windows

windows 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

R2/Extreme 1.65 – Stack Buffer Overflow / Directory Traversal

source: https://www.securityfocus.com/bid/52061/info

2012-02-17 Luigi Auriemma remote

pcAnywhere 12.5.0 build 463 – Denial of Service

#!/usr/bin/python

2012-02-17 Johnathan Norman dos

xnview 1.98.5 – Multiple Vulnerabilities

#######################################################################

2012-02-16 Luigi Auriemma dos

Novell Groupwise Messenger Client 2.1.0 – Unicode Stack Overflow

#######################################################################

2012-02-16 Luigi Auriemma dos

Novell Groupwise Messenger 2.1.0 – Memory Corruption

#######################################################################

2012-02-16 Luigi Auriemma dos

Novell Groupwise Messenger 2.1.0 – Arbitrary Memory Corruption

#######################################################################

2012-02-16 Luigi Auriemma dos

Java MixerSequencer Object – GM_Song Structure Handling (Metasploit)

##

2012-02-16 Metasploit remote

jetVideo 8.0.2 – Denial of Service

# Exploit Title: [jetVideo Crash Exploit]

2012-02-10 Senator of Pirates dos

Adobe Flash Player – MP4 SequenceParameterSetNALUnit Buffer Overflow (Metasploit)

##

2012-02-10 Metasploit remote

Citrix Provisioning Services 5.6 SP1 – Streamprocess Opcode 0x40020000 Buffer Overflow (Metasploit)

##

2012-02-10 Metasploit remote

Sysax Multi Server 5.52 – File Rename Buffer Overflow Remote Code Execution (Egghunter)

#!/usr/bin/python

2012-02-09 Craig Freyman remote

PeerBlock 1.1 – Blue Screen of Death

-----BEGIN PGP SIGNED MESSAGE-----

2012-02-09 shinnai dos

TORCS 1.3.2 – ‘.xml’ File Buffer Overflow /SafeSEH Evasion

# Author: Andres Gomez and David Mora (a.k.a Mighty-D) ... Pwn and beans!

2012-02-08 Andres Gomez & David Mora local

TYPSoft FTP Server 1.10 – Multiple Denial of Service Vulnerabilities

#!/usr/bin/perl

2012-02-07 Balazs Makany dos

Edraw Diagram Component 5 – ActiveX Control ‘LicenseName()’ Method Buffer Overflow

source: https://www.securityfocus.com/bid/51866/info

2012-02-06 Senator of Pirates dos

PDF Viewer Component – ActiveX Denial of Service

Title : PDF Viewer Component ActiveX DoS

2012-02-05 Senator of Pirates dos

Edraw Diagram Component 5 – ActiveX Buffer Overflow (Denial of Service) (PoC)

Author : Senator of Pirates

2012-02-04 Senator of Pirates dos

NetSarang Xlpd Printer Daemon 4 – Denial of Service

##############################################################################

2012-02-02 SecPod Research dos

OfficeSIP Server 3.1 – Denial of Service

##############################################################################

2012-02-02 SecPod Research dos

Sphinix Mobile Web Server 3.1.2.47 – Multiple Persistent Cross-Site Scripting Vulnerabilities

##############################################################################

2012-02-02 SecPod Research webapps

Icona SpA C6 Messenger – DownloaderActiveX Control Arbitrary File Download and Execute (Metasploit)

##

2012-02-02 Metasploit remote

Sunway ForceControl – SNMP ‘NetDBServer.exe’ Opcode 0x57 (Metasploit)

##

2012-02-02 Metasploit remote

EdrawSoft Office Viewer Component ActiveX 5.6 – ‘officeviewermme.ocx’ Buffer Overflow (PoC)

EdrawSoft Office Viewer Component ActiveX 5.6 (officeviewermme.ocx) BoF PoC

2012-01-31 LiquidWorm dos

Adobe Flash Player – MP4 SequenceParameterSetNALUnit Remote Code Execution

# Abysssec Public Exploit

2012-01-31 Abysssec remote

Tracker Software pdfSaver ActiveX 3.60 – ‘pdfxctrl.dll’ Stack Buffer Overflow (SEH) (PoC)

