cve-2015-1538-1

Included is a python script that generates an MP4 exploiting the ‘stsc’ vulnerability otherwise known as CVE-2015-1538 1. This is one of the most critical vulnerabilities I reported in the Stagefright library. The expected result of the exploit is a reverse shell as the media user. As detailed in...

cve-2015-1538-1

PER FAVORE NON CONDIVIDERE QUESTO CON NESSUNO. QUESTO CODICE TI VIENE FORNITO AI SENSI DI FrienNDA. CHI VIOLA QUESTA REGOLA NON SARÀ PIÙ CONSIDERATO UN AMICO. È incluso uno script Python che genera un MP4 che sfrutta la vulnerabilità ‘stsc’, nota anche come CVE-2015-1538 1. Questa è una delle...

EUVD-2014-7801

Malware in sbrugna...

CVE-2014-7951

The CVE-2014-7951 entry details a Directory traversal vulnerability in Android's adb (Android 4.0.4) where an attacker with physical access and a direct connection can write to arbitrary system-owned files by crafting tar headers with a .. sequence. Connected documents (including exploit examples...

CVE-2014-7951

Directory traversal vulnerability in the Android debug bridge aka adb in Android 4.0.4 allows physically proximate attackers with a direct connection to the target Android device to write to arbitrary files owned by system via a .. dot dot in the tar archive headers...

Hacking Google Glass with QR Code to sniff user data

Researchers at mobile security firm Lookout discovered a security flaw in Google Glass which allowed them to capture data without the user's knowledge, when the user merely took a photo that captured a malicious QR code. Lookout was able to force Google Glass to silently connect to a Wi-Fi access...

Kies Air Denial Of Service / Authorization Bypass

Name: CVE-2012-5858 CVE-2012-5859 DoS/Authorization Bypass - Kies Air Package: com.samsung.swift.app.kiesair Affected versions: 2.1.207051, 2.1.210161 Testing Device: Samsung S3 AT&T - SAMSUNG-SGH-I747 Android Version: 4.0.4/ Build Number: IMM76D.I747UCALH9 Vendor homepage:...

Android 4.0.4 multiple Zero-Day Vulnerabilities

The Samsung Galaxy S3 can be hacked via NFC, allowing attackers to download all data from the Android smartphone, security researchers demonstrated during the Mobile Pwn2Own contest in Amsterdam. Using a pair of zero day vulnerabilities, a team of security researchers from U.K.-based MWR Labs...