shopify-scripts: sprintf gem - format string combined attack

In the sprintf gem, NOT included in mruby-engine, there are severe vulnerabilities, including information leak, and heap buffer overflow. Here are the technical details. Technical Error 1: ============== The CHECKl macro can sometimes receive negative values, that will bypass the size checks, sin...

shopify-scripts: Controlled address leak due to type confusion - ASLR bypass

There are several different places in which arguments are treated as fixnums without a prior check for their type. Since mrbvalue is a union that holds all value types, it can cause a mixup between an object pointer and an integer value: cpp typedef struct mrbvalue union mrbfloat f; void p; mrbin...

The Mac OS X operating system, and found 2 pieces of Privilege elevation 0day vulnerabilities-vulnerability warning-the black bar safety net

Apple Mac OS X operating system, and found 2 pieces new, 0day vulnerabilities, if an attacker successfully exploited, may be in the victim's equipment on elevated privileges to get root access. Vulnerability details These two vulnerabilities is by Italian security researcher Luca Todesco found, a...

Palo Alto Traps Server 3.1.2.1546 - Persistent Cross-Site Scripting

!/usr/bin/ruby =begin ------------------------------------------------------------------------ Product: Palo Alto Traps Server formerly Cyvera Endpoint Protection Vendor: Palo Alto Networks Vulnerable Versions: 3.1.2.1546 Tested Version: 3.1.2.1546 Advisory Publication: 29 March 2015 Vendor...

AOL 9.5 ActiveX Heap Overflow Vulnerability

No description provided by source. Product: AOL 9.5 Vulnerability: ActiveX - Heap Overflow Discussion: Vulnerability is in Activex Control CDDBControl.dll Sending a string to BindToFile , triggering the vulnerability. Successful exploitation allow remote attackers to execute arbitrary code...

PyPAM - Python bindings for PAM - Double Free Corruption

No description provided by source. === LSE Leading Security Experts - Security Advisory 2012-03-01 === PyPAM -- Python bindings for PAM - Double Free Corruption --------------------------------------------------------- Affected Versions ================= PyPAM = 0.4.2 Red Hat PyPAM = 0.5.0-12...

WordPress Count per Day Plugin 3.2.5 (counter.php) - XSS Vulnerability

Exploit for php platform in category web applications Because this is my first Vulnerability I ever found by my self, I wrote a PoC script I know that this is overkill and the Vulnerability is trivial to exploit :P The JavaScript Payload is executed when the Admin views Count per Day - Statistics...

PyPAM Python bindings for PAM - Double-Free Corruption

=== LSE Leading Security Experts - Security Advisory 2012-03-01 === PyPAM -- Python bindings for PAM - Double Free Corruption --------------------------------------------------------- Affected Versions ================= PyPAM = 0.4.2 Red Hat PyPAM = 0.5.0-12 Debian python-pam = 0.4.2-12.2 Ubuntu...

Synergy 1.4 Protocol Cleartext Weakness Proof Of Concept

Exploit Title: Synergy Protocol cleartext weakness PoC Date:April 5th 2011 Author: Sw1tCh Software Link: http://synergy-foss.org/ Version: 1.4 -= Info =- Synergy is Free and Open Source Software that lets you easily share your mouse and keyboard between multiple computers, where each computer has...

Yahoo! Messenger 9 Denial Of Service

Product: Yahoo Messenger 9.0.0.2162 Vulnerability: ActiveX Null Pointer - Denial of Service Description: Yahoo Messenger is prone to a denial-of-service cause of null pointer vulnerability. Vulnerability is in YahooBridgeLib.dll Activex Control An attacker can exploit this vulnerability by entici...

Simple HTTPD 1.3 (/aux) Remote Denial of Service Exploit

No description provided by source. usage: poc.py host port import socket import sys print "-----------------------------------------------------------------------" print "Simple HTTPD 1.3 /aux Denial of Service\n" print "url: http://shttpd.sourceforge.net\n" print "author: shinnai" print "mail:...