Brasero CDDVD Burner 3.4.1 - .m3u Buffer Overflow Crash (PoC)

Brasero CDDVD Burner 3.4.1 - .m3u Buffer Overflow Crash PoC !/usr/bin/python Exploit title: Brasero 3.4.1 'm3u' Buffer Overflow POC Date Discovered: 15th March' 2015 Exploit Author: Avinash Kumar Thapa "-Acid" Vulnerable Software: Brasero 3.4.1 CD/DVD for the Gnome Desktop...

Brasero CD/DVD Burner 3.4.1 - '.m3u' Buffer Overflow Crash (PoC)

!/usr/bin/python Exploit title: Brasero 3.4.1 'm3u' Buffer Overflow POC Date Discovered: 15th March' 2015 Exploit Author: Avinash Kumar Thapa "-Acid" Vulnerable Software: Brasero 3.4.1 CD/DVD for the Gnome Desktop Homepage:https://wiki.gnome.org/Apps/Brasero Tested on: Kali Linux 1.0.9 buffer...

Video: Vitaly Kamluk on The Equation Group APT

Kaspersky Lab’s global research and analysis team uncovered what they claim is the most sophisticated advanced persistent threat group yet known. Known as the Equation Group, researchers led by GReAT director Costin Raiu say the threat actors have been operating for 15 years or more and are known...

MP3-CD-Converter-Professional-BoF-(SEH)

Exploit Titule: Exploit Buffer Overflow MP3 CD Converter ProfessionalSEH Date: 12/20/2010 Author: C4SS!0 G0M3S Software Link: http://www.mp3-cd-converter.com/mp3cdconverter.exe Version: 5.0.3 import os import sys import struct import time def usage: os.system"cls" os.system"color 4f" print"\n"...

Free-MP3-CD-Ripper-1.1

Exploit Title : Free MP3 CD Ripper 1.1 Local Buffer Overflow Software : http://www.brothersoft.com/free-mp3-cd-ripper-84543.html Version : 1.1 Tested on : Windows xp sp3 en Date : 27/08/2011 Author : X-h4ck Website : http://www.pirate.al , http://theflashcrew.blogspot.com Email : [email protected]...

Netgear WNR500 Wireless Router - 'webproc?getpage' Traversal Arbitrary File Access

Netgear Wireless Router WNR500 Parameter Traversal Arbitrary File Access Exploit Vendor: NETGEAR Product web page: http://www.netgear.com Affected version: WNR500 firmware: 1.0.7.2 Summary: The NETGEAR compact N150 classic wireless router WNR500 improves your legacy Wireless-G network. It is a...

Easy CD-DA Recorder PLS 缓冲区溢出漏洞

No description provided by source...

Free MP3 CD Ripper WAV File Stack Buffer Overflow (CVE-2011-5165)

A vulnerability exists in Free MP3 CD Ripper 1.1. The vulnerability is due to stack-based buffer overflow when converting a file. Successful exploitation can result in arbitrary code execution via a crafted wav file...

Ubuntu 10.04 LTS : linux-ec2 vulnerabilities (USN-2375-1)

Ben Hawkes reported some off by one errors for report descriptors in the Linux kernel's HID stack. A physically proximate attacker could exploit these flaws to cause a denial of service out-of-bounds write via a specially crafted device. CVE-2014-3184 Several bounds check flaws allowing for buffe...

Ubuntu 12.04 LTS : linux-lts-trusty vulnerabilities (USN-2378-1)

Steven Vittitoe reported multiple stack buffer overflows in Linux kernel's magicmouse HID driver. A physically proximate attacker could exploit this flaw to cause a denial of service system crash or possibly execute arbitrary code via specially crafted devices. CVE-2014-3181 Ben Hawkes reported...

Ubuntu: Security Advisory (USN-2375-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Tyupkin ATM Malware Discovered by Kaspersky Lab

Criminals in Eastern Europe have evolved their attacks against automated teller machines, moving beyond solely targeting consumers with card skimmers that steal debit card numbers, to attacks against banks using malware that allows someone to remove money directly from an ATM without the need for...

[SECURITY] Fedora 20 Update: kscd-4.14.1-1.fc20

KsCD is a small, fast, CDDB enabled audio CD player...

Ubuntu 10.04 LTS : linux vulnerabilities (USN-2354-1)

Chris Evans reported an flaw in the Linux kernel's handling of iso9660 compact disk filesystem images. An attacker who can mount a custom iso9660 image either via a CD/DVD drive or a loopback mount could cause a denial of service system crash or reboot. CVE-2014-5471 Chris Evans reported an flaw ...

Ubuntu: Security Advisory (USN-2355-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-2354-1: Linux kernel vulnerabilities

Chris Evans reported an flaw in the Linux kernel's handling of iso9660 compact disk filesystem images. An attacker who can mount a custom iso9660 image either via a CD/DVD drive or a loopback mount could cause a denial of service system crash or reboot. CVE-2014-5471 Chris Evans reported an flaw ...

CVE-2014-5705

The Sonic CD Lite aka com.soa.sega.soniccdlite application 1.0.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Sonic CD Lite aka com.soa.sega.soniccdlite application 1.0.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5705

The CVE-2014-5705 entry concerns Sonic CD Lite (com.soa.sega.soniccdlite) app version 1.0.4 on Android, which does not verify X.509 certificates from SSL servers. This behavior enables man-in-the-middle attackers to spoof legitimate servers and obtain sensitive information via a crafted certifica...

CVE-2014-5705

The Sonic CD Lite aka com.soa.sega.soniccdlite application 1.0.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...