xls2csv version 0.95 suffers from three overflow, one malloc fail, one memory leak, and two null pointer dereference vulnerabilities. Proof of concept code and ASAN analysis is included.
402ac84fc47b7d4da1da0a322e73a447648bd172a8f26bd149008ed8d2e4839e
BearShare Lite version 5.2.5 buffer overflow proof of concept exploit.
a52c5f351ec08e7c33c7ea5194951670316464845b63be28459a553f59dc8844
Proof of concept exploit for the Windows Zerologon vulnerability as noted in CVE-2020-1472. By default, it changes the password of the domain controller account.
c33a65409db7ea9ced3d7e9d9df80a4e2cef77b787ac47ff949764da970ec602
ASX to MP3 Converter version 3.1.3.7.2010.11.05 .wax local buffer overflow proof of concept exploit with DEP and ASLR bypass.
7f84c77ff7d0602ebf55956621de4d05257783b831769bc70810340d9c65606b
QlikView version 12.50.20000.0 denial of service proof of concept exploit.
a3edf93aa60b6c2ce473219431da1889d9f1184493ec40266be41e2f59e5ccb4
ACTi NVR3 Standard or Professional Server version 3.0.12.42 denial of service proof of concept exploit.
6a57437ddc52274c73f9a7b375791a9ad27fea5817745334f53c8d0c73a32876
Mocha Telnet Lite for iOS version 4.2 denial of service proof of concept exploit.
9a5a8b0a5f54690053bd1374cd29bcc29b691e578bc3aa0a707b95622c235114
RTSP for iOS version 1.0 denial of service proof of concept exploit.
b845ab4fd8a9a18a827935204013614fad80dc1e037171e6411158ca11b4c166
BacklinkSpeed version 2.4 SEH buffer overflow proof of concept exploit.
ea7b277b28c727fe2ed45091e1b86b3744b1ab10bf586d442447e2a32caa95b3
Calavera UpLoader version 3.5 proof of concept denial of service exploit.
6dbc757b021aec5cb44503dee0684cb977b77e8b943aeb4972d6b3e7b6a67c1a
Snes9K version 0.09z SEH buffer overflow proof of concept exploit.
f3454c0fbc38d4551ec38aaa6646b2987162357e80a16a30858ba25af6cd2499
Sophos VPN Web Panel 2020 denial of service proof of concept exploit.
fed56a4e0c61feafa1c63267efd2d4a90437797c3dc2ac6df64387ab03184a6e
Proof of concept denial of service exploit for the SIGRed vulnerability in Microsoft Windows DNS.
eba3ff09c3866930772b422c95d78138af6485996de36f20c82bb8f455eee6d1
There is a stack buffer overflow in usrsctp when a server processes a skipped auth block from an incoming connection. Proof of concept exploit included.
b4818f86982c067d7cd9afcbfcee314e412f968d7d9b859927f8e3573839fad7
Simple Startup Manager version 1.17 local buffer overflow proof of concept exploit.
18da94ec10e6a2c71414c0b092afd9b2dbaf4a39221556209be7d7b337cea7f0
Responsive Online Blog version 1.0 remote SQL injection proof of concept exploit. Original discovery of the vulnerability is attributed to Eren Simsek.
5d4e52cdfc0782058b4f1fff1fc1f00d68fa727957fdb3a9694863b72b170b6c
A memory corruption vulnerability is present in bspatch as shipped in Colin Percival's bsdiff tools version 4.3. Insufficient checks when handling external inputs allows an attacker to bypass the sanity checks in place and write out of a dynamically allocated buffer boundaries. Proof of concept included.
643f39b2a94fbeb126dfc6e857751a1e90b11ec7a3a02e0368174a11f3c10689
PHP version 7.4 FFI disable_functions bypass proof of concept exploit.
dc9cb13b041cfe1b84c0e39c4f215e618d007fc39fbd551764c28c9b5537ad3c
Proof of concept exploit for ClearPass Policy Manager which suffers from an unauthenticated remote command execution vulnerability.
8117ecb64b518cd3ddb1e9fad7d78c66754fe970c72edaa45d4ae31a1bfbf229
Sony PS4 versions prior to 7.02 and FreeBSD versions 9 and 12 ip6_setpktopt kernel local privilege escalation proof of concept exploit.
aa0c602e1d16bd1c07fd735367383c0e4038bf3d25ff79c8ec71ab25d9f2b9f2
Fire Web Server version 0.1 remote denial of service proof of concept exploit.
f1c5f784404e86de0d149052c36a321e850e0a3f633de7e5dc821c983f309360
Grafana version 7.0.1 denial of service proof of concept exploit.
c2b33824f0c2688564f8f963b13b5ec71fc672bdd9957ef87ebc449f73ba2c64
Proof of concept exploit that leverages a double-free in the DDGifSlurp function in decoding.c in the android-gif-drawable library in order to achieve remote code execution in WhatsApp.
1c2d3f70903b9b13321a6f3f46689c943f4e16a2256386af7669b84810563623
Proof of concept Xcode project that leverages Safari to demonstrate a macOS privacy protections bypass vulnerability.
67c83963ffe24a3a123e62b635d2bf0846d65ed8f00bbaa9ab88e8747cb9895e
FTPShell Server version 6.90 buffer overflow proof of concept exploit.
34dea007216dbad27e21560e5ae9303236f99a8f37b92df02eaf0594d30f0b50