6283 matches found
Input validation
Improper input validation can lead RW access to secure subsystem from HLOS in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in versions MDM9650, MDM9655, MSM8996AU,...
Zend Framework 1.11.11 Database Configuration Disclosure
Exploit Title : Zend Framework 1.11.11 Database Config Disclosure Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 14/02/2019 Vendor Homepage : zend.com Software Download Link : zend.com/en/company/community/framework/downloads Software Information Link :...
ZRECore 1.3.1 Database Configuration Disclosure
Exploit Title : ZRECore 1.3.1 Database Config Disclosure Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 14/02/2019 Vendor Homepage : zend.com Software Download Link : github.com/zrecore/ZRECore/archive/master.zip Software Information Link :...
Invo PhalconPHP 1.x Database Configuration Disclosure
Exploit Title : Unvo PhalconPHP 1.x Database Config Disclosure Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 14/02/2019 Vendor Homepage : phalconphp.com Software Download Link : github.com/phalcon/invo/archive/master.zip Software Information Link :...
Zend Framework ZF1 1.x Database Configuration Disclosure
Exploit Title : Zend Framework ZF1 1.x Database Config Disclosure Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 14/02/2019 Vendor Homepage : zend.com Software Download Link : github.com/RalfEggert/zf1example/archive/master.zip Software Information Link :...
CVE-2018-11847
Malicious TA can tag QSEE kernel memory and map to EL0, there by corrupting the physical memory as well it can be used to corrupt the QSEE kernel and compromise the whole TEE in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon...
CVE-2018-11888
Unauthorized access may be allowed by the SCP11 Crypto Services TA will processing commands from other TA in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile and...
CVE-2018-11847
Malicious TA can tag QSEE kernel memory and map to EL0, there by corrupting the physical memory as well it can be used to corrupt the QSEE kernel and compromise the whole TEE in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon...
RedELK - Easy Deployable Tool For Red Teams Used For Tracking And Alarming About Blue Team Activities As Well As Better Usability In Long Term Operations
Red Team's SIEM - easy deployable tool for Red Teams used for tracking and alarming about Blue Team activities as well as better usability for the Red Team in long term operations. Initial public release at BruCON 2018: Video: https://www.youtube.com/watch?v=OjtftdPts4g Presentation slides:...
Linux Kernel 4.13 - 'compat_get_timex()' Leak Kernel Pointer
define GNUSOURCE define BSDSOURCE include include include include include include include include include include include include include include include include include include // Ubuntu 4.13.0-16-generic // gcc -o poc poc.c -m32 struct timex time; int mainint argc, char argv int r; unsigned lon...
Linux Kernel 4.13 - compat_get_timex() Leak Kernel Pointer
Linux Kernel 4.13 - compatgettimex Leak Kernel Pointer define GNUSOURCE define BSDSOURCE include include include include include include include include include include include include include include include include include include // Ubuntu 4.13.0-16-generic // gcc -o poc poc.c -m32 struct time...
Linux Kernel 4.13 compat_get_timex() Kernel Pointer Leak
define GNUSOURCE define BSDSOURCE include include include include include include include include include include include include include include include include include include // Ubuntu 4.13.0-16-generic // gcc -o poc poc.c -m32 struct timex time; int mainint argc, char argv int r; unsigned lon...
libaom/av1_dec_fuzzer: Heap-buffer-overflow in av1_convolve_2d_copy_sr_sse2
Detailed report: https://oss-fuzz.com/testcase?key=5099766910812160 Project: libaom Fuzzer: libFuzzerlibaomav1decfuzzer Fuzz target binary: av1decfuzzer Job Type: libfuzzerasanlibaom Platform Id: linux Crash Type: Heap-buffer-overflow READ 16 Crash Address: 0x63300000005c Crash State:...
DotNetNuke Events Calendar 1.x File Download
Exploit Title : DNNSoftware EventsCalendar Modules 1.x Arbitrary File Download Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 18/01/2019 Vendor Homepage : dnnsoftware.com Software Information Link : store.dnnsoftware.com/home/product-details/events-calendar...
CVE-2015-9277
creationtimestamp| type| source ---|---|--- 2019-01-16 18:57:21+00:00| seen| https://t.me/cibsecurity/2072...
CVE-2015-9278
creationtimestamp| type| source ---|---|--- 2019-01-16 18:57:20+00:00| seen| https://t.me/cibsecurity/2071...
CVE-2015-9279
creationtimestamp| type| source ---|---|--- 2019-01-16 18:57:19+00:00| seen| https://t.me/cibsecurity/2070...
CVE-2015-9280
creationtimestamp| type| source ---|---|--- 2019-01-16 18:57:18+00:00| seen| https://t.me/cibsecurity/2069...