QuickZip 4.x – ‘.zip’ Local Universal Buffer Overflow
#!/usr/bin/python
local
local 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
Orbital Viewer 1.04 – ‘.orb’ File Local Universal Overflow (SEH)
#!/usr/bin/python
Mediacoder 0.7.3.4605 – Local Buffer Overflow
Download: http://www.mediacoderhq.com/download.htm
Mozilla Firefox 3.6 – URL Spoofing
# Tested on: Windows XP SP2/3
Apple iTunes 9.0.1 – ‘.pls’ Handling Buffer Overflow
# Exploit Title: iTunes .pls file handling buffer overflow
OtsTurntables Free 1.00.047 – ‘.olf’ Universal Buffer Overflow
#!/usr/bin/python
Ollydbg 2.00 Beta1 – Local Buffer Overflow
# Exploit Title: [Ollydbg 2.00 Beta1 Local Buffer Overflow Exploit]
CastRipper 2.50.70 – ‘.asx’ Playlist Stack Overflow
#!/usr/bin/perl
RadASM 2.2.1.6 – ‘.rap’ Universal Buffer Overflow
#!/usr/bin/python
Accellion Secure File Transfer Appliance – Multiple Command Restriction / Privilege Escalations
source: https://www.securityfocus.com/bid/38176/info
WM Downloader 3.0.0.9 (Windows XP SP3) – PLS PLA
#!/usr/bin/python
Microsoft Windows XP/Vista/2000/2003 – Double-Free Memory Corruption Privilege Escalation
// source: https://www.securityfocus.com/bid/38044/info
feedDemon 3.1.0.9 – ‘.opml’ File Buffer Overflow
This exploit identifies your OS and searches in memory for a RETCODE thus working 100%.*/
UltraISO 9.3.6.2750 – Local Buffer Overflow
This 0day is kickass from fl0 fl0w a.k.a Stefan!
LDAP – Injection
[+] Vurnerebility: LDAP Injection
Linux Kernel 2.6.18 – ‘move_pages()’ Information Leak
Bug NOT discovered by Marcus Meissner of SuSE security
SystemTap 1.0/1.1 – ‘__get_argv()’ / ‘__get_compat_argv()’ Local Memory Corruption
source: https://www.securityfocus.com/bid/38120/info
FoxPlayer 1.7.0 – ‘.m3u’ Local Buffer Overflow
#!/usr/bin/perl
Ipswitch IMAIL 11.01 – Reversible Encryption + weak ACL
|------------------------------------------------------------------|
Qihoo 360 Security Guard 6.1.5.1009 – breg device drivers Privilege Escalation
# Software Link: [http://sd.360.cn/sd_download1.html?src=360home]
DeepBurner pro 1.9.0.228 – ‘.dbr’ file Buffer Overflow (Universal)
[~]This is buffer: {[header] 253 bytes + (junk+ next seh + seh addr) + [tail] 957 bytes} dbr/dbi file
CoreFTP 2.1 b1637 – Password field Universal Buffer Overflow
#!/usr/bin/python
Battery Life Toolkit 1.0.9 – ‘bltk_sudo’ Local Privilege Escalation
source: https://www.securityfocus.com/bid/37996/info
Rising AntiVirus 2008/2009/2010 – Local Privilege Escalation
//by Dlrow dlrow1991@ymail.com
IBM DB2 – ‘REPEAT()’ Local Heap Buffer Overflow
source: https://www.securityfocus.com/bid/37976/info
Winamp 5.572 – Local Overflow (SEH)
#!/usr/bin/python
Winamp 5.572 (Windows XP SP3 DE) – ‘whatsnew.txt’ Local Buffer Overflow
# Tested on: WinXP SP3 De
Winamp 5.572 – ‘whatsnew.txt’ Local Stack Overflow
# Tested on: Windows xp sp3
Authentium SafeCentral 2.6 – ‘shdrv.sys’ Local Kernel Ring0 SYSTEM
pModuleBase = &pModuleInfo->Module[0];
Microsoft Internet Explorer – ‘wshom.ocx’ (Run) ActiveX Code Execution (Add Admin)
# Exploit Title: IE wshom.ocx (Run) ActiveX Remote Code Execution ( add admin user)
SOMPL Player 1.0 – Local Buffer Overflow
# Exploit Title : SOMPL Player Buffer Overflow
jetAudio 8.0.0.2 Basic – ‘.m3u’ Local Stack Overflow
#!/usr/bin/perl
MP3 Studio 1.x – ‘.m3u’ Local Stack Overflow (Universal)
#!/usr/bin/perl
RM Downloader – ‘.m3u’ Local Buffer Overflow (SEH)
#!/usr/bin/perl -w
Microsoft Windows NT/2000/2003/2008/XP/Vista/7 – ‘KiTrap0D’ User Mode to Ring Escalation (MS10-015)
Exploit-DB Mirror: https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/11199.zip (KiTrap...
Millenium MP3 Studio 1.x – ‘.m3u’ Local Stack Overflow
#!/usr/bin/perl
VideoLAN VLC Media Player 0.8.6 a/b/c/d (Win32 Universal) – ‘.ass’ Local Buffer Overflow
[%]Works every time,works on any win32 OS,tested on Windows xp sp2.
Audiotran 1.4.1 – Direct RET Buffer Overflow
# Exploit Title: Audiotran v1.4.1 direct RET BOF
Rosoft Media Player 4.4.4 – Local Buffer Overflow (SEH) (1)
# Exploit Title: Rosoft Media Player 4.4.4 Buffer OverFlow Exploit (SEH)
BS.Player 2.51 – Universal Overflow (SEH)
# Exploit Title: BS.Player v2.51 Universal SEH Overflow Exploit
Google SketchUp 7.1.6087 – ‘lib3ds’ 3DS Importer Memory Corruption
#!/usr/bin/python
BS.Player 2.51 – Overwrite (SEH)
# BS.Player v2.51
Winamp 5.05 < 5.13 - '.ini' Local Stack Buffer Overflow
The problem is in the skin field when a long string is
GNU Bash 4.0 – ‘ls’ Control Character Command Injection
source: https://www.securityfocus.com/bid/37776/info
HTMLDOC 1.9.x-r1629 (Windows x86) – ‘.html’ Local Buffer Overflow
download: http://www.htmldoc.org/software.php?VERSION=1.9.x-r1629&FILE=htmldoc/snapshots/htmldoc-1.9.x-r1629.tar.bz2