scaredycat

SCAREDYCAT! 版本 0.1 beta 用于生成恶意 MP4 文件的 Python 脚本，并在端口 8080 上启动一个托管包含嵌入 '视频' 文件的页面的 Web 服务器。 此工具利用另一个 Stagefright 漏洞，即由 Exodus Intelligence 发布的整数溢出漏洞 CVE-2015-3864。 作者：vvn eudemonics 基于 Google 为 CVE-2015-3864 编写的原始利用代码构建 用法：scaredycat.py -h -p PAYLOAD -v libcfile 可选参数： root@kitploit: libcfile...

CVE-2024-0039-Exploit

CVE-2024-0039-Exploit 説明 CVE-2024-0039の脆弱性を利用するPythonスクリプト：影響を受けるAndroidデバイスで任意のコードを実行します。 注意 : このコードは教育と創造のみを目的としており、善の側に立つためのものです、いわば！ 使用方法 必要な引数を指定してスクリプトを実行します： root@kitploit: python exploit.py --cb-host --cb-port --output exploit.mp4 プロジェクト構造 exploit.py :...

Exploit-Android

Exploit-Android اختراق هواتف الاندرويد عبر انشاء ملف MP4 ملغم ا...

CVE-2021-43758

Adobe Media Encoder versions 22.0, 15.4.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in th...

DEBIAN-CVE-2022-2566

A heap out-of-bounds memory write exists in FFMPEG since version 5.1. The size calculation in buildopengopkeypoints goes through all entries in the loop and adds sc-cttsdatai.count to sc-sampleoffsetscount. This can lead to an integer overflow resulting in a small allocation with avcalloc. An...

CVE-2022-2566 Heap-memory write in FFMPEG

A heap out-of-bounds memory write exists in FFMPEG since version 5.1. The size calculation in buildopengopkeypoints goes through all entries in the loop and adds sc-cttsdatai.count to sc-sampleoffsetscount. This can lead to an integer overflow resulting in a small allocation with avcalloc. An...

CVE-2021-44698

Adobe Audition versions 14.4 and earlier, and 22.0 and earlierare affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interacti...

CVE-2021-44699

Adobe Audition versions 14.4 and earlier, and 22.0 and earlierare affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interacti...

DEBIAN-CVE-2021-28300

NULL Pointer Dereference in the "isomedia/track.c" module's "MergeTrack" function of GPAC v0.5.2 allows attackers to execute arbitrary code or cause a Denial-of-Service DoS by uploading a malicious MP4 file...

UBUNTU-CVE-2021-28300

NULL Pointer Dereference in the "isomedia/track.c" module's "MergeTrack" function of GPAC v0.5.2 allows attackers to execute arbitrary code or cause a Denial-of-Service DoS by uploading a malicious MP4 file...

GPAC 代码问题漏洞

GPAC is a multimedia framework for rich media and distributed under the LGPL license. A null pointer dereference vulnerability exists in the MergeTrack function of the isomedia/track.c module in GPAC v0.5.2. An attacker can exploit this vulnerability by uploading a malicious MP4 file to execute...