Microsoft Windows Defender Bypass – Detection Mitigation Bypass
[+] Credits: John Page (aka hyp3rlinx)
local
local 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
DS Wireless Communication – Remote Code Execution
# Exploit Title: DS Wireless Communication Remote Code Execution
Typora v1.7.4 – OS Command Injection
# Exploit Title: Typora v1.7.4 - OS Command Injection
7 Sticky Notes v1.9 – OS Command Injection
# Exploit Title: 7 Sticky Notes v1.9 - OS Command Injection
Microsoft Windows 11 – ‘apds.dll’ DLL hijacking (Forced)
#---------------------------------------------------------
GOM Player 2.3.90.5360 – Buffer Overflow (PoC)
# Exploit Title: GOM Player 2.3.90.5360 - Buffer Overflow (PoC)
Kingo ROOT 1.5.8 – Unquoted Service Path
#Exploit Title: Kingo ROOT 1.5.8 - Unquoted Service Path
Freefloat FTP Server 1.0 – ‘PWD’ Remote Buffer Overflow
#Exploit title: Freefloat FTP Server 1.0 - 'PWD' Remote Buffer Overflow
NVClient v5.0 – Stack Buffer Overflow (DoS)
# Exploit Title: NVClient v5.0 - Stack Buffer Overflow (DoS)
Inosoft VisiWin 7 2022-2.1 – Insecure Folders Permissions
# Exploit Title: Inosoft VisiWin 7 2022-2.1 - Insecure Folders Permissions
OutSystems Service Studio 11.53.30 – DLL Hijacking
# Exploit Title: OutSystems Service Studio 11.53.30 - DLL Hijacking
General Device Manager 2.5.2.2 – Buffer Overflow (SEH)
# Exploit Title: General Device Manager 2.5.2.2 - Buffer Overflow (SEH)
mRemoteNG v1.77.3.1784-NB – Cleartext Storage of Sensitive Information in Memory
# Exploit Title: mRemoteNG v1.77.3.1784-NB - Cleartext Storage of Sensitive Information in Memory
GreenShot 1.2.10 – Insecure Deserialization Arbitrary Code Execution
# Exploit Title: GreenShot 1.2.10 - Insecure Deserialization Arbitrary Code Execution
Keeper Security desktop 16.10.2 & Browser Extension 16.5.4 – Password Dumping
# Exploit Title: Keeper Security desktop 16.10.2 & Browser Extension 16.5.4 - Password Dumping
RaidenFTPD 2.4.4005 – Buffer Overflow (SEH)
# Exploit Title: RaidenFTPD 2.4.4005 - Buffer Overflow (SEH)
XAMPP 8.2.4 – Unquoted Path
# Exploit Title: XAMPP 8.2.4 - Unquoted Path
Game Jackal Server v5 – Unquoted Service Path “GJServiceV5”
# Exploit Title: Game Jackal Server v5 - Unquoted Service Path
AVG Anti Spyware 7.5 – Unquoted Service Path “AVG Anti-Spyware Guard”
# Exploit Title: AVG Anti Spyware 7.5 - Unquoted Service Path
MiniTool Partition Wizard ShadowMaker v.12.7 – Unquoted Service Path “MTSchedulerService”
# Exploit Title: MiniTool Partition Wizard ShadowMaker v.12.7 - Unquoted Service Path
MiniTool Partition Wizard ShadowMaker v.12.7 – Unquoted Service Path “MTAgentService”
# Exploit Title: MiniTool Partition Wizard ShadowMaker v.12.7 - Unquoted Service Path
Microsoft Edge 114.0.1823.67 (64-bit) – Information Disclosure
## Title:Microsoft Edge 114.0.1823.67 (64-bit) - Information Disclosure
Windows 11 22h2 – Kernel Privilege Elevation
// Exploit Title: Windows 11 22h2 - Kernel Privilege Elevation
NCH Express Invoice – Clear Text Password Storage and Account Takeover
# Exploit Title: NCH Express Invoice - Clear Text Password Storage and Account Takeover
USB Flash Drives Control 4.1.0.0 – Unquoted Service Path
# Exploit Title: USB Flash Drives Control 4.1.0.0 - Unquoted Service Path
Macro Expert 4.9 – Unquoted Service Path
# Exploit Title: Macro Expert 4.9 - Unquoted Service Path
Filmora 12 version ( Build 1.0.0.7) – Unquoted Service Paths Privilege Escalation
