Microsoft Windows CONTACT – Remote Code Execution
[+] Credits: John Page (aka hyp3rlinx)
local
local 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
Microsoft Windows 10 – XmlDocument Insecure Sharing Privilege Escalation
Windows: XmlDocument Insecure Sharing Elevation of Privilege
Microsoft Windows VCF – Remote Code Execution
[+] Credits: John Page (aka hyp3rlinx)
Microsoft Windows 10 – COM Desktop Broker Privilege Escalation
Windows: COM Desktop Broker Elevation of Privilege
Microsoft Windows 10 – Browser Broker Cross Session Privilege Escalation
Windows: Browser Broker Cross Session EoP
Microsoft Windows 10 – DSSVC MoveFileInheritSecurity Privilege Escalation
Windows: DSSVC MoveFileInheritSecurity Multiple Issues EoP
Microsoft Windows 10 – DSSVC CanonicalAndValidateFilePath Security Feature Bypass
Windows: DSSVC CanonicalAndValidateFilePath Security Feature Bypass
Microsoft Windows 10 – DSSVC DSOpenSharedFile Arbitrary File Delete Privilege Escalation
Windows: DSSVC DSOpenSharedFile Arbitrary File Delete EoP
Microsoft Windows 10 – DSSVC DSOpenSharedFile Arbitrary File Open Privilege Escalation
Windows: DSSVC DSOpenSharedFile Arbitrary File Open EoP
Microsoft Windows 10 – SSPI Network Authentication Session 0 Privilege Escalation
Windows: SSPI Network Authentication Session 0 EoP
Dokany 1.2.0.1000 – Stack-Based Buffer Overflow Privilege Escalation
Exploit Title - Dokany Stack-based Buffer Overflow Privilege Escalation
ASAN/SUID – Local Privilege Escalation
#!/bin/bash
Code Blocks 17.12 – Local Buffer Overflow (SEH) (Unicode)
#!/usr/bin/python
RGui 3.5.0 – Local Buffer Overflow (SEH)(DEP Bypass)
#!/usr/bin/python
Microsoft Windows – DSSVC CheckFilePermission Arbitrary File Deletion
Windows: DSSVC CheckFilePermission Arbitrary File Delete EoP
KioWare Server Version 4.9.6 – Weak Folder Permissions Privilege Escalation
# Exploit Title : KioWare Server Version 4.9.6 - Weak Folder Permissions Privilege Escalation
Microsoft Windows – Windows Error Reporting Local Privilege Escalation
Make sure to copy the file report.wer found in the folder PoC-Files in the same folder as the executable before runni...
Ayukov NFTP FTP Client 2.0 – Buffer Overflow
# Exploit Title: Ayukov NFTP FTP Client 2.0 - Buffer Overflow
Linux Kernel < 4.4.0/ < 4.8.0 (Ubuntu 14.04/16.04 / Linux Mint 17/18 / Zorin) - Local Privilege Escalation (KASLR / SMEP)
// A proof-of-concept local root exploit for CVE-2017-1000112.
Linux Kernel 4.8.0-34 < 4.8.0-45 (Ubuntu / Linux Mint) - Packet Socket Local Privilege Escalation
// A proof-of-concept local root exploit for CVE-2017-7308.
Iperius Backup 5.8.1 – Buffer Overflow (SEH)
# Exploit Title: Iperius Backup 5.8.1 - Buffer Overflow (SEH)
Terminal Services Manager 3.1 – Local Buffer Overflow (SEH)
# Exploit Title: Terminal Services Manager 3.1 - Buffer Overflow (SEH)
MAGIX Music Editor 3.1 – Buffer Overflow (SEH)
# Exploit Title: MAGIX Music Editor 3.1 - Buffer Overflow (SEH)
Adobe Flash ActiveX Plugin 28.0.0.137 – Remote Code Execution (PoC)
Download: https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/46051.zip
Microsoft Windows – ‘MsiAdvertiseProduct’ Arbitrary File Read
The bug is in “MsiAdvertiseProduct”
AnyBurn 4.3 – Local Buffer Overflow (SEH)
#!/usr/bin/env python
Microsoft Windows – ‘MsiAdvertiseProduct’ Arbitrary File Copy/Read
The bug is in “MsiAdvertiseProduct”
Base64 Decoder 1.1.2 – Local Buffer Overflow (SEH)
#!/usr/bin/env python
XMPlay 3.8.3 – ‘.m3u’ Local Stack Overflow Code Execution
#!/usr/bin/env python
LanSpy 2.0.1.159 – Buffer Overflow (SEH) (Egghunter)
# Exploit Title: LanSpy 2.0.1.159 - Local Buffer Overflow (SEH) (Egghunter)
PDF Explorer 1.5.66.2 – Buffer Overflow (SEH)
# Exploit Title: PDF Explorer SEH Local Exploit
LanSpy 2.0.1.159 – Local Buffer Overflow
#!/usr/bin/python
PassFab RAR 9.3.2 – Buffer Overflow (SEH)
# Exploit Title: PassFab RAR Password Recovery SEH Local Exploit
Nsauditor 3.0.28.0 – Local SEH Buffer Overflow
# Exploit Title: Nsauditor Local SEH Buffer Overflow
Zortam MP3 Media Studio 24.15 – Local Buffer Overflow (SEH)
#Exploit Title: Zortam MP3 Media Studio Version 24.15 Exploit (SEH)
McAfee True Key – McAfee.TrueKey.Service Privilege Escalation
McAfee True Key: Multiple Issues with McAfee.TrueKey.Service Implementation
XNU – POSIX Shared Memory Mappings have Incorrect Maximum Protection
When the mmap() syscall is invoked on a POSIX shared memory segment
Xorg X11 Server (AIX) – Local Privilege Escalation
# Exploit Title: AIX Xorg X11 Server - Local Privilege Escalation