Blog RSSExploits RSSFacebook

LOCAL

Date D   Description Plat. Author
2020-05-22   Druva inSync Windows Client 6.6.3 - Local Privilege Escalation 24 LOCAL Matteo Malvica
2020-05-21   CloudMe 1.11.2 - Buffer Overflow (SEH_DEP_ASLR) 21 LOCAL Xenofon Vassilakopoulos
2020-05-14   Dameware Remote Support 12.1.1.273 - Buffer Overflow (SEH) 18 LOCAL gurbanli
2020-05-13   Remote Desktop Audit 2.3.0.157 - Buffer Overflow (SEH) 24 LOCAL gurbanli
2020-05-12   MacOS 320.whatis Script - Privilege Escalation 18 LOCAL Csaba Fitzl
2020-05-12   LanSend 3.2 - Buffer Overflow (SEH) 19 LOCAL gurbanli
2020-05-11   SolarWinds MSP PME Cache Service 1.1.14 - Insecure File Permissions 19 LOCAL Jens Regel
2020-05-05   Oracle Database 11g Release 2 - 'OracleDBConsoleorcl' Unquoted Service Path 18 LOCAL Nguyen Khang
2020-05-04   Frigate 3.36 - Buffer Overflow (SEH) 17 LOCAL Xenofon Vassilakopoulos
2020-05-04   Outline Service 1.3.3 - 'Outline Service ' Unquoted Service Path 18 LOCAL Minh Tuan
2020-04-29   Druva inSync Windows Client 6.5.2 - Local Privilege Escalation 24 LOCAL Chris Lyne
2020-04-29   EmEditor 19.8 - Insecure File Permissions 23 LOCAL SajjadBnd
2020-04-29   Internet Download Manager 6.37.11.1 - Stack Buffer Overflow (PoC) 21 LOCAL Vulnerability-Lab
2020-04-29   Andrea ST Filters Service 1.0.64.7 - 'Andrea ST Filters Service ' Unquoted Service Path 20 LOCAL Roberto Piña
2020-04-28   NVIDIA Update Service Daemon 1.0.21 - 'nvUpdatusService' Unquoted Service Path 26 LOCAL Roberto Piña
2020-04-28   Docker-Credential-Wincred.exe - Privilege Escalation (Metasploit) 19 LOCAL Metasploit
2020-04-28   Docker-Credential-Wincred.exe - Privilege Escalation (Metasploit) 22 LOCAL Metasploit
2020-04-27   Source Engine CS:GO BuildID: 4937372 - Arbitrary Code Execution 19 LOCAL 0xEmma
2020-04-24   Popcorn Time 6.2 - 'Update service' Unquoted Service Path 25 LOCAL Uriel Yochpaz
2020-04-22   RM Downloader 3.1.3.2.2010.06.13 - 'Load' Buffer Overflow (SEH) 26 LOCAL Felipe Winsnes
2020-04-21   Oracle Solaris Common Desktop Environment 1.6 - Local Privilege Escalation 25 LOCAL Marco Ivaldi
2020-04-20   Atomic Alarm Clock x86 6.3 - 'AtomicAlarmClock' Unquoted Service Path 17 LOCAL boku
2020-04-20   Rubo DICOM Viewer 2.0 - Buffer Overflow (SEH) 23 LOCAL bzyo
2020-04-20   Nsauditor 3.2.1.0 - Buffer Overflow (SEH+ASLR bypass (3 bytes overwrite)) 23 LOCAL Cervoise
2020-04-20   Atomic Alarm Clock 6.3 - Stack Overflow (Unicode+SEH) 23 LOCAL boku
2020-04-17   Code Blocks 16.01 - Buffer Overflow (SEH) UNICODE 21 LOCAL T3jv1l
2020-04-17   Easy MPEG to DVD Burner 1.7.11 - Buffer Overflow (SEH + DEP) 25 LOCAL Bailey Belisario
2020-04-16   VMware Fusion - USB Arbitrator Setuid Privilege Escalation (Metasploit) 21 LOCAL Metasploit
2020-04-16   VMware Fusion - USB Arbitrator Setuid Privilege Escalation (Metasploit) 23 LOCAL Metasploit
2020-04-15   BlazeDVD 7.0.2 - Buffer Overflow (SEH) 22 LOCAL areyou1or0