Tracker Software pdfSaver ActiveX 3.60 (pdfxctrl.dll) Stack Buffer Overflow (SEH)

2012-01-29 LiquidWorm dos

Microsoft Windows – midiOutPlayNextPolyEvent Heap Overflow (MS12-004) (Metasploit)

##

2012-01-28 Metasploit remote

HP Diagnostics Server – ‘magentservice.exe’ Remote Overflow (Metasploit)

require 'msf/core'

2012-01-27 Metasploit remote

Sysax Multi Server 5.50 – Create Folder Remote Code Execution Buffer Overflow (Metasploit)

##########################################################################################################

2012-01-26 Craig Freyman remote

UltraPlayer 2.112 – ‘.avi’ File Denial of Service

source: https://www.securityfocus.com/bid/51652/info

2012-01-24 KedAns-Dz dos

Savant Web Server 3.1 – Denial of-Service (PoC)

#!/usr/bin/python

2012-01-22 DDD004 dos

Savant Web Server 3.1 – Remote Buffer Overflow (4)

source: https://www.securityfocus.com/bid/51607/info

2012-01-21 red-dragon remote

Savant Web Server 3.1 – Remote Buffer Overflow (Egghunter)

#!/usr/bin/python

2012-01-21 red-dragon remote

VideoLAN VLC Media Player 1.2.0 – ‘libtaglib_pluggin.dll’ Denial of Service

import binascii

2012-01-20 Mitchell Adair dos

Avaya WinPDM UniteHostRouter 3.8.2 – Remote Command Execution

# Abysssec Public Exploit

2012-01-20 Abysssec remote

HP OpenView Network Node Manager – ‘ov.dll’ _OVBuildPath Buffer Overflow (Metasploit)

##

2012-01-20 Metasploit remote

Sysax Multi Server 5.50 – Create Folder Buffer Overflow

#!/usr/bin/python

2012-01-18 Craig Freyman remote

HP Easy Printer Care – XMLCacheMgr Class ActiveX Control Remote Code Execution (Metasploit)

##

2012-01-18 Metasploit remote

McAfee SaaS MyCioScan ShowReport – Remote Command Execution (Metasploit)

##

2012-01-17 Metasploit remote

BS.Player 2.57 – Local Buffer Overflow (SEH Unicode) (Metasploit)

##

2012-01-17 Metasploit local

Microsoft Windows – Assembly Execution (MS12-005)

# Exploit Title: MS12-005 : Microsoft Windows Assembly Execution Vulnerability

2012-01-14 Byoungyoung Lee local

XAMPP – WebDAV PHP Upload (Metasploit)

##

2012-01-14 Metasploit remote

Adobe Reader – U3D Memory Corruption (Metasploit)

##

2012-01-14 Metasploit local

Microsoft Internet Explorer – JavaScript OnLoad Handler Remote Code Execution (MS05-054) (Metasploit)

##

2012-01-14 Metasploit remote

GreenBrowser 6.0.1002 – Search Bar Short Cut Button Double-Free Remote Memory Corruption

source: https://www.securityfocus.com/bid/51393/info

2012-01-12 NCNIPC remote

WorldMail IMAPd 3.0 – Remote Overflow (SEH) (Egghunter)

#!/usr/bin/env python

2012-01-12 TheXero remote

ExpressView Browser Plugin 6.5.0.3330 – Multiple Integer Overflow / Remote Code Execution Vulnerabilities

source: https://www.securityfocus.com/bid/51367/info

2012-01-11 Luigi Auriemma remote

Microsoft AntiXSS 3/4.0 Library Sanitization Module – Security Bypass

source: https://www.securityfocus.com/bid/51291/info

2012-01-10 Adi Cohen remote

Blade API Monitor 3.6.9.2 – Unicode Stack Buffer Overflow

# Exploit Title: Blade API Monitor Unicode Stack Buffer Overflow (the serial number!!)

2012-01-10 FullMetalFouad local

TFTP Server 1.4 – ST ‘RRQ’ Remote Buffer Overflow

#!/usr/bin/python

2012-01-10 b33f remote

GPSMapEdit 1.1.73.2 – ‘.lst’ Local Denial of Service

#!/usr/bin/python

2012-01-09 Julien Ahrens dos