CVE-2 0 1 5-0 2 0 4 OpenSSL FREAK Attack vulnerability detection methods and repair recommendations-vulnerability warning-the black bar safety net

0×0 1 Introduction Near the Lantern Festival on the occasion, OpenSSL and because of the FREAK attack（also known as the Factoring Attack on RSA-EXPORT Keys vulnerability or CVE-2 0 1 5-0 2 0 4. the vulnerability fights uproar. Apple and Google are in on Tuesday indicated that they are fixing the...

Linux Kernel IRET Instruction #SS Fault Handling - Crash PoC

Exploit for linux platform in category dos / poc / ---------------------------------------------------------------------------------------------------- cve-2014-9322poc.c arch/x86/kernel/entry64.S in the Linux kernel before 3.17.5 does not properly handle faults associated with the Stack Segment ...

SQLite3 3.8.6 - Controlled Memory Corruption PoC

Exploit for linux platform in category dos / poc Exploit Title: SQLite3 controlled memory corruption PoC 0day Date: date Exploit Author: Andras Kabai Vendor Homepage: http://www.sqlite.org/ Software Link: http://www.sqlite.org/download.html Version: 3.8.6, 3.8.8.3 Tested on: Ubuntu 14.10, 64 bit...

Linux Kernel 3.17.5 - IRET Instruction #SS Fault Handling Crash (PoC)

/ ---------------------------------------------------------------------------------------------------- cve-2014-9322poc.c arch/x86/kernel/entry64.S in the Linux kernel before 3.17.5 does not properly handle faults associated with the Stack Segment SS segment register, which allows local users to...

Linux Kernel 3.16.3 - Associative Array Garbage Collection Crash (PoC)

/ ---------------------------------------------------------------------------------------------------- cve-2014-3631poc.c The assocarraygc function in the associative-array implementation in lib/assocarray.c in the Linux kernel before 3.16.3 does not properly implement garbage collection, which...

Linux Kernel 3.15.6 - PPP-over-L2TP Socket Level Handling Crash (PoC)

/ ---------------------------------------------------------------------------------------------------- cve-2014-4943poc.c The PPPoL2TP feature in net/l2tp/l2tpppp.c in the Linux kernel through 3.15.6 allows local users to gain privileges by leveraging data-structure differences between an l2tp...

Linux Kernel 3.15.6 - PPP-over-L2TP Socket Level Handling Crash (PoC)

Linux Kernel 3.15.6 - PPP-over-L2TP Socket Level Handling Crash PoC / ---------------------------------------------------------------------------------------------------- cve-2014-4943poc.c The PPPoL2TP feature in net/l2tp/l2tpppp.c in the Linux kernel through 3.15.6 allows local users to gain...

Mooplayer 1.3.0 'm3u' SEH Buffer Overflow POC

!/usr/bin/env python Exploit Title: MooPlayer 1.3.0 'm3u' SEH Buffer Overflow POC Date Discovered: 09-02-2015 Exploit Author: Samandeep Singh @samanL33T Vulnerable Software: Moo player 1.3.0 Software Link: https://mooplayer.jaleco.com/ Vendor site: https://mooplayer.jaleco.com/ Version: 1.3.0...

Samsung iPOLiS 1.12.2 - iPOLiS XnsSdkDeviceIpInstaller ActiveX WriteConfigValue (PoC)

Samsung iPOLiS 1.12.2 - iPOLiS XnsSdkDeviceIpInstaller ActiveX WriteConfigValue PoC Samsung iPOLiS XnsSdkDeviceIpInstaller ActiveX WriteConfigValue Remote Code Execution PoC var arg1 = ""; var arg2="praveend"; for i=0; i !-- Stack Trace Exception Code: ACCESSVIOLATION Disasm: 149434 MOV AL,ESI+ED...

