Mac OS X Inject Mach-O Bundle, Reverse TCP Stager

Inject a custom Mach-O bundle into the exploited process. Connect, read length, read buffer, execute This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework ReverseTcp ------- Mac OS X x86 Reverse TCP stager. module...

Mac OS X Inject Mach-O Bundle, Bind TCP Stager

Inject a custom Mach-O bundle into the exploited process. Listen, read length, read buffer, execute This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework BindTcp ------- Mac OS X x86 bind TCP stager. module MetasploitModule...

Unfixed XSS vulnerability at videos.security-shell.org

Security researcher Mach, has submitted on 12/04/2008 a cross-site-scripting XSS vulnerability affecting videos.security-shell.org, which at the time of submission ranked 1830249 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/04/2008. It is...

CVE-2008-0049: Undefined Security Weakness

AppKit in Apple Mac OS X 10.4.11 inadvertently makes an NSApplication mach port available for inter-process communication instead of inter-thread communication, which allows local users to execute arbitrary code via crafted messages to privileged applications...

applesmb-overflow.txt

/ Copyright C 2007-2008 Subreption LLC. All rights reserved. Visit http://blog.subreption.com for exploit development notes. References: CVE-2007-3876 http://docs.info.apple.com/article.html?artnum=307179 http://seclists.org/fulldisclosure/2007/Dec/0445.html...

Design/Logic Flaw

The csvalidatepage function in bsd/kern/ubcsubr.c in the xnu kernel 1228.0 and earlier in Apple Mac OS X 10.5.1 allows local users to cause a denial of service failed assertion and system crash via a crafted signed Mach-O binary that causes the hashes function to return NULL...

CVE-2007-6359

The csvalidatepage function in bsd/kern/ubcsubr.c in the xnu kernel 1228.0 and earlier in Apple Mac OS X 10.5.1 allows local users to cause a denial of service failed assertion and system crash via a crafted signed Mach-O binary that causes the hashes function to return NULL...

CVE-2007-6359: Undefined Security Weakness

The csvalidatepage function in bsd/kern/ubcsubr.c in the xnu kernel 1228.0 and earlier in Apple Mac OS X 10.5.1 allows local users to cause a denial of service failed assertion and system crash via a crafted signed Mach-O binary that causes the hashes function to return NULL...

Integer overflow

Integer overflow in the loadthreadstack function in the Mach-O loader machloader.c in the xnu kernel in Apple Mac OS X 10.4 through 10.5.1 allows local users to cause a denial of service infinite loop via a crafted Mach-O binary...

CVE-2007-6261

Integer overflow in the loadthreadstack function in the Mach-O loader machloader.c in the xnu kernel in Apple Mac OS X 10.4 through 10.5.1 allows local users to cause a denial of service infinite loop via a crafted Mach-O binary...

CVE-2007-6261

CVE-2007-6261 affects Apple Mac OS X (xnu kernel) 10.4–10.5.1. The vulnerability is an integer overflow in the load_threadstack function of mach_loader.c, enabling a local attacker to trigger a denial of service (infinite loop) through a crafted Mach-O binary. Connected documents do not provide e...

CVE-2007-6261: Undefined Security Weakness

Integer overflow in the loadthreadstack function in the Mach-O loader machloader.c in the xnu kernel in Apple Mac OS X 10.4 through 10.5.1 allows local users to cause a denial of service infinite loop via a crafted Mach-O binary...

Apple Mac OS X xnu <= 1228.0 mach-o Local Kernel Denial of Service PoC

No description provided by source. / xnu-macho-dos.c Copyright c 2007 by [email protected] Apple MACOS X xnu = 1228.0 local kernel DoS POC by mu-b - Thu 15 Nov 2007 - Tested on: Apple MACOS X 10.4 xnu-792.22.51/RELEASEI386 Apple MACOS X 10.5.1 xnu-1228.0.21/RELEASEI386 Apple MACOS X 10.5.1...

Apple Mac OS X multiple security vulnerabilities

Mach ports privilege escalation. Multiple Appletalk protocol handling vulnerabilities. ldt privilege escalation...

[Full-disclosure] iDefense Security Advisory 11.14.07: Apple Mac OS X Mach Port Inheritance Privilege Escalation Vulnerability

iDefense Security Advisory 11.14.07 http://labs.idefense.com/intelligence/vulnerabilities/ Nov 14, 2007 I. BACKGROUND Mach ports are used to provide inter-process communication IPC facilities on Mac OS X. More information can be found on the vendor's site at the following URL...

CVE-2007-0732

Unspecified vulnerability in the CoreServices daemon in CarbonCore in Apple Mac OS X 10.4 through 10.4.9 allows local users to gain privileges via unspecified vectors involving "obtaining a send right to the Mach task port."...

CVE-2007-0732

CVE-2007-0732 affects Apple Mac OS X 10.4–10.4.9, via the CoreServices/CarbonCore subsystem. The vulnerability is a local privileges escalation caused by an unspecified flaw that allows a local user to obtain a send right to the Mach task port, enabling elevation of privileges. Affected component...

CVE-2007-0732: Undefined Security Weakness

Unspecified vulnerability in the CoreServices daemon in CarbonCore in Apple Mac OS X 10.4 through 10.4.9 allows local users to gain privileges via unspecified vectors involving "obtaining a send right to the Mach task port."...

Apple Mac OS X fails to properly handle corrupted Universal Mach-O Binaries

Overview A vulnerability in the way Apple Mac OS X handles corrupted Universal Mach-O Binaries may result in execution of arbitrary code or denial of service. Description Apple Mac OS X uses the Mach-O file format's ability to support more than one type of machine code to create Mac OS X Universa...

CVE-2006-6906: Undefined Security Weakness

Unspecified vulnerability in the Bluetooth stack on Mac OS 10.4.7 and earlier has unknown impact and local attack vectors, related to "Mach Exception Handling", a different issue than CVE-2006-6900...