windows

windows 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

Opera 11.52 – Denial of Service (PoC)

## _ (`-') _ (`-') (`-') _ _ ##

2011-10-20 pigtail23 dos

OCS Inventory NG 2.0.1 – Persistent Cross-Site Scripting

OCS Inventory NG 2.0.1 - Persistent XSS (CVE-2011-4024)

2011-10-20 Nicolas DEROUET webapps

Apple Safari Webkit – libxslt Arbitrary File Creation (Metasploit)

##

2011-10-18 Metasploit remote

Real Networks Netzip Classic 7.5.1 86 – File Parsing Buffer Overflow (Metasploit)

##

2011-10-16 Metasploit local

BlueZone Desktop – ‘.zap’ file Local Denial of Service

# Exploit Title: BlueZone Desktop Malformed .zap file Local Denial of Service

2011-10-15 Silent_Dream dos

Microsoft Windows – TCP/IP Stack Denial of Service (MS11-064)

# Exploit Title: MS11-064 : Vulnerabilities in TCP/IP Stack Could

2011-10-15 Byoungyoung Lee dos

PROMOTIC 8.1.3 – Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/50133/info

2011-10-14 Luigi Auriemma remote

Microsys PROMOTIC 8.1.4 – ActiveX GetPromoticSite Unitialized Pointer

#######################################################################

2011-10-13 Luigi Auriemma dos

Microsoft Windows – ‘.fon’ Kernel-Mode Buffer Overrun (PoC) (MS11-077)

# Exploit Title: MS11-077 .fon buffer overrun kernel-mode drivers exploit

2011-10-13 Byoungyoung Lee dos

Mozilla Firefox – ‘Array.reduceRight()’ Integer Overflow (Metasploit) (2)

##

2011-10-13 Metasploit remote

PcVue 10.0 SV.UIGrdCtrl.1 – ‘LoadObject()’/’SaveObject()’ Trusted DWORD (Metasploit)

##

2011-10-12 Metasploit remote

Mozilla Firefox – ‘Array.reduceRight()’ Integer Overflow (1)

# Title: Mozilla Firefox Array.reduceRight() Integer Overflow Exploit

2011-10-12 ryujin remote

Microsoft Internet Explorer 8 – Select Element Memory Corruption

source: https://www.securityfocus.com/bid/49964/info

2011-10-11 Ivan Fratric remote

JBoss AS 2.0 – Remote Command Execution

THE FULL DAYTONA PACKAGE -- BY KINGCOPE, YEAR 2011

2011-10-11 kingcope remote

TugZip 3.5 Archiver – ‘.ZIP’ File Parsing Buffer Overflow (Metasploit)

##

2011-10-11 Metasploit local

GoAhead Web Server 2.18 – ‘adduser.asp’ Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/50039/info

2011-10-10 Silent Dream remote

GoAhead Web Server 2.18 – ‘addlimit.asp?url’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/50039/info

2011-10-10 Silent Dream remote

GoAhead Web Server 2.18 – ‘addgroup.asp?group’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/50039/info

2011-10-10 Silent Dream remote

ACDSee FotoSlate – ‘.PLP’ File ‘id’ Local Overflow (Metasploit)

##

2011-10-10 Metasploit local

OPC Systems.NET 4.00.0048 – Denial of Service

#######################################################################

2011-10-10 Luigi Auriemma dos

IRAI AUTOMGEN 8.0.0.7 – Use-After-Free

#######################################################################

2011-10-10 Luigi Auriemma dos

atvise webMI2ADS Web Server 1.0 – Multiple Vulnerabilities

#######################################################################

2011-10-10 Luigi Auriemma dos

Opera Browser 10/11/12 – ‘SVG Layout’ Memory Corruption (Metasploit)

###############################################################################################################

2011-10-10 Jose A. Vazquez remote

ScriptFTP 3.3 – LIST Remote Buffer Overflow (Metasploit) (2)