# Exploit Title: Filmora 12 version ( Build 1.0.0.7) - Unquoted Service Paths Privilege Escalation
MobileTrans 4.0.11 – Weak Service Privilege Escalation
# Exploit Title :MobileTrans 4.0.11 - Weak Service Privilege Escalation
Yank Note v3.52.1 (Electron) – Arbitrary Code Execution
# Exploit Title: Yank Note v3.52.1 (Electron) - Arbitrary Code Execution
Gin Markdown Editor v0.7.4 (Electron) – Arbitrary Code Execution
# Exploit Title: Gin Markdown Editor v0.7.4 (Electron) - Arbitrary Code Execution
Hubstaff 1.6.14-61e5e22e – ‘wow64log’ DLL Search Order Hijacking
Hubstaff is an employee work tracker with screenshots, timesheets, billing,
Trend Micro OfficeScan Client 10.0 – ACL Service LPE
# Exploit Title: Trend Micro OfficeScan Client 10.0 - ACL Service LPE
Codigo Markdown Editor v1.0.1 (Electron) – Remote Code Execution
# Exploit Title: Codigo Markdown Editor v1.0.1 (Electron) - Arbitrary Code Execution
FS-S3900-24T4S – Privilege Escalation
# Exploit Title: FS-S3900-24T4S Privilege Escalation
Advanced Host Monitor v12.56 – Unquoted Service Path
# Exploit Title: Advanced Host Monitor v12.56 - Unquoted Service Path
MilleGPG5 5.9.2 (Gennaio 2023) – Local Privilege Escalation / Incorrect Access Control
# Exploit Title: MilleGPG5 5.9.2 (Gennaio 2023) - Local Privilege Escalation / Incorrect Access Control
Wondershare Filmora 12.2.9.2233 – Unquoted Service Path
############################################################################
Arcsoft PhotoStudio 6.0.0.172 – Unquoted Service Path
##########################################################################
OCS Inventory NG 2.3.0.0 – Unquoted Service Path
#####################################################################
Linux Kernel 6.2 – Userspace Processes To Enable Mitigation
## Exploit Title: Linux Kernel 6.2 - Userspace Processes To Enable Mitigation
AspEmail v5.6.0.2 – Local Privilege Escalation
####################################################################################################################
File Replication Pro 7.5.0 – Privilege Escalation/Password reset due Incorrect Access Control
# Exploit Title: File Replication Pro 7.5.0 - Privilege Escalation/Password reset due Incorrect Access Control
Google Chrome Browser 111.0.5563.64 – AXPlatformNodeCocoa Fatal OOM/Crash (macOS)
## Exploit Title: Google Chrome Browser 111.0.5563.64 - AXPlatformNodeCocoa Fatal OOM/Crash (macOS)
Microsoft Edge (Chromium-based) Webview2 1.0.1661.34 – Spoofing
## Title: Microsoft-Edge-(Chromium-based)-Webview2-1.0.1661.34-Spoofing-Vulnerability
ESET Service 16.0.26.0 – ‘Service ekrn’ Unquoted Service Path
# Exploit Title: ESET Service 16.0.26.0 - 'Service ekrn' Unquoted Service Path
Stonesoft VPN Client 6.2.0 / 6.8.0 – Local Privilege Escalation
# Exploit Title: Stonesoft VPN Client 6.2.0 / 6.8.0 - Local Privilege Escalation
RSA NetWitness Platform 12.2 – Incorrect Access Control / Code Execution
# Exploit Title: RSA NetWitness Platform 12.2 - Incorrect Access Control / Code Execution
Lucee Scheduled Job v1.0 – Command Execution
# Exploit Title: Lucee Scheduled Job v1.0 - Command Execution
ActFax 10.10 – Unquoted Path Services
# Exploit Title: ActFax 10.10 - Unquoted Path Services
Google Chrome 109.0.5414.74 – Code Execution via missing lib file (Ubuntu)
#Exploit Title: Google Chrome 109.0.5414.74 - Code Execution via missing lib file (Ubuntu)