macOS TCP Port 4444 IPv6 Shellcode (129 bytes)

/ Title: macOS - Bind 4444/TCP Shell /bin/sh + IPv6 Shellcode 129 bytes Tested: macOS 10.14.1 Author: Ken Kitahara Compilation: gcc -o loader loader.c dev:works devuser$ swvers ProductName: Mac OS X ProductVersion: 10.14.1 BuildVersion: 18B75 dev:works devuser$ cat ipv6bind.s section .text global...

macOS TCP/4444 Bind Shell Null Free Shellcode (123 bytes)

/ Title: macOS - Bind 4444/TCP Shell /bin/sh + Null-Free Shellcode 123 bytes Tested: macOS 10.14.1 Author: Ken Kitahara Compilation: gcc -o loader loader.c dev:works devuser$ swvers ProductName: Mac OS X ProductVersion: 10.14.1 BuildVersion: 18B75 dev:works devuser$ cat ipv4bind.s section .text...

ISC BIND Assertion Failure Vulnerability (DoS)

According to its self-reported version, the instance of ISC BIND 9 running on the remote name server is 9.12.0 or 9.12.1. It is, therefore, affected by an assertion failure vulnerability which exists in the rbtdb.c due to the implementation of the new serve-stale feature and NSEC aggressive...

ISC BIND Assertion Failure Vulnerability

According to its self-reported version, the instance of ISC BIND 9 running on the remote name server is 9.10.5-S1 to 9.10.5-S4, 9.10.6-S1 or 9.10.6-S2. It is, therefore, affected by an assertion failure vulnerability which exists in badcache.c due to selecting a SERVFAIL rcode instead of a FORMER...

ISC BIND Allow-Recursion Vulnerability

According to its self-reported version, the instance of ISC BIND 9 running on the remote name server is 9.9.12, 9.10.7, 9.11.3, 9.12.0 prior to or equal to 9.12.1-P2, development release 9.13.0, 9.9.12-S1, 9.11.3-S1, or 9.11.3-S2. It is, therefore, affected by an allow-recursion vulnerability whi...

ISC BIND Assertion Failure Vulnerability (DoS)

According to its self-reported version, the instance of ISC BIND 9 running on the remote name server is 9.12.0 or 9.12.1. It is, therefore, affected by an assertion failure vulnerability which exists in the zone database reference counting mechanism due to attempting several transfers of a slave...

SUSE-SU-2019:0390-1 Security update for util-linux

This update for util-linux fixes the following issues: This non-security issue was fixed: - CVE-2018-7738: bash-completion/umount allowed local users to gain privileges by embedding shell commands in a mountpoint name, which was mishandled during a umount command by a different user bsc1084300...

River Past Cam Do 3.7.6 Local Buffer Overflow

Exploit Title: River Past CamDo SEH Local Exploit Date: 07.02.2019 Vendor Homepage:www.riverpast.com Software Link: https://en.softonic.com/download/river-past-cam-do/windows/post-download?sl=1 Exploit Author: Achilles Tested Version: 3.7.6 Tested on: Windows XP SP3 EN 1.- Run python code :...

River Past Cam Do 3.7.6 - Local Buffer Overflow (SEH)

River Past Cam Do 3.7.6 - Local Buffer Overflow SEH Exploit Title: River Past CamDo SEH Local Exploit Date: 07.02.2019 Vendor Homepage:www.riverpast.com Software Link: https://en.softonic.com/download/river-past-cam-do/windows/post-download?sl=1 Exploit Author: Achilles Tested Version: 3.7.6 Test...

River Past Cam Do 3.7.6 - Local Buffer Overflow (SEH) Exploit

Exploit for windows platform in category local exploits Exploit Title: River Past CamDo SEH Local Exploit Date: 07.02.2019 Vendor Homepage:www.riverpast.com Software Link: https://en.softonic.com/download/river-past-cam-do/windows/post-download?sl=1 Exploit Author: Achilles Tested Version: 3.7.6...

River Past Audio Converter 7.7.16 - Buffer Overflow (SEH) Exploit

Exploit for windows platform in category local exploits Exploit Title: RiverPastAudioConverter - Buffer Overflow SEH Vendor Homepage: www.riverpast.com Software Link: https://en.softonic.com/download/river-past-audio-converter/windows/post-download?sl=3D1 Exploit Author: Matteo Malvica Tested...

River Past Audio Converter 7.7.16 Buffer Overflow

Exploit Title: RiverPastAudioConverter - Buffer Overflow SEH Date: 06.02.2019 Vendor Homepage: www.riverpast.com Software Link: https://en.softonic.com/download/river-past-audio-converter/windows/post-download?sl=3D1 Exploit Author: Matteo Malvica Tested Version: 7.7.16 Tested on: Windows 10 -...

River Past Audio Converter 7.7.16 - Buffer Overflow (SEH)

Exploit Title: RiverPastAudioConverter - Buffer Overflow SEH Date: 06.02.2019 Vendor Homepage: www.riverpast.com Software Link: https://en.softonic.com/download/river-past-audio-converter/windows/post-download?sl=3D1 Exploit Author: Matteo Malvica Tested Version: 7.7.16 Tested on: Windows 10 -...

Race condition

Debian tmpreaper version 1.6.13+nmu1 has a race condition when doing a bind mount via rename which could result in local privilege escalation. Mounting via rename could potentially lead to a file being placed elsewhereon the filesystem hierarchy e.g. /etc/cron.d/ if the directory being cleaned up...

CentOS 7 : bind (CESA-2019:0194)

"An update for bind is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

CVE-2019-3461

Debian tmpreaper version 1.6.13+nmu1 has a race condition when doing a bind mount via rename which could result in local privilege escalation. Mounting via rename could potentially lead to a file being placed elsewhereon the filesystem hierarchy e.g. /etc/cron.d/ if the directory being cleaned up...

UBUNTU-CVE-2019-3461

Debian tmpreaper version 1.6.13+nmu1 has a race condition when doing a bind mount via rename which could result in local privilege escalation. Mounting via rename could potentially lead to a file being placed elsewhereon the filesystem hierarchy e.g. /etc/cron.d/ if the directory being cleaned up...

CentOS Update for bind CESA-2019:0194 centos7

The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security Bulletin: IBM Dynamic System Analysis (DSA) Preboot is affected by vulnerabilities in bind (CVE-2016-9131 CVE-2016-9147 CVE-2016-9444)

Summary IBM Dynamic System Analysis DSA Preboot has addressed the following vulnerabilities in bind. Vulnerability Details Summary IBM Dynamic System Analysis DSA Preboot has addressed the following vulnerabilities in bind. Vulnerability Details CVEID: CVE-2016-9131 Description: ISC BIND is...

Security Bulletin: IBM Dynamic System Analysis (DSA) Preboot is affected by vulnerability in bind (CVE-2017-3135)

Summary IBM Dynamic System Analysis DSA Preboot has addressed the following vulnerability in bind. Vulnerability Details Summary IBM Dynamic System Analysis DSA Preboot has addressed the following vulnerability in bind. Vulnerability Details CVEID: CVE-2017-3135 Description: ISC BIND is vulnerabl...