Wondershare Application Framework Service 2.4.3.231 – ‘WsAppService’ Unquote Service Path
# Exploit Title: Wondershare Application Framework Service 2.4.3.231 - 'WsAppService' Unquote Service Path
local
local 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
Acronis True Image OEM 19.0.5128 – ‘afcdpsrv’ Unquoted Service Path
# Exploit Title: Acronis True Image OEM 19.0.5128 - 'afcdpsrv' Unquoted Service Path
XML Notepad 2.8.0.4 – XML External Entity Injection
# Exploit Title: XML Notepad 2.8.0.4 - XML External Entity Injection
Alps HID Monitor Service 8.1.0.10 – ‘ApHidMonitorService’ Unquote Service Path
# Exploit Title: Alps HID Monitor Service 8.1.0.10 - 'ApHidMonitorService' Unquote Service Path
_GCafé 3.0 – ‘gbClienService’ Unquoted Service Path
# Exploit Title: _GCafé 3.0 - 'gbClienService' Unquoted Service Path
SolarWinds Kiwi Syslog Server 8.3.52 – ‘Kiwi Syslog Server’ Unquoted Service Path
# Exploit Title: SolarWinds Kiwi Syslog Server 8.3.52 - 'Kiwi Syslog Server' Unquoted Service Path
Adaware Web Companion version 4.8.2078.3950 – ‘WCAssistantService’ Unquoted Service Path
# Exploit Title: Adaware Web Companion version 4.8.2078.3950 - 'WCAssistantService' Unquoted Service Path
QNAP NetBak Replicator 4.5.6.0607 – ‘QVssService’ Unquoted Service Path
# Exploit Title: QNAP NetBak Replicator 4.5.6.0607 - 'QVssService' Unquoted Service Path
Wacom WTabletService 6.6.7-3 – ‘WTabletServicePro’ Unquoted Service Path
# Exploit Title: Wacom WTabletService 6.6.7-3 - 'WTabletServicePro' Unquoted Service Path
Network Inventory Advisor 5.0.26.0 – ‘niaservice’ Unquoted Service Path
# Exploit Title: Network Inventory Advisor 5.0.26.0 - 'niaservice' Unquoted Service Path
Blue Stacks App Player 2.4.44.62.57 – “BstHdLogRotatorSvc” Unquote Service Path
# Exploit Title: Blue Stacks App Player 2.4.44.62.57 - "BstHdLogRotatorSvc" Unquote Service Path
Launch Manager 6.1.7600.16385 – ‘DsiWMIService’ Unquoted Service Path
# Title: Launch Manager 6.1.7600.16385 'DsiWMIService' Unquoted Service Path
OpenVPN Connect 3.0.0.272 – ‘agent_ovpnconnect’ Unquoted Service Path
# Exploit Title: OpenVPN Connect 3.0.0.272 - 'ovpnagent' Unquoted Service Path
Aida64 6.10.5200 – Buffer Overflow (SEH)
# Exploit Title: Aida64 6.10.5200 - Buffer Overflow (SEH)
DOUBLEPULSAR (x64) – Hooking ‘srv!SrvTransactionNotImplemented’ in ‘srv!SrvTransaction2DispatchTable’
EDB Download ~ https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/47685.zip
ClamAV < 0.102.0 - 'bytecode_vm' Code Execution
#!/usr/bin/python
OpenVPN Private Tunnel 2.8.4 – ‘ovpnagent’ Unquoted Service Path
# Title: OpenVPN Private Tunnel 2.8.4 - 'ovpnagent' Unquoted Service Path
WMV to AVI MPEG DVD WMV Convertor 4.6.1217 – Buffer OverFlow (SEH)
# Exploit Title: WMV to AVI MPEG DVD WMV Convertor 4.6.1217 - Buffer OverFlow (SEH)
Intelligent Security System SecurOS Enterprise 10.2 – ‘SecurosCtrlService’ Unquoted Service Path
# Exploit Title: Intelligent Security System SecurOS Enterprise 10.2 - 'SecurosCtrlService' Unquoted Service Path
ChaosPro 2.0 – Buffer Overflow (SEH)
# Exploit Title: ChaosPro 2.0 - Buffer Overflow (SEH)
JumpStart 0.6.0.0 – ‘jswpbapi’ Unquoted Service Path
# Exploit Title: JumpStart 0.6.0.0 - 'jswpbapi' Unquoted Service Path
IObit Uninstaller 9.1.0.8 – ‘IObitUnSvr’ Unquoted Service Path
