PostgreSQL 9.4-0.5.3 – Privilege Escalation
# Exploit Title: PostgreSQL 9.4-0.5.3 - Privilege Escalation
local
local 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
Monitoring software iSmartViewPro 1.5 – ‘SavePath for ScreenShots’ Buffer Overflow
# Exploit Title: iSmartViewPro 1.5 - 'SavePath for ScreenShots' Local Buffer Overflow
iSmartViewPro 1.5 – ‘Password’ Buffer Overflow
# Exploit Title: iSmartViewPro 1.5 - 'Password' Buffer Overflow
Linux Kernel 4.14.7 (Ubuntu 16.04 / CentOS 7) – (KASLR & SMEP Bypass) Arbitrary File Read
// A proof-of-concept exploit for CVE-2017-18344.
Soroush IM Desktop App 0.17.0 – Authentication Bypass
# Exploit Title: Soroush IM Desktop App 0.17.0 - Authentication Bypass
iSmartViewPro 1.5 – ‘Account’ Buffer Overflow
# Exploit Title: iSmartViewPro 1.5 - 'Account' Buffer Overflow
iSmartViewPro 1.5 – ‘Device Alias’ Buffer Overflow
# Exploit Title: iSmartViewPro 1.5 - 'Device Alias' Buffer Overflow
CloudMe Sync 1.10.9 – Buffer Overflow (SEH)(DEP Bypass)
# Exploit Title: CloudMe Sync 1.10.9 - Buffer Overflow (SEH)(DEP Bypass)
AgataSoft Auto PingMaster 1.5 – Buffer Overflow (SEH)
# Exploit Title: AgataSoft Auto PingMaster 1.5 - Buffer Overflow (SEH)
Wedding Slideshow Studio 1.36 – Buffer Overflow
###########################################################################################
Imperva SecureSphere 11.5 / 12.0 / 13.0 – Privilege Escalation
# Title: Imperva SecureSphere >sys.stderr, 'Connecting to %s' % server_address
Sun Solaris 11.3 AVS Kernel – Local Privilege Escalation
# Exploit Title: Solaris/OpenSolaris AVS kernel code execution
Allok Fast AVI MPEG Splitter 1.2 – Buffer Overflow (PoC)
# Exploit Title: Allok Fast AVI MPEG Splitter 1.2 SEH Overwrite POC
Charles Proxy 4.2 – Local Privilege Escalation
Charles Proxy is a great mac application for debugging web services and
Allok MOV Converter 4.6.1217 – Buffer Overflow (SEH)
# Exploit Title: Allok MOV Converter 4.6.1217 - Buffer Overflow (SEH)
10-Strike LANState 8.8 – Local Buffer Overflow (SEH)
# Exploit Title: 10-Strike LANState 8.8 - Local Buffer Overflow (SEH)
10-Strike Bandwidth Monitor 3.7 – Local Buffer Overflow (SEH)
# Title: 10-Strike Bandwidth Monitor 3.7 - Local Buffer Overflow SEH
Splinterware System Scheduler Pro 5.12 – Privilege Escalation
# Exploit Title: Splinterware System Scheduler Pro 5.12 - Privilege Escalation
Splinterware System Scheduler Pro 5.12 – Buffer Overflow (SEH)
#!/usr/bin/python
Inteno’s IOPSYS – (Authenticated) Local Privilege Escalation
#!/usr/bin/python
Microhard Systems 3G/4G Cellular Ethernet and Serial Gateway – Restricted Shell Escape
Microhard Systems 3G/4G Cellular Ethernet and Serial Gateway Backdoor Jailbreak
Microsoft Enterprise Mode Site List Manager – XML External Entity Injection
[+] Credits: John Page (aka hyp3rlinx)
JavaScript Core – Arbitrary Code Execution
// Load Int library, thanks saelo!
Awk to Perl 1.007-5 – Buffer Overflow (PoC)
# Exploit Title: Awk to Perl 1.007-5 - Buffer Overflow (PoC)
Linux Kernel < 4.13.9 (Ubuntu 16.04 / Fedora 27) - Local Privilege Escalation
Credit @bleidl, this is a slight modification to his original POC
Boxoft WAV to WMA Converter 1.0 – Local Buffer Overflow (SEH)
# Exploit Title: Boxoft wav-wma Converter - Local Buffer Overflow (SEH)
ADB Broadband Gateways / Routers – Privilege Escalation
SEC Consult Vulnerability Lab Security Advisory < 20180704-2 >
ADB Broadband Gateways / Routers – Local Root Jailbreak
SEC Consult Vulnerability Lab Security Advisory < 20180704-0 >
VLC media player 2.2.8 – Arbitrary Code Execution (PoC)
# Exploit Title: VLC media player 2.2.8 - Arbitrary Code Execution PoC
Enhanced Mitigation Experience Toolkit (EMET) – XML External Entity Injection
[+] Credits: John Page (aka hyp3rlinx)
Dell EMC RecoverPoint < 5.1.2 - Local Root Command Execution
# Exploit Title: Dell EMC RecoverPoint < 5.1.2 - Local Root Command Execution
Microsoft COM for Windows – Privilege Escalation
Writeup: https://codewhitesec.blogspot.com/2018/06/cve-2018-0624.html
Redis-cli < 5.0 - Buffer Overflow (PoC)
# Exploit Title: Redis-cli < 5.0 - Buffer Overflow (PoC)
Audiograbber 1.83 – Local Buffer Overflow (SEH)
# Exploit Title: Audiograbber 1.83 - Local Buffer Overflow (SEH)
Pale Moon Browser < 27.9.3 - Use After Free (PoC)
# Exploit Title: Pale Moon Browser < 27.9.3 - Use After Free (PoC)
Nikto 2.1.6 – CSV Injection
# Exploit Title: Nikto 2.1.6 - CSV Injection
Soroush IM Desktop App 0.15 (beta) – Authentication Bypass
# Exploit Title: Soroush IM Desktop app 0.15 - Authentication Bypass
RSLinx Classic and FactoryTalk Linx Gateway – Privilege Escalation
# Title: RSLinx Classic and FactoryTalk Linx Gateway - Privilege Escalation
Microsoft Windows 10 – Child Process Restriction Mitigation Bypass
Windows: Child Process Restriction Mitigation Bypass
TrendMicro OfficeScan XG 11.0 – Change Prevention Bypass
[+] Credits: John Page (aka hyp3rlinx)
Ftp Server 1.32 – Credential Disclosure
# Exploit Title: Ftp Server 1.32 - Credential Disclosure
WebKitGTK+ < 2.21.3 - Crash (PoC)
# Title: WebKitGTK+ < 2.21.3 - Crash (PoC)