WifiHotSpot 1.0.0.0 – ‘WifiHotSpotService.exe’ Unquoted Service Path
# Exploit Title: WifiHotSpot 1.0.0.0 - 'WifiHotSpotService.exe' Unquoted Service Path
windows
windows 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
Sandboxie 5.49.7 – Denial of Service (PoC)
# Exploit Title: Sandboxie 5.49.7 - Denial of Service (PoC)
Sandboxie Plus 0.7.4 – ‘SbieSvc’ Unquoted Service Path
# Exploit Title: Sandboxie Plus 0.7.4 - 'SbieSvc' Unquoted Service Path
Epic Games Easy Anti-Cheat 4.0 – Local Privilege Escalation
# Exploit Title: Epic Games Easy Anti-Cheat 4.0 - Local Privilege Escalation
Dell OpenManage Server Administrator 9.4.0.0 – Arbitrary File Read
# Exploit Title: Dell OpenManage Server Administrator 9.4.0.0 - Arbitrary File Read
Mini Mouse 9.2.0 – Path Traversal
# Exploit Title: Mini Mouse 9.2.0 - Path Traversal
Mini Mouse 9.2.0 – Remote Code Execution
# Exploit Title: Mini Mouse 9.2.0 - Remote Code Execution
Rockstar Service – Insecure File Permissions
# Exploit Title: Rockstar Service - Insecure File Permissions
ScadaBR 1.0 – Arbitrary File Upload (Authenticated) (1)
# Exploit Title: ScadaBR 1.0 - Arbitrary File Upload (Authenticated) (1)
SyncBreeze 10.1.16 – XML Parsing Stack-based Buffer Overflow
# Exploit Title: SyncBreeze 10.1.16 - XML Parsing Stack-based Buffer Overflow
Ext2Fsd v0.68 – ‘Ext2Srv’ Unquoted Service Path
# Exploit Title: Ext2Fsd v0.68 - 'Ext2Srv' Unquoted Service Path
Elodea Event Collector 4.9.3 – ‘ElodeaEventCollectorService’ Unquoted Service Path
# Exploit Title: Elodea Event Collector 4.9.3 - 'ElodeaEventCollectorService' Unquoted Service Path
ActivIdentity 8.2 – ‘ac.sharedstore’ Unquoted Service Path
# Exploit Title: ActivIdentity 8.2 - 'ac.sharedstore' Unquoted Service Path
ELAN Touchpad 15.2.13.1_X64_WHQL – ‘ETDService’ Unquoted Service Path
# Exploit Title: ELAN Touchpad 15.2.13.1_X64_WHQL - 'ETDService' Unquoted Service Path
Hi-Rez Studios 5.1.6.3 – ‘HiPatchService’ Unquoted Service Path
# Exploit Title: Hi-Rez Studios 5.1.6.3 - 'HiPatchService' Unquoted Service Path
OSAS Traverse Extension 11 – ‘travextensionhostsvc’ Unquoted Service Path
# Exploit Title: OSAS Traverse Extension 11 - 'travextensionhostsvc' Unquoted Service Path
MacPaw Encrypto 1.0.1 – ‘Encrypto Service’ Unquoted Service Path
# Exploit Title: MacPaw Encrypto 1.0.1 - 'Encrypto Service' Unquoted Service Path
Winpakpro 4.8 – ‘WPCommandFileService’ Unquoted Service Path
# Exploit Title: Winpakpro 4.8 - 'WPCommandFileService' Unquoted Service Path
Winpakpro 4.8 – ‘ScheduleService’ Unquoted Service Path
# Exploit Title: Winpakpro 4.8 - 'ScheduleService' Unquoted Service Path
Winpakpro 4.8 – ‘GuardTourService’ Unquoted Service Path
# Exploit Title: Winpakpro 4.8 - 'GuardTourService' Unquoted Service Path
SAPSetup Automatic Workstation Update Service 750 – ‘NWSAPAutoWorkstationUpdateSvc’ Unquoted Service Path
# Exploit Title: SAPSetup Automatic Workstation Update Service 750 - 'NWSAPAutoWorkstationUpdateSvc' Unquoted Service...
SOYAL 701 Client 9.0.1 – Insecure Permissions
# Exploit Title: SOYAL 701 Client 9.0.1 - Insecure Permissions
SOYAL 701 Server 9.0.1 – Insecure Permissions
# Exploit Title: SOYAL 701 Server 9.0.1 - Insecure Permissions
Eclipse Mosquitto MQTT broker 2.0.9 – ‘mosquitto’ Unquoted Service Path
# Exploit Title: Eclipse Mosquitto MQTT broker 2.0.9 - 'mosquitto' Unquoted Service Path
BRAdmin Professional 3.75 – ‘BRA_Scheduler’ Unquoted Service Path
# Exploit Title: BRAdmin Professional 3.75 - 'BRA_Scheduler' Unquoted Service Path
VFS for Git 1.0.21014.1 – ‘GVFS.Service’ Unquoted Service Path
# Exploit Title: VFS for Git 1.0.21014.1 - 'GVFS.Service' Unquoted Service Path
FastStone Image Viewer 7.5 – .cur BITMAPINFOHEADER ‘BitCount’ Stack Based Buffer Overflow (ASLR & DEP Bypass)
