Apple Mac OSX xnu 1228.3.13 - macfsstat Local Kernel Memory LeakDenial of Service

Apple Mac OSX xnu 1228.3.13 - macfsstat Local Kernel Memory LeakDenial of Service / xnu-macfsstat-leak.c Copyright c 2008 by Apple MACOS X xnu include include include include include include include define LEAKBUFBYTESa sizeof struct statfsa define LEAKMACBYTESa sizeof inta struct macgetfsstat ch...

Apple Mac OSX xnu 1228.3.13 - 'zip-notify' Remote Kernel Overflow (PoC)

/ xnu-appletalk-zip.c Copyright c 2008 by Apple MACOS X xnu include include include include include include include include include include include int main int argc, char argv struct sockaddrat daddr, saddr; char p, buf1024; int fd, zlen; printf "Apple MACOS X xnu \n" "http://www.digit-labs.org/...

Apple Mac OSX xnu 1228.x - 'hfs-fcntl' Kernel Privilege Escalation

!/bin/bash xnu-hfs-fcntl-v2.sh Copyright c 2008 by Apple MACOS X 792.0 \n" \ "http://www.digit-labs.org/ -- Digit-Labs 2008!@$!\n\n" if ! -f $EXPFILE ; then echo -n " compiling exploit..." gcc -Wall $EXPFILE.c -o $EXPFILE 2 /dev/null if $? != 0 ; then echo " failed" exit $? else echo " done" fi f...

blindblog 1.3.1 - SQL Injection Authentication Bypass Local File Inclusion

blindblog 1.3.1 - SQL Injection Authentication Bypass Local File Inclusion Salvatore "drosophila" Fresta + Application: BlindBlog + Version: 1.3.1 + Website: http://sourceforge.net/projects/cbblog/ + Bugs: A SQL Injection B Authentication Bypass C Local File Inclusion + Exploitation: Remote + Dat...

Apple Mac OSX xnu 1228.x - Local Kernel Memory Disclosure

Apple Mac OSX xnu 1228.x - Local Kernel Memory Disclosure / xnu-getldt.c Copyright c 2008 by Apple MACOS X xnu include include include include include include include define TMPFILE "/tmp/xnu-getldt" define READSIZE 0x2000000 int main int argc, char argv int fd, n, numdesc; void ptr; printf "Appl...

Apple Mac OSX xnu 1228.x - Local Kernel Memory Disclosure

/ xnu-getldt.c Copyright c 2008 by Apple MACOS X xnu include include include include include include include define TMPFILE "/tmp/xnu-getldt" define READSIZE 0x2000000 int main int argc, char argv int fd, n, numdesc; void ptr; printf "Apple MACOS X xnu \n" "http://www.digit-labs.org/ -- Digit-Lab...

OSX/x86 - execve(/bin/sh) Shellcode (24 bytes)

OSX/x86 - execve/bin/sh Shellcode 24 bytes. Shellcode exploit for OSX platform / Title : OSX/x86 intel - execve/bin/sh - 24 bytes Type : Shellcode Author : Simon Derouineau - simon.derouineau AT ingesup.com Platform : Mac OSX/Intel. Tested on 10.6.4 Build 10F569 Informations : This code has to be...

Apple Mac OSX 10.x - CoreGraphics Multiple Memory Corruption Vulnerabilities

Apple Mac OSX 10.x - CoreGraphics Multiple Memory Corruption Vulnerabilities source: https://www.securityfocus.com/bid/30488/info Apple Mac OS X is prone to multiple memory-corruption vulnerabilities that affect the CoreGraphics component. Attackers can exploit these issues to execute arbitrary...

Apple Mac OSX 10.x - CoreGraphics Multiple Memory Corruption Vulnerabilities

source: https://www.securityfocus.com/bid/30488/info Apple Mac OS X is prone to multiple memory-corruption vulnerabilities that affect the CoreGraphics component. Attackers can exploit these issues to execute arbitrary code in the context of the affected application or cause denial-of-service...

Apple Mac OSX - mount_smbfs Local Stack Buffer Overflow

Apple Mac OSX - mountsmbfs Local Stack Buffer Overflow / Copyright C 2007-2008 Subreption LLC. All rights reserved. Visit http://blog.subreption.com for exploit development notes. References: CVE-2007-3876 http://docs.info.apple.com/article.html?artnum=307179...

