Download Accelerator Plus (DAP) 10.0.6.0 – SEH Buffer Overflow
#!/usr/bin/python #
local
local 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
River Past Cam Do 3.7.6 – ‘Activation Code’ Local Buffer Overflow
#!/usr/bin/python -w
AllPlayer 7.4 – SEH Buffer Overflow (Unicode)
#!/usr/bin/python -w
FlexHEX 2.71 – SEH Buffer Overflow (Unicode)
#!/usr/bin/python -w
AIDA64 Extreme 5.99.4900 – ‘Logging’ SEH Buffer Overflow
#!/usr/bin/python #
AIDA64 Engineer 5.99.4900 – ‘Load from file’ Field Buffer Overflow (SEH)
#!/usr/bin/python
AIDA64 Business 5.99.4900 – SEH Buffer Overflow (EggHunter)
#!/usr/bin/python #
Base64 Decoder 1.1.2 – Local Buffer Overflow (SEH Egghunter)
#!/usr/bin/env python
VMware Workstation 14.1.5 / VMware Player 15 – Host VMX Process COM Class Hijack Privilege Escalation
VMware: Host VMX Process COM Class Hijack EoP
VMware Workstation 14.1.5 / VMware Player 15.0.2 – Host VMX Process Impersonation Hijack Privilege Escalation
VMware: Host VMX Process Impersonation Hijack EoP
X-NetStat Pro 5.63 – Local Buffer Overflow
#!/usr/bin/env python
DVD X Player 5.5.3 – ‘.plf’ Buffer Overflow
#!/usr/bin/env python
NetShareWatcher 1.5.8.0 – Local SEH Buffer Overflow
# Exploit Title: NetShareWatcher 1.5.8.0 - SEH Buffer Overflow
Advanced Host Monitor 11.92 beta – Local Buffer Overflow
#!/usr/bin/env python
Microsoft Windows MSHTML Engine – ‘Edit’ Remote Code Execution
# Exploit Title: Microsoft Windows (CVE-2019-0541) MSHTML Engine "Edit" Remote Code Execution Vulnerability
NetSetMan 4.7.1 – Local Buffer Overflow (SEH Unicode)
#Exploit Title: NetSetMan 4.7.1 - Local Buffer Overflow (SEH Unicode)
Sony Playstation 4 (PS4) < 6.20 - WebKit Code Execution (PoC)
PS4 6.20 WebKit Code Execution PoC
Cisco WebEx Meetings < 33.6.6 / < 33.9.1 - Privilege Escalation
SecureAuth - SecureAuth Labs Advisory
WinRAR 5.61 – Path Traversal
#!/usr/bin/env python3
RealTerm Serial Terminal 2.0.0.70 – ‘Echo Port’ Buffer Overflow (SEH)
# Exploit Title: RealTerm: Serial Terminal 2.0.0.70 - 'Echo Port' Buffer Overflow - (SEH)
Memu Play 6.0.7 – Privilege Escalation
# Exploit Title: Memu Play 6.0.7 - Privilege Escalation (PoC)
MaxxAudio Drivers WavesSysSvc64.exe 1.6.2.0 – Local Privilege Escalation
# Exploit Title: MaxxAudio Drivers WavesSysSvc64.exe File Permissions SYSTEM Privilege Escalation
exacqVision ESM 5.12.2 – Privilege Escalation
# Exploit Title: exacqVision ESM 5.12.2 - Privilege Escalation
runc < 1.0-rc6 (Docker < 18.09.2) - Container Breakout (2)
## CVE-2019-5736 ##
snapd < 2.37 (Ubuntu) - 'dirty_sock' Local Privilege Escalation (2)
#!/usr/bin/env python3
snapd < 2.37 (Ubuntu) - 'dirty_sock' Local Privilege Escalation (1)
#!/usr/bin/env python3
River Past Video Cleaner 7.6.3 – Local Buffer Overflow (SEH)
# Exploit Title: River Past Video Cleaner Buffer Overflow (SEH)
Avast Anti-Virus < 19.1.2360 - Local Credentials Disclosure
# Exploit Title: Avast Anti-Virus Local Credentials Disclosure < 19.1.2360
River Past Cam Do 3.7.6 – Local Buffer Overflow (SEH)
# Exploit Title: River Past CamDo SEH Local Exploit
IP-Tools 2.5 – ‘Log to file’ Local Buffer Overflow (SEH) (Egghunter)
#!/usr/bin/env python
River Past Audio Converter 7.7.16 – Buffer Overflow (SEH)
# Exploit Title: River_Past_Audio_Converter - Buffer Overflow (SEH)
PassFab Excel Password Recovery 8.3.1 – SEH Local Exploit
# Exploit Title: PassFab Excel Password Recovery SEH Local Exploit
UltraISO 9.7.1.3519 – ‘Output FileName’ Local Buffer Overflow (SEH)
#!/usr/bin/python
R 3.5.0 – Local Buffer Overflow (SEH)
#!/usr/bin/python
HTML5 Video Player 1.2.5 – Local Buffer Overflow (Non SEH)
#!/usr/bin/python
Faleemi Desktop Software 1.8 – Local Buffer Overflow (SEH) (DEP Bypass)
#!/usr/bin/python
BEWARD Intercom 2.3.1 – Credentials Disclosure
#!/usr/bin/env python
R 3.4.4 XP SP3 – Buffer Overflow (Non SEH)
#!/usr/bin/python
Easy Video to iPod Converter 1.6.20 – Buffer Overflow (SEH)
# Exploit Title: Easy Video to iPod Converter - Local Buffer Overflow (SEH)
MySQL User-Defined (Linux) (x86) – ‘sys_exec’ Local Privilege Escalation
# Exploit Title: MySQL User-Defined (Linux) x32 / x86_64 sys_exec function local privilege escalation exploit
Microsoft Windows CONTACT – HTML Injection / Remote Code Execution
[+] Credits: John Page (aka hyp3rlinx)
Check Point ZoneAlarm 8.8.1.110 – Local Privilege Escalation
# Exploit Title: Check Point ZoneAlarm Local Privilege Escalation