Core Certified Exploits

We provide real-time updates including new penetration testing exploits and tests for additional platforms as they become available. We advise you of any new modules by email, after which you can download them directly from within Core Impact. All product updates are free during the license period. You're always on the cutting edge of vulnerability and threat intelligence because Core Impact keeps you there.

Subscribe to receive regular updates by email:

 

Browse All Exploits

 

 

Title Description Date Added CVE Link Exploit Platform Exploit Type
Tp-link EAP Controller Exploit Tp-link EAP Controller does not handle privilege management correctly so a non privileged user can execute privileged actions. This module will try to change the device's settings and enable ssh in order to take control of the managed Access Points. May 18, 2018 CVE-2018-10168 Windows, Linux Exploits / Authentication Weakness / Known Vulnerabilities
Rockwell Automation RSLogix Micro Starter Lite Project File Exploit The specific flaw exists within the parsing of a RSS file. The issue lies in the failure to properly validate the length of user-supplied data prior to copying it to a fixed-length buffer. May 16, 2018 CVE-2016-5814 Windows Exploits / Client Side
Easy File Sharing Web Server POST Request Buffer Overflow Exploit Easy File Sharing Web Server is prone to a buffer-overflow when handling a specially crafted POST request. May 11, 2018 NOCVE-9999-108129 Windows Exploits / Remote
OMRON CX-One CX-Programmer Buffer Overflow Exploit The specific flaw exists within the processing of CXP files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code under the context of the current process. May 4, 2018 CVE-2018-7514 Windows Exploits / Client Side
OMRON CX-One CX-FLnet Cdmapi32 Buffer Overflow Exploit The specific flaw exists within the processing of FLN files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length buffer. An attacker can leverage this vulnerability to execute code under the context of the current process. May 4, 2018 CVE-2018-8834 Windows Exploits / Client Side
DiskBoss Enterprise Remote Buffer Overflow Exploit DiskBoss Enterprise server is prone to a remote buffer-overflow vulnerability. April 26, 2018 NOCVE-9999-105410 Windows Exploits / Remote
Disk Pulse Enterprise GET Buffer Overflow Exploit Disk Pulse server is prone to a buffer-overflow vulnerability when handling a crafted POST request, this can trigger an overflow in a finite-sized internal memory buffer, and install an agent with SYSTEM priviledges. April 24, 2018 CVE-2017-15663 Windows Exploits / Remote
Drupal Form API Ajax Requests Remote OS Command Injection Exploit Drupal is prone to an OS command injection vulnerability that allows attackers to take advantage of an improper validation of user-supplied data in the Form API Ajax Requests. April 19, 2018 CVE-2018-7600 Linux Exploits / OS Command Injection / Known Vulnerabilities
Disk Savvy Enterprise Buffer Overflow Exploit This module exploits a stack-based buffer overflow vulnerability in the web interface of DiskSavvy Enterprise caused by improper bounds checking of the request path in HTTP GET requests sent to the built-in web server. April 19, 2018 CVE-2018-6481 Windows Exploits / Remote
VX Search Command Name Buffer Overflow Exploit VX Search Enterprise is prone to a buffer-overflow vulnerability when handling a crafted request, this can trigger an overflow in a finite-sized internal memory buffer, and install an agent with SYSTEM privileges. April 12, 2018 NOCVE-9999-106404 Windows Exploits / Remote
ALLPlayer M3U Buffer Overflow Exploit A UNICODE Buffer Overflow exists in AllPlayer 7.5 when parsing .m3u files. The vulnerability is caused due to a boundary error when handling a crafted .m3u files. April 4, 2018 CVE-2013-7409 Windows Exploits / Client Side
HPE Operations Orchestration Central Java Deserialization Vulnerability Remote Code Execution Exploit A input validation vulnerability in HPE Operations Orchestration product all versions prior to 10.80, allows for the execution of code remotely. March 27, 2018 CVE-2017-8994 Windows Exploits / OS Command Injection / Known Vulnerabilities
Omron CX-Supervisor Project File Exploit Omron CX-Supervisor is prone to a buffer overflow when handling specially crafted project files. March 23, 2018 CVE-2018-7513 Windows Exploits / Client Side
Microsoft Office Equation Editor Memory Corruption Exploit (CVE-2018-0802) Update The vulnerability exists in Microsoft Office when the software fails to properly handle objects in memory. March 20, 2018 CVE-2018-0802 Windows Exploits / Client Side
Microsoft Office Memory Corruption Exploit (CVE-2017-11826) Update A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory. March 19, 2018 CVE-2017-11826 Windows Exploits / Client Side
MalwareFox AntiMalware Privilege Escalation Exploit An issue was discovered in MalwareFox AntiMalware. Improper access control in zam32.sys and zam64.sys allows a non-privileged process to register itself with the driver by sending IOCTL 0x80002010 and then using IOCTL 0x8000204C to \\.\ZemanaAntiMalware to elevate privileges. March 15, 2018 CVE-2018-6606 Windows Exploits / Local
ASX to MP3 converter ASX Buffer Overflow Exploit A Buffer Overflow exist in ASX to MP3 when parsing .ASX files. The vulnerability is caused due to a boundary error when handling a crafted .ASX files. March 13, 2018 CVE-2017-15083 Windows Exploits / Client Side
Kingsoft Internet Security Local Privilege Escalation Exploit This vulnerability allows local attackers to escalate privileges on vulnerable installations of Kingsoft Internet Security. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaws exists within the processing of IOCTL 0x80030004 or 0x80030008 by the KWatch3.sys (internet security) kernel driver. The issue lies in the failure to properly validate user-supplied data which can result in a kernel stack buffer overflow. March 12, 2018 CVE-2017-14606 Windows Exploits / Local
IBM Informix Open Admin Tool SOAP welcomeServer PHP Remote Code Execution Exploit IBM Informix Open Admin Tool is vulnerable to an unauthenticated php remote code execution, allowing attackers to execute arbitrary php code in the system. March 8, 2018 CVE-2017-1092 Linux Exploits / Remote Code Execution
Sync Breeze Enterprise Import Command Buffer Overflow Exploit A Buffer Overflow exists in Sync Breeze Enterprise 10.4.18 when parsing .XML files by Command Import. The vulnerability is caused due to a boundary error when handling a crafted .XML files. March 2, 2018 CVE-2017-7310 Windows Exploits / Client Side
Symantec Messaging Gateway performRestore OS Command Injection Exploit Symantec Messaging Gateway is prone to an Authentication Bypass vulnerability that allows attackers to take advantage of an improper validation of user-supplied data in the RestoreAction.performRestore method.



