Wondershare Dr Fone 12.9.6 – Privilege Escalation
# Exploit Title: Wondershare Dr Fone 12.9.6 - Privilege Escalation
local
local 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
HospitalRun 1.0.0-beta – Local Root Exploit for macOS
# Exploit Title: HospitalRun 1.0.0-beta - Local Root Exploit for macOS
pdfkit v0.8.7.2 – Command Injection
#!/usr/bin/env python3
FileZilla Client 3.63.1 – ‘TextShaping.dl’ DLL Hijacking
#---------------------------------------------------------
ImageMagick 7.1.0-49 – Arbitrary File Read
# Exploit Title: ImageMagick 7.1.0-49 - Arbitrary File Read
GNU screen v4.9.0 – Privilege Escalation
# Exploit Title: GNU screen v4.9.0 - Privilege Escalation
sleuthkit 4.11.1 – Command Injection
# Exploit Title: sleuthkit 4.11.1 - Command Injection
Grand Theft Auto III/Vice City Skin File v1.1 – Buffer Overflow
# Exploit Title: Grand Theft Auto III/Vice City Skin File v1.1 - Buffer Overflow
sudo 1.8.0 to 1.9.12p1 – Privilege Escalation
#!/usr/bin/env bash
Microsoft Exchange Active Directory Topology 15.02.1118.007 – ‘Service MSExchangeADTopology’ Unquoted Service Path
# Exploit Title: Microsoft Exchange Active Directory Topology 15.02.1118.007 - 'Service MSExchangeADTopology' Unquote...
Chromacam 4.0.3.0 – PsyFrameGrabberService Unquoted Service Path
# Exploit Title: Chromacam 4.0.3.0 - PsyFrameGrabberService Unquoted Service Path
Solaris 10 libXm – Buffer overflow Local privilege escalation
fprintf(stderr, "usage: %s xserver:display [safe_addr]\n\n",
HotKey Clipboard 2.1.0.6 – Privilege Escalation Unquoted Service Path
# Exploit Title: HotKey Clipboard 2.1.0.6 - Privilege Escalation Unquoted Service Path
Windows 11 10.0.22000 – Backup service Privilege Escalation
## Title: Windows 11 10.0.22000 - Backup service Privilege Escalation
NetIQ/Microfocus Performance Endpoint v5.1 – remote root/SYSTEM exploit
# Exploit Title: NetIQ/Microfocus Performance Endpoint v5.1 - remote root/SYSTEM exploit
Splashtop 8.71.12001.0 – Unquoted Service Path
# Exploit Title: Splashtop 8.71.12001.0 - Unquoted Service Path
Enlightenment v0.25.3 – Privilege escalation
## Exploit Title: Enlightenment v0.25.3 - Privilege escalation
SOUND4 IMPACT/FIRST/PULSE/Eco v2.x – Unauthenticated Factory Reset
# Exploit Title: SOUND4 IMPACT/FIRST/PULSE/Eco v2.x - Unauthenticated Factory Reset
SOUND4 IMPACT/FIRST/PULSE/Eco v2.x – Remote Command Execution (RCE)
# Exploit Title: SOUND4 IMPACT/FIRST/PULSE/Eco v2.x - Remote Command Execution (RCE)
SOUND4 IMPACT/FIRST/PULSE/Eco v2.x – Directory Traversal File Write Exploit
# Exploit Title: SOUND4 IMPACT/FIRST/PULSE/Eco v2.x - Directory Traversal File Write Exploit
SOUND4 IMPACT/FIRST/PULSE/Eco v2.x – Authentication Bypass
# Exploit Title: SOUND4 IMPACT/FIRST/PULSE/Eco v2.x - Authentication Bypass
SOUND4 IMPACT/FIRST/PULSE/Eco v2.x – Denial Of Service (DoS)
# Exploit Title: SOUND4 IMPACT/FIRST/PULSE/Eco v2.x - Denial Of Service (DoS)
SOUND4 IMPACT/FIRST/PULSE/Eco v2.x – Authorization Bypass (IDOR)
# Exploit Title: SOUND4 IMPACT/FIRST/PULSE/Eco v2.x - Authorization Bypass (IDOR)
SOUND4 IMPACT/FIRST/PULSE/Eco v2.x – Cross-Site Request Forgery
# Exploit Title: SOUND4 IMPACT/FIRST/PULSE/Eco v2.x - Cross-Site Request Forgery
SOUND4 Server Service 4.1.102 – Local Privilege Escalation
# Exploit Title: SOUND4 Server Service 4.1.102 - Local Privilege Escalation
CoolerMaster MasterPlus 1.8.5 – ‘MPService’ Unquoted Service Path
