Exploit for Improper Input Validation in Linux Linux_Kernel

Exploit for CVE-2017-5123 Step Complile kernel with null...

PT-2015-7842

Name of the Vulnerable Software and Affected Versions libarchive versions prior to 3.2.0 Description The issue is related to multiple integer overflows in the get time t max and get time t min functions in archive read support format mtree.c. This can be triggered by a crafted mtree file, leading...

Information Disclosure and Arbitrary File Upload Vulnerability in UFIDA NC-IUFO Reporting System

UFIDA NC-IUFO Reporting System is a comprehensive enterprise-level data integration application system developed by UFIDA Software Co. The UFIDA NC-IUFO Reporting System suffers from an information disclosure and arbitrary file upload vulnerability, which allows an attacker to exploit this...

PT-2016-1597

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.3 Description The issue is related to errors in handling the mmap min addr variable in the LIST POISON function of the Linux kernel. This can allow a remote attacker to bypass a protection mechanism by triggeri...

Linux/MIPS Little Endian - Chmod 666 /etc/passwd 55 Bytes

Linux/MIPS Little Endian - Chmod 666 /etc/passwd 55 Bytes. Shellcode exploit for linuxmips platform include / Title: Linux/MIPS Little Endian - chmod 666 /etc/passwd - 55 bytes Date: 2015-03-05 Author: Sang-Min LEE Email: [email protected] Blog: http://smleenull.tistory.com / char sc =...

CVE-2014-7062

The CVE-2014-7062 entry concerns the Association Min Ajlik (com.association.min.ajlik) Android app version 1.0, which does not verify X.509 certificates when establishing SSL connections. This allows a man-in-the-middle attacker to spoof SSL servers and potentially exfiltrate sensitive informatio...

CVE-2014-7062: Undefined Security Weakness

The Association Min Ajlik aka com.association.min.ajlik application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-2287

channels/chansip.c in Asterisk Open Source 1.8.x before 1.8.26.1, 11.8.x before 11.8.1, and 12.1.x before 12.1.1, and Certified Asterisk 1.8.15 before 1.8.15-cert5 and 11.6 before 11.6-cert2, when chansip has a certain configuration, allows remote authenticated users to cause a denial of service...

CVE-2014-2287

channels/chansip.c in Asterisk Open Source 1.8.x before 1.8.26.1, 11.8.x before 11.8.1, and 12.1.x before 12.1.1, and Certified Asterisk 1.8.15 before 1.8.15-cert5 and 11.6 before 11.6-cert2, when chansip has a certain configuration, allows remote authenticated users to cause a denial of service...

CVE-2014-2287

channels/chansip.c in Asterisk Open Source 1.8.x before 1.8.26.1, 11.8.x before 11.8.1, and 12.1.x before 12.1.1, and Certified Asterisk 1.8.15 before 1.8.15-cert5 and 11.6 before 11.6-cert2, when chansip has a certain configuration, allows remote authenticated users to cause a denial of service...

PT-2014-4606

Name of the Vulnerable Software and Affected Versions Asterisk Open Source versions 1.8.x through 1.8.25, 11.8.x through 11.8.0, and 12.1.x through 12.1.0 Asterisk Open Source version 1.8.26.0 Certified Asterisk versions 1.8.15 through 1.8.15-cert4 Certified Asterisk versions 11.6 through...

CVE-2013-4877

The Verizon Wireless Network Extender SCS-26UC4 and SCS-2U01 does not use CAVE authentication, which makes it easier for remote attackers to obtain ESN and MIN values from arbitrary phones, and conduct cloning attacks, by sniffing the network for registration packets...

Authentication flaw

The Verizon Wireless Network Extender SCS-26UC4 and SCS-2U01 does not use CAVE authentication, which makes it easier for remote attackers to obtain ESN and MIN values from arbitrary phones, and conduct cloning attacks, by sniffing the network for registration packets...

CVE-2013-4877

The Verizon Wireless Network Extender SCS-26UC4 and SCS-2U01 does not use CAVE authentication, which makes it easier for remote attackers to obtain ESN and MIN values from arbitrary phones, and conduct cloning attacks, by sniffing the network for registration packets...

CVE-2013-4877

CVE-2013-4877 affects Verizon Wireless Network Extender models SCS-26UC4 and SCS-2U01. The root issue is that these devices do not use CAVE authentication, which allows an attacker to sniff registration packets over the network and obtain ESN and MIN values from arbitrary phones, enabling cloning...

Verizon Network Extender femtocell hack intercepts calls

A $250 piece of hardware known as a femtocell, used to boost mobile phone signals for consumers and small businesses, is vulnerable to a complete takeover that attackers can use to intercept Internet traffic and cell phone calls. Two researchers from iSEC Partners are expected to provide more...

Mega File Manager 1.0 File Download

Exploit Title: MegaFileManager FileDownload Vulnerability date: 2012-04-19 Author: i2sec-Min Gi Jo Software Link: http://www.awesomephp.com/?Download5 Version: Mega File Manager V 1.0 Tested on: Windows Description : There is no filtering on 'cimages.php' parameter 'name'. PoC :...

Mega File Manager - File Download

Exploit Title: MegaFileManager FileDownload Vulnerability date: 2012-04-19 Author: i2sec-Min Gi Jo Software Link: http://www.awesomephp.com/?Download5 Version: Mega File Manager V 1.0 Tested on: Windows Description : There is no filtering on 'cimages.php' parameter 'name'. PoC :...

CVE-2011-3812: Exposure of Sensitive Information to an Unauthorized Actor

Vanilla 2.0.16 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by plugins/Minify/min/utils.php and certain other files...

CVE-2011-3812

Vanilla 2.0.16 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by plugins/Minify/min/utils.php and certain other files...