Exploit for CVE-2015-1635_PoC

kitploit · 2026-08-27

Description

Python proof-of-concept script for CVE-2015-1635 targeting a web URL.

Entry point

ParameterRange · header

Path/

HTTP.sys integer overflow in Range handling enabling potential RCE (CVE-2015-1635).

Affected software

Microsoft Windows 7 All versions

Microsoft Windows 8 All versions

Microsoft Windows 8.1 All versions

Microsoft Windows Server 2008= R2

All known vulnerabilities by product

Windows Windows 7 Windows 8 Windows 8.1 Windows Server 2008 R2 Windows Server 2012 Windows Server 2012 R2

CVSS 10.0 for CVE-2015-1635

10.0

HIGH SEVERITY

Version 2.0

VectorAV:N/AC:L/Au:N/C:C/I:C/A:C

Attack Vector:NETWORK

Attack Complexity:LOW

Privileges Required:NONE

User Interaction:NONE

Scope:UNCHANGED

Confidentiality:HIGH

Integrity:HIGH

Availability:HIGH

EPSS Score

100.0%higher than 100.0% of all CVEs

Updated 2026-08-29

CVE Information

Exploit Details

Modified:2026-08-27 14:31

Last Seen:2026-08-27 23:39

Reporter:KitPloit

Tags

CVE-2015-1635proof of conceptPython scriptweb URL

Other exploits for CVE-2015-1635

Project-CVE-2015-1635

2026-08-29 KitPloitKITPLOIT

CVE-2015-1635-POC

2026-08-29 KitPloitKITPLOIT

2026-08-28 KitPloitKITPLOIT

CVE-2015-1635-POC

2026-08-28 KitPloitKITPLOIT

Remove-IIS-RIIS

2026-08-28 KitPloitKITPLOIT

2026-08-26 KitPloitKITPLOIT

2026-08-26 KitPloitKITPLOIT

CVE-2015-1635-POC

2026-08-26 KitPloitKITPLOIT

Exploit Code

MARKDOWN2 lines

## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-MOEINMIADI-CVE-2015-1635_POC
utilizzo: python3 CVE-2015-1635_PoC.py  es. python3 CVE-2015-1635_PoC.py http://www.xxx.com