cve-2017-7269

Buffer overflow in the ScStoragePathFromUrl function in the WebDAV service in Internet Information Services IIS 6.0 in Microsoft Windows Server 2003 R2 allows remote attackers to execute arbitrary code via a long header beginning with "If: http://" in a PROPFIND request, as exploited in the wild ...

Microsoft Windows: CVE-2026-96843: WebDAV Elevation of Privilege Vulnerability

Heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-85828: WebDAV Elevation of Privilege Vulnerability

Heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-88137: WebDAV Information Disclosure Vulnerability

Files or directories accessible to external parties in WebDAV allows an authorized attacker to disclose information over a network...

Microsoft Windows: CVE-2026-88135: WebDAV Elevation of Privilege Vulnerability

Improper access control in WebDAV allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-96847: WebDAV Elevation of Privilege Vulnerability

Untrusted pointer dereference in WebDAV allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-70262: WebDAV Elevation of Privilege Vulnerability

Heap-based buffer overflow in WebDAV allows an unauthorized attacker to elevate privileges over a network...

Microsoft Windows: CVE-2026-85827: WebDAV Elevation of Privilege Vulnerability

Heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-87714: WebDAV Security Feature Bypass Vulnerability

Missing authorization in WebDAV allows an authorized attacker to bypass a security feature over a network...

CVE-2026-102217: Improper Resolution of Path Equivalence

Improper resolution of path equivalence in WebDAV allows an authorized attacker to elevate privileges over a network...

Microsoft Windows: CVE-2026-85370: WebDAV Elevation of Privilege Vulnerability

Use after free in WebDAV allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-88136: Web Distributed Authoring and Versioning (WEBDAV) Remote Code Execution Vulnerability

Improper resolution of path equivalence in WebDAV allows an authorized attacker to execute code over a network...

PT-2026-111925

Improper resolution of path equivalence in WebDAV allows an authorized attacker to elevate privileges over a network...

Microsoft Windows: CVE-2026-88126: WebDAV Elevation of Privilege Vulnerability

Untrusted pointer dereference in WebDAV allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-96846: WebDAV Information Disclosure Vulnerability

Out-of-bounds read in WebDAV allows an authorized attacker to disclose information locally...

IIS_6.0_WebDAV_Ruby

IIS6.0WebDAVRuby Ruby Exploit for IIS 6.0 Buffer Overflow CVE-2017-7269 This exploit takes advantage of the ScStoragePathFromUrl buffer overflow found by Zhiniang Peng and Chen Wu. Usage: ruby exploit.rb Encoding option denotes mandatory options...

CVE-2019-19033

CVE-2019-19033: Jalios JCMS 10 Backdoor Account / Authentication Bypass I. VULNERABILITY Jalios JCMS 10 allows attackers to access any part of the website and the WebDAV server with administrative privileges via a backdoor account using any username and a specific password. II. CVE REFERENCE...

Penetration-Testing-Assessment-23-04-2026

Penetration Testing Report – IIS WebDAV Exploitation Overview This project demonstrates a complete penetration testing lifecycle performed on a vulnerable target system. The assessment follows a structured approach including reconnaissance, scanning, enumeration, exploitation, and...

pwndrop

pwndrop es un servicio de alojamiento de archivos autodesplegable para enviar cargas útiles de red team o compartir de forma segura tus archivos privados a través de HTTP y WebDAV. Si alguna vez has necesitado configurar rápidamente un servidor web nginx/apache para alojar tus archivos y nunca...

CVE-2025-33053_PoC

CVE-2025-33053 POC Exploit Overview The working directory in a .url file can be set to a foreign WebDAV server. When opened by a Windows client, dependencies for the executable defined in the URL field are searched for in the foreign WebDAV share. If an arbitrary executable or DLL is given the sa...