Exploiting-Stagefright-Vulnerability-CVE-2015-3864

Exploitation de la vulnérabilité Stagefright CVE-2015-3864 Stagefright fait référence à un ensemble de failles logicielles dans les versions Android 2.2 « Froyo » à 5.1.1 « Lollipop », qui affectaient encore 95 % de tous les téléphones Android. Si la vulnérabilité est exploitée, un attaquant peut...

vulnerability-exploitation

Exploitation de vulnérabilités Vulnérabilité d'élévation locale des privilèges - CVE-2019-13272 / Vulnérabilité de contournement de sécurité – CVE-2019-14287 / Google Android - 'Stagefright' Exécution de code à distance - CVE-2015-1538 Absolument, je choisis toujours une vulnérabilité Linux, mais...

Metaphor

Metaphor Metaphor - Stagefright avec contournement d'ASLR Par Hanan Be'er de NorthBit Ltd. Lien vers le livre blanc : https://raw.githubusercontent.com/NorthBit/Public/master/NorthBit-Metaphor.pdf Twitter : https://twitter.com/HighByte Le code source de Metaphor est maintenant publié ! La source...

cve-2015-1538-1

Le script Python inclus génère un MP4 exploitant la vulnérabilité « stsc », également connue sous le nom de CVE-2015-1538 1. Il s'agit de l'une des vulnérabilités les plus critiques que j'ai signalées dans la bibliothèque Stagefright. Le résultat attendu de l'exploit est un reverse shell avec les...

scaredycat

SCAREDYCAT! version 0.1 beta Script Python pour générer un fichier MP4 malveillant et démarrer un serveur web hébergeant une page avec le fichier 'vidéo' intégré sur le port 8080. Ceci exploite une autre vulnérabilité Stagefright, la vulnérabilité de débordement d'entier CVE-2015-3864, publiée pa...

Android-vulnerability-exploitation

Android-vulnerability-exploitation Google Android - 'Stagefright' 원격 코드 실행 - CVE-2015-1538 물론, 저는 항상 Linux 취약점을 선택합니다. 그런데 두 사람이 같은 취약점을 선택할 수 있다는 것을 몰랐기 때문에 다른 취약점을 선택해야 했습니다. 그리고 이 사실을 알게 된 후, 다른 취약점을 선택했습니다. 하지만 이미 그것을 해결했기 때문에, 이 문서에는 이전에 작성한 보고서와 나중에 작성한 새 보고서가 모두 포함됩니다. 버릴 수 없어서 별도로 포함하기로...

cve-2015-1538-1

VEUILLEZ NE PAS PARTAGER CECI AVEC PERSONNE. CE CODE VOUS EST FOURNI SOUS FrienNDA. LES PERSONNES VIOLANT CELA NE SERONT PLUS CONSIDÉRÉES COMME DES AMIS. Un script Python est inclus qui génère un MP4 exploitant la vulnérabilité ‘stsc’ également connue sous le nom de CVE-2015-1538 1. C'est l'une d...

cve-2015-1538-1

Inclus est un script Python qui génère une MP4 exploitant la vulnérabilité ‘stsc’ également connue sous le nom de CVE-2015-1538 1. Il s’agit de l’une des vulnérabilités les plus critiques que j’ai signalées dans la bibliothèque Stagefright. Le résultat attendu de l’exploit est un reverse shell en...

stagefright-cve-2015-3864

stagefright-cve-2015-3864 PoC - Бинарные исправления для CVE-2015-3864 НЕ для продакшена, используйте на свой страх и риск...

MiracleLinux 4 : firefox-38.2.0-4.0.1.AXS4 (AXSA:2015-442:07)

The remote MiracleLinux 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2015-442:07 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability. With this update, following issues are...

Mozilla Firefox < 40.0

The version of Firefox installed on the remote Windows host is prior to 40.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2015-83 advisory. - crash in @ stagefright::SampleTable::isValid with h264 mp4CVE-2015-4480 CVE-2015-4480 - MPEG4 saio Chunk Integer Overfl...

Mozilla Firefox ESR < 38.2

The version of Firefox ESR installed on the remote macOS or Mac OS X host is prior to 38.2. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2015-83 advisory. - crash in @ stagefright::SampleTable::isValid with h264 mp4CVE-2015-4480 CVE-2015-4480 - MPEG4 saio Chunk...

Exploit-Android

Exploit-Android اختراق هواتف الاندرويد عبر انشاء ملف MP4 ملغم ا...

Exploit for Path Traversal in Thecartpress Thecartpress_Ecommerce_Shopping_Cart

This is a PoC exploit for CVE-2015-3301, a vulnerability in the Stagefright media library that allows for remote code execution on Android devices. The exploit, called Metaphor, is designed to bypass Address Space Layout Randomization ASLR and execute arbitrary code on the device. The exploit...

Linux Distros Unpatched Vulnerability : CVE-2016-3880

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Multiple buffer overflows in rtsp/ASessionDescription.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1,...

Linux Distros Unpatched Vulnerability : CVE-2016-3824

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - omx/OMXNodeInstance.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01 does not...

Linux Distros Unpatched Vulnerability : CVE-2016-6765

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A denial of service vulnerability in libstagefright in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. Th...

Linux Distros Unpatched Vulnerability : CVE-2016-6706

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An elevation of privilege vulnerability in libstagefright in Mediaserver in Android 7.0 before 2016-11-01 could enable a local malicious application to execute...

CVE-2024-34736

In setupVideoEncoder of StagefrightRecorder.cpp, there is a possible asynchronous playback when B-frame support is enabled. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

SUSE CVE-2015-4480

Integer overflow in the stagefright::SampleTable::isValid function in libstagefright in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 allows remote attackers to execute arbitrary code via crafted MPEG-4 video data with H.264 encoding...