MicroP 0.1.1.1600 – ‘mppl’ Local Buffer Overflow
# Exploit Title: MicroP malicious MPPL Buffer Overflow
local
local 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
Microsoft Excel – FEATHEADER Record (MS09-067)
#MS Excel Malformed FEATHEADER Record Exploit
A-PDF WAV to MP3 1.0.0 – Universal Local (SEH)
#!/usr/bin/env python
A-PDF WAV to MP3 Converter 1.0.0 – ‘.m3u’ Local Stack Buffer Overflow
# Exploit Title: A-PDF WAV to MP3 Converter 1.0.0 (.m3u) Stack Buffer Overflow
Triologic Media Player 8 – ‘.m3u’ Universal Unicode Local Buffer Overflow (SEH)
# Exploit Title: Triologic Media Player 8 (.m3u) Local Universal Unicode Buffer Overflow [SEH]
MUSE 4.9.0.006 – ‘.pls’ Universal Local Buffer Overflow (SEH)
# Exploit Title: MUSE v4.9.0.006 (.pls) Local Universal Buffer Overflow [SEH]
MUSE 4.9.0.006 – ‘.m3u’ Local Buffer Overflow
# Exploit Title: MUSE v4.9.0.006 (.m3u) Local Buffer Overflow Exploit
Rosoft Media Player 4.4.4 – Local Buffer Overflow (SEH) (2)
#!/usr/bin/python
Xion Player 1.0.125 – Local Stack Buffer Overflow
#!/usr/bin/python
Mediacoder 0.7.5.4710 – ‘Universal’ Local Buffer Overflow (SEH)
#!/usr/bin/env python
Mediacoder 0.7.5.4710 – Local Buffer Overflow
#media coder 0.7.5.4710 0 day buffer overflow exploit
Microsoft Windows – Tracing Registry Key ACL Privilege Escalation
source: https://www.securityfocus.com/bid/42269/info
Fat Player 0.6b – ‘.WAV’ File Processing Buffer Overflow (SEH)
#################################################################################################
myMP3-Player 3.0 – Local Buffer Overflow
# Exploit Title: myMP3-Player 3.0 (NOT SEH Overwrite)
Microsoft Windows – ‘win32k.sys’ Driver ‘CreateDIBPalette()’ Local Buffer Overflow
// source: http://www.ragestorm.net/blogs/?p=255
Easy RM to MP3 2.7.3.700 – ‘.m3u’ / ‘.pls’ / ‘.smi’ / ‘.wpl’ / ‘.wax’ / ‘.wvx’ / ‘.ram’ Local Overflow
# Exploit Title: Easy RM to MP3 2.7.3.700 Local Buffer Overflow (.m3u , .pls , .smi , .wpl , .wax , .wvx , .ram)
Apple iOS – ‘.pdf’ Local Privilege Escalation ‘Jailbreak’
The files contained in the archive link below are those that make use of a pdf exploit in order to jailbreak devices ...
Mini-stream RM-MP3 Converter/WMDownloader/ASX to MP3 Converter – Local Stack Buffer Overflow
####################################################################################
WM Downloader 3.1.2.2 – Local Buffer Overflow (1)
#!/usr/bin/perl
HTML Email Creator 2.42 build 718 – Local Buffer Overflow (SEH)
########################################################################################
WM Downloader 3.1.2.2 2010.04.15 – Local Buffer Overflow (SEH)
#!/usr/bin/python
Zemana AntiLogger ‘AntiLog32.sys’ 1.5.2.755 – Local Privilege Escalation
Zemana AntiLogger AntiLog32.sys OptionalHeader.DataDirectory[IMAGE_DIRECTORY_ENTRY_SECURITY].VirtualAddress ;
QQPlayer 2.3.696.400p1 – ‘.smi’ File Buffer Overflow
#!/usr/bin/env python
Mediacoder 0.7.3.4682 – ‘.m3u’ Universal Buffer Overflow
#!/usr/bin/perl
ZipCentral – ‘.zip’ Local Buffer Overflow (SEH)
# Author : Jiten Pathy
QQPlayer – ‘.cue’ File Buffer Overflow
#!/usr/bin/env python
QQPlayer – ‘.asx’ File Processing Buffer Overflow
#################################################################
Ghostscript – ‘.PostScript’ File Stack Overflow
##########################################################################
Microsoft Windows – Automatic .LNK Shortcut File Code Execution
From: http://www.ivanlef0u.tuxfamily.org/?p=411
MoreAmp – Local Buffer Overflow (SEH) (Metasploit)
#MoreAmp Seh Buffer Overflow (meta)
Mini-stream RM-MP3 Converter 3.1.2.1 – ‘.pls’ Local Stack Buffer Overflow Universal
#Mini-Stream RM-MP3 Converter v3.1.2.1 (.pls) Stack Buffer Overflow
Microsoft Excel – 0x5D record Stack Overflow (MS10-038)
#This is an exploit for MS10-038/CVE-2010-0822
Oracle Solaris Management Console – WBEM Insecure Temporary File Creation
source: https://www.securityfocus.com/bid/41642/info
Oracle Solaris – ‘nfslogd’ Insecure Temporary File Creation
source: https://www.securityfocus.com/bid/41637/info
ASX to MP3 Converter 3.1.2.1 – Multiple OS ASLR + DEP Bypass (SEH) (Metasploit)
# Exploit Title: ASX to MP3 Converter v3.1.2.1 SEH Exploit (Multiple OS, DEP and ASLR Bypass)
Oracle Solaris 8/9/10 – ‘flar’ Insecure Temporary File Creation
source: https://www.securityfocus.com/bid/41619/info
Altair Engineering PBS Pro 10.x – ‘pbs_mom’ Insecure Temporary File Creation
source: https://www.securityfocus.com/bid/41449/info
GSM SIM Utility 5.15 – Direct RET Overflow
# Exploit Title : GSM SIM Utility Local Exploit Direct Ret ver.
HP OpenView Network Node Manager (OV NNM) 7.53 – ‘ovwebsnmpsrv.exe’ Local Buffer Overflow (SEH)
# Exploit Title: HP NNM 7.53 ovwebsnmpsrv.exe Buffer Overflow (SEH)
SasCam 2.7 – ActiveX Head Buffer Overflow
# Exploit Title: SasCam 2.7 ActiveX Head Buffer Overflow
ASX to MP3 Converter 3.1.2.1 – Local Buffer Overflow (SEH)
# Exploit Title: ASX to MP3 Converter Version 3.1.2.1 (2010-03-30) Local
Mini-stream RM-MP3 Converter 3.1.2.1 – ‘.m3u’ Local Buffer Overflow
#By Madjix Dz8[at]hotmail[dot]com
Mediacoder 0.7.3.4682 – Universal Buffer Overflow (SEH)
###################################################################
RM Downloader 3.1.3 (Windows 7) – Local ASLR + DEP Bypass (SEH)
#!/usr/bin/perl
GSM SIM Utility 5.15 – ‘.sms’ File Local Buffer Overflow (SEH)
# Exploit Title : GSM SIM Utility sms file Local SEH BoF