Qualifying Encoders with Akamai

Introduction The encoder qualification program was created to improve the process for vendors that wish to align themselves with Akamai network specific requirements. It is also intended to , mitigate the risk of encoder issues before using in production. A formal process is being introduced to...

Linux/x86 - Random Insertion Encoder and Decoder Shellcode (Generator)

!/usr/bin/python Python Random Insertion Encoder Author: Aditya Chaudhary Date: 5th Feb 2019 import random import sys import argparse shellcode = "\x31\xc0\x50\x89\xe2\x68\x62\x61\x73\x68\x68\x62\x69\x6e\x2f\x68\x2f\x2f\x2f\x2f\x89\xe3\x50\x53\x89\xe1\xb0\x0b\xcd\x80" Parse Arguments parser =...

Schneider Electric Pelco Endura NET55XX Encoder

This module exploits inadequate access controls within the webUI to enable the SSH service and change the root password. This module has been tested successfully on: NET5501, NET5501-I, NET5501-XT, NET5504, NET5500, NET5516, NET550 versions. Module Options msf use...

imagemagick/encoder_label_fuzzer: Crash in GlobExpression

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5643591676854272 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderlabelfuzzer Fuzz target binary: encoderlabelfuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type:...

Emacs - movemail Privilege Escalation (Metasploit)

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Emacs movemail Privilege Escalation', 'Description' = %q This module exploits a SUID installation of the Emacs movemail utility to run a command ...

HTTL Remote Command Execution Vulnerability

HTTL also known as Hyper-Text Template Language is an open source Java template engine , it is mainly used for dynamic HTML page output . HTTL 1.0.11 and earlier versions of a security vulnerability , the vulnerability stems from the failure to configure the xml.codec , the program defaults to us...

libIEC61850 Buffer Overflow Vulnerability

libIEC61850 is an open source library for IEC 61850. A heap buffer overflow vulnerability exists in the 'BerEncoderencodeOctetString' function in the mms/asn1/berencoder.c file in libIEC61850 version 1.3, which can be exploited by an attacker to cause a denial of service or code execution...

LuPng in Heap Buffer Overflow Vulnerability

LuPng is a PNG format decoder/encoder. A heap buffer overflow vulnerability exists in the 'insertByte' function of the miniz/lupng.c file in LuPng 2017-03-10 and earlier versions, which can be exploited by an attacker to execute arbitrary code or cause a denial of service...

org.grails:grails-dependencies (2.4.0.rc1), org.grails:grails-encoder (2.4.0.rc1) +33 more potentially affected by CVE-2018-1000529 via org.grails:grails-core (2.4.0.rc1)

org.grails:grails-core MAVEN version 2.4.0.rc1 is affected by a known vulnerability. The following packages have a transitive dependency on org.grails:grails-core and may be impacted: - org.grails:grails-dependencies 2.4.0.rc1 - org.grails:grails-encoder 2.4.0.rc1 -...

org.grails:grails-dependencies (2.4.3), org.grails:grails-encoder (2.4.3) +33 more potentially affected by CVE-2018-1000529 via org.grails:grails-core (2.4.3)

org.grails:grails-core MAVEN version 2.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.grails:grails-core and may be impacted: - org.grails:grails-dependencies 2.4.3 - org.grails:grails-encoder 2.4.3 - org.grails:grails-logging 2.4.3 -...

org.grails:grails-dependencies (2.4.5), org.grails:grails-encoder (2.4.5) +33 more potentially affected by CVE-2018-1000529 via org.grails:grails-core (2.4.5)

org.grails:grails-core MAVEN version 2.4.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.grails:grails-core and may be impacted: - org.grails:grails-dependencies 2.4.5 - org.grails:grails-encoder 2.4.5 - org.grails:grails-logging 2.4.5 -...

org.grails:grails-dependencies (2.5.0), org.grails:grails-encoder (2.5.0) +33 more potentially affected by CVE-2018-1000529 via org.grails:grails-core (2.5.0)

org.grails:grails-core MAVEN version 2.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.grails:grails-core and may be impacted: - org.grails:grails-dependencies 2.5.0 - org.grails:grails-encoder 2.5.0 - org.grails:grails-logging 2.5.0 -...

org.grails:grails-dependencies (2.4.2), org.grails:grails-encoder (2.4.2) +33 more potentially affected by CVE-2018-1000529 via org.grails:grails-core (2.4.2)

org.grails:grails-core MAVEN version 2.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.grails:grails-core and may be impacted: - org.grails:grails-dependencies 2.4.2 - org.grails:grails-encoder 2.4.2 - org.grails:grails-logging 2.4.2 -...

org.grails:grails-dependencies (2.5.2), org.grails:grails-encoder (2.5.2) +33 more potentially affected by CVE-2018-1000529 via org.grails:grails-core (2.5.2)

org.grails:grails-core MAVEN version 2.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.grails:grails-core and may be impacted: - org.grails:grails-dependencies 2.5.2 - org.grails:grails-encoder 2.5.2 - org.grails:grails-logging 2.5.2 -...

org.grails:grails-dependencies (2.4.1), org.grails:grails-encoder (2.4.1) +32 more potentially affected by CVE-2018-1000529 via org.grails:grails-core (2.4.1)

org.grails:grails-core MAVEN version 2.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.grails:grails-core and may be impacted: - org.grails:grails-dependencies 2.4.1 - org.grails:grails-encoder 2.4.1 - org.grails:grails-logging 2.4.1 -...

org.grails:grails-datastore-gorm-grails2-support (>=6.1.0.release, <=6.1.9.release), org.grails:grails-datastore-gorm-grails2-test (>=6.1.0.release, <=6.1.9.release) +35 more potentially affected by CVE-2018-1000529 via org.grails:grails-core (2.5.6)

org.grails:grails-core MAVEN version 2.5.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.grails:grails-core and may be impacted: - org.grails:grails-datastore-gorm-grails2-support =6.1.0.release, =6.1.0.release, =6.1.9.release -...

Best Practices for Ultra-Low Latency Streaming Using Chunked-Encoded and Chunk-Transferred CMAF

Over the last 15 years, live streaming services have grown from novelties & experiments in to profitable businesses serving an ever-growing cohort of cord-cutters and cord-nevers. Initial streaming implementations mimicked the workflows of the broadcast world, using custom servers to deliver...

Linux/x86 - execve(/bin/sh) + MMX/ROT13/XOR Shellcode (Encoder/Decoder) (104 bytes)

Linux/x86 - execve/bin/sh + MMX/ROT13/XOR Shellcode Encoder/Decoder 104 bytes. Shellcode exploit for Linuxx86 platform Title: Linux/x86 - execve/bin/sh + MMX/ROT13/XOR Shellcode Encoder/Decoder 104 bytes Author: Kartik Durg Date: 201-10-04 Shellcode Length: 104 BYTES Student-ID: SLAE-1233 Write-u...

Linux/x86 - execve(/bin/sh) + MMX/ROT13/XOR Shellcode (Encoder/Decoder) (104 bytes)

Title: Linux/x86 - execve/bin/sh + MMX/ROT13/XOR Shellcode Encoder/Decoder 104 bytes Author: Kartik Durg Shellcode Length: 104 BYTES Student-ID: SLAE-1233 Write-up Link: https://iamroot.blog/2018/10/02/0x4-rot13xorencodermmxdecodershellcode-linux-x86/ Tested on: Ubuntu 16.0.4.1 i686...

imagemagick/encoder_png_fuzzer: Use-of-uninitialized-value in png_do_pack

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5739060115537920 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderpngfuzzer Fuzz target binary: encoderpngfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...