717 matches found
Microsoft Windows Defender Evasive Executable
This module allows you to generate a Windows EXE that evades against Microsoft Windows Defender. Multiple techniques such as shellcode encryption, source code obfuscation, Metasm, and anti-emulation are used to achieve this. For best results, please try to use payloads that use a more secure...
[SECURITY] Fedora 27 Update: ant-1.10.1-10.fc27
Apache Ant is a Java library and command-line tool whose mission is to drive processes described in build files as targets and extension points dependent upon each other. The main known usage of Ant is the build of Java applications. Ant supplies a number of built-in tasks allowing to compile,...
liblouis 3.6.0 parseChars function buffer overflow vulnerability
Liblouis is an open-source Braille translator written in C. It is a very easy to use and easy to use. A buffer overflow vulnerability exists in the 'parseChars' function in the file compileTranslationTable.c in Liblouis version 3.6.0. An attacker can exploit this vulnerability to cause a denial o...
UBUNTU-CVE-2018-12085
Liblouis 3.6.0 has a stack-based Buffer Overflow in the function parseChars in compileTranslationTable.c, a different vulnerability than CVE-2018-11440...
Linux/ARM - Egghunter (0x50905090) + execve('/bin/sh') Shellcode (60 bytes)
Linux/ARM - Egghunter 0x50905090 + execve'/bin/sh' Shellcode 60 bytes. Shellcode exploit for ARM platform / Title: Linux/ARM - Memsafe egghunter 0x50905090 + execve"/bin/sh". Null free shellcode 60 bytes Date: 2018-06-06 Tested: armv7l Raspberry Pi v3 and armv6l Raspberry Pi Zero W Author: rtmcx ...
Liblouis stack buffer overflow vulnerability (CNVD-2018-11258)
Liblouis is an open-source Braille translator written in C. It is a very easy to use and easy to use. A stack buffer overflow vulnerability exists in the 'compileHyphenation' function of the compileTranslationTable.c file in Liblouis version 3.5.0. An attacker can exploit this vulnerability to...
Liblouis stack buffer overflow vulnerability (CNVD-2018-112222)
Liblouis is an open-source Braille translator written in C. It can be used to translate Braille into other languages. A stack-based buffer overflow vulnerability exists in the 'includeFile' function of the file compileTranslationTable.c in Liblouis version 3.5.0. An attacker can exploit this...
CVE-2016-10660
fis-parser-sass-bin a plugin for fis to compile sass using node-sass-binaries. fis-parser-sass-bin downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution RCE by swapping out the requested resources with an attacker...
UBUNTU-CVE-2018-11684
Liblouis 3.5.0 has a stack-based Buffer Overflow in the function includeFile in compileTranslationTable.c...
UBUNTU-CVE-2018-11685
Liblouis 3.5.0 has a stack-based Buffer Overflow in the function compileHyphenation in compileTranslationTable.c...
Liblouis Buffer Overflow Vulnerability
Liblouis is an open-source Braille translator written in C. It is a very easy to use and easy to use. A stack buffer overflow vulnerability exists in the 'parseChars' function of the file compileTranslationTable.c in Liblouis version 3.5.0. An attacker could exploit this vulnerability to execute...
DEBIAN-CVE-2018-11410
An issue was discovered in Liblouis 3.5.0. A invalid free in the compileRule function in compileTranslationTable.c allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact...
Dnsmorph - Domain Name Permutation Engine Written In Go
DNSMORPH is a domain name permutation engine, inspired by dnstwist. It is written in Go making for a compact and very fast tool. It robustly handles any domain or subdomain supplied and provides a number of configuration options to tune permutation runs. DNSMORPH includes the following domain...
Reliable Datagram Sockets (RDS) Privilege Escalation Exploit
This Metasploit module exploits a vulnerability in the rdspagecopyuser function in net/rds/page.c RDS in Linux kernel versions 2.6.30 to 2.6.36-rc8 to execute code as root CVE-2010-3904. This Metasploit module has been tested successfully on Fedora 13 i686 with kernel version...
electron-prebuilt-compile (1.8.1) potentially affected by CVE-2018-1000006 via electron (1.8.1)
electron NPM version 1.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on electron and may be impacted: - electron-prebuilt-compile 1.8.1 Source cves: CVE-2018-1000006 Source advisory: OSV:GHSA-W222-53C6-C86P...
GLSA-201801-01 : Binutils: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-201801-01 Binutils: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Binutils. Please review the referenced CVE identifiers for details. Impact : A remote attacker, by enticing a user to compile/execute a...
Windows: Heap overflow in jscript!RegExpComp::Compile through IE or local network via WPAD(CVE-2017-11890)
There is a heap overflow in jscript.dll when compiling a regex. This issue could potentially be exploited through multiple vectors: - An attacker on the local network could exploit this issue by posing as a WPAD Web Proxy Auto-Discovery host and sending a malicious wpad.dat file to the victim. Th...
Microsoft Windows - jscript!RegExpComp::Compile Heap Overflow Through IE or Local Network via WPAD
Microsoft Windows - jscript!RegExpComp::Compile Heap Overflow Through IE or Local Network via WPAD var s = 'a'; forvar i=0;i...
Microsoft Windows jscript!RegExpComp::Compile Heap Overflow Exploit
There is a heap overflow in jscript.dll when compiling a regex. This issue could potentially be exploited through multiple vectors. Windows: Heap overflow in jscript!RegExpComp::Compile through IE or local network via WPAD CVE-2017-11890 There is a heap overflow in jscript.dll when compiling a...
Microsoft Windows jscript!RegExpComp::Compile Heap Overflow
Windows: Heap overflow in jscript!RegExpComp::Compile through IE or local network via WPAD CVE-2017-11890 There is a heap overflow in jscript.dll when compiling a regex. This issue could potentially be exploited through multiple vectors: - An attacker on the local network could exploit this issue...