CTF-All-In-One

This is a comprehensive guide to CTF Capture The Flag competitions, specifically focusing on the Pwn binary exploitation aspect. The book is written by Yang Cheng, a member of L-Team, and is intended for beginners. It covers the basics of binary exploitation, including memory management, buffer...

Local Privilege Escalation in polkits pkexec

A bug exists in the polkit pkexec binary in how it processes arguments. If the binary is provided with no arguments, it will continue to process environment variables as argument variables, but without any security checking. By using the execve call we can specify a null argument list and populat...

GoCD < 21.3.0 Path Traversal (Direct)

Binary data gocdpathtraversal.nbin...

CVE-2021-46239

The binary MP4Box in GPAC v1.1.0 was discovered to contain an invalid free vulnerability via the function gffree at utils/alloc.c. This vulnerability can lead to a Denial of Service DoS...

CVE-2021-46313

Removed by vendor...

CVE-2021-46313

The binary MP4Box in GPAC v1.0.1 was discovered to contain a segmentation fault via the function memmoveavxunalignederms . This vulnerability can lead to a Denial of Service DoS...

GPAC 安全漏洞

GPAC is an open source multimedia framework. a security vulnerability exists in GPAC, which stems from a binary MP4Box in GPAC v1.0.1 that was found to contain a segmentation error via the function memmove avx unaligned erms. An attacker could exploit this vulnerability to cause a denial of servi...

Cisco Adaptive Security Device Manager (ASDM) Detection

Binary data ciscoasdmdetect.nbin...

Bingrep 安全漏洞

Bingrep is an open source project that Greps binaries from a variety of operating systems and architectures and colors them. Bingrep has security vulnerabilities that can be exploited by attackers to cause a denial of service DoS...

MobileIron Core Log4Shell Direct Check (CVE-2021-44228)

Binary data mobileironlog4shell.nbin...

OPENSUSE-SU-2022:0141-1 Security update for permissions

This update for permissions fixes the following issues: - Update to version 20181225: setuid bit for cockpit session binary bsc1169614...

PT-2022-10063 · Mongodb · Mongodb Extension For Vs Code

Name of the Vulnerable Software and Affected Versions: MongoDB Extension for VS Code versions prior to 0.7.0 Description: The issue allows users with appropriate file access to obtain unencrypted user credentials saved by MongoDB Extension for VS Code in a binary file. These credentials can be us...

Apple iOS < 15.2.1 Vulnerability (HT213043)

Binary data appleios1521check.nbin...

Google Chrome < 97.0.4692.99 Multiple Vulnerabilities

Binary data 701384.pasl...

CVE-2021-40569

The binary MP4Box in Gpac through 1.0.1 has a double-free vulnerability in the ilocentrydel funciton in boxcodemeta.c, which allows attackers to cause a denial of service...

CVE-2022-21682 flatpak-builder can access files outside the build directory.

Flatpak is a Linux application sandboxing and distribution framework. A path traversal vulnerability affects versions of Flatpak prior to 1.12.3 and 1.10.6. flatpak-builder applies finish-args last in the build. At this point the build directory will have the full access that is specified in the...

Apache Log4Shell RCE detection via callback correlation (Direct Check MSRPC)

Binary data apachelog4shellmsrpc.nbin...

ShareFile < 5.11.20 RCE (CVE-2021-22941)

Binary data citrixsharefilecontrollerCVE-2021-22941.nbin...

CVE-2021-46054

A Denial of Service vulnerability exists in Binaryen 104 due to an assertion abort in wasm::WasmBinaryBuilder::visitRethrowwasm::Rethrow...

CVE-2021-46048

A Denial of Service vulnerability exists in Binaryen 104 due to an assertion abort in wasm::WasmBinaryBuilder::readFunctions...