xWPE 1.5.30a-2.1 – Local Buffer Overflow
# Exploit Author: Juan Sacco - http://www.exploitpack.com <
local
local 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
Oracle – ‘HtmlConverter.exe’ Local Buffer Overflow
[+] Credits: hyp3rlinx
Linux Kernel 4.4.1 – REFCOUNT Overflow Use-After-Free in Keyrings Local Privilege Escalation (2)
# Exploit Title: Linux kernel REFCOUNT overflow/Use-After-Free in keyrings
Linux Kernel 4.4.1 – REFCOUNT Overflow Use-After-Free in Keyrings Local Privilege Escalation (1)
# Exploit Title: Linux kernel REFCOUNT overflow/Use-After-Free in keyrings
WEG SuperDrive G2 12.0.0 – Insecure File Permissions
WEG SuperDrive G2 v12.0.0 Insecure File Permissions
Amanda 3.3.1 – ‘amstar’ Command Injection Privilege Escalation
AMANDA, the Advanced Maryland Automatic Network Disk Archiver, is a backup
Linux Kernel 4.3.3 – ‘overlayfs’ Local Privilege Escalation (2)
#define _GNU_SOURCE
Amanda 3.3.1 – Local Privilege Escalation
AMANDA, the Advanced Maryland Automatic Network Disk Archiver, is a backup
Linux Kernel 4.3.3 (Ubuntu 14.04/15.10) – ‘overlayfs’ Local Privilege Escalation (1)
just another overlayfs exploit, works on kernels before 2015-12-26
FTPShell Client 5.24 – ‘Add to Favorites’ Buffer Overflow
# Exploit Title: FTPShell Client 5.24 - Add to Favorites Buffer Overflow
DeleGate 9.9.13 – Local Privilege Escalation
Title: Local root vulnerability in DeleGate v9.9.13
KiTTY Portable 0.65.0.2p (Windows 8.1/10) – Local kitty.ini Overflow
# Exploit Title: KiTTY Portable
KiTTY Portable 0.65.0.2p (Windows 7) – Local kitty.ini Overflow (Wow64 Egghunter)
# Exploit Title: KiTTY Portable
KiTTY Portable 0.65.1.1p – Local Saved Session Overflow (Egghunter XP / Denial of Service 7/8.1/10)
# Exploit Title: KiTTY Portable
Microsoft Windows 8.1 – ‘win32k’ Local Privilege Escalation (MS15-010)
# Exploit Title: MS15-010/CVE-2015-0057 win32k Local Privilege Escalation
iniNet SpiderControl PLC Editor Simatic 6.30.04 – Insecure File Permissions
iniNet SpiderControl PLC Editor Simatic 6.30.04 Insecure File Permissions
iniNet SpiderControl SCADA Web Server Service 2.02 – Insecure File Permissions
iniNet SpiderControl SCADA Web Server Service 2.02 Insecure File Permissions
Cyclope Employee Surveillance 8.6.1 – Insecure File Permissions
# Author: loneferret of Offensive Security
abrt (Centos 7.1 / Fedora 22) – Local Privilege Escalation
#!/usr/bin/python
RHEL 7.0/7.1 – ‘abrt/sosreport’ Local Privilege Escalation
#!/usr/bin/python
Nvidia Stereoscopic 3D Driver Service 7.17.13.5382 – Arbitrary Run Key Creation
Source: https://code.google.com/p/google-security-research/issues/detail?id=515
IBM i Access 7.1 – Local Buffer Overflow / Code Execution
[+] Credits: John Page aka hyp3rlinx
Gold MP4 Player – ‘.swf’ Local Overflow
#!/usr/bin/python
Sam Spade 1.14 – Scan Addresses Buffer Overflow
#!/usr/bin/python
Sam Spade 1.14 – Crawl Website Buffer Overflow
# Exploit Title : Sam Spade 1.14 - Buffer OverFlow
Microsoft Windows 10 – ‘pcap’ Driver Privilege Escalation
// Source: https://github.com/Rootkitsmm/Win10Pcap-Exploit
Alreader 2.5 .fb2 – Based Stack Overflow (SEH) (ASLR + DEP Bypass)
#!/usr/bin/env python
Tomabo MP4 Player 3.11.6 – Local Stack Overflow (SEH)
#!/usr/bin/python
ASX to MP3 Converter 1.82.50 (Windows 2003 x86) – ‘.asx’ Local Stack Overflow
ASX to MP3 Converter SOF - Ivan Ivanovic Ivanov Иван-дурак
Microsoft Windows 10 – Sandboxed Mount Reparse Point Creation Mitigation Bypass (MS15-111)
Source: https://code.google.com/p/google-security-research/issues/detail?id=486
Linux Kernel 3.17 – ‘Python ctypes and memfd_create’ noexec File Security Bypass
# Exploit Title: Linux >= 3.17 noexec bypass with python ctypes and memfd_create
Boxoft WAV to MP3 Converter 1.1 – Local Buffer Overflow (SEH)
# Exploit Title: Boxoft WAV to MP3 Converter 1.1 - SEH Buffer Overflow
libsndfile 1.0.25 – Local Heap Overflow
#!/usr/bin/env perl
VeryPDF Image2PDF Converter – Local Buffer Overflow (SEH)
#********************************************************************************************************************...
TrueCrypt 7 / VeraCrypt 1.13 – Drive Letter Symbolic Link Creation Privilege Escalation
Source: https://code.google.com/p/google-security-research/issues/detail?id=538