Результаты поиска

  1. Exploiter

    Exploit Microsoft Office Word - '.RTF' Malicious HTA Execution (Metasploit)

    Microsoft Office Word - '.RTF' Malicious HTA Execution (Metasploit) ## # This module requires Metasploit: http://metasploit.com/download # Current source: https://github.com/rapid7/metasploit-framework ## require 'msf/core' class MetasploitModule < Msf::Exploit::Remote Rank =...
  2. Exploiter

    Exploit WePresent WiPG-1000 - Command Injection (Metasploit)

    WePresent WiPG-1000 - Command Injection (Metasploit) ## # This module requires Metasploit: http://metasploit.com/download # Current source: https://github.com/rapid7/metasploit-framework ## require 'msf/core' class MetasploitModule < Msf::Exploit::Remote Rank = ExcellentRanking include...
  3. Exploiter

    Exploit October CMS 1.0.412 - Multiple Vulnerabilities

    October CMS 1.0.412 - Multiple Vulnerabilities October CMS v1.0.412 several vulnerabilities ############################################ Information =========== Name: October CMS v1.0.412 (build 412) Homepage: http://octobercms.com Vulnerability: several issues, including PHP...
  4. Exploiter

    Exploit Realtek Audio Driver 6.0.1.7898 (Windows 10) - Dolby Audio X2 Service Privilege Escalation

    Realtek Audio Driver 6.0.1.7898 (Windows 10) - Dolby Audio X2 Service Privilege Escalation Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1075 Windows: Dolby Audio X2 Service Elevation of Privilege Platform: Windows 10 + Realtek Audio Driver version 6.0.1.7898 (on a Lenovo...
  5. Exploiter

    Exploit VMware Workstation 15.1.0 - DLL Hijacking

    VMware Workstation 15.1.0 - DLL Hijacking #--------------------------------------------------------- # Title: VMware Workstation DLL hijacking < 15.1.0 # Date: 2019-05-14 # Author: Miguel Mendez Z. & Claudio Cortes C. # Team: www.exploiting.cl # Vendor: https://www.vmware.com # Version: VMware...
  6. Exploiter

    Exploit HPE OpenCall Media Platform (OCMP) 4.3.2 - Cross-Site Scripting / Remote File Inclusion

    HPE OpenCall Media Platform (OCMP) 4.3.2 - Cross-Site Scripting / Remote File Inclusion Source: https://blogs.securiteam.com/index.php/archives/3087 SSD Advisory – HPE OpenCall Media Platform (OCMP) Multiple Vulnerabilities Want to get paid for a vulnerability similar to this one? Contact us...
  7. Exploiter

    Exploit Apple Safari - Array concat Memory Corruption

    Apple Safari - Array concat Memory Corruption <!-- Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1095 There is an out-of-bounds memcpy in Array.concat that can lead to memory corruption. In builtins/ArrayPrototype.js, the function concatSlowPath calls a native method...
  8. Exploiter

    Exploit Oracle VirtualBox Guest Additions 5.1.18 - Unprivileged Windows User-Mode Guest Code Double-Free

    Oracle VirtualBox Guest Additions 5.1.18 - Unprivileged Windows User-Mode Guest Code Double-Free /* Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1227 We have discovered a heap double-free vulnerability in the latest version of VirtualBox (5.1.18), with Guest Additions...
  9. Exploiter

    Exploit FlySpray 1.0-rc4 - Cross-Site Scripting / Cross-Site Request Forgery

    FlySpray 1.0-rc4 - Cross-Site Scripting / Cross-Site Request Forgery # Exploit Title: XSRF Stored FlySpray 1.0-rc4 (XSS2CSRF add admin account) # Date: 19/04/2017 # Exploit Author: Cyril Vallicari / HTTPCS / ZIWIT : https://www.openoffice.org # Version: 1.0-rc4 # Tested on: Windows 7 x64 SP1 /...
  10. Exploiter

    Exploit Google Chrome V8 - Turbofan JSCallReducer::ReduceArrayIndexOfIncludes Out-of-Bounds Read/Write

    Google Chrome V8 - Turbofan JSCallReducer::ReduceArrayIndexOfIncludes Out-of-Bounds Read/Write <!-- Since commit https://chromium.googlesource.com/v8/v8.git/+/c22bb466d8934685d897708119543d099b9d2a9a turbofan supports inlining calls to array.includes and array.indexOf. The logic of the...
  11. Exploiter

    Exploit OpenProject 5.0.0 - 8.3.1 - SQL Injection

    OpenProject 5.0.0 - 8.3.1 - SQL Injection SEC Consult Vulnerability Lab Security Advisory < 20190510-0 > ======================================================================= title: Unauthenticated SQL Injection vulnerability product: OpenProject vulnerable...
  12. Exploiter

    Exploit nt!_SEP_TOKEN_PRIVILEGES - Single Write EoP Protect

    nt!_SEP_TOKEN_PRIVILEGES - Single Write EoP Protect 41924.pdf
  13. Exploiter

    Exploit HackBack - A DIY Guide

    HackBack - A DIY Guide _ _ _ ____ _ _ | | | | __ _ ___| | __ | __ ) __ _ ___| | _| | | |_| |/ _` |/ __| |/ / | _ \ / _` |/ __| |/ / | | _ | (_| | (__| < | |_) | (_| | (__| <|_|...
  14. Exploiter

