ALLPlayer 7.4 – Local Buffer Overflow (SEH Unicode)
#!/usr/bin/python
local
local 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
Xamarin Studio for Mac 6.2.1 (build 3) / 6.3 (build 863) – Local Privilege Escalation
Source: https://www.securify.nl/advisory/SFY20170403/xamarin-studio-for-mac-api-documentation-update-affected-by-loca...
Linux Kernel < 4.4.0-83 / < 4.8.0-58 (Ubuntu 14.04/16.04) - Local Privilege Escalation (KASLR / SMEP)
// A proof-of-concept local root exploit for CVE-2017-1000112.
VMware WorkStation 12.5.5 – Virtual Machine Escape
# VMware Escape Exploit
Microsoft Windows – ‘.LNK’ Shortcut File Code Execution
#!/usr/bin/python
Dashlane – DLL Hijacking
## Vulnerability Summary
VirtualBox 5.1.22 – Windows Process DLL UNC Path Signature Bypass Privilege Escalation
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1296
VirtualBox 5.1.22 – Windows Process DLL Signature Bypass Privilege Escalation
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1257
DNSTracer 1.9 – Local Buffer Overflow
# Exploit Title: DNSTracer 1.9 - Buffer Overflow
Apple macOS/iOS – ‘xpc_data’ Objects Sandbox Escape Privilege Escalation
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1247
AudioCoder 0.8.46 – Local Buffer Overflow (SEH)
#!/usr/bin/python
Linux Kernel – ‘BadIRET’ Local Privilege Escalation
# CVE-2014-9322 PoC for Linux kernel
Nitro Pro PDF – Multiple Vulnerabilities
## Vulnerabilities Summary
MAWK 1.3.3-17 – Local Buffer Overflow
#!/usr/bin/python
Docker Daemon – Unprotected TCP Socket
# Exploit Title: Docker Daemon - Unprotected TCP Socket
Hashicorp vagrant-vmware-fusion < 4.0.20 - Local Privilege Escalation
I'm a big fan of Hashicorp but this is an awful bug to have in software of their
Apple Mac OS X + Safari – Local Javascript Quarantine Bypass
Title: Mac OS X Local Javascript Quarantine Bypass
CyberArk Viewfinity 5.5.10.95 – Local Privilege Escalation
# Exploit Title: Privilege Escalation via CyberArk Viewfinity
Pelco VideoXpert 1.12.105 – Local Privilege Escalation
Schneider Electric Pelco VideoXpert Privilege Escalations
NfSen < 1.3.7 / AlienVault OSSIM < 5.3.6 - Local Privilege Escalation
# Exploit Title: Local root exploit affecting NfSen
Counter Strike: Condition Zero – ‘.BSP’ Map File Code Execution
#!/usr/bin/env python
Odoo CRM 10.0 – Code Execution
## Vulnerability Summary
Flat Assembler 1.7.21 – Local Buffer Overflow
#!/usr/bin/python
JAD Java Decompiler 1.5.8e – Local Buffer Overflow (NX Enabled)
#!/usr/bin/python
Sudo 1.8.20 – ‘get_process_ttyname()’ Local Privilege Escalation
#define _GNU_SOURCE
Disk Pulse 9.7.26 – ‘Add Directory’ Local Buffer Overflow
#!/usr/bin/python
Sync Breeze 9.7.26 – ‘Add Exclude Directory’ Local Buffer Overflow
#!/usr/bin/python
DiskBoss 8.0.16 – ‘Input Directory’ Local Buffer Overflow
#!/usr/bin/python
Disk Sorter 9.7.14 – ‘Input Directory’ Local Buffer Overflow
#!/usr/bin/python
Apple macOS 10.12.3 / iOS < 10.3.2 - Userspace Entitlement Checking Race Condition
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1223
Net Monitor for Employees Pro < 5.3.4 - Unquoted Service Path Privilege Escalation
# Exploit Title: Unquoted Service Path Privilege Escalation - Net Monitor for Employees Pro
BIND 9.10.5 – Unquoted Service Path Privilege Escalation
[+] Credits: John Page aka hyp3rlinx
Subsonic 6.1.1 – XML External Entity Injection
[+] Credits: John Page a.k.a hyp3rlinx