Softros LAN Messenger 9.6.4 – ‘SoftrosSpellChecker’ Unquoted Service Path
# Exploit Title: Softros LAN Messenger 9.6.4 - 'SoftrosSpellChecker' Unquoted Service Path
windows
windows 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
Unified Remote 3.9.0.2463 – Remote Code Execution
# Exploit Title: Unified Remote 3.9.0.2463 - Remote Code Execution
LogonExpert 8.1 – ‘LogonExpertSvc’ Unquoted Service Path
# Exploit Title: LogonExpert 8.1 - 'LogonExpertSvc' Unquoted Service Path
HFS (HTTP File Server) 2.3.x – Remote Command Execution (3)
# Exploit Title: HFS (HTTP File Server) 2.3.x - Remote Command Execution (3)
dataSIMS Avionics ARINC 664-1 – Local Buffer Overflow (PoC)
# Exploit Title: dataSIMS Avionics ARINC 664-1 - Local Buffer Overflow (PoC)
Nsauditor 3.2.2.0 – ‘Event Description’ Denial of Service (PoC)
# Exploit Title: Nsauditor 3.2.2.0 - 'Event Description' Denial of Service (PoC)
AgataSoft PingMaster Pro 2.1 – Denial of Service (PoC)
# Exploit Title: AgataSoft PingMaster Pro 2.1 - Denial of Service (PoC)
Managed Switch Port Mapping Tool 2.85.2 – Denial of Service (PoC)
# Exploit Title: Managed Switch Port Mapping Tool 2.85.2 - Denial of Service (PoC)
PDFCOMPLETE Corporate Edition 4.1.45 – ‘pdfcDispatcher’ Unquoted Service Path
# Exploit Title: PDFCOMPLETE Corporate Edition 4.1.45 - 'pdfcDispatcher' Unquoted Service Path
AnyTXT Searcher 1.2.394 – ‘ATService’ Unquoted Service Path
# Exploit Title: AnyTXT Searcher 1.2.394 - 'ATService' Unquoted Service Path
Epson USB Display 1.6.0.0 – ‘EMP_UDSA’ Unquoted Service Path
# Exploit Title: Epson USB Display 1.6.0.0 - 'EMP_UDSA' Unquoted Service Path
Microsoft Internet Explorer 11 32-bit – Use-After-Free
# Exploit Title: Microsoft Internet Explorer 11 32-bit - Use-After-Free
Alt-N MDaemon webmail 20.0.0 – ‘file name’ Stored Cross Site Scripting (XSS)
# Exploit Title: Alt-N MDaemon webmail 20.0.0 - 'file name' Stored Cross Site Scripting (XSS)
Alt-N MDaemon webmail 20.0.0 – ‘Contact name’ Stored Cross Site Scripting (XSS)
# Exploit Title: Alt-N MDaemon webmail 20.0.0 - 'Contact name' Stored Cross Site Scripting (XSS)
AMD Fuel Service – ‘Fuel.service’ Unquote Service Path
# Exploit Title: AMD Fuel Service - 'Fuel.service' Unquote Service Path
Millewin 13.39.146.1 – Local Privilege Escalation
# Exploit Title: Millewin 13.39.146.1 - Local Privilege Escalation
Selea CarPlateServer (CPS) 4.0.1.6 – Local Privilege Escalation
# Exploit Title: Selea CarPlateServer (CPS) 4.0.1.6 - Local Privilege Escalation
PortableKanban 4.3.6578.38136 – Encrypted Password Retrieval
# Exploit Title: PortableKanban 4.3.6578.38136 - Encrypted Password Retrieval
PaperStream IP (TWAIN) 1.42.0.5685 – Local Privilege Escalation
# Exploit Title: PaperStream IP (TWAIN) 1.42.0.5685 - Local Privilege Escalation
WinAVR Version 20100110 – Insecure Folder Permissions
# Exploit Title: WinAVR Version 20100110 - Insecure Folder Permissions
IObit Uninstaller 10 Pro – Unquoted Service Path
# Exploit Title: IObit Uninstaller 10 Pro - Unquoted Service Path
Intel(R) Matrix Storage Event Monitor x86 8.0.0.1039 – ‘IAANTMON’ Unquoted Service Path
# Exploit Title: Intel(R) Matrix Storage Event Monitor x86 8.0.0.1039 - 'IAANTMON' Unquoted Service Path
Fluentd TD-agent plugin 4.0.1 – Insecure Folder Permission
# Exploit Title: Fluentd TD-agent plugin 4.0.1 - Insecure Folder Permission
Arteco Web Client DVR/NVR – ‘SessionId’ Brute Force
# Exploit Title: Arteco Web Client DVR/NVR - 'SessionId' Brute Force
Easy CD & DVD Cover Creator 4.13 – Denial of Service (PoC)
# Exploit Title: Easy CD & DVD Cover Creator 4.13 - Denial of Service (PoC)
MiniTool ShadowMaker 3.2 – ‘MTAgentService’ Unquoted Service Path
# Exploit Title: MiniTool ShadowMaker 3.2 - 'MTAgentService' Unquoted Service Path
10-Strike Network Inventory Explorer Pro 9.05 – Buffer Overflow (SEH)
# Exploit Title: 10-Strike Network Inventory Explorer Pro 9.05 - Buffer Overflow (SEH)
Spiceworks 7.5 – HTTP Header Injection
# Exploit Title: Spiceworks 7.5 - HTTP Header Injection
SyncBreeze 10.0.28 – ‘login’ Denial of Service (Poc)
# Exploit Title: SyncBreeze 10.0.28 - 'login' Denial of Service (Poc)
System Explorer 7.0.0 – ‘SystemExplorerHelpService’ Unquoted Service Path
# Exploit Title: System Explorer 7.0.0 - 'SystemExplorerHelpService' Unquoted Service Path
PDF Complete 3.5.310.2002 – ‘pdfsvc.exe’ Unquoted Service Path
# Exploit Title: PDF Complete 3.5.310.2002 - 'pdfsvc.exe' Unquoted Service Path
Huawei HedEx Lite 200R006C00SPC005 – Path Traversal
# Exploit Title: Huawei HedEx Lite 200R006C00SPC005 - Path Traversal
Dup Scout Enterprise 10.0.18 – ‘sid’ Remote Buffer Overflow (SEH)
# Exploit Title: Dup Scout Enterprise 10.0.18 - 'sid' Remote Buffer Overflow (SEH)
SmarterMail Build 6985 – Remote Code Execution
# Exploit Title: SmarterMail Build 6985 - Remote Code Execution
Microsoft GamingServices 2.47.10001.0 – ‘GamingServices’ Unquoted Service Path
# Exploit Title: Microsoft GamingServices 2.47.10001.0 - 'GamingServices' Unquoted Service Path
Druva inSync Windows Client 6.6.3 – Local Privilege Escalation (PowerShell)
# Exploit Title: Druva inSync Windows Client 6.6.3 - Local Privilege Escalation (PowerShell)
Dup Scout Enterprise 10.0.18 – ‘online_registration’ Remote Buffer Overflow
# Dup Scout Enterprise 10.0.18 - 'online_registration' Remote Buffer Overflow
RarmaRadio 2.72.5 – Denial of Service (PoC)
# Exploit Title: RarmaRadio 2.72.5 - Denial of Service (PoC)
TapinRadio 2.13.7 – Denial of Service (PoC)
# Exploit Title: TapinRadio 2.13.7 - Denial of Service (PoC)
Kite 1.2020.1119.0 – ‘KiteService’ Unquoted Service Path
# Exploit Title: Kite 1.2020.1119.0 - 'KiteService' Unquoted Service Path
Rumble Mail Server 0.51.3135 – ‘rumble_win32.exe’ Unquoted Service Path
# Exploit Title: Rumble Mail Server 0.51.3135 - 'rumble_win32.exe' Unquoted Service Path
IDT PC Audio 1.0.6499.0 – ‘STacSV’ Unquoted Service Path
# Exploit Title: IDT PC Audio 1.0.6499.0 - 'STacSV' Unquoted Service Path
Microsoft Windows – Win32k Elevation of Privilege
# Exploit Title: Microsoft Windows - Win32k Elevation of Privilege
Realtek Andrea RT Filters 1.0.64.7 – ‘AERTSr64.EXE’ Unquoted Service Path
# Exploit Title: Realtek Andrea RT Filters 1.0.64.7 - 'AERTSr64.EXE' Unquoted Service Path
IDT PC Audio 1.0.6433.0 – ‘STacSV’ Unquoted Service Path
# Exploit Title: IDT PC Audio 1.0.6433.0 - 'STacSV' Unquoted Service Path
PRTG Network Monitor 20.4.63.1412 – ‘maps’ Stored XSS
# Exploit Title: PRTG Network Monitor 20.4.63.1412 - 'maps' Stored XSS
aSc TimeTables 2021.6.2 – Denial of Service (PoC)
# Exploit Title: aSc TimeTables 2021.6.2 - Denial of Service (PoC)
Intel(r) Management and Security Application 5.2 – User Notification Service Unquoted Service Path
# Exploit Title: Intel(r) Management and Security Application 5.2 - User Notification Service Unquoted Service Path
Pearson Vue VTS 2.3.1911 Installer – VUEApplicationWrapper Unquoted Service Path
# Exploit Title: Pearson Vue VTS 2.3.1911 Installer - VUEApplicationWrapper Unquoted Service Path
Global Registration Service 1.0.0.3 – ‘GREGsvc.exe’ Unquoted Service Path
# Exploit Title: Global Registration Service 1.0.0.3 - 'GREGsvc.exe' Unquoted Service Path