HitmanPro 3.7.15 Build 281 – Kernel Pool Overflow
Exploit-CVE-2017-6008
local
local 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
Mikogo 5.4.1.160608 – Local Credentials Disclosure
#!/usr/bin/env python
Linux Kernel 4.14.0-rc4+ – ‘waitid()’ Local Privilege Escalation
#define _GNU_SOURCE
Microsoft Game Definition File Editor 6.3.9600 – XML External Entity Injection
[+] Credits: John Page (aka hyp3rlinx)
Shadowsocks – Log File Command Execution
X41 D-Sec GmbH Security Advisory: X41-2017-008
shadowsocks-libev 3.1.0 – Command Execution
X41 D-Sec GmbH Security Advisory: X41-2017-010
Linux Kernel < 3.16.39 (Debian 8 x64) - 'inotfiy' Local Privilege Escalation
//Trigger inotify event by file open and rename to trigger the vulnerability and exploit
Chrome 35.0.1916.153 – Sandbox Escape / Command Execution
Sandbox escape Chrome exploit. Allows the execution of local binaries, read/write functions and exfiltration of Chrom...
ASX to MP3 3.1.3.7 – ‘.m3u’ Local Buffer Overflow
# Exploit Title: Buffer Overflow via crafted malicious .m3u file
Webkit (Chome < 61) - 'MHTML' Universal Cross-site Scripting
MIME-Version: 1.0
DiskBoss Enterprise 8.4.16 – Local Buffer Overflow
#!/usr/bin/python
UCOPIA Wireless Appliance < 5.1.8 - Restricted Shell Escape
# [CVE-2017-11321] UCOPIA Wireless Appliance < 5.1.8 Restricted Shell Escape
UCOPIA Wireless Appliance < 5.1.8 - Local Privilege Escalation
# [CVE-2017-11322] UCOPIA Wireless Appliance < 5.1.8 Privileges Escalation
Microsoft Word 2007 (x86) – Information Disclosure
Title: MS Office Word Information Disclosure Vulnerability
Dup Scout Enterprise 10.0.18 – ‘Import Command’ Local Buffer Overflow
#!/usr/bin/python
DiskBoss Enterprise 8.4.16 – ‘Import Command’ Local Buffer Overflow
#!/usr/bin/python
Trend Micro OfficeScan 11.0/XG (12.0) – Image File Execution Bypass
[+] Credits: John Page (aka hyp3rlinx)
Linux Kernel 3.10.0-514.21.2.el7.x86_64 / 3.10.0-514.26.1.el7.x86_64 (CentOS 7) – SUID Position Independent Executable ‘PIE’ Local Privilege Escalation
cat > rootshell.c e_phentsize != sizeof(ElfW(Phdr))) die();
CyberLink LabelPrint < 2.5 - Local Buffer Overflow (SEH Unicode)
#!/usr/bin/python
Netdecision 5.8.2 – Local Privilege Escalation
// Netdecision.cpp : Defines the entry point for the console application.
Jungo DriverWizard WinDriver < 12.4.0 - Kernel Pool Overflow / Local Privilege Escalation (2)
# -*- coding: utf-8 -*-
Tor (Linux) – X11 Linux Sandbox Breakout
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1293&desc=2
Jungo DriverWizard WinDriver < 12.4.0 - Kernel Out-of-Bounds Write Privilege Escalation
# -*- coding: utf-8 -*-
Jungo DriverWizard WinDriver < 12.4.0 - Kernel Pool Overflow / Local Privilege Escalation (1)
# -*- coding: utf-8 -*-
Dup Scout Enterprise 9.9.14 – ‘Input Directory’ Local Buffer Overflow
#!/usr/bin/python
RubyGems < 2.6.13 - Arbitrary File Overwrite
There is no check for name field in metadata.gz. By assigning a maliciously crafted string like ../../../../../any/wh...
Lotus Notes Diagnostic Tool 8.5/9.0 – Local Privilege Escalation
# Exploit Title: Lotus Notes Diagnostic Tool (nsd.exe) Privelege Escalation
Easy Vedio to PSP Converter 1.6.20 – Local Buffer Overflow (SEH)
#!/usr/bin/python
Easy RM RMVB to DVD Burner 1.8.11 – Local Buffer Overflow (SEH)
#!/usr/bin/python
Easy WMV/ASF/ASX to DVD Burner 2.3.11 – Local Buffer Overflow (SEH)
#!/usr/bin/python
Easy DVD Creator 2.5.11 – Local Buffer Overflow (SEH)
#!/usr/bin/python
Apple iOS < 10.3.1 - Kernel
Sources:
MP3 WAV to CD Burner 1.4.24 – Local Buffer Overflow (SEH)
#!/usr/bin/python
My Video Converter 1.5.24 – Local Buffer Overflow (SEH)
#!/usr/bin/python
Easy AVI DivX Converter 1.2.24 – Local Buffer Overflow (SEH)
#!/usr/bin/python
Automated Logic WebCTRL 6.5 – Local Privilege Escalation
Automated Logic WebCTRL 6.5 Insecure File Permissions Privilege Escalation
VX Search Enterprise 9.9.12 – ‘Import Command’ Local Buffer Overflow
#!/usr/bin/python
Disk Savvy Enterprise 9.9.14 – ‘Import Command’ Local Buffer Overflow
#!/usr/bin/python
Disk Pulse Enterprise 9.9.16 – ‘Import Command’ Local Buffer Overflow
#!/usr/bin/python
PDF-XChange Viewer 2.5 Build 314.0 – Code Execution
# Exploit Title: PDF-XChange Viewer 2.5 (Build 314.0) Javascript API Remote Code Execution Exploit (Powershell PDF Ex...
WebKitGTK 2.1.2 (Ubuntu 14.04) – Heap based Buffer Overflow
# CVE-2014-1303 PoC for Linux
Easy DVD Creater 2.5.11 – Local Buffer Overflow (SEH)
#!/usr/bin/python