2020-04-14   B64dec 1.1.2 - Buffer Overflow (SEH Overflow + EggHunter) 21 LOCAL Andy Bowden
2020-04-13   Free Desktop Clock x86 Venetian Blinds Zipper 3.0 - Unicode Stack Overflow (SEH) 22 LOCAL boku
2020-04-10   Windscribe 1.83 - 'WindscribeService' Unquoted Service Path 25 LOCAL MgThuraMoeMyint
2020-04-06   Microsoft NET USE win10 - Insufficient Authentication Logic 23 LOCAL hyp3rlinx
2020-04-06   Triologic Media Player 8 - '.m3l' Buffer Overflow (Unicode) (SEH) 20 LOCAL Felipe Winsnes
2020-04-06   Memu Play 7.1.3 - Insecure Folder Permissions 18 LOCAL chuyreds
2020-04-03   AIDA64 Engineer 6.20.5300 - 'Report File' filename Buffer Overflow (SEH) 19 LOCAL Hodorsec
2020-04-02   DiskBoss 7.7.14 - 'Input Directory' Local Buffer Overflow (PoC) 19 LOCAL Paras Bhatia
2020-04-01   10Strike LANState 9.32 - 'Force Check' Buffer Overflow (SEH) 25 LOCAL Hodorsec
2020-03-30   Microsoft Windows 10 (1903/1909) - 'SMBGhost' SMB3.1.1 'SMB2_COMPRESSION_CAPABILITIES' Local Privile 21 LOCAL Daniel García Gutiérrez
2020-03-30   10-Strike Network Inventory Explorer 9.03 - 'Read from File' Buffer Overflow (SEH) (ROP) 18 LOCAL Hodorsec
2020-03-27   Easy RM to MP3 Converter 2.7.3.700 - 'Input' Local Buffer Overflow (SEH) 20 LOCAL Felipe Winsnes
2020-03-25   10-Strike Network Inventory Explorer 8.54 - 'Add' Local Buffer Overflow (SEH) 27 LOCAL Felipe Winsnes
2020-03-25   10-Strike Network Inventory Explorer - 'srvInventoryWebServer' Unquoted Service Path 20 LOCAL Felipe Winsnes
2020-03-25   AVAST SecureLine 5.5.522.0 - 'SecureLine' Unquoted Service Path 23 LOCAL Roberto Piña
2020-03-24   Veyon 4.3.4 - 'VeyonService' Unquoted Service Path 20 LOCAL Víctor García
2020-03-20   VMware Fusion 11.5.2 - Privilege Escalation 25 LOCAL Rich Mirch
2020-03-17   VMWare Fusion - Local Privilege Escalation 20 LOCAL Grimm
2020-03-17   Microsoft VSCode Python Extension - Code Execution 20 LOCAL Doyensec
2020-03-18   NetBackup 7.0 - 'NetBackup INET Daemon' Unquoted Service Path 26 LOCAL El Masas
2020-03-13   AnyBurn 4.8 - Buffer Overflow (SEH) 24 LOCAL Richard Davy
2020-03-12   ASUS AAHM 1.00.22 - 'asHmComSvc' Unquoted Service Path 21 LOCAL Roberto Piña
2020-03-11   ASUS AXSP 1.02.00 - 'asComSvc' Unquoted Service Path 24 LOCAL Roberto Piña
2020-03-09   Counter Strike: GO - '.bsp' Memory Control (PoC) 23 LOCAL 0day enthusiast
2020-03-09   OpenSMTPD - OOB Read Local Privilege Escalation (Metasploit) 26 LOCAL Metasploit
2020-03-03   Microsoft Windows - 'WizardOpium' Local Privilege Escalation 26 LOCAL piotrflorczyk
2020-03-06   Deep Instinct Windows Agent 1.2.29.0 - 'DeepMgmtService' Unquoted Service Path 21 LOCAL Oscar Flores
2020-03-06   ASUS GiftBox Desktop 1.1.1.127 - 'ASUSGiftBoxDesktop' Unquoted Service Path 19 LOCAL Oscar Flores
2020-03-06   SpyHunter 4 - 'SpyHunter 4 Service' Unquoted Service Path 21 LOCAL Alejandro Reyes
2020-03-06   Iskysoft Application Framework Service 2.4.3.241 - 'IsAppService' Unquoted Service Path 23 LOCAL Alejandro Reyes
