Introduction to DNS Data Exfiltration

Written by Asaf Nadler and Avi Aminov Updated 2/14/19 After the initial publication of this blog post, Asaf Nadler and Avi Aminov wrote a paper on the detection of malicious and low throughput data exfiltration over the DNS protocol. The...

MP3 WAV to CD Burner 1.4.24 - Buffer Overflow (SEH) Exploit

Exploit for windows platform in category local exploits !/usr/bin/python Exploit Title: MP3 WAV to CD Burner 1.4.24 - 'Enter User Name' Field Buffer Overflow SEH Date: 24-08-2017 Exploit Author: Anurag Srivastava Website: www.pyramidcyber.com Vulnerable Software: MP3 WAV to CD Burner Vendor...

Easy AVI DivX Converter 1.2.24 - Buffer Overflow (SEH) Exploit

Exploit for windows platform in category local exploits !/usr/bin/python Exploit Title: Easy AVI DivX Converter 1.2.24 - 'Enter User Name' Field Buffer Overflow SEH Date: 24-08-2017 Exploit Author: Anurag Srivastava Website: www.pyramidcyber.com Vulnerable Software: Easy AVI DivX Converter Vendor...

Updated gstreamer1.0 packages fix security vulnerability

A crafted AVI file could have caused an invalid memory read, possibly causing DoS or corruption CVE-2017-5838...

MP3 WAV to CD Burner 1.4.24 - Local Buffer Overflow (SEH)

MP3 WAV to CD Burner 1.4.24 - Local Buffer Overflow SEH !/usr/bin/python Exploit Title: MP3 WAV to CD Burner 1.4.24 - 'Enter User Name' Field Buffer Overflow SEH Date: 24-08-2017 Exploit Author: Anurag Srivastava Website: www.pyramidcyber.com Vulnerable Software: MP3 WAV to CD Burner Vendor...

Easy AVI DivX Converter 1.2.24 - Local Buffer Overflow (SEH)

Easy AVI DivX Converter 1.2.24 - Local Buffer Overflow SEH !/usr/bin/python Exploit Title: Easy AVI DivX Converter 1.2.24 - 'Enter User Name' Field Buffer Overflow SEH Date: 24-08-2017 Exploit Author: Anurag Srivastava Website: www.pyramidcyber.com Vulnerable Software: Easy AVI DivX Converter...

Easy AVI DivX Converter 1.2.24 Buffer Overflow

!/usr/bin/python Exploit Title: Easy AVI DivX Converter 1.2.24 - 'Enter User Name' Field Buffer Overflow SEH Date: 24-08-2017 Exploit Author: Anurag Srivastava Website: www.pyramidcyber.com Vulnerable Software: Easy AVI DivX Converter Vendor Homepage: http://www.divxtodvd.net/ Version: 1.2.24...

Easy AVI DivX Converter 1.2.24 - Local Buffer Overflow (SEH)

!/usr/bin/python Exploit Title: Easy AVI DivX Converter 1.2.24 - 'Enter User Name' Field Buffer Overflow SEH Date: 24-08-2017 Exploit Author: Anurag Srivastava Website: www.pyramidcyber.com Vulnerable Software: Easy AVI DivX Converter Vendor Homepage: http://www.divxtodvd.net/ Version: 1.2.24...

DivFix++ 'DivFixppCore::avi_header_fix' function denial of service vulnerability

DivFix++ is a free application with the ability to repair and preview AVI format video files. A security vulnerability exists in the 'DivFixppCore::aviheaderfix' function of the DivFix++Core.cpp file in DivFix++ version 0.34. A remote attacker can exploit this vulnerability to cause a denial of...

gstreamer-plugins-good: Invalid memory read in gst_avi_demux_parse_ncdt

The gstavidemuxparsencdt function in gst/avi/gstavidemux.c in gst-plugins-good in GStreamer before 1.10.3 allows remote attackers to cause a denial of service invalid memory read and crash via a ncdt sub-tag that "goes behind" the surrounding tag...

gstreamer-plugins-good: Heap out-of-bounds read in gst_avi_demux_parse_ncdt

The gstavidemuxparsencdt function in gst/avi/gstavidemux.c in gst-plugins-good in GStreamer before 1.10.3 allows remote attackers to cause a denial of service out-of-bounds heap read via vectors involving ncdt tags...

CVE-2017-11330

The DivFixppCore::aviheaderfix function in DivFix++Core.cpp in DivFix++ v0.34 allows remote attackers to cause a denial of service invalid memory write and application crash via a crafted avi file...

Design/Logic Flaw

The DivFixppCore::aviheaderfix function in DivFix++Core.cpp in DivFix++ v0.34 allows remote attackers to cause a denial of service invalid memory write and application crash via a crafted avi file...

CVE-2017-11330

The DivFixppCore::aviheaderfix function in DivFix++Core.cpp in DivFix++ v0.34 allows remote attackers to cause a denial of service invalid memory write and application crash via a crafted avi file...

DivFix++ 0.34 - Denial of Service Exploit

Exploit for linux platform in category dos / poc DivFix++ denial of service vulnerability ================ Author : qflb.wu =============== Introduction: ============= DivFix++ is FREE AVI Video Fix & Preview program. Affected version: ===== v0.34 Vulnerability Description:...

DivFix++ 0.34 - Denial of Service

DivFix++ 0.34 - Denial of Service DivFix++ denial of service vulnerability ================ Author : qflb.wu =============== Introduction: ============= DivFix++ is FREE AVI Video Fix & Preview program. Affected version: ===== v0.34 Vulnerability Description: ========================== the...

CVE-2017-11330: Out-of-bounds Write

The DivFixppCore::aviheaderfix function in DivFix++Core.cpp in DivFix++ v0.34 allows remote attackers to cause a denial of service invalid memory write and application crash via a crafted avi file...

DivFix++ 0.34 - Denial of Service

DivFix++ denial of service vulnerability ================ Author : qflb.wu =============== Introduction: ============= DivFix++ is FREE AVI Video Fix & Preview program. Affected version: ===== v0.34 Vulnerability Description: ========================== the DivFixppCore::aviheaderfix function in...

FFmpeg arbitrary file read vulnerability analysis-vulnerability warning-the black bar safety net

Vulnerability analysis The vulnerability was originally developed by neex submitted to the HackerOne platform, and eventually get a 1000$bonus, the original link is https://hackerone.com/reports/226756 the. According to the authors, the exploitability of the vulnerability in the FFmpeg can handle...

LG MRA58K - Missing Bounds-Checking in AVI Stream Parsing Exploit

Exploit for Android platform in category dos / poc Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1206 Missing bounds-checking in AVI stream parsing When parsing AVI files, CAVIFileParser uses the stream count from the AVI header to allocate backing storage for storing metadata...