IDEAL Administration 2010 10.2 – Local Buffer Overflow
#!/usr/bin/env python
local
local 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
ZipWrangler 1.20 – ‘.zip’ File (SEH)
#!/usr/bin/perl
ZipGenius 6.3.1.2552 – ‘zgtips.dll’ Local Stack Buffer Overflow
# Exploit Title : ZipGenius zgtips.dll Stack Buffer Overflow
TweakFS 1.0 FSX Edition – Stack Buffer Overflow
# Exploit Title : TweakFS 1.0 (FSX Edition)
Archive Searcher – ‘.zip’ Local Stack Overflow
#!/usr/bin/ruby
Winamp 5.572 – ‘whatsnew.txt’ (SEH) (Metasploit)
# Title: Winamp 5.572 whatsnew.txt SEH (MSF)
Local Glibc Shared Library (.so) 2.11.1 – Code Execution
# Exploit Title: Local Glibc shared library (.so) exploit
McAfee Email Gateway (formerly IronMail) – Internal Information Disclosure
Advisory Name: Internal Information Disclosure in McAfee Email Gateway (formerly IronMail)
McAfee Email Gateway (formerly IronMail) – Local Privilege Escalation
Advisory Name: Local Privilege Escalation in McAfee Email Gateway (formerly IronMail)
eZip Wizard 3.0 – ‘.zip’ File (SEH)
#!/usr/bin/perl
ZipCentral – ‘.zip’ File (SEH)
#!/usr/bin/python
ZipScan 2.2c – Local Overflow (SEH)
#!/usr/bin/perl
Free MP3 CD Ripper 2.6 – ‘.wav’ Local Overflow
# Exploit Title: Free MP3 CD Ripper 2.6 0 day
TugZip 3.5 Archiver – ‘.ZIP’ File Buffer Overflow
#!/usr/bin/perl
Adobe Reader – Escape From ‘.PDF’ Execute Embedded Executable
Title : Escape From PDF
WM Downloader 3.0.0.9 – ‘.asx’ Local Buffer Overflow
#!/usr/bin/python
ASX to MP3 Converter 3.0.0.100 – Local Stack Overflow
#!/usr/bin/python
Shadow Stream Recorder 3.0.1.7 – ‘.asx’ Local Buffer Overflow
#!/usr/bin/python
RM Downloader 3.0.2.1 – ‘.asx’ Local Buffer Overflow (SEH)
#!/usr/bin/python
ASX to MP3 Converter 3.0.0.100 – ‘.pls’ Universal Stack Overflow
#!/usr/bin/perl
Stud_PE 2.6.05 – Local Stack Overflow
###################################################################
Mini-stream Ripper 3.1.0.8 – Local Stack Overflow
# Mini-stream Ripper 3.1.0.8 => Local stack overflow exploit
KenWard’s Zipper 1.400 – Local Buffer Overflow (2)
#!/usr/bin/python
Sun Connection Update Manager for Solaris – Multiple Insecure Temporary File Creation Vulnerabilities
source: https://www.securityfocus.com/bid/38928/info
Kenward Zipper 1.4 – Local Stack Buffer Overflow
#!/usr/bin/python
Crimson Editor r3.70 – Overwrite (SEH)
#!/usr/bin/python
ZippHo 3.0.6 – ‘.zip’ Local Stack Buffer Overflow
#!/usr/bin/python
Mediacoder – ‘.lst’ Local Buffer Overflow
//====================================================
myMP3-Player 3.0 – ‘.m3u’ Local Buffer Overflow (SEH)
#!/usr/bin/perl
VariCAD 2010-2.05 EN – Local Buffer Overflow
# Exploit Title: VariCAD 2010-2.05 EN Local buffer overflow :)
Virtual PC Hypervisor – Memory Protection
-----BEGIN PGP SIGNED MESSAGE-----
Windisc 1.3 – Local Stack Buffer Overflow
|------------------------------------------------------------------|
QuickZip 4.60.019 (Windows XP SP3) – Local Stack Buffer Overflow
# Exploit Title : QuickZip 4.60.019 Stack BOF - XP SP3
Yahoo Player 1.0 – ‘.m3u’ Local Buffer Overflow
# Title: Yahoo Player v1.0 (.m3u) Buffer Overflow Exploit (direct EIP overwrite)
Mini-stream Ripper 3.0.1.1 – ‘.m3u’ HREF Buffer Overflow
#!/usr/bin/env python
Lenovo Hotkey Driver 5.33 – Local Privilege Escalation
Author: Chilik Tamir - Amdocs Power Security Testing Group