2020-03-02   Wing FTP Server 6.2.3 - Privilege Escalation 20 LOCAL Cary Hooper
2020-03-02   Cyberoam Authentication Client 2.1.2.7 - Buffer Overflow (SEH) 20 LOCAL Andrey Stoykov
2020-02-24   Diamorphine Rootkit - Signal Privilege Escalation (Metasploit) 29 LOCAL Metasploit
2020-02-24   Diamorphine Rootkit - Signal Privilege Escalation (Metasploit) 23 LOCAL Metasploit
2020-02-24   Android Binder - Use-After-Free (Metasploit) 22 LOCAL Metasploit
2020-02-24   Android Binder - Use-After-Free (Metasploit) 19 LOCAL Metasploit
2020-02-17   Cuckoo Clock v5.0 - Buffer Overflow 19 LOCAL boku
2020-02-17   TFTP Turbo 4.6.1273 - 'TFTP Turbo 4' Unquoted Service Path 24 LOCAL boku
2020-02-17   DHCP Turbo 4.61298 - 'DHCP Turbo 4' Unquoted Service Path 18 LOCAL boku
2020-02-17   MSI Packages Symbolic Links Processing - Windows 10 Privilege Escalation 18 LOCAL nu11secur1ty
2020-02-17   BOOTP Turbo 2.0.1214 - 'BOOTP Turbo' Unquoted Service Path 19 LOCAL boku
2020-02-17   HP System Event 1.2.9.0 - 'HPWMISVC' Unquoted Service Path 21 LOCAL Roberto Piña
2020-01-30   PHP 7.0 < 7.4 (Unix) - 'debug_backtrace' disable_functions Bypass 17 LOCAL mm0r1
2020-01-27   Microsoft Windows Kernel - Information Disclosure 22 LOCAL Bitdefender
2020-02-14   SprintWork 2.3.1 - Local Privilege Escalation 30 LOCAL boku
2020-02-14   EPSON EasyMP Network Projection 2.81 - 'EMP_NSWLSV' Unquoted Service Path 25 LOCAL Roberto Piña
2020-02-14   HomeGuard Pro 9.3.1 - Insecure Folder Permissions 19 LOCAL boku
2020-02-13   OpenTFTP 1.66 - Local Privilege Escalation 20 LOCAL boku
2020-02-12   HP System Event Utility - Local Privilege Escalation 25 LOCAL hyp3rlinx
2020-02-12   MyVideoConverter Pro 3.14 - 'TVSeries' Buffer Overflow 20 LOCAL ZwX
2020-02-12   MyVideoConverter Pro 3.14 - 'Output Folder' Buffer Overflow 21 LOCAL ZwX
2020-02-12   MyVideoConverter Pro 3.14 - 'Movie' Buffer Overflow 23 LOCAL ZwX
2020-02-06   Sudo 1.8.25p - 'pwfeedback' Buffer Overflow 19 LOCAL Dylan Katz
2020-02-11   Wedding Slideshow Studio 1.36 - 'Name' Buffer Overflow 20 LOCAL ZwX
2020-02-11   Disk Savvy Enterprise 12.3.18 - Unquoted Service Path 25 LOCAL boku
2020-02-11   Disk Sorter Enterprise 12.4.16 - 'Disk Sorter Enterprise' Unquoted Service Path 21 LOCAL boku
2020-02-11   DVD Photo Slideshow Professional 8.07 - 'Name' Buffer Overflow 24 LOCAL ZwX
2020-02-11   Sync Breeze Enterprise 12.4.18 - 'Sync Breeze Enterprise' Unquoted Service Path 26 LOCAL boku
2020-02-11   FreeSSHd 1.3.1 - 'FreeSSHDService' Unquoted Service Path 22 LOCAL boku
2020-02-11   freeFTPd v1.0.13 - 'freeFTPdService' Unquoted Service Path 23 LOCAL boku
2020-02-11   DVD Photo Slideshow Professional 8.07 - 'Key' Buffer Overflow 18 LOCAL ZwX
2020-02-11   Torrent iPod Video Converter 1.51 - Stack Overflow 24 LOCAL boku
2020-02-10   Ricoh Driver - Privilege Escalation (Metasploit) 20 LOCAL Metasploit
2020-02-10   Ricoh Driver - Privilege Escalation (Metasploit) 18 LOCAL Metasploit
2020-02-10   Wedding Slideshow Studio 1.36 - 'Key' Buffer Overflow 22 LOCAL ZwX
