local

IKE and AuthIP IPsec Keyring Modules Service (IKEEXT) – Missing DLL (Metasploit)

##

KingView 6.53 – ‘KChartXY’ ActiveX File Creation / Overwrite

KingView 6.53 – ‘SuperGrid’ Insecure ActiveX Control

KingView Insecure ActiveX Control Proof of Concept - SuperGrid.ocx

Apple Mac OSX 10.8.4 – Local Privilege Escalation

#!/usr/bin/python

Apple Mac OSX – Sudo Password Bypass (Metasploit)

##

VMware – Setuid VMware-mount Unsafe popen(3) (Metasploit)

##

Winamp 5.63 – ‘winamp.ini’ Local Overflow

# Exploit Title: winampevilskin.py

VMware – Setuid VMware-mount Popen lsb_release Privilege Escalation

// Source: http://blog.cmpxchg8b.com/2013/08/security-debianisms.html

Chasys Draw IES – Local Buffer Overflow (Metasploit)

##

Mozilla Firefox 5.0 < 15.0.1 - __exposedProps__ XCS Code Execution (Metasploit)

##

Easy LAN Folder Share 3.2.0.100 – Local Buffer Overflow (SEH)

#!/usr/bin/python

Linux Kernel 3.7.6 (RedHat x86/x64) – ‘MSR’ Driver Privilege Escalation

// PoC exploit for /dev/cpu/*/msr, 32bit userland on a 64bit host

Microsoft Windows – HWND_BROADCAST Low to Medium Integrity Privilege Escalation (MS13-005) (Metasploit)

##

Karotz Smart Rabbit 12.07.19.00 – Multiple Vulnerabilities

Trustwave SpiderLabs Security Advisory TWSL2013-021:

Agnitum Outpost Security Suite 8.1 – Local Privilege Escalation

# Exploit Title: Agnitum Outpost security suite privilege escalation - 0Day

Novell Client 2 SP3 – ‘nicm.sys 3.1.11.0’ Local Privilege Escalation

# Novell Client 2 SP3 Privilege escalation exploit

Super Player 3500 – ‘.m3u’ Local Stack Buffer Overflow

#!/usr/bin/perl

Symantec Workspace Virtualization 6.4.1895.0 – Kernel Mode Privilege Escalation

# Symantec Workspace Virtualization 6.4.1895.0 Local Kernel Mode Privilege Escalation Exploit

BlazeDVD Pro Player 6.1 – Direct RET Local Stack Buffer Overflow

#!/usr/bin/perl

Corel PDF Fusion – Local Stack Buffer Overflow (Metasploit)

##

Cisco WebEx One-Click Client Password Encryption – Information Disclosure

// source: https://www.securityfocus.com/bid/61304/info

Solaris Recommended Patch Cluster 6/19 (x86) – Local Privilege Escalation

Solaris Recommended Patch Cluster 6/19 local root on x86

ERS Viewer 2013 – ‘.ERS’ File Handling Buffer Overflow (Metasploit)

##

Adobe Reader X 10.1.4.38 – ‘.BMP’/’.RLE’ Heap Corruption

'''

ABBS Audio Media Player – ‘.LST’ Local Buffer Overflow (Metasploit)

##

Microsoft Windows – ‘EPATHOBJ::pprFlattenRec’ Local Privilege Escalation (Metasploit)

##

Adrenalin Player 2.2.5.3 – ‘.wvx’ Local Buffer Overflow (SEH)

#Exploit Title:Adrenalin Player 2.2.5.3 (.wvx) SEH-Buffer Overflow

AudioCoder (.lst) – Local Buffer Overflow (Metasploit)

require 'msf/core'

Static HTTP Server 1.0 – Local Overflow (SEH)

#!/usr/bin/env python

YardRadius – Multiple Local Format String Vulnerabilities

source: https://www.securityfocus.com/bid/61356/info

FreeBSD 9 – Address Space Manipulation Privilege Escalation (Metasploit)

##

Novell Client 2 SP3 – ‘nicm.sys’ Local Privilege Escalation (Metasploit)

##

ZPanel zsudo – Local Privilege Escalation (Metasploit)

##

AudioCoder 0.8.22 – ‘.lst’ Direct RETN Buffer Overflow

# !/usr/bin/python

McAfee Data Loss Prevention – Multiple Information Disclosure Vulnerabilities

source: https://www.securityfocus.com/bid/61033/info

Novell Client 4.91 SP4 – ‘nwfs.sys’ Local Privilege Escalation (Metasploit)

##

AudioCoder 0.8.22 – ‘.m3u’ Direct RETN Buffer Overflow

# !/usr/bin/python

aSc Timetables 2013 – Local Stack Buffer Overflow

#!/usr/bin/python

Mediacoder PMP Edition 0.8.17 – ‘.m3u’ Local Buffer Overflow

print """

Mediacoder – ‘.m3u’ Local Buffer Overflow (SEH)

#!/usr/bin/python

Mediacoder (.lst) – Local Buffer Overflow (SEH)

#!/usr/bin/python

FreeBSD 9.0 < 9.1 - 'mmap/ptrace' Local Privilege Escalation

#include

Adrenalin Player 2.2.5.3 – ‘.asx’ Local Buffer Overflow (SEH)

# ======================================================================================#

Winamp 5.12 – ‘.m3u’ Local Stack Buffer Overflow

# Exploit Title: Winamp 5.12 .m3u stack based buffer overflow

Adrenalin Player 2.2.5.3 – ‘.wax’ Local Buffer Overflow (SEH)

# !/usr/bin/python

Linux Kernel < 3.8.9 (x86-64) - 'perf_swevent_init' Local Privilege Escalation (2)

#define _GNU_SOURCE

Linux Kernel 3.3.5 – ‘b43’ Wireless Driver Privilege Escalation

source: https://www.securityfocus.com/bid/60410/info

Microsoft Windows NT/2000/2003/2008/XP/Vista/7/8 – ‘EPATHOBJ’ Local Ring

#ifndef WIN32_NO_STATUS

BOINC Manager (Seti@home) 7.0.64 – Field Buffer Overflow (SEH)

# Exploit Title: BOINC Manager 7.0.64 Field stack based buffer overflow

AdobeCollabSync – Local Buffer Overflow / Adobe Reader X Sandbox Bypass (Metasploit)

##