# Exploit title: FastStone Image Viewer 7.5 - .cur BITMAPINFOHEADER 'BitCount' Stack Based Buffer Overflow (ASLR & DE...
GeoGebra CAS Calculator 6.0.631.0 – Denial of Service (PoC)
# Exploit Title: GeoGebra CAS Calculator 6.0.631.0 - Denial of Service (PoC)
GeoGebra Classic 5.0.631.0-d – Denial of Service (PoC)
# Exploit Title: GeoGebra Classic 5.0.631.0-d - Denial of Service (PoC)
GeoGebra Graphing Calculator 6.0.631.0 – Denial Of Service (PoC)
# Exploit Title: GeoGebra Graphing Calculator 6.0.631.0 - Denial Of Service (PoC)
Interactive Suite 3.6 – ‘eBeam Stylus Driver’ Unquoted Service Path
# Exploit Title: Interactive Suite 3.6 - 'eBeam Stylus Driver' Unquoted Service Path
eBeam education suite 2.5.0.9 – ‘eBeam Device Service’ Unquoted Service Path
# Exploit Title: eBeam education suite 2.5.0.9 - 'eBeam Device Service' Unquoted Service Path
Realtek Wireless LAN Utility 700.1631 – ‘Realtek11nSU’ Unquoted Service Path
# Exploit Title: Realtek Wireless LAN Utility 700.1631 - 'Realtek11nSU' Unquoted Service Path
QNAP QVR Client 5.0.0.13230 – ‘QVRService’ Unquoted Service Path
# Exploit Title: QNAP QVR Client 5.0.0.13230 - 'QVRService' Unquoted Service Path
Microsoft Exchange 2019 – Server-Side Request Forgery
import requests
Vembu BDR 4.2.0.1 U1 – Multiple Unquoted Service Paths
# Exploit Title: Vembu BDR 4.2.0.1 U1 - Multiple Unquoted Service Paths
Nsasoft Hardware Software Inventory 1.6.4.0 – ‘multiple’ Denial of Service (PoC)
# Exploit Title: Nsasoft Hardware Software Inventory 1.6.4.0 - 'multiple' Denial of Service (PoC)
Microsoft Exchange 2019 – Server-Side Request Forgery (Proxylogon) (PoC)
# Exploit Title: Microsoft Exchange 2019 - SSRF to Arbitrary File Write (Proxylogon)
bVPN 2.5.1 – ‘waselvpnserv’ Unquoted Service Path
# Exploit Title: bVPN 2.5.1 - 'waselvpnserv' Unquoted Service Path
Sandboxie Plus v0.7.2 – ‘SbieSvc’ Unquoted Service Path
# Exploit Title: Sandboxie Plus v0.7.2 - 'SbieSvc' Unquoted Service Path
FreeLAN 2.2 – ‘FreeLAN Service’ Unquoted Service Path
# Exploit Title: FreeLAN 2.2 - 'FreeLAN Service' Unquoted Service Path
Golden FTP Server 4.70 – ‘PASS’ Buffer Overflow (2)
# Golden FTP Server 4.70 - 'PASS' Buffer Overflow (2)
Configuration Tool 1.6.53 – ‘OpLclSrv’ Unquoted Service Path
# Exploit Title: Configuration Tool 1.6.53 - 'OpLclSrv' Unquoted Service Path
Print Job Accounting 4.4.10 – ‘OkiJaSvc’ Unquoted Service Path
# Exploit Title: Print Job Accounting 4.4.10 - 'OkiJaSvc' Unquoted Service Path
Pingzapper 2.3.1 – ‘PingzapperSvc’ Unquoted Service Path
# Exploit Title: Pingzapper 2.3.1 - 'PingzapperSvc' Unquoted Service Path
WiFi Mouse 1.7.8.5 – Remote Code Execution
# Exploit Title: WiFi Mouse 1.7.8.5 - Remote Code Execution
Remote Desktop Web Access – Authentication Timing Attack (Metasploit Module)
#!/usr/bin/env python3
ASUS Remote Link 1.1.2.13 – Remote Code Execution
# Exploit: ASUS Remote Link 1.1.2.13 - Remote Code Execution
Product Key Explorer 4.2.7 – ‘multiple’ Denial of Service (PoC)
# Exploit Title: Product Key Explorer 4.2.7 - 'multiple' Denial of Service (PoC)
SpotAuditor 5.3.5 – ‘multiple’ Denial Of Service (PoC)
# Exploit Title: SpotAuditor 5.3.5 - 'multiple' Denial Of Service (PoC)