crypto++: private key recovery

Evgeny Sidorov discovered that it is possible to recover the private key when using Rabin-Williams signatures due to a bad interaction with the blinding value used to mask private key operations. The bad interaction had to do with the random value not meeting certain Jacobi requirements, which...

UBUNTU-CVE-2015-5364

The 1 udprecvmsg and 2 udpv6recvmsg functions in the Linux kernel before 4.0.6 do not properly consider yielding a processor, which allows remote attackers to cause a denial of service system hang via incorrect checksums within a UDP packet flood...

Cisco SSH Key Flaw Has Echoes of Earlier Vulnerabilities

When Cisco released a patch for several of its security appliances Thursday that eliminated the presence of hard-coded SSH host and private keys, the advisory had a distinct air of familiarity about it. That’s because the company released a patch for the same problem in one of its other major...

SUSE SLED12 Security Update : gstreamer-0_10-plugins-bad (SUSE-SU-2015:0942-1)

gstreamer-010-plugins-bad was updated to fix a security issue, a buffer overflow in mp4 parsing bnc927559 CVE-2015-0797. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and form...

SUSE SLED11 Security Update : gstreamer-0_10-plugins-bad (SUSE-SU-2015:0921-1)

gstreamer-010-plugins-bad was updated to fix a security issue, a buffer overflow in mp4 parsing bnc927559 CVE-2015-0797. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and form...

iFTP 2.21 Buffer OverFlow Crash PoC

Exploit for windows platform in category dos / poc !/usr/bin/python Exploit Title:iFTP 2.21 Buffer OverFlow Crash PoC Author: dogo email protected Date Discovered : 12-5-2015 Vendor Homepage: http://www.memecode.com/iftp.php Software Link: http://www.memecode.com/data/iftp-win32-v2.21.exe Version...

iFTP 2.21 Buffer Overflow

!/usr/bin/python Exploit Title:iFTP 2.21 Buffer OverFlow Crash PoC Author: dogo h@ck Date Discovered : 12-5-2015 Vendor Homepage: http://www.memecode.com/iftp.php Software Link: http://www.memecode.com/data/iftp-win32-v2.21.exe Version: 2.21 Tested on : Windows XP Sp3 Crash : Go to Connect Host...

iFTP 2.21 - Buffer Overflow Crash (PoC)

!/usr/bin/python Exploit Title:iFTP 2.21 Buffer OverFlow Crash PoC Author: dogo h@ck Date Discovered : 12-5-2015 Vendor Homepage: http://www.memecode.com/iftp.php Software Link: http://www.memecode.com/data/iftp-win32-v2.21.exe Version: 2.21 Tested on : Windows XP Sp3 Crash : Go to Connect Host...

Mediacoder 0.8.34.5716 - .m3u Local Buffer Overflow (SEH)

Mediacoder 0.8.34.5716 - .m3u Local Buffer Overflow SEH !/usr/bin/python Exploit Title: Mediacoder 0.8.34.5716 Buffer Overflow SEH Exploit .m3u Date: 05/May/2015 Author: @evilcomrade IRC freenode: vulnhub or offsec or corelan email: kwiha2003 at yahoo dot com Version: 0.8.34.5716 Tested on: Win X...

Updated gstreamer0.10-plugins-bad packages fix security vulnerabilities

Updated gstreamer0.10-plugins-bad packages fix security vulnerability: Aki Helin discovered a buffer overflow in the GStreamer plugin for MP4 playback, which could lead in the execution of arbitrary code CVE-2015-0797...

Mediacoder 0.8.34.5716 Buffer Overflow

!/usr/bin/python Exploit Title: Mediacoder 0.8.34.5716 Buffer Overflow SEH Exploit .m3u Date: 05/May/2015 Author: @evilcomrade IRC freenode: vulnhub or offsec or corelan email: kwiha2003 at yahoo dot com Version: 0.8.34.5716 Tested on: Win XP3 Vendor: http://www.mediacoderhq.com/ Software link:...

Vulnerabilities in the Debian GNU/Linux operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information

The gstreamer0.10-plugins-bad-dbg package on the Debian GNU/Linux operating system has multiple vulnerabilities. Exploiting these vulnerabilities may lead to breaches of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...

cups-filters remove_bad_chars function arbitrary command execution vulnerability

CUPS is a Universal Unix Printing System, a cross-platform printing solution for Unix environments, based on the Internet Printing Protocol, providing most PostScript and raster printer services. A security vulnerability exists in the removebadchars function in cups-filters utils/cups-browsed.c,...

DEBIAN-CVE-2015-2265

The removebadchars function in utils/cups-browsed.c in cups-filters before 1.0.66 allows remote IPP printers to execute arbitrary commands via consecutive shell metacharacters in the 1 model or 2 PDL. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-2707...

SIPhone Enterprise PBX - Remote Authentication bypass Vulnerability

Exploit for php platform in category remote exploits E / | | | | X By \ | || | | ' \ / | ' \ / \ P BaD-HaCKeR-MaN | || /| | | | | | | | / L TheMostCompleteHackerInTheWorld |/|| || ||/|| ||| O email protected I T + SIPhone Enterprise PBX Suffers from a Remote Authentication Bypass Vulnerability...

[SECURITY] [DLA 145-1] php5 security update

Package : php5 Version : 5.3.3-7+squeeze24 CVE ID : CVE-2014-0237 CVE-2014-0238 CVE-2014-2270 CVE-2014-8117 Brief introduction CVE-2014-0237 The cdfunpacksummaryinfo function in cdf.c in the Fileinfo component in PHP before 5.4.29 and 5.5.x before 5.5.13 allows remote attackers to cause a denial ...

SIPhone Enterprise PBX SQL Injection

E / | | | | X By \ | || | | ' \ / | ' \ / \ P BaD-HaCKeR-MaN | || /| | | | | | | | / L TheMostCompleteHackerInTheWorld |/|| || ||/|| ||| O thepunisherkazamel@skype I T + SIPhone Enterprise PBX Suffers from An authentication bypass vulnerability + Product: SIPhone Enterprise PBX + Vendor:...

HexChat-2.9.4-Local-Exploit

HexChat 2.9.4 Local Exploit Bug found by Jules Carter @iMulitia Exploit by Matt "hostess" Andreko mandreko at accuvant.com http://www.mattandreko.com/2013/04/buffer-overflow-in-hexchat-294.html junk1 = "B"30 shellcode = msfvenom -p windows/messagebox EXITFUNC=process BufferRegister=ESP -e...

EudoraQualcomm-WorldMail-9.0.333.0

PRE AUTHENTICATION Eudora Qualcomm WorldMail 9.0.333.0 IMAPd Service Preauthentication Buffer Overflow. - Tested on: Windows Server 2003 SP1. - SEH gets overwritten at 749 bytes when using UID command. Only 79 bytes left after SEH, So the shellcode was placed before SEH and backward jump is used...

Advantech-AdamView-GNI

!/usr/bin/env ruby Exploit Title: Advantech AdamView .gni SEH Buffer Overflow Date: Dec 09 2014 Vulnerability Discovery: Daniel Kazimirow and Fernando Paez - Core Security Exploit Author: Muhamad Fadzil Ramli mind1355atgmail.com Software Link:...