# Exploit Title: CoolerMaster MasterPlus 1.8.5 - 'MPService' Unquoted Service Path
Zillya Total Security 3.0.2367.0 – Local Privilege Escalation
# Exploit Title: Zillya Total Security 3.0.2367.0 - Local Privilege Escalation
CrowdStrike Falcon AGENT 6.44.15806 – Uninstall without Installation Token
# Exploit Title: CrowdStrike Falcon AGENT 6.44.15806 - Uninstall without Installation Token
Lavasoft web companion 4.1.0.409 – ‘DCIservice’ Unquoted Service Path
#Exploit Title: Lavasoft web companion 4.1.0.409 - 'DCIservice' Unquoted Service Path
Outline V1.6.0 – Unquoted Service Path
# Exploit Title: Outline V1.6.0 - Unquoted Service Path
SugarSync 4.1.3 – ‘SugarSync Service’ Unquoted Service Path
# Exploit Title: SugarSync 4.1.3 - 'SugarSync Service' Unquoted Service Path
HDD Health 4.2.0.112 – ‘HDDHealth’ Unquoted Service Path
# Exploit Title: HDD Health 4.2.0.112 - 'HDDHealth' Unquoted Service Path
AVS Audio Converter 10.3 – Stack Overflow (SEH)
# Exploit Title: AVS Audio Converter 10.3 - Stack Overflow (SEH)
Resource Hacker v3.6.0.92 – Buffer overflow
# Exploit Title: Resource Hacker 3.6.0.92 - Buffer overflow
Frhed (Free hex editor) v1.6.0 – Buffer overflow
# Exploit Title: Frhed (Free hex editor) v1.6.0 - Buffer overflow
Explorer32++ v1.3.5.531 – Buffer overflow
# Exploit Title: Explorer32++ 1.3.5.531 - Buffer overflow
Tftpd32_SE 4.60 – ‘Tftpd32_svc’ Unquoted Service Path
# Exploit Title: Tftpd32_SE 4.60 - 'Tftpd32_svc' Unquoted Service Path
Gestionale Open 12.00.00 – ‘DB_GO_80’ Unquoted Service Path
# Exploit Title: Gestionale Open 12.00.00 - 'DB_GO_80' Unquoted Service Path
Mediconta 3.7.27 – ‘servermedicontservice’ Unquoted Service Path
# Exploit Title: Mediconta 3.7.27 - 'servermedicontservice' Unquoted Service Path
System Mechanic v15.5.0.61 – Arbitrary Read/Write
# Exploit Title: System Mechanic v15.5.0.61 - Arbitrary Read/Write
IOTransfer V4 – Unquoted Service Path
# Exploit Title: IOTransfer V4 - Unquoted Service Path
Blink1Control2 2.2.7 – Weak Password Encryption
// Exploit Title: Blink1Control2 2.2.7 - Weak Password Encryption
Asus GameSDK v1.0.0.4 – ‘GameSDK.exe’ Unquoted Service Path
# Exploit Title: Asus GameSDK v1.0.0.4 - 'GameSDK.exe' Unquoted Service Path
Dr. Fone 4.0.8 – ‘net_updater32.exe’ Unquoted Service Path
# Exploit Title: Dr. Fone v4.0.8- 'net_updater32.exe' Unquoted Service Path
Kite 1.2021.610.0 – Unquoted Service Path
# Exploit Title: Kite 1.2021.610.0 - Unquoted Service Path
HP LaserJet Professional M1210 MFP Series Receive Fax Service – Unquoted Service Path
# Exploit Title: HP LaserJet Professional M1210 MFP Series Receive Fax Service - Unquoted Service Path
Real Player 16.0.3.51 – ‘external::Import()’ Directory Traversal to Remote Code Execution (RCE)
# Exploit Title: Real Player 16.0.3.51 - 'external::Import()' Directory Traversal to Remote Code Execution (RCE)
Real Player v.20.0.8.310 G2 Control – ‘DoGoToURL()’ Remote Code Execution (RCE)
# Exploit Title: Real Player v.20.0.8.310 G2 Control - 'DoGoToURL()' Remote Code Execution (RCE)
Wondershare Dr.Fone 12.0.7 – Privilege Escalation (ElevationService)
# Exploit Title: Wondershare Dr.Fone 12.0.7 - Privilege Escalation (ElevationService)
ExifTool 12.23 – Arbitrary Code Execution
# Exploit Title: ExifTool 12.23 - Arbitrary Code Execution