LG G4 - Touchscreen Driver write_log Kernel Read/Write

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=990 The following function and variations on the same code is used to write to files from kernel code in various touchscreen drivers. This copy is from RefCodeCustomerImplementation.c - I'm unsure which copy is actually being used ...

LG G4 - lgdrmserver Binder Service Multiple Race Conditions

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=986 The lgdrmserver binder service /system/bin/lgdrmserver implements a handle system to store pointers to objects allocated by the drm implementation /system/lib/liblgdrm.so. In several places, these handles are retrieved from a...

Joomla Extra Search 2.2.8 SQL Injection

Exploit Title : Joomla comextrasearch SQL injection Vulnerability Exploit Author : howucan Website : http://howucan.gr Dork : inurl:/index.php?option=comextrasearch establename Software link : http://www.joomlaboat.com/extra-search Software version : 2.2.8 video : http://adf.ly/1cmGen Tested on:...

How to Install Android 6.0 Marshmallow and When will Your Smartphone Get it?

Google is eager to release the latest version of its mobile operating system, Android 6.0 Marshmallow, to some of its Smartphone and Tablet lineup. The latest Android 6.0 Marshmallow update brings a whole host of new features, including Doze mode, App permissions, Google Now on Tap, "Do not...

Mac OS X <= 10.4.6 (launchd) Local Format String Exploit (ppc)

No description provided by source. !/usr/bin/perl http://www.digitalmunition.com/FailureToLaunch-ppc.pl Code by Kevin Finisterre kflistsatdigitalmunitiondotcom Much appreciation goes to John H for all kindsa random shit like exploiting Veritas and other random things in the past core... where the...

HP System Management Homepage Cross Site Scripting

PR10-11: Multiple XSS injection vulnerabilities and a offsite redirection flaw within HP System Management Homepage Insight Manager Vulnerability found: 6th June 2010 Date Published 20th May 2011 Severity: Medium Description: XSS vulnerabilities have been found within HP System Management; Arisin...

Microsoft GDI+ CCITT G4 TIFF File Processing Memory Corruption Remote Code Execution Vulnerability

Description Microsoft GDI+ is prone to a remote code-execution vulnerability because the vector graphics link library improperly processes TIFF image files. This issue occurs when CCITT G4 compressed TIFF images are decompressed. An attacker could exploit this issue to execute arbitrary code with...

phpTournois &lt;= G4 Remote File Upload/Code Execution Exploit

No description provided by source. ?php / Name: phpTournois = G4 Remote File Upload/Code Execution Exploit Credits: Charles "real" F. charlesfolathotmail.fr Date: 04-06-08 - Remote Code Execution - Remote File Upload When testing if we are admin, phpTournois checks if $grade'a'=='a'. But when we...

phpTournois <= G4 Remote File Upload/Code Execution Exploit

Exploit for unknown platform in category web applications =========================================================== phpTournois Remote Code Execution - Remote File Upload When testing if we are admin, phpTournois checks if $grade'a'=='a'. But when we are not loggued in, this var is not defined...

phpTournois G4 - Arbitrary File Upload / Code Execution

Date: 04-06-08 - Remote Code Execution - Remote File Upload When testing if we are admin, phpTournois checks if $grade'a'=='a'. But when we are not loggued in, this var is not defined. So, using registerglobals, we can define it and let the CMS think we are authentificated. Using configuration zo...

aeDating41.txt

Product of AEwebworks Dating Software http://www.aewebworks.com/ --------------------------- Cross Site Scripting XSS --------------------------- http://target.xx:80/index.php?Sex="alert/Elipsis+Security+Test/&Mode=last ^"G4" Template work^ --- POST /joinform.php HTTP/1.1 Content-Type:...