UBUNTU-CVE-2018-1000301

curl version curl 7.20.0 to and including curl 7.59.0 contains a CWE-126: Buffer Over-read vulnerability in denial of service that can result in curl can be tricked into reading data beyond the end of a heap based buffer used to store downloaded RTSP content.. This vulnerability appears to have...

UBUNTU-CVE-2018-1000300

curl version curl 7.54.1 to and including curl 7.59.0 contains a CWE-122: Heap-based Buffer Overflow vulnerability in denial of service and more that can result in curl might overflow a heap based memory buffer when closing down an FTP connection with very long server command replies.. This...

cURL -- multiple vulnerabilities

cURL security problems: CVE-2018-1000300: FTP shutdown response buffer overflow curl might overflow a heap based memory buffer when closing down an FTP connection with very long server command replies. When doing FTP transfers, curl keeps a spare "closure handle" around internally that will be us...

Debian: Security Advisory (DSA-4202-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Moodle 3.x Bypass Vulnerability (Jan 2018) - Windows

Setting for blocked hosts list can be bypassed with multiple A record hostnames. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Moodle 3.x Bypass Vulnerability (Jan 2018) - Linux

Setting for blocked hosts list can be bypassed with multiple A record hostnames. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

GPON Router Authentication Bypass / Comand Injection

!/bin/bash echo "+ Sending the Commanda| " We send the commands with two modes backtick and semicolon ; because different models trigger on different devices curl -k -d "XWebPageName=diag&diagaction=ping&wanconlist=0&desthost=$2;$2&ipv=0" $1/GponForm/diagForm?images/ 2/dev/null 1/dev/null echo "+...

GPON Routers - Authentication Bypass Command Injection

GPON Routers - Authentication Bypass Command Injection !/bin/bash echo "+ Sending the Command… " We send the commands with two modes backtick and semicolon ; because different models trigger on different devices curl -k -d "XWebPageName=diag&diagaction=ping&wanconlist=0&desthost=$2;$2&ipv=0"...

GPON Routers - Authentication Bypass / Command Injection Exploit

Exploit for hardware platform in category remote exploits !/bin/bash echo "+ Sending the Command… " We send the commands with two modes backtick and semicolon ; because different models trigger on different devices curl -k -d "XWebPageName=diag&diagaction=ping&wanconlist=0&desthost=$2;$2&ipv=0"...

EulerOS 2.0 SP1 : curl (EulerOS-SA-2018-1109)

According to the versions of the curl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - It was found that libcurl did not safely parse FTP URLs when using the CURLOPTFTPFILEMETHOD method. An attacker, able to provide a specially craft...

EulerOS 2.0 SP2 : curl (EulerOS-SA-2018-1110)

According to the versions of the curl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - It was found that libcurl did not safely parse FTP URLs when using the CURLOPTFTPFILEMETHOD method. An attacker, able to provide a specially craft...

curl/curl_fuzzer_http: Crash in http2_send

Project: https://github.com/curl/curl.git Detailed report: https://oss-fuzz.com/testcase?key=5998841491881984 Project: curl Fuzzer: libFuzzercurlfuzzerhttp Fuzz target binary: curlfuzzerhttp Job Type: libfuzzerasancurl Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x608000010000 Cras...

curl/curl_fuzzer_rtsp: Heap-buffer-overflow in curl_mvsnprintf

Project: https://github.com/curl/curl.git Detailed report: https://oss-fuzz.com/testcase?key=5203560919728128 Project: curl Fuzzer: aflcurlfuzzerrtsp Fuzz target binary: curlfuzzerrtsp Job Type: aflasancurl Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address: 0x606000000539...

curl/curl_fuzzer: Heap-buffer-overflow in concat_url

Project: https://github.com/curl/curl.git Detailed report: https://oss-fuzz.com/testcase?key=6221983296520192 Project: curl Fuzzer: libFuzzercurlfuzzer Fuzz target binary: curlfuzzer Job Type: libfuzzerasancurl Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address:...

curl/curl_fuzzer_rtsp: Heap-buffer-overflow in Curl_follow

Project: https://github.com/curl/curl.git Detailed report: https://oss-fuzz.com/testcase?key=6284782160838656 Project: curl Fuzzer: libFuzzercurlfuzzerrtsp Fuzz target binary: curlfuzzerrtsp Job Type: libfuzzerasancurl Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address:...

curl/curl_fuzzer_http: Heap-buffer-overflow in addbyter

Project: https://github.com/curl/curl.git Detailed report: https://oss-fuzz.com/testcase?key=5078144116588544 Project: curl Fuzzer: libFuzzercurlfuzzerhttp Fuzz target binary: curlfuzzerhttp Job Type: libfuzzerasancurl Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address:...

NETSCRAPED EXPLOIT TOOL

NETSCRAPED EXPLOIT TOOL Author: @037 This tool allows you obtain all the credentials stored on Netwave IP cameras Prerequisites You need installed is Python 3.x apt-get install python3 You also require to have Shodan module installed pip install shodan You need cURL for this to work as well apt-g...

Router vulnerability reproduce the analysis of the fourth bomb: CVE-2018-7034-vulnerability warning-the black bar safety net

TrendNET router permission bypass vulnerability, an attacker by setting$AUTHORIZEDGROUP = 1 to bypass permission verification Vulnerability reference information:https://blogs. securiteam. com/index. php/archives/3627 The affected version of the router TEW-751DR – v1. 03B03 TEW-752DRU – v1. 03B01...

ALPINE-CVE-2016-9594

curl before version 7.52.1 is vulnerable to an uninitialized random in libcurl's internal function that returns a good 32bit random value. Having a weak or virtually non-existent random value makes the operations that use it vulnerable...

CVE-2016-9594

curl before version 7.52.1 is vulnerable to an uninitialized random in libcurl's internal function that returns a good 32bit random value. Having a weak or virtually non-existent random value makes the operations that use it vulnerable...