cve-2015-1538-1

以下は、CVE-2015-1538（1）として知られる「stsc」脆弱性を悪用し、MP4を生成するPythonスクリプトです。これは私がStagefrightライブラリで報告した最も重大な脆弱性の1つです。このエクスプロイトの期待される結果は、mediaユーザーとしてのリバースシェルです。私のBlack HatおよびDEF...

cve-2015-1538-1

PLEASE DO NOT SHARE THIS WITH ANYONE. THIS CODE IS BEING PROVIDED TO YOU UNDER FrienNDA. PEOPLE VIOLATING THIS WILL NO LONGER BE CONSIDERED FRIENDS...

cve-2015-1538-1

CVE-2015-1538（1）として知られる「stsc」の脆弱性を悪用するMP4を生成するPythonスクリプトです。これは、私がStagefrightライブラリで報告した中でも最も重大な脆弱性の1つです。このエクスプロイトの期待される結果は、mediaユーザーとしてのリバースシェルです。Black HatおよびDEF CONでの発表で詳述したとおり、このユーザーはinet、audio、camera、mediadrmなどのかなり多くのグループにもアクセスできます。これらのグループにより、攻撃者は追加の脆弱性を悪用することなく、遠隔から写真を撮影したりマイクを盗聴したりできます。...

Chromium: CVE-2026-13986 Inappropriate implementation in Media UI

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

CVE-2026-13986

Inappropriate implementation in Media UI in Google Chrome on ChromeOS prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-13986

Inappropriate implementation in Media UI in Google Chrome on ChromeOS prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-13986

Inappropriate implementation in Media UI in Google Chrome on ChromeOS prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...

PT-2026-33774

Vvveb prior to 1.0.8.1 contains a stored cross-site scripting vulnerability that allows authenticated users with media upload and rename permissions to execute arbitrary JavaScript by bypassing MIME type validation and renaming uploaded files to executable extensions. Attackers can prepend a GIF8...

CVE-2021-44096

EGavilan Media User-Registration-and-Login-System-With-Admin-Panel 1.0 is vulnerable to SQL Injection via profileaction - updateuser. This allows a remote attacker to compromise Application SQL database...

CVE-2021-44096: Improper Neutralization of Special Elements used in an SQL Command

EGavilan Media User-Registration-and-Login-System-With-Admin-Panel 1.0 is vulnerable to SQL Injection via profileaction - updateuser. This allows a remote attacker to compromise Application SQL database...