# Title: IObit Uninstaller 9.1.0.8 - 'IObitUnSvr' Unquoted Service Path
Solaris 11.4 – xscreensaver Privilege Escalation
@Mediaservice.net Security Advisory #2019-02 (last updated on 2019-10-16)
Trend Micro Anti-Threat Toolkit 1.62.0.1218 – Remote Code Execution
# Exploit Title: Trend Micro Anti-Threat Toolkit 1.62.0.1218 - Remote Code Execution
Winrar 5.80 – XML External Entity Injection
# Exploit Title: winrar 5.80 - XML External Entity Injection
WorkgroupMail 7.5.1 – ‘WorkgroupMail’ Unquoted Service Path
# Exploit Title : WorkgroupMail 7.5.1 - 'WorkgroupMail' Unquoted Service Path
Web Companion versions 5.1.1035.1047 – ‘WCAssistantService’ Unquoted Service Path
# Exploit Title: Web Companion versions 5.1.1035.1047 - 'WCAssistantService' Unquoted Service Path
BlackMoon FTP Server 3.1.2.1731 – ‘BMFTP-RELEASE’ Unquoted Serive Path
# Exploit Title: BlackMoon FTP Server 3.1.2.1731 - 'BMFTP-RELEASE' Unquoted Serive Path
Mikogo 5.2.2.150317 – ‘Mikogo-Service’ Unquoted Serive Path
# Exploit Title : Mikogo 5.2.2.150317 - 'Mikogo-Service' Unquoted Serive Path
Solaris xscreensaver 11.4 – Privilege Escalation
# Exploit Title: Solaris xscreensaver 11.4 - Privilege Escalation
LiteManager 4.5.0 – ‘romservice’ Unquoted Serive Path
# Exploit Title : LiteManager 4.5.0 - 'romservice' Unquoted Serive Path
X.Org X Server 1.20.4 – Local Stack Overflow
# Exploit Title: X.Org X Server 1.20.4 - Local Stack Overflow
Zilab Remote Console Server 3.2.9 – ‘zrcs’ Unquoted Service Path
# Exploit Title : Zilab Remote Console Server 3.2.9 - 'zrcs' Unquoted Service Path
Lavasoft 2.3.4.7 – ‘LavasoftTcpService’ Unquoted Service Path
# Lavasoft 2.3.4.7 - 'LavasoftTcpService' Unquoted Service Path
ActiveFax Server 6.92 Build 0316 – ‘ActiveFaxServiceNT’ Unquoted Service Path
# Exploit Title : ActiveFax Server 6.92 Build 0316 - 'ActiveFaxServiceNT' Unquoted Service Path
sudo 1.8.27 – Security Bypass
# Exploit Title : sudo 1.8.27 - Security Bypass
Uplay 92.0.0.6280 – Local Privilege Escalation
# Exploit Title: Uplay 92.0.0.6280 - Local Privilege Escalation
National Instruments Circuit Design Suite 14.0 – Local Privilege Escalation
# Exploit Title: National Instruments Circuit Design Suite 14.0 - Local Privilege Escalation
DeviceViewer 3.12.0.1 – ‘add user’ Local Buffer Overflow (DEP Bypass)
# Exploit Title: Sricam DeviceViewer 3.12.0.1 - 'add user' Local Buffer Overflow (DEP Bypass)
DeviceViewer 3.12.0.1 – Arbitrary Password Change
# Exploit Title: DeviceViewer 3.12.0.1 - Arbitrary Password Change
CheckPoint Endpoint Security Client/ZoneAlarm 15.4.062.17802 – Privilege Escalation
# Exploit Title: CheckPoint Endpoint Security Client/ZoneAlarm 15.4.062.17802 - Privilege Escalation
ASX to MP3 converter 3.1.3.7 – ‘.asx’ Local Stack Overflow (DEP)
# Exploit Title: ASX to MP3 converter 3.1.3.7 - '.asx' Local Stack Overflow (DEP)
logrotten 3.15.1 – Privilege Escalation
# Exploit Title: logrotten 3.15.1 - Privilege Escalation
Android – Binder Driver Use-After-Free
The following issue exists in the android-msm-wahoo-4.4-pie branch of https://android.googlesource.com/kernel/msm (an...
DameWare Remote Support 12.1.0.34 – Buffer Overflow (SEH)
#!/usr/bin/env python
Mobatek MobaXterm 12.1 – Buffer Overflow (SEH)
# Title: Mobatek MobaXterm 12.1 - Buffer Overflow (SEH)