CheckFlashPlayerVersion

CheckFlashPlayerVersion ブラウザの Flash Player バージョンを確認し、CVE-2016-7855 の脆弱性に対して脆弱かどうかをチェックします 使用方法: このリポジトリをクローンし、Flash Player のバージョンを確認したいブラウザで HTML ファイルを開いてください。...

CVE-2017-3078

CVE-2017-3078 CVE-2017-3078에 대한 설명 Adobe는 Windows, Macintosh, Linux 및 Chrome OS용 Adobe Flash Player에 대한 보안 업데이트를 발표했습니다. 이 업데이트는 공격자가 영향을 받는 시스템을 제어할 수 있는 심각한 취약점을 해결합니다. 설명 2 : Adobe Flash Player 버전 25.0.0.171 및 이전 버전에는 Adobe Texture FormatATF 모듈에서 악용 가능한 메모리 손상 취약점이 있습니다. 성공적으로 악용될 경우 임의 코드 실행이...

adobe-flash-cve2018-15982

Adobe Flash CVE-2018-15982 このスクリプトは、CVE-2018-15982用のswfペイロードを作成します。これは https://github.com/smgorelik/Windows-RCE-exploits のPoCに基づいています。この脆弱性は、Gigamon ATRのChenming Xu氏とEd Miles氏によって発見されました。 この脆弱性は、Flashで任意のコード実行を可能にするuse-after-freeの欠陥です。詳細は以下のリンクを参照してください。...

pyrdp

PyRDP PyRDP is a Python Remote Desktop Protocol RDP Monster-in-the-Middle MITM tool and library. It features a few tools: RDP Monster-in-the-Middle Logs plaintext credentials or NetNTLM hashes used when connecting Steals data copied to the clipboard Saves a copy of the files transferred over the...

CVE-2017-3000

CVE-2017-3000 Flash Player Constant Blinding PRNG에서 CVE-2017-3000의 완전한 익스플로잇 마지막에 동적으로 생성된 코드 힙에 WANG과 wang을 삽입합니다...

CVE-2024-5522-PoC

CVE-2024-5522-PoC : HTML5 Video Player 2.5.27 - 未認証SQLi このプラグインは、RESTルートから取得したパラメータをSQL文で使用する前にサニタイズやエスケープを行わないため、未認証ユーザーがSQLインジェクション攻撃を実行できてしまいます。 セットアップスクリプト: 1. git clone https://github.com/kryptonproject/CVE-2024-5522-PoC 2. cd CVE-2024-5522-PoC 3. pip3 install r requirements.txt 4. python3...

CVE-2018-15982

クレジット @Ridter https://github.com/Ridter/CVE-2018-15982EXP @prsecurity https://github.com/prsecurity/CVE-2018-15982 説明 CVE-2018-15982 の Flash Player エクスプロイトを使用して Internet Explorer のドライブバイ攻撃を実行するための Aggressor Script。 影響を受ける製品バージョン Adobe Flash Player Host CVE-2018-15982 Payload Host をクリック...

yamaha-smaf-player

Yamaha SMAF 플레이어 C++ by Akustikrausch Andreas Wendorf 작고 의존성이 없는 Yamaha SMAF 벨소리.mmf용 C++ 플레이어입니다. 2004년에 여러분의 삼성, 샤프, 파나소닉 폰에서 띵띠리링 소리를 냈던 그 파일을 넘기면, 깨끗한 스테레오 오디오를 반환합니다. 전화기도, 펌웨어도, 샘플 ROM도 필요 없습니다. 소프트웨어로 재구성된 FM 칩만 있으면 됩니다. 이것은 거의 아무도 오픈 코드로 보존하려고 애쓰지 않은 한 시대의 소리입니다. 이런 파일은 아직도 수백만 개가 떠돌아다니고...

CVE-2018-4878

작성자 및 크레딧 작성자: Vincent Yiu @vysecurity 크레딧: @evi1cg: 테스트를 도와주고 동기부여를 유지해준 @smgoreli: 원본 Calc.exe PoC @kbandla: 그가 알고, 나도 알아요. ; 면책 조항 더 많은 Aggressor 스크립트 개발을 장려하기 위해 개발되었습니다. 승인된 침투 테스트에서만 사용하십시오! 설명 2017년 2월 이전 Shockwave Flash 플레이어 버전을 대상으로 CVE-2018-4878 익스플로잇을 사용하여 Internet Explorer 드라이브바이 공격을...

