SharePoint 2007/2010 and DotNetNuke < 6 - File Disclosure (via XEE)
Exploit Title: File disclosure via XEE in SharePoint and DotNetNuke
windows
windows 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
KnFTP 1.0.0 Server – ‘USER’ Remote Buffer Overflow
# Exploit Title: KnFTP 1.0.0 Server - Remote Buffer Overflow Exploit,'USER' command
KnFTP 1.0.0 Server – Multiple Buffer Overflows (PoC) (SEH)
#!/usr/bin/python
MY MP3 Player 3.0 – ‘.m3u’ DEP Bypass
# written to bypass OptIn/OptOut DEP policy
Mini-stream Ripper 2.9.7 – DEP Bypass
# written to bypass OptIn/OptOut DEP policy
Measuresoft ScadaPro 4.0.0 – Multiple Vulnerabilities
#######################################################################
Rockwell RSLogix 19 – Denial of Service
#######################################################################
progea movicon / powerhmi 11.2.1085 – Multiple Vulnerabilities
#######################################################################
DaqFactory 5.85 build 1853 – Stack Overflow
#######################################################################
Cogent DataHub 7.1.1.63 – Source Disclosure
#######################################################################
Cogent DataHub 7.1.1.63 – Integer Overflow
#######################################################################
Cogent DataHub 7.1.1.63 – Stack Overflow
#######################################################################
eSignal and eSignal Pro 10.6.2425.1208 – Multiple Vulnerabilities
#######################################################################
Equis MetaStock 11 – Use-After-Free
#######################################################################
Beckhoff TwinCAT 2.11.0.2004 – Denial of Service
#######################################################################
Carel PlantVisor 2.4.4 – Directory Traversal
#######################################################################
Microsoft WINS – ECommEndDlg Input Validation Error (MS11-035/MS11-070)
Core Security - Corelabs Advisory
Microsoft WINS Service 5.2.3790.4520 – Memory Corruption (MS11-035)
#######################################################################
Wav Player 1.1.3.6 – ‘.pll’ Local Buffer Overflow
# Exploit Title: wav player 1.1.3.6 .pll Buffer Overflow
Aika 0.2 – colladaconverter Xml Parsing Buffer Overflow
//////////////////////////////////////////////////////////////////////////////////////////////////////////////////////
KnFTP Server – Remote Buffer Overflow
#!/usr/bin/python
MelOn Player 1.0.11.x – Denial of Service (PoC)
# Exploit Title: MelOn Player 1.0.11.x Denial of Service POC
BisonWare BisonFTP Server 3.5 – Remote Buffer Overflow (Metasploit)
##############################################################################
Wireshark 1.6.1 – Malformed Packet Trace File Remote Denial of Service
source: https://www.securityfocus.com/bid/49521/info
Apple QuickTime 7.6.9 – ‘QuickTimePlayer.dll’ ActiveX Buffer Overflow
source: https://www.securityfocus.com/bid/49465/info
DVD X Player 5.5 Pro – Overwrite (SEH)
# DVD X Player 5.5 Pro
Cerberus FTP Server 4.0.9.8 – Remote Buffer Overflow
source: https://www.securityfocus.com/bid/49444/info
ZipX 1.71 – ‘.ZIP’ File Buffer Overflow
#!/usr/bin/perl
CoolPlayer Portable 2.19.2 – Local Buffer Overflow (ASLR Bypass) (1)
# Buffer overflow that bypasses ASLR by using a non-aslr module
BroadWin Webaccess Client – Multiple Vulnerabilities
Application: BroadWin WebAccess Client
NetSaro Enterprise Messenger 2.0 – Multiple Vulnerabilities
===================================================
MapServer 6.0 – ‘.Map’ File Double-Free Remote Denial of Service
source: https://www.securityfocus.com/bid/49374/info
DVD X Player 5.5.0 Professional / Standard – ‘.plf’ File Universal (ASLR + DEP Bypass)
// # Author: sickness
DVD X Player 5.5 Professional – ‘.plf’ Universal Buffer Overflow
#!/usr/bin/perl
Mini-stream Ripper 2.9.7.273 – ‘.m3u’ Universal Buffer Overflow
#!/usr/bin/perl
Mini FTP Server 1.1 – Buffer Corruption Remote Denial of Service
#!/usr/bin/python