CVE-2018-1000810: Integer Overflow or Wraparound

The Rust Programming Language Standard Library version 1.29.0, 1.28.0, 1.27.2, 1.27.1, 127.0, 126.2, 126.1, 126.0 contains a CWE-680: Integer Overflow to Buffer Overflow vulnerability in standard library that can result in buffer overflow. This attack appear to be exploitable via str::repeat,...

PT-2018-9534

Name of the Vulnerable Software and Affected Versions The Rust Programming Language Standard Library versions 1.27.1 through 1.29.0 The Rust Programming Language Standard Library version 1.27.2 The Rust Programming Language Standard Library version 1.28.0 The Rust Programming Language Standard...

PT-2018-10967

Name of the Vulnerable Software and Affected Versions DedeCMS versions prior to 5.7SP2 Description The issue allows for arbitrary file write in dede/file manage control.php via a "dede/file manage view.php?fmdo=newfile" request with name and str parameters. This can be exploited to write to a new...

PT-2018-2888

Name of the Vulnerable Software and Affected Versions GNOME GLib version 2.56.1 Description The issue is related to an out-of-bounds read in the g markup parse context parse function, specifically in the utf8 str method within gmarkup.c. This could potentially allow a remote attacker to cause a...

PT-2018-17835

Name of the Vulnerable Software and Affected Versions CCN-lite version 2 Description The issue arises in the ccnl prefix to str detailed function, which can cause a buffer overflow when writing a prefix to the buffer buf. The buffer size is defined as CCNL MAX PREFIX SIZE, but when NFN is enabled...

Linux/StrongARM - execve (/bin/sh) Shellcode (47 bytes)

/ 47 byte StrongARM/Linux execve shellcode funkysh / char shellcode= "\x02\x20\x42\xe0" / sub r2, r2, r2 / "\x1c\x30\x8f\xe2" / add r3, pc, 28 0x1c / "\x04\x30\x8d\xe5" / str r3, sp, 4 / "\x08\x20\x8d\xe5" / str r2, sp, 8 / "\x13\x02\xa0\xe1" / mov r0, r3, lsl r2 / "\x07\x20\xc3\xe5" / strb r2, r...

Linux/ARM - execve (/bin/sh,NULL,0) Shellcode (31 bytes)

/ Title: Linux/ARM - execve"/bin/sh",NULL,0 - 31 bytes Date: 2010-08-31 Tested: ARM926EJ-S rev 5 v5l Author: Jonathan Salwan - twitter: @jonathansalwan shell-storm.org Shellcode ARM without 0x20, 0x0a and 0x00 00008054 : 8054: e28f3001 add r3, pc, 1 ; 0x1 8058: e12fff13 bx r3 805c: 4678 mov r0, p...

Apple iOS aarch64 Command Shell, Reverse TCP Inline

Connect back to attacker and spawn a command shell This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = 152 include Msf::Payload::Single include Msf::Sessions::CommandShellOptions def...

UBUNTU-CVE-2014-9474

Buffer overflow in the mpfrstrtofr function in GNU MPFR before 3.1.2-p11 allows context-dependent attackers to have unspecified impact via vectors related to incorrect documentation for mpnsetstr...

PT-2017-13050

Name of the Vulnerable Software and Affected Versions ncurses version 6.0 Description The issue is related to an illegal address access in the nc save str function in alloc entry.c. This can lead to a remote denial of service attack. Recommendations For ncurses version 6.0, update to a version th...

PT-2017-18262

Name of the Vulnerable Software and Affected Versions RIOT versions prior to 2017-04-25 Description The issue is related to a stack-based buffer overflow in the ipv6 addr from str function, which can be triggered by a malformed IPv6 address. This could allow local attackers, and potentially remot...

PT-2017-7863

Name of the Vulnerable Software and Affected Versions GNU oSIP version 4.1.0 Description A malformed SIP message can cause a heap buffer overflow in the checkPassword function is not mentioned, however the osip message to str function is, resulting in a remote denial of service. Recommendations F...

PT-2017-7864

Name of the Vulnerable Software and Affected Versions GNU oSIP version 4.1.0 Description A malformed SIP message can cause a heap buffer overflow in the osip body to str function, leading to a remote denial of service. The issue is related to the osip body to str function defined in...

CVE-2017-5998

Cross-site scripting XSS vulnerability in InterSect Alliance SNARE Epilog for UNIX version 1.5 allows remote authenticated users to inject arbitrary web script or HTML via the strlogname parameter in a "Web Admin Portal Log Configuration Add" action...

PT-2017-16818

Name of the Vulnerable Software and Affected Versions InterSect Alliance SNARE Epilog for UNIX version 1.5 Description A cross-site scripting issue allows remote authenticated users to inject arbitrary web script or HTML via the str log name parameter in a "Web Admin Portal Log Configuration Add"...

PT-2016-3325

Name of the Vulnerable Software and Affected Versions Gstreamer versions prior to 1.10.3 Description The issue is related to the qtdemux tag add str full function in the gst-plugins-good plugin of the Gstreamer multimedia framework. It involves an out-of-bounds operation in memory, which can be...

FFmpeg Code Execution

The vulnerability of the strreadpacket function in the FFmpeg multimedia library libavformat/psxstr.c is caused by buffer overflows on the stack. Exploiting this vulnerability can allow an attacker to cause a service failure or execute arbitrary code terminate the application using a specially...

CVE-2016-5670

Crestron Electronics DM-TXRX-100-STR devices with firmware before 1.3039.00040 have a hardcoded password of admin for the admin account, which makes it easier for remote attackers to obtain access via the web management interface...

CVE-2016-5668

Crestron Electronics DM-TXRX-100-STR devices with firmware before 1.3039.00040 allow remote attackers to bypass authentication and change settings via a JSON API call...

CVE-2016-5666

Crestron Electronics DM-TXRX-100-STR devices with firmware before 1.3039.00040 rely on the client to perform authentication, which allows remote attackers to obtain access by setting the value of objresp.authenabled to 1...