An attacker can leverage this vulnerability to execute arbitrary code in the context of root. 		February 23, 2018 CVE-2017-6327 Linux Exploits / OS Command Injection / Known Vulnerabilities
Spectre Checker (CVE-2017-5153) Spectre breaks the isolation between different applications. It allows an attacker to trick error-free programs, which follow best practices, into leaking their secrets. In fact, the safety checks of said best practices actually increase the attack surface and may make applications more susceptible to Spectre February 19, 2018 CVE-2017-5153 Windows, Linux Exploits / Tools
Meltdown Checker Update (CVE-2017-5154) This module performs a local check in order to detect if the target is vulnerable to CVE 2017-5154 (aka Meltdown).

This update adds Windows support. 		February 19, 2018 CVE-2017-5754 Windows, Linux Exploits / Tools
Linux Kernel Dirty COW Race Condition Privilege Escalation Exploit Update This module exploits a race condition vulnerability in the Linux Kernel via MAP_PRIVATE COW.



The bug relies in the way the Linux kernel's memory subsystem handled the copy-on-write (COW) breakage of private read-only memory mappings. An unprivileged, local user could use this flaw to gain write access to otherwise read-only memory mappings and thus increase their privileges on the system.



This update improves the post-escalation execution. 		February 19, 2018 CVE-2016-5195 Linux Exploits / Local
CloudMe Sync Buffer Overflow Exploit Unauthenticated remote attackers that can connect to the "CloudMe Sync" client application listening on port 8888, can send a malicious payload causing

a Buffer Overflow condition. This will result in an attacker controlling the programs execution flow and allowing arbitrary code execution on the victims PC. 		February 16, 2018 CVE-2018-6892 Windows Exploits / Remote