2020-02-07   Windscribe - WindscribeService Named Pipe Privilege Escalation (Metasploit) 24 LOCAL Metasploit
2020-02-06   ELAN Smart-Pad 11.10.15.1 - 'ETDService' Unquoted Service Path 22 LOCAL ZwX
2020-02-05   xglance-bin 11.00 - Privilege Escalation 18 LOCAL redtimmysec
2020-02-05   Socat 1.7.3.4 - Heap-Based Overflow (PoC) 23 LOCAL hieubl
2020-01-30   Microsoft Windows Media Center WMV / WMA 6.3.9600.16384 - Code Execution 28 LOCAL Eduardo Braun Prado
2020-01-29   Microsoft Windows 10 - Theme API 'ThemePack' File Parsing 27 LOCAL Eduardo Braun Prado
2020-01-29   XMLBlueprint 16.191112 - XML External Entity Injection 22 LOCAL Javier Olmedo
2020-01-27   Torrent 3GP Converter 1.51 - Stack Overflow (SEH) 21 LOCAL boku
2020-01-22   Ricoh Printer Drivers - Local Privilege Escalation 21 LOCAL pentagrid
2020-01-23   Reliable Datagram Sockets (RDS) - rds_atomic_free_op NULL pointer dereference Privilege Escalation ( 23 LOCAL Metasploit
2020-01-23   Reliable Datagram Sockets (RDS) - rds_atomic_free_op NULL pointer dereference Privilege Escalation ( 23 LOCAL Metasploit
2020-01-21   NEOWISE CARBONFTP 1.4 - Weak Password Encryption 23 LOCAL hyp3rlinx
2020-01-20   Easy XML Editor 1.7.8 - XML External Entity Injection 21 LOCAL Javier Olmedo
2020-01-17   Plantronics Hub 3.13.2 - SpokesUpdateService Privilege Escalation (Metasploit) 22 LOCAL Metasploit
2020-01-17   Plantronics Hub 3.13.2 - SpokesUpdateService Privilege Escalation (Metasploit) 22 LOCAL Metasploit
2020-01-17   Trend Micro Maximum Security 2019 - Privilege Escalation 22 LOCAL hyp3rlinx
2020-01-17   Trend Micro Maximum Security 2019 - Arbitrary Code Execution 20 LOCAL hyp3rlinx
2020-01-17   Torrent FLV Converter 1.51 Build 117 - Stack Oveflow (SEH partial overwrite) 23 LOCAL antonio
2020-01-07   Microsoft Windows 10 (19H1 1901 x64) - 'ws2ifsl.sys' Use After Free Local Privilege Escalation (kASL 20 LOCAL bluefrostsec
2020-01-15   Microsoft Windows - CryptoAPI (Crypt32.dll) Elliptic Curve Cryptography (ECC) Spoof Code-Signing Cer 19 LOCAL Oliver Lyak
2020-01-16   SunOS 5.10 Generic_147148-26 - Local Privilege Escalation 25 LOCAL Marco Ivaldi
2020-01-14   VPN unlimited 6.1 - Unquoted Service Path 23 LOCAL Amin Rawah
2020-01-13   Microsoft Windows 10 build 1809 - Local Privilege Escalation (UAC Bypass) 22 LOCAL Nassim Asrir
2020-01-13   Allok RM RMVB to AVI MPEG DVD Converter 3.6.1217 - Stack Overflow (SEH) 22 LOCAL antonio
2020-01-13   Allok Video Converter 4.6.1217 - Stack Overflow (SEH) 25 LOCAL antonio
2020-01-13   Advanced System Repair Pro 1.9.1.7 - Insecure File Permissions 22 LOCAL ZwX
2020-01-10   TotalAV 2020 4.14.31 - Privilege Escalation 25 LOCAL Kusol Watchara-Apanukorn
2020-01-09   MSN Password Recovery 1.30 - XML External Entity Injection 19 LOCAL ZwX
2020-01-07   AnyDesk 5.4.0 - Unquoted Service Path 26 LOCAL SajjadBnd
2020-01-02   Microsoft Windows - Shell COM Server Registrar Local Privilege Escalation 22 LOCAL 0vercl0k