3717 matches found
OS X Regex Engine (TRE) - Integer Signedness and Overflow Issues Vulnerability
Exploit for macOS platform in category dos / poc Source: https://code.google.com/p/google-security-research/issues/detail?id=429 The OS X regex engine function tretnfarunparallel contains the following code: int tbytes; ... if !matchtags numtags = 0; else numtags = tnfa-numtags; ... int rbytes,...
Linux x86_64 execve Shellcode - 22 bytes
Linux x8664 execve Shellcode - 22 bytes. Shellcode exploit for linx86-64 platform ;Title: execve shellcode 22 bytes ;Author: d4sh&r ;Contact: https://mx.linkedin.com/in/d4v1dvc ;Category: Shellcode ;Architecture:linux x8664 ;SLAE64-1379 ;Description: ;Shellcode in 22 bytes to get a shell ;Tested ...
ZendFramework1 -- SQL injection vulnerability
Zend Framework developers report: The PDO adapters of Zend Framework 1 do not filter null bytes values in SQL statements. A PDO adapter can treat null bytes in a query as a string terminator, allowing an attacker to add arbitrary SQL following a null byte, and thus create a SQL injection...
OS X x64 - tcp bind shellcode, NULL byte free 144 bytes
OS X x64 - tcp bind shellcode, NULL byte free 144 bytes. Shellcode exploit for osx platform ;OS X x64, TCP bind shellcode port 4444, NULL byte free, 144 bytes long ;ASM code ;compile: ;nasm -f macho64 bind-shellcode.asm ;ld -macosxversionmin 10.7.0 -o bindsc bind-shellcode.o BITS 64 global start...
linux/x86 - Create file with permission 7775 and exit - 31 bytes
/ --------------------------------------------------------------------------------------------------- Linux/x86 - Create file with permission 7775 and exit - 31 bytes Ajith Kp @ajithkp560 http://www.terminalcoders.blogspot.com Om Asato Maa Sad-Gamaya | Tamaso Maa Jyotir-Gamaya | Mrtyor-Maa Amrtam...
Linux/x86 - execve/bin/bash - 31 bytes
Linux/x86 - execve/bin/bash - 31 bytes. Shellcode exploit for linx86 platform / --------------------------------------------------------------------------------------------------- Linux/x86 - execve/bin/bash - 31 bytes Ajith Kp @ajithkp560 http://www.terminalcoders.blogspot.com Om Asato Maa...
linux/x86 - execve(/bin/bash) - 31 bytes
/ --------------------------------------------------------------------------------------------------- Linux/x86 - execve/bin/bash - 31 bytes Ajith Kp @ajithkp560 http://www.terminalcoders.blogspot.com Om Asato Maa Sad-Gamaya | Tamaso Maa Jyotir-Gamaya | Mrtyor-Maa Amrtam Gamaya | Om Shaantih...
OS X x64 /bin/sh Shellcode, NULL Byte Free, 34 bytes
OS X x64 /bin/sh Shellcode, NULL Byte Free, 34 bytes. Shellcode exploit for osx platform Author: Csaba Fitzl, @theevilbit Tested on OS X 10.10.5 OS X x64 /bin/sh shellcode, NULL byte free, 34 bytes Assembly version binsh-shellcode.asm ./nasm -f macho64 binsh-shellcode.asm ld -macosxversionmin...
freeSSHd 1.3.1 Denial Of Service
Exploit title: freesshd 1.3.1 denial of service vulnerability Date: 28-8-2015 Vendor homepage: http://www.freesshd.com Software Link: http://www.freesshd.com/freeSSHd.exe Version: 1.3.1 Author: 3unnym00n Details: ---------------------------------------------- byte SSHMSGCHANNELREQUEST uint32...
Wireshark protocol-tree denial-of-service vulnerability
Wireshark formerly known as Ethereal is a suite of network packet analysis software developed by the Wireshark team. A security vulnerability exists in the 'prototreeaddbytesitem' function in the epan/proto.c file in the protocol-tree implementation of Wireshark versions 1.12.7 prior to 1.12.x. T...
The vulnerability of the OpenSSL library, which allows a hacker to trigger a service failure
The vulnerability of the ssl3writebytes function in the OpenSSL library is related to errors in the code. Exploiting this vulnerability can allow a remote attacker to cause service interruptions due to errors in processing a series of input/output operations...
The vulnerability of the OpenSSL library, which allows a hacker to trigger a service failure
The vulnerability of the ssleayrandbytes function in the OpenSSL library is related to buffer overflows in dynamic memory, caused by integer overflows. Exploiting this vulnerability could allow a malicious actor to cause service interruptions by establishing multiple TLS sessions remotely...
Veeam Agent for Microsoft Windows job displays warning: Partition exceeds disk layout
Challenge A Veeam Agent for Microsoft Windows backup job displays the following warning: Partition exceeds disk layout by bytes This warning may be accompanied by the error: Error: The drive cannot find the sector requested. Asynchronous read operation failed Failed to upload disk. Agent failed t...
Windows x86 - user32!MessageBox "Hello World!" 199 Bytes Null-Free
Windows x86 - user32!MessageBox "Hello World!" 199 Bytes Null-Free. Shellcode exploit for win32 platform / This file was automatically generated by mkhex.sh, which, together with the complete and heavily commented assembly source code for this shellcode, is available at...
Linux x86 Egg Hunter Shellcode 19 bytes
Linux x86 Egg Hunter Shellcode 19 bytes. Shellcode exploit for linx86 platform / Title: Linux x86 Egg Hunter Shellcode 19 bytes Date: 4 August 2015 Author: Guillaume Kaddouch Website: http://networkfilter.blogspot.com Twitter: @gkweb76 Tested on: Ubuntu 14.04.2 LTS x86, Kali Linux 1.0.9 x86 This...
php5 -- multiple vulnerabilities
The PHP project reports: Core: Fixed bug 69793 Remotely triggerable stack exhaustion via recursive method calls. Fixed bug 70121 unserialize could lead to unexpected methods execution / NULL pointer deref. OpenSSL: Fixed bug 70014 opensslrandompseudobytes is not cryptographically secure. Phar:...
kernel security, bug fix, and enhancement update
2.6.32-573 - security selinux: dont waste ebitmap space when importing NetLabel categories Paul Moore 1130197 - x86 Revert Add driver auto probing for x86 features v4 Prarit Bhargava 1231280 - net bridge: netfilter: dont call iptables on vlan packets if sysctl is off Florian Westphal 1236551 - ne...
[SECURITY] [DLA 280-1] ghostscript security update
Package : ghostscript Version : 8.71dfsg2-9+squeeze2 CVE ID : CVE-2015-3228 Debian Bug : 793489 In gsheapallocbytes, add a sanity check to ensure we dont overflow the variable holding the actual number of bytes we allocate...
DLA-280-1 ghostscript - security update
Bulletin has no description...
SSL/TLS: "Invariance Weakness" vulnerability in RC4 stream cipher
The RC4 algorithm, as used in the TLS protocol and SSL protocol, does not properly combine state data with key data during the initialization phase, which makes it easier for remote attackers to conduct plaintext-recovery attacks against the initial bytes of a stream by sniffing network traffic...