Samsung iPOLiS 1.12.2 - iPOLiS XnsSdkDeviceIpInstaller ActiveX WriteConfigValue (PoC)

Samsung iPOLiS XnsSdkDeviceIpInstaller ActiveX WriteConfigValue Remote Code Execution PoC var arg1 = ""; var arg2="praveend"; for i=0; i !-- Stack Trace Exception Code: ACCESSVIOLATION Disasm: 149434 MOV AL,ESI+EDX Seh Chain: -------------------------------------------------- 1 647C7D7D mfc100.dl...

Two Reflected XSS Vulnerabilities in Easing Slider WordPress Plugin

Advisory ID: HTB23249 Product: Easing Slider WordPress Plugin Vendor: Easing Slider Vulnerable Versions: 2.2.0.6 and probably prior Tested Version: 2.2.0.6 Advisory Publication: January 21, 2015 without technical details Vendor Notification: January 21, 2015 Vendor Patch: January 22, 2015 Public...

WordPress Store Locator 3.33.1 - SQL Injection

Using a combination of GET fields, it is possible to perform a SQL Injection attack using the ‘sl-xml.php’ script. This injection is performed on the LIMIT of the SQL query, however retrieving data via this vulnerability is very easy, due to the outputting of the resulting SQL error by the script...

WordPress Image Metadata Cruncher CSRF / XSS

Title: CSRF / Stored XSS Vulnerability in IMAGE-MEtadata-Cruncher Wordpress Plugin Author: Kaustubh G. Padwad CVE-ID : CVE-2015-1614 Plugin Homepage: https://wordpress.org/plugins/image-metadata-cruncher/ Severity: Medium Description: Vulnerable Parameter: Alternate text,Caption,Custom image meta...

X (Formerly Twitter): Reporting user's profile by using another people's ID

Hello , I'm Hussein .. Here is the video of the POC : https://www.youtube.com/watch?v=1UQmGRfDoYE The link I used in the video : https://twitter.com/safety/reportstory?source=reportprofile&reporteduserid=ID TO REPORT&reporteruserid=REPORTER's ID Please fix this fastly : Thanks, Good day :...

Enter: Email Enumeration (POC)

HI i am opening the ticket again now i have a poc to show you First here is the issue again: 1.log in robocoin account go to settings 2.choose change my email 3.enter your pass 4.enter any email you want to check 5.if the email isn't registered a message appears sayingthe email is changed 6.if it...

WordPress Video Gallery 2.7 SQL Injection

Exploit Title : Wordpress Video Gallery 2.7 SQL Injection Vulnerability Exploit Author : Claudio Viviani Vendor Homepage : http://www.apptha.com/category/extension/Wordpress/Video-Gallery Software Link : https://downloads.wordpress.org/plugin/contus-video-gallery.2.7.zip Dork Google:...

StaMPi - Local File Inclusion Vulnerability

Exploit for php platform in category web applications Exploit Title: StaMPi - Local File Inclusion Google Dork: "Designed by StaMPi" inurl:fotogalerie.php Date: 16/2/15 Contact: email protected PoC: http://site.com/path/fotogalerie.php?id=../../../../../../../../../../etc/passwd%00 0day.today...

MooPlayer 1.3.0 - m3u SEH Buffer Overflow PoC

Exploit for windows platform in category local exploits !/usr/bin/env python Exploit Title: MooPlayer 1.3.0 'm3u' SEH Buffer Overflow POC Date Discovered: 09-02-2015 Exploit Author: Samandeep Singh SaMaN - @samanL33T Vulnerable Software: Moo player 1.3.0 Software Link: https://mooplayer.jaleco.co...

StaMPi Local File Inclusion

Exploit Title: StaMPi - Local File Inclusion Google Dork: "Designed by StaMPi" inurl:fotogalerie.php Date: 16/2/15 Author : e . V . E . L Contact: [email protected] PoC: http://site.com/path/fotogalerie.php?id=../../../../../../../../../../etc/passwd%00...

StaMPi - Local File Inclusion

Exploit Title: StaMPi - Local File Inclusion Google Dork: "Designed by StaMPi" inurl:fotogalerie.php Date: 16/2/15 Author : e . V . E . L Contact: [email protected] PoC: http://site.com/path/fotogalerie.php?id=../../../../../../../../../../etc/passwd%00...