Apple Mac OSX - 'mount_smbfs' Local Stack Buffer Overflow

/ Copyright C 2007-2008 Subreption LLC. All rights reserved. Visit http://blog.subreption.com for exploit development notes. References: CVE-2007-3876 http://docs.info.apple.com/article.html?artnum=307179 http://seclists.org/fulldisclosure/2007/Dec/0445.html...

Apple Mac OSX xnu 1228.0 - 'super_blob' Local kernel Denial of Service (PoC)

/ xnu-superblob-dos.c Copyright c 2007 by Apple MACOS X xnu include include include include include include include define MAXPATHLEN 128 / change this value if no panic / define CSLOTSDIFF 0x69696969 define CSSLOTCODEDIRECTORY 0x0 define CSMAGICCODEDIRECTORY 0xfade0c02 / CodeDirectory blob /...

Apple Mac OSX xnu 1228.0 - 'mach-o' Local Kernel Denial of Service (PoC)

/ xnu-macho-dos.c Copyright c 2007 by Apple MACOS X xnu include include include include include include define MAXPATHLEN 128 define LCUNIXTHREAD 0x05 define x86THREADSTATE32 0x01 / osfmk/mach-o/loader.h / struct threadcommand unsigned long cmd; / LCTHREAD or LCUNIXTHREAD / unsigned long cmdsize;...

Apple Mac OSX 10.5.0 (Leopard) - vpnd Remote Denial of Service (PoC)

/ vpnd-leopard-lb-dos.c Copyright c 2007 by Apple MACOS X 10.5.0 leopard vpnd remote DoS POC by mu-b - Fri 9 Nov 2007 - Tested on: Apple MACOS X 10.5.0 leopard vpnd Program received signal EXCARITHMETIC, Arithmetic exception. 0x00004828 in acceptconnections - Private Source Code -DO NOT DISTRIBUT...

Apple Mac OSX 10.5.x - Mail Arbitrary Code Execution

Apple Mac OSX 10.5.x - Mail Arbitrary Code Execution source: https://www.securityfocus.com/bid/26510/info Apple Mac OS X is prone to a vulnerability that can allow arbitrary code to run. This issue affects the Mail application when handling email attachments. Attackers can exploit this issue to...

Apple Mac OSX 10.4.x Kernel - 'i386_set_ldt()' Integer Overflow (PoC)

include include include include include include include int mainvoid union ldtentry descs; char buf; ulong pgsz = sysconfSCPAGESIZE; if buf = char mallocpgsz 4 == -1 perror"malloc"; exitEXITFAILURE; memsetbuf, 0x41, pgsz 4; buf = char ulongbuf & pgsz + pgsz; if mprotectchar ulongbuf + pgsz 2,...

Apple Mac OSX 10.4.x Kernel - i386_set_ldt() Integer Overflow (PoC)

Apple Mac OSX 10.4.x Kernel - i386setldt Integer Overflow PoC include include include include include include include int mainvoid union ldtentry descs; char buf; ulong pgsz = sysconfSCPAGESIZE; if buf = char mallocpgsz 4 == -1 perror"malloc"; exitEXITFAILURE; memsetbuf, 0x41, pgsz 4; buf = char...

Mac OSX平台下Opera浏览器的Adobe Flash Player存在未明漏洞

Adobe Flash Player是一款FLASH播放器。 Mac OSX平台下Opera浏览器的Adobe Flash Player存在未明安全问题，远程攻击者可以利用漏洞以应用程序进程权限执行任意指令。 目前没有详细漏洞细节提供。 Adobe Flash Player 9.0.47.0 Adobe Flash Player 9.0.45.0 Adobe Flash Player 9.0.31.0 Adobe Flash Player 9.0.28.0 Adobe Flash Player 8.0.34.0 Adobe Flash Player 7.0.69.0...

Apple Mac OSX 2007-005 - vpnd Local Privilege Escalation

Apple Mac OSX 2007-005 - vpnd Local Privilege Escalation Copyright c 2007 Kevin Finisterre CVE-ID: CVE-2007-0753 - http://docs.info.apple.com/article.html?artnum=305530 https://github.com/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits/4013.tar.gz 05302007-vpenis.tar.gz milw0rm.co...

Apple Mac OSX < 2007-005 - 'vpnd' Local Privilege Escalation

Copyright c 2007 Kevin Finisterre CVE-ID: CVE-2007-0753 - http://docs.info.apple.com/article.html?artnum=305530 https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/4013.tar.gz 05302007-vpenis.tar.gz milw0rm.com 2007-05-30...