local
local 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
WinRar < 5.30 Beta 4 - Settings Import Command Execution
#!/usr/bin/python -w
Apple Mac OSX 10.9.5/10.10.5 – ‘rsh/libmalloc’ Local Privilege Escalation
# CVE-2015-5889: issetugid() + rsh + libmalloc osx local root
Apport 2.19 (Ubuntu 15.04) – Local Privilege Escalation
Source: http://www.halfdog.net/Security/2015/ApportKernelCrashdumpFileAccessVulnerabilities/
IconLover 5.42 – Local Buffer Overflow
# Exploit Title: IconLover v5.42 Buffer Overflow Exploit
WinRar 5.21 – SFX OLE Command Execution
#!/usr/bin/python -w
Cisco AnyConnect 3.1.08009 – Local Privilege Escalation (via DMG Install Script)
Yorick Koster, July 2015
Cisco AnyConnect Secure Mobility Client 3.1.08009 – Local Privilege Escalation
Source: https://code.google.com/p/google-security-research/issues/detail?id=460
Kaspersky AntiVirus – ThinApp Parser Stack Buffer Overflow
Source: https://code.google.com/p/google-security-research/issues/detail?id=518
Total Commander 8.52 – Local Buffer Overflow
#!/usr/bin/python
Total Commander 8.52 (Windows 10) – Local Buffer Overflow
#!/usr/bin/python
IKEView R60 – Local Buffer Overflow (SEH)
#!/usr/bin/python
ZTE PC UI USB Modem Software – Local Buffer Overflow
#!/usr/bin/python -w
IKEView.exe R60 – ‘.elg’ Local (SEH)
# Exploit Title: IKEView.exe R60 localSEH Exploit
Microsoft Windows – CreateObjectTask SettingsSyncDiagnostics Privilege Escalation
Source: https://code.google.com/p/google-security-research/issues/detail?id=437
Microsoft Windows – CreateObjectTask TileUserBroker Privilege Escalation
Source: https://code.google.com/p/google-security-research/issues/detail?id=439
Microsoft Windows Task Scheduler – ‘DeleteExpiredTaskAfter’ File Deletion Privilege Escalation
Source: https://code.google.com/p/google-security-research/issues/detail?id=442
Microsoft Windows – NtUserGetClipboardAccessToken Token Leak (MS15-023)
Source: https://code.google.com/p/google-security-research/issues/detail?id=461
Microsoft Windows 10 (Build 10130) – User Mode Font Driver Thread Permissions Privilege Escalation
Source: https://code.google.com/p/google-security-research/issues/detail?id=468
Logitech Webcam Software 1.1 – ‘eReg.exe’ Local Buffer Overflow (SEH Unicode)
#*************************************************************************************************************
Apple Mac OSX – Install.framework suid Helper Privilege Escalation
Source: https://code.google.com/p/google-security-research/issues/detail?id=314
Apple Mac OSX Install.Framework – Arbitrary mkdir / unlink and chown to Admin Group
Source: https://code.google.com/p/google-security-research/issues/detail?id=477
Apple Mac OSX Install.Framework – SUID Root Runner Binary Privilege Escalation
Source: https://code.google.com/p/google-security-research/issues/detail?id=478
Cisco Sourcefire User Agent 2.2 – Insecure File Permissions
Cisco Sourcefire User Agent Insecure File Permissions Vulnerability
IBM AIX High Availability Cluster Multiprocessing (HACMP) – Local Privilege Escalation
IBM AIX High Availability Cluster Multiprocessing (HACMP) LPE to root 0day
VeryPDF HTML Converter 2.0 – Local Buffer Overflow (SEH/ToLower() Bypass)
#*************************************************************************************************************
Disconnect.me Mac OSX Client 2.0 – Local Privilege Escalation
Disconnect.me is the search engine entrusted by the Tor Browser.
AutoCAD DWG and DXF To PDF Converter 2.2 – Local Buffer Overflow
#*************************************************************************************************************
Boxoft WAV to MP3 Converter – ‘convert’ Local Buffer Overflow
#Exploit Title: Boxoft wav to mp3 converter SEH bypass technique tested on Win7x64
BSIGN 0.4.5 – Local Buffer Overflow
# Exploit Author: Juan Sacco - http://www.exploitpack.com
FENIX 0.92 – Local Buffer Overflow
# Exploit Author: Juan Sacco - http://www.exploitpack.com
Linux Kernel < 3.5.0-23 (Ubuntu 12.04.2 x64) - 'SOCK_DIAG' SMEP Bypass Local Privilege Escalation
EDB Note: Video ~ https://youtu.be/jHJd-5NvWlQ
ZSNES 1.51 – Local Buffer Overflow
# Exploit Author: Juan Sacco - http://www.exploitpack.comp
Mozilla – Maintenance Service Log File Overwrite Privilege Escalation
Source: https://code.google.com/p/google-security-research/issues/detail?id=427&can=1
Multiple ChiefPDF Software 2.0 – Local Buffer Overflow
#!/usr/bin/python
Apple Mac OSX 10.10.5 – ‘XNU’ Local Privilege Escalation
Source: https://github.com/kpwn/tpwn
Mozilla Firefox < 39.03 - 'pdf.js' Same Origin Policy
# Exploit Title: Firefox < 39.03 pdf.js same origin policy exploit
Microsoft HTML Help Compiler 4.74.8702.0 – Local Overflow (SEH)
#!/usr/bin/env python
Microsoft Windows 8.1 – DCOM DCE/RPC Local NTLM Reflection Privilege Escalation (MS15-076)
Source: https://github.com/monoxgas/Trebuchet
Microsoft Windows Server 2003 SP2 – TCP/IP IOCTL Privilege Escalation (MS14-070)
################################################################