    Exploit PrivateTunnel Client 2.8 - Local Buffer Overflow (SEH)

    PrivateTunnel Client 2.8 - Local Buffer Overflow (SEH) #!/usr/bin/python # Exploit Title : Private Tunnel VPN Client 2.8 - Local Buffer Overflow (SEH) # Date : 25/04/2017 # Exploit Author : Muhann4d # Vendor Homepage : https://www.privatetunnel.com # Software Link ...
  15. Exploiter

    Exploit Flexispy

    Flexispy ______ __ ______ _ __ ____ ____ ____ ______ / ____// / / ____/| |/ / / _// __ \ / _// ____/ / /_ / / / __/ | / / / / / / / / / / __/ / __/ / /___ / /___ / | _/ / / /_/ /_/ / / /___ /_/ /_____//_____/...
  16. Exploiter

    Exploit HackBack - A DIY Guide For Those Without The Patience To Wait For Whistleblowers

    HackBack - A DIY Guide For Those Without The Patience To Wait For Whistleblowers _ _ _ ____ _ _ | | | | __ _ ___| | __ | __ ) __ _ ___| | _| | | |_| |/ _` |/ __| |/ / | _ \ / _` |/ __| |/ / | |...
  17. Exploiter

    Exploit [Spanish] HackBack - A DIY Guide

    [Spanish] HackBack - A DIY Guide _ _ _ ____ _ _ | | | | __ _ ___| | __ | __ ) __ _ ___| | _| | | |_| |/ _` |/ __| |/ / | _ \ / _` |/ __| |/ / | | _ | (_| | (__| < | |_) | (_| | (__| <|_|...
  18. Exploiter

    Exploit Oracle VM VirtualBox 5.1.14 r112924 - Unprivileged Host User to Host Kernel Privilege Escalation via ALSA config

    Oracle VM VirtualBox 5.1.14 r112924 - Unprivileged Host User to Host Kernel Privilege Escalation via ALSA config /* Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1141 This is another way to escalate from an unprivileged userspace process into the VirtualBox process, which...
  19. Exploiter

    Exploit Oracle VM VirtualBox 5.0.32 r112930 (x64) - Windows Process COM Injection Privilege Escalation

    Oracle VM VirtualBox 5.0.32 r112930 (x64) - Windows Process COM Injection Privilege Escalation Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1103 VirtualBox: Windows Process COM Injection EoP Platform: VirtualBox v5.0.32 r112930 x64 (Tested on Windows 10) Class: Elevation...
  20. Exploiter

    Exploit Easy MOV Converter 1.4.24 - Local Buffer Overflow (SEH)

    Easy MOV Converter 1.4.24 - Local Buffer Overflow (SEH) #!/usr/bin/python # Exploit Title : Easy MOV Converter - 'Enter User Name' Field SEH Overwrite POC # Date : 12/03/2017 # Exploit Author : Muhann4d # Vendor Homepage : http://www.divxtodvd.net/ # Software Link ...
  21. Exploiter

    Exploit Oracle VM VirtualBox - Guest-to-Host Privilege Escalation via Broken Length Handling in slirp Copy

    Oracle VM VirtualBox - Guest-to-Host Privilege Escalation via Broken Length Handling in slirp Copy Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1086 There is a vulnerability in VirtualBox that permits an attacker with root privileges in a virtual machine with a NAT...
  22. Exploiter

    Exploit Oracle VM VirtualBox - Environment and ioctl Unprivileged Host User to Host Kernel Privilege Escalation

    Oracle VM VirtualBox - Environment and ioctl Unprivileged Host User to Host Kernel Privilege Escalation Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1091 This bug report describes two separate issues that, when combined, allow any user on a Linux host system on which...
  23. Exploiter

    Exploit Oracle VM VirtualBox - 'virtio-net' Guest-to-Host Out-of-Bounds Write

    Oracle VM VirtualBox - 'virtio-net' Guest-to-Host Out-of-Bounds Write Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1136 This is a vulnerability that affects VirtualBox VMs that use a virtio network adapter (which is a non-standard configuration). It permits the guest...
  24. Exploiter

    Exploit Microsoft Windows 10 (Build 10586) - 'IEETWCollector' Arbitrary Directory/File Deletion Privilege Escalation

    Microsoft Windows 10 (Build 10586) - 'IEETWCollector' Arbitrary Directory/File Deletion Privilege Escalation /* Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1093 Windows: IEETWCollector Arbitrary Directory/File Deletion EoP Platform: Windows 10 10586 (not tested on...
  25. Exploiter

    Exploit Microsoft Windows 10 - Runtime Broker ClipboardBroker Privilege Escalation

    Microsoft Windows 10 - Runtime Broker ClipboardBroker Privilege Escalation Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1079 Windows: Runtime Broker ClipboardBroker EoP Platform: Windows 10 10586/14393 not tested 8.1 Update 2 Class: Elevation of Privilege Summary: The...
Сверху Снизу