Adobe Flash - SetNative Use-After-Free

Exploit for windows platform in category dos / poc Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=800 There is a use-after-free in SetNative. If a watch is placed on a native that is initialized by SetNative, it can delete the object the set is being called on, leading to a...

Generate TCP/UDP Outbound Traffic On Multiple Ports

This module generates TCP or UDP traffic across a sequence of ports, and is useful for finding firewall holes and egress filtering. It only generates traffic on the port range you specify. It is up to you to run a responder or packet capture tool on a remote endpoint to determine which ports are...

SOL93600123 - OpenSSL vulnerability CVE-2016-2107

2 IPsec is vulnerable only in phase 1 IKE racoon, if configured to use AES-CBC. Vulnerability Recommended Actions If you are running a version listed in the Versions known to be vulnerable column, you can eliminate this vulnerability by upgrading to a version listed in the Versions known to be no...

The vulnerability of the QEMU hardware emulation software allows a hacker to trigger a maintenance failure or execute arbitrary code.

The vulnerability in the hw/ide/ahci.c driver of the QEMU hardware emulation software is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to cause a service failure or execute arbitrary code crash due to an incorrect AHCI Native Command Queuin...

Ubuntu 15.10 : php5 regression (USN-2952-2)

USN-2952-1 fixed vulnerabilities in PHP. One of the backported patches caused a regression in the PHP Soap client. This update fixes the problem. We apologize for the inconvenience. It was discovered that the PHP Zip extension incorrectly handled directories when processing certain zip files. A...

Windows/x86 .Net Framework - Execute Native x86 Shellcode

Exploit Title: .Net framework execute native x86 shellcode Date: May. 2nd 2016 Exploit Author: Jacky5112 Software Link: https://github.com/jacky5112/ShellCodeTestVersion1.0 Version: 1.0 Tested on: Windows CVE : none...

.Net Framework Execute Native x86 Shellcode

.Net Framework Execute Native x86 Shellcode. Shellcode exploit for win32 platform Exploit Title: .Net framework execute native x86 shellcode Date: May. 2nd 2016 Exploit Author: Jacky5112 Software Link: https://github.com/jacky5112/ShellCodeTestVersion1.0 Version: 1.0 Tested on: Windows CVE : none...

USN-2952-2: PHP regression

USN-2952-1 fixed vulnerabilities in PHP. One of the backported patches caused a regression in the PHP Soap client. This update fixes the problem. We apologize for the inconvenience. Original advisory details: It was discovered that the PHP Zip extension incorrectly handled directories when...

PHP Man-in-the-Middle Attack Vulnerability

PHP PHP: Hypertext Preprocessor is an open source general-purpose computer scripting language maintained by the PHP Group and the open source