4137 matches found
PT-2016-4396
Name of the Vulnerable Software and Affected Versions libssh versions prior to 0.7.3 Description The issue is related to a "bits/bytes confusion bug" in the diffie-hellman-group1 and diffie-hellman-group14 key exchange methods. This bug causes ephemeral secrets to be improperly truncated to 128...
PT-2016-4413
Name of the Vulnerable Software and Affected Versions libssh2 versions prior to 1.7.0 Description The issue arises from a "bits/bytes confusion bug" in the diffie hellman sha256 function, which improperly truncates secrets to 128 or 256 bits. This makes it easier for man-in-the-middle attackers t...
libssh: man-in-the-middle
libssh versions 0.1 and above have a bits/bytes confusion bug and generate the an anormaly short ephemeral secret for the diffie-hellman-group1 and diffie-hellman-group14 key exchange methods. The resulting secret is 128 bits long, instead of the recommended sizes of 1024 and 2048 bits...
Multiple OpenStack Products Access Bypass Vulnerabilities
OpenStack Identity Keystone is a project developed by the National Aeronautics and Space Administration and Rackspace in the United States for authentication, providing identity, token, directory and policy services. OpenStack keystonemiddleware formerly known as python-keystoneclient is one of t...
py-imaging, py-pillow -- Buffer overflow in PCD decoder
The Pillow maintainers report: In all versions of Pillow, dating back at least to the last PIL 1.1.7 release, PcdDecode.c has a buffer overflow error. The state.buffer for PcdDecode.c is allocated based on a 3 bytes per pixel sizing, where PcdDecode.c wrote into the buffer assuming 4 bytes per...
x86_64 Linux Polymorphic Execve-Stack - 47 bytes
x8664 Linux Polymorphic Execve-Stack - 47 bytes. Shellcode exploit for linx86-64 platform /--------------------------------------------------------------------------------------------------------------------- / Title: x8664 linux Polymorphic execve-stack 47 bytes Author: Sathish kumar Contact:...
Linux x86/x86_64 - reverse_tcp (192.168.1.29:4444) Shellcode (195 bytes)
/ + Author : B3mB4m Contact : email protected Project : https://github.com/b3mb4m/Shellsploit Greetz : Bomberman,T-Rex,KnocKout,ZoRLu If you want test it, you must compile it within x86 OS. Or basically you can get it with shellsploit. Default setthings for port:4444 host:192.168.1.29 00000000 31...
Linux/x86-64 - xor/not/div Encoded execve Shellcode (54 bytes)
/--------------------------------------------------------------------------------------------------------------------- / Title: x8664 linux-Xor/not/div encoded execve shellcode Author: Sathish kumar Contact: https://www.linkedin.com/in/sathish94 Copyright: c 2016 iQube. http://iQube.io Release...
OpenSSH 'resend_bytes' function information disclosure vulnerability
OpenSSH is a set of connection tools maintained by the OpenBSD Project Group for secure access to remote computers. A security vulnerability in the 'resendbytes' function in the 'roamingcommon.c file in OpenSSH's client allows a remote attacker to obtain sensitive information from process memory ...
DEBIAN-CVE-2016-0777
The resendbytes function in roamingcommon.c in the client in OpenSSH 5.x, 6.x, and 7.x before 7.1p2 allows remote servers to obtain sensitive information from process memory by requesting transmission of an entire buffer, as demonstrated by reading a private key...
UBUNTU-CVE-2016-0777
The resendbytes function in roamingcommon.c in the client in OpenSSH 5.x, 6.x, and 7.x before 7.1p2 allows remote servers to obtain sensitive information from process memory by requesting transmission of an entire buffer, as demonstrated by reading a private key...
PT-2016-3290
Name of the Vulnerable Software and Affected Versions OpenSSH versions 5.x through 7.x before 7.1p2 Description The issue is related to the resend bytes function in roaming common.c, which allows remote servers to obtain sensitive information from process memory. This can be achieved by requestin...
Linux/x86-64 - TCP Reverse Shell with Password Prompt Shellcode (151 bytes)
/--------------------------------------------------------------------------------------------------------------------- / Title: tcp reverse shell with password prompt in 151 bytes Author: Sathish kumar Contact: https://www.linkedin.com/in/sathish94 Copyright: c 2016 iQube. http://iQube.io Release...
Linux/x86 execve "/bin/sh" - shellcode 24 byte
Linux/x86 execve "/bin/sh" - shellcode 24 byte. Shellcode exploit for linx86 platform / ; Title: Linux/x86 execve "/bin/sh" - shellcode 24 byte ; Platform: linux/x86 ; Date: 2015-01-03 ; Author: Dennis 'dhn' Herrmann ; Website: https://zer0-day.pw BITS 32 global start section .text ; syscalls...
CVE-2015-8743
QEMU aka Quick Emulator built with the NE2000 device emulation support is vulnerable to an OOB r/w access issue. It could occur while performing 'ioport' r/w operations. A privileged CAPSYSRAWIO user/process could use this flaw to leak or corrupt QEMU memory bytes...
x86_64 Linux bind TCP port shellcode
x8664 Linux bind TCP port shellcode. Shellcode exploit for linx86-64 platform /--------------------------------------------------------------------------------------------------------------------- / Exploit Title: bindshell TCP Author: Scorpion Copyright: c 2016 iQube. http://iQube.io Release Dat...
Linux x86_64 Polymorphic execve Shellcode - 31 bytes
Linux x8664 Polymorphic execve Shellcode - 31 bytes. Shellcode exploit for linx86-64 platform / ;Title: polymorphic execve shellcode ;Author: d4sh&r ;Contact: https://mx.linkedin.com/in/d4v1dvc ;Category: Shellcode ;Architecture:linux x8664 ;SLAE64-1379 ;Description: ;Polymorphic shellcode in 31...
Linux/x86-64 - Polymorphic execve Shellcode (31 bytes)
/ ;Title: polymorphic execve shellcode ;Author: d4sh&r ;Contact: https://mx.linkedin.com/in/d4v1dvc ;Category: Shellcode ;Architecture:linux x8664 ;SLAE64-1379 ;Description: ;Polymorphic shellcode in 31 bytes to get a shell ;Tested on : Linux kali64 3.18.0-kali3-amd64 1 SMP Debian 3.18.6-1kali2...
Ubuntu 14.04 LTS : Kerberos vulnerabilities (USN-2810-1)
The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2810-1 advisory. It was discovered that the Kerberos kpasswd service incorrectly handled certain UDP packets. A remote attacker could possibly use this issue to cause...
USN-2810-1 krb5 vulnerabilities
It was discovered that the Kerberos kpasswd service incorrectly handled certain UDP packets. A remote attacker could possibly use this issue to cause resource consumption, resulting in a denial of service. This issue only affected Ubuntu 12.04 LTS. CVE-2002-2443 It was discovered that Kerberos...