WordPress HTML5 Video Player < 2.5.27 - SQL Injection

The HTML5 Video Player WordPress plugin before 2.5.27 does not sanitize and escape a parameter from a REST route before using it in a SQL statement, allowing unauthenticated users to perform SQL injection attacks id: CVE-2024-5522 info: name: WordPress HTML5 Video Player 2.5.27 - SQL Injection...

Radio Player <= 2.0.82 - Server-Side Request Forgery

The Radio Player Live Shoutcast, Icecast and Any Audio Stream Player for WordPress plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.0.82. This makes it possible for unauthenticated attackers to make web requests to arbitrary locations...

WordPress HTML5 Video Player - SQL Injection

WordPress HTML5 Video Player plugin is vulnerable to SQL injection. An unauthenticated attacker can exploit this vulnerability to perform SQL injection attacks. id: CVE-2024-1061 info: name: WordPress HTML5 Video Player - SQL Injection author: xxcdd severity: critical description: | WordPress HTM...

JoomSport <= 5.7.7 - SQL Injection

The JoomSport WordPress plugin through 5.7.7 is vulnerable to unauthenticated time-based blind SQL injection via the 'sortf' GET parameter in the player list view. The parameter value is backtick-wrapped and directly concatenated into an ORDER BY clause. id: CVE-2026-42647 info: name: JoomSport =...

cve-2015-0313

CVE-2015-0313 Angler Exploit Kit 由来の Adobe Flash 脆弱性ソースコード cve-2015-0313 参照: http://blog.trendmicro.com/trendlabs-security-intelligence/trend-micro-discovers-new-adobe-flash-zero-day-exploit-used-in-malvertisements/...

rdpy

RDPY Remote Desktop Protocol in twisted python. RDPY is a pure Python implementation of the Microsoft RDP Remote Desktop Protocol protocol client and server side. RDPY is built over the event driven network engine Twisted. RDPY support standard RDP security layer, RDP over SSL and NLA...

EUVD-2014-9822

CodeArt Google MP3 Audio Player plugin google-mp3-audio-player for WordPress through 1.0.11 contains an unauthenticated arbitrary file read vulnerability that allows remote attackers to retrieve sensitive files by supplying a path-traversal payload in the file parameter of directdownload.php...

CVE-2014-125130

The CodeArt Google MP3 Audio Player plugin (google-mp3-audio-player) for WordPress affects versions through 1.0.11 . It contains an unauthenticated arbitrary file read vulnerability caused by a path-traversal flaw in the file parameter of direct_download.php. Remote attackers can exploit this to ...

DLL_Injection_On_VLC

DLL 注入与 CVE-2010-3124 概述 🌱 本项目探讨 DLL（动态链接库）注入这一主题，并特别关注 CVE-2010-3124。 CVE-2010-3124 指的是 VLC Media Player 1.1.3 及更早版本中存在的一个不受信任的搜索路径漏洞。 以下要点可帮助你更好地了解此项目： 漏洞 ：该问题源于一个不安全的搜索路径，该路径被 VLC Media Player 在加载动态链接库（DLL）时使用。 攻击场景 ：攻击者将恶意的特洛伊木马 wintab32.dll 放在 与看似无害的 .mp3 文件相同的文件夹中。 利用 ：当 VLC Media Player 尝试...

CVE-2024-7856

CVE-2024-7856 ★ CVE-2024-7856 任意ファイル削除 PoC ★ 説明 CVE-2024-7856 : MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar -f python3 CVE-2024-7856.py -u -f -i -p 例 python3 CVE-2024-7856.py -u http://example.com/ -f /tmp/test python3 CVE-2024-7856.py -u http://example.com/ -f /tmp/test -i...

rosettaflash

Rosetta Flash CVE-2014-4671 Windows および OS X 上の Adobe Flash Player 13.0.0.231 より前のバージョンと 14.x の 14.0.0.145 より前のバージョン、Linux 上の 11.2.202.394 より前のバージョン、Android 上の Adobe AIR 14.0.0.137 より前のバージョン、Adobe AIR SDK 14.0.0.137 より前のバージョン、および Adobe AIR SDK & Compiler 14.0.0.137 より前のバージョンは、SWF...