##

2011-10-09 Metasploit remote

BlazeVideo HDTV Player 6.6 Professional – Universal ASLR + DEP Bypass

# Exploit Title: BlazeVideo HDTV Player 6.6 Professional (Universal DEP+ASLR Bypass)

2011-10-07 modpr0be local

Opera 10/11 – Bad Nesting with Frameset Tag Memory Corruption (Metasploit)

###############################################################################################################

2011-10-06 Jose A. Vazquez remote

DivX Plus Web Player – ‘file://’ Buffer Overflow (PoC)

# Exploit Title: DivX Plus Web Player "file://" Buffer Overflow Vulnerability PoC ( 0day )

2011-10-05 Snake dos

GenStat 14.1.0.5943 – Multiple Vulnerabilities

#######################################################################

2011-10-04 Luigi Auriemma dos

Cytel Studio 9.0.0 – Multiple Vulnerabilities

#######################################################################

2011-10-04 Luigi Auriemma dos

Google Chrome < 14.0.835.163 - '.pdf' File Handling Memory Corruption

----------------Security Adisory----------------

2011-10-04 Mario Gomes dos

Ashampoo Burning Studio Elements 10.0.9 – ‘.ashprj’ Heap Overflow

#!/usr/bin/perl

2011-10-04 LiquidWorm dos

Adobe Photoshop Elements 8.0 – Multiple Arbitrary Code Execution Vulnerabilities

Title:

2011-10-02 LiquidWorm dos

ScriptFTP 3.3 – Remote Buffer Overflow (Metasploit)

#Exploit Title: ScriptFTP 3.3 Remote Buffer Overflow (MSF)

2011-09-29 otoy remote

NCSS 07.1.21 – Array Overflow with Write2

#######################################################################

2011-09-29 Luigi Auriemma dos

Norman Security Suite 8 – ‘nprosec.sys’ Local Privilege Escalation

#include

2011-09-28 Xst3nZ local

ServersCheck Monitoring Software 8.8.x – Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/49793/info

2011-09-27 Vulnerability-Lab remote

PcVue 10.0 – Multiple Vulnerabilities

#######################################################################

2011-09-27 Luigi Auriemma dos

GTA SA-MP server.cfg – Local Buffer Overflow

# GTA SA-MP server.cfg Local Buffer Overflow Vulnerability (0day)

2011-09-26 Silent_Dream local

Muse Music All-in-One 1.5.0.001 – ‘.pls’ Local Buffer Overflow (DEP Bypass)

#!/usr/bin/perl

2011-09-26 C4SS!0 G0M3S local

GMER 1.0.15.15641 – MFT Overwrite

#include

2011-09-26 Heurs dos

Sterling Trader 7.0.2 – Integer Overflow

#######################################################################

2011-09-26 Luigi Auriemma dos

Freefloat FTP Server – Remote Buffer Overflow (DEP Bypass)

#!/usr/bin/python

2011-09-23 blake remote

sunway ForceControl 6.1 sp3 – Multiple Vulnerabilities

#######################################################################

2011-09-23 Luigi Auriemma dos

Cogent Datahub 7.1.1.63 – Remote Unicode Buffer Overflow

#!/usr/bin/python

2011-09-22 mr_me remote

MetaServer RT 3.2.1.450 – Multiple Vulnerabilities

#######################################################################

2011-09-21 Luigi Auriemma dos

EViews 7.0.0.1 (aka 7.2) – Multiple Vulnerabilities

#######################################################################

2011-09-21 Luigi Auriemma dos

IBM Lotus Domino 8.5.2 – ‘NSFComputeEvaluateExt()’ Remote Stack Buffer Overflow

source: https://www.securityfocus.com/bid/49705/info

2011-09-20 rmallof remote

eSignal and eSignal Pro 10.6.2425.1208 – File Parsing Buffer Overflow in QUO (Metasploit)

##

2011-09-20 Metasploit local

AVCon – DEP Bypass

# DEP Bypass for OptIn/OptOut

2011-09-20 blake local

ScriptFTP 3.3 – Remote Buffer Overflow (LIST) (1)

# Exploit Title: ScriptFTP

2011-09-20 modpr0be remote