploit)

##

2012-07-01 Metasploit remote

IrfanView JLS Formats PlugIn – Heap Overflow

Summary

2012-06-30 Joseph Sheridan dos

PowerNet Twin Client 8.9 – ‘RFSync 1.0.0.1’ Crash (PoC)

#######################################################################

2012-06-29 Luigi Auriemma dos

specview 2.5 build 853 – Directory Traversal

#######################################################################

2012-06-29 Luigi Auriemma webapps

PC Tools Firewall Plus 7.0.0.123 – Local Denial of Service

Exploit Title: PC Tools Firewall Plus Local DoS

2012-06-29 0in dos

Real Networks RealPlayer – ‘.avi’ File Divide-by-Zero Denial of Service

source: https://www.securityfocus.com/bid/54220/info

2012-06-28 Dark-Puzzle dos

VideoLAN VLC Media Player 2.0.1 – ‘.avi’ File Denial of Service

source: https://www.securityfocus.com/bid/54208/info

2012-06-28 Dark-Puzzle dos

Apple QuickTime – TeXML Stack Buffer Overflow (Metasploit)

##

2012-06-28 Metasploit local

Sielco Sistemi Winlog 2.07.16 – Multiple Vulnerabilities

#######################################################################

2012-06-27 Luigi Auriemma dos

Symantec pcAnywhere 12.5.0 – ‘Login’ / ‘Password’ Remote Buffer Overflow

#!/usr/bin/python

2012-06-27 S2 Crew remote

Google Chrome 19.0.1084.52 – ‘metro_driver.dll’ DLL Loading Arbitrary Code Execution

source: https://www.securityfocus.com/bid/54477/info

2012-06-26 Moshe Zioni remote

Apple QuickTime – QuickTime.util.QTByteObject Initialization Security Checks Bypass

In order to test the POC code for the reported Issue 22, manually add

2012-06-26 Security Explorations local

Winamp 5.13 – ‘.m3u’ File Exception Handling Remote Denial of Service

source: https://www.securityfocus.com/bid/54190/info

2012-06-25 Dark-Puzzle dos

Able2Doc and Able2Doc Professional 6.0 – Memory Corruption

# Exploit Title: Able2Doc and Able2Doc Professional v 6.0 memory corruption

2012-06-25 Carlos Mario Penagos Hollmann dos

Able2Extract and Able2Extract Server 6.0 – Memory Corruption

# Exploit Title: Able2Extract and Able2Extract Server v 6.0 Memory

2012-06-25 Carlos Mario Penagos Hollmann dos

Slimpdf Reader 1.0 – Memory Corruption

# Exploit Title:

2012-06-25 Carlos Mario Penagos Hollmann dos

Kingview Touchview 6.53 – Multiple Heap Overflow Vulnerabilities

# Exploit Title: Kingview 6.53 touchview.exe heap overflow 2

2012-06-25 Carlos Mario Penagos Hollmann dos

Kingview Touchview 6.53 – EIP Overwrite

# Exploit Title: Kingview Touchview EIP direct control

2012-06-25 Carlos Mario Penagos Hollmann dos

Apple iTunes 10 – Extended M3U Stack Buffer Overflow (Metasploit)

##

2012-06-25 Metasploit remote

Adobe Flash Player – Object Type Confusion (Metasploit)

##

2012-06-25 Metasploit remote

IrfanView 4.33 – ‘.DJVU’ Image Processing Heap Overflow

#####################################################################################

2012-06-24 Francis Provencher dos

Lattice Diamond Programmer 1.4.2 – Buffer Overflow (PoC)

Core Security - Corelabs Advisory

2012-06-22 Core Security dos

SoftPerfect Bandwidth Manager 2.9.10 – Authentication Bypass

Authentication Bypass and Password disclosure.

2012-06-22 Gitsnik webapps