local

local 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

MyVideoConverter Pro 3.14 – ‘Movie’ Buffer Overflow

#Exploit Title: MyVideoConverter Pro 3.14 - 'Movie' Buffer Overflow

2020-02-12 ZwX local

Wedding Slideshow Studio 1.36 – ‘Name’ Buffer Overflow

#Exploit Title: Wedding Slideshow Studio 1.36 - 'Name' Buffer Overflow

2020-02-11 ZwX local

Disk Savvy Enterprise 12.3.18 – Unquoted Service Path

Exploit Title: Disk Savvy Enterprise 12.3.18 - Unquoted Service Path

2020-02-11 boku local

Disk Sorter Enterprise 12.4.16 – ‘Disk Sorter Enterprise’ Unquoted Service Path

Exploit Title: Disk Sorter Enterprise 12.4.16 - 'Disk Sorter Enterprise' Unquoted Service Path

2020-02-11 boku local

DVD Photo Slideshow Professional 8.07 – ‘Name’ Buffer Overflow

#Exploit Title: DVD Photo Slideshow Professional 8.07 - 'Name' Buffer Overflow

2020-02-11 ZwX local

Sync Breeze Enterprise 12.4.18 – ‘Sync Breeze Enterprise’ Unquoted Service Path

Exploit Title: Sync Breeze Enterprise 12.4.18 - 'Sync Breeze Enterprise' Unquoted Service Path

2020-02-11 boku local

FreeSSHd 1.3.1 – ‘FreeSSHDService’ Unquoted Service Path

Exploit Title: FreeSSHd 1.3.1 - 'FreeSSHDService' Unquoted Service Path

2020-02-11 boku local

freeFTPd v1.0.13 – ‘freeFTPdService’ Unquoted Service Path

Exploit Title: freeFTPd v1.0.13 - 'freeFTPdService' Unquoted Service Path

2020-02-11 boku local

DVD Photo Slideshow Professional 8.07 – ‘Key’ Buffer Overflow

#Exploit Title: DVD Photo Slideshow Professional 8.07 - 'Key' Buffer Overflow

2020-02-11 ZwX local

Torrent iPod Video Converter 1.51 – Stack Overflow

# Exploit Title: Torrent iPod Video Converter 1.51 - Stack Overflow

2020-02-11 boku local

Ricoh Driver – Privilege Escalation (Metasploit)

##

2020-02-10 Metasploit local

Wedding Slideshow Studio 1.36 – ‘Key’ Buffer Overflow

#Exploit Title: Wedding Slideshow Studio 1.36 - 'Key' Buffer Overflow

2020-02-10 ZwX local

Windscribe – WindscribeService Named Pipe Privilege Escalation (Metasploit)

##

2020-02-07 Metasploit local

Sudo 1.8.25p – ‘pwfeedback’ Buffer Overflow

#!/bin/bash

2020-02-06 Dylan Katz local

ELAN Smart-Pad 11.10.15.1 – ‘ETDService’ Unquoted Service Path

#Exploit Title: ELAN Smart-Pad 11.10.15.1 - 'ETDService' Unquoted Service Path

2020-02-06 ZwX local

xglance-bin 11.00 – Privilege Escalation

# Exploit Title: xglance-bin 11.00 - Privilege Escalation

2020-02-05 redtimmysec local

Socat 1.7.3.4 – Heap-Based Overflow (PoC)

# Exploit Title: Socat 1.7.3.4 - Heap Based Overflow (PoC)

2020-02-05 hieubl local

PHP 7.0 < 7.4 (Unix) - 'debug_backtrace' disable_functions Bypass

2020-01-30 mm0r1 local

Microsoft Windows Media Center WMV / WMA 6.3.9600.16384 – Code Execution

# Exploit Title: Microsoft Windows Media Center WMV or WMA 6.3.9600.16384 - Code Execution

2020-01-30 Eduardo Braun Prado local

Microsoft Windows 10 – Theme API ‘ThemePack’ File Parsing

# Exploit Title: Microsoft Windows 10 - Theme API 'ThemePack' File Parsing

2020-01-29 Eduardo Braun Prado local

XMLBlueprint 16.191112 – XML External Entity Injection

# Exploit Title: XMLBlueprint 16.191112 - XML External Entity Injection

2020-01-29 Javier Olmedo local

Microsoft Windows Kernel – Information Disclosure

# PoC for the SWAPGS attack ([CVE-2019-1125](https://nvd.nist.gov/vuln/detail/CVE-2019-1125))

2020-01-27 Bitdefender local

Torrent 3GP Converter 1.51 – Stack Overflow (SEH)

# Exploit Title: Torrent 3GP Converter 1.51 - Stack Overflow (SEH)

2020-01-27 boku local

Reliable Datagram Sockets (RDS) – rds_atomic_free_op NULL pointer dereference Privilege Escalation (Metasploit)

##

2020-01-23 Metasploit local

Ricoh Printer Drivers – Local Privilege Escalation

This proof of concept code monitors file changes on Ricoh's driver DLL files and overwrites

2020-01-22 pentagrid local

NEOWISE CARBONFTP 1.4 – Weak Password Encryption

# Exploit Title: NEOWISE CARBONFTP 1.4 - Weak Password Encryption

2020-01-21 hyp3rlinx local

Easy XML Editor 1.7.8 – XML External Entity Injection

# Exploit Title: Easy XML Editor 1.7.8 - XML External Entity Injection

2020-01-20 Javier Olmedo local

Plantronics Hub 3.13.2 – SpokesUpdateService Privilege Escalation (Metasploit)

##

2020-01-17 Metasploit local

Trend Micro Maximum Security 2019 – Privilege Escalation

# Exploit Title: Trend Micro Maximum Security 2019 - Privilege Escalation

2020-01-17 hyp3rlinx local

Trend Micro Maximum Security 2019 – Arbitrary Code Execution

# Exploit Title: Trend Micro Maximum Security 2019 - Arbitrary Code Execution

2020-01-17 hyp3rlinx local

Torrent FLV Converter 1.51 Build 117 – Stack Oveflow (SEH partial overwrite)

# Exploit Title: Torrent FLV Converter 1.51 Build 117 - Stack Oveflow (SEH partial overwrite)

2020-01-17 antonio local

SunOS 5.10 Generic_147148-26 – Local Privilege Escalation

# Exploit: SunOS 5.10 Generic_147148-26 - Local Privilege Escalation

2020-01-16 Marco Ivaldi local

Microsoft Windows – CryptoAPI (Crypt32.dll) Elliptic Curve Cryptography (ECC) Spoof Code-Signing Certificate

# EDB Note ~ Download: https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/47933.zip

2020-01-15 Oliver Lyak local

VPN unlimited 6.1 – Unquoted Service Path

# Exploit Title: VPN unlimited 6.1 - Unquoted Service Path

2020-01-14 Amin Rawah local

Microsoft Windows 10 build 1809 – Local Privilege Escalation (UAC Bypass)

# Exploit Title: Microsoft Windows 10 - Local Privilege Escalation (UAC Bypass)

2020-01-13 Nassim Asrir local

Allok RM RMVB to AVI MPEG DVD Converter 3.6.1217 – Stack Overflow (SEH)

# Exploit Title: Allok RM RMVB to AVI MPEG DVD Converter 3.6.1217 - Stack Overflow (SEH)

2020-01-13 antonio local

Allok Video Converter 4.6.1217 – Stack Overflow (SEH)

# Exploit Title: Allok Video Converter 4.6.1217 - Stack Overflow (SEH)

2020-01-13 antonio local

Advanced System Repair Pro 1.9.1.7 – Insecure File Permissions

# Exploit Title: Advanced System Repair Pro 1.9.1.7 - Insecure File Permissions

2020-01-13 ZwX local

TotalAV 2020 4.14.31 – Privilege Escalation

# Exploit Title: TotalAV 2020 4.14.31 - Privilege Escalation

2020-01-10 Kusol Watchara-Apanukorn local

MSN Password Recovery 1.30 – XML External Entity Injection

# Exploit Title: MSN Password Recovery 1.30 - XML External Entity Injection

2020-01-09 ZwX local

Microsoft Windows 10 (19H1 1901 x64) – ‘ws2ifsl.sys’ Use After Free Local Privilege Escalation (kASLR kCFG SMEP)

The exploit works on 19H1.

2020-01-07 bluefrostsec local

AnyDesk 5.4.0 – Unquoted Service Path

# Exploit Title: AnyDesk 5.4.0 - Unquoted Service Path

2020-01-07 SajjadBnd local

Adaware Web Companion 4.9.2159 – ‘WCAssistantService’ Unquoted Service Path

#Exploit Title: Adaware Web Companion 4.9.2159 - 'WCAssistantService' Unquoted Service Path

2020-01-06 ZwX local

Plantronics Hub 3.13.2 – Local Privilege Escalation

# Exploit Title: Plantronics Hub 3.13.2 - Local Privilege Escalation

2020-01-03 Markus local

Microsoft Windows – Shell COM Server Registrar Local Privilege Escalation

// Axel '0vercl0k' Souchet - December 28 2019

2020-01-02 0vercl0k local

Microsoft Windows .Group File – Code Execution

# Exploit Title: Microsoft Windows .Group File - Code Execution

2020-01-01 hyp3rlinx local

NextVPN v4.10 – Insecure File Permissions

# Exploit Title: NextVPN v4.10 - Insecure File Permissions

2019-12-31 SajjadBnd local

FreeBSD-SA-19:15.mqueuefs – Privilege Escalation

# Exploit: FreeBSD-SA-19:15.mqueuefs - Privilege Escalation

2019-12-30 Karsten König local

FreeBSD-SA-19:02.fd – Privilege Escalation

# Exploit: FreeBSD-SA-19:02.fd - Privilege Escalation

2019-12-30 Karsten König local

Domain Quester Pro 6.02 – Stack Overflow (SEH)

# Exploit Title: Domain Quester Pro 6.02 - Stack Overflow (SEH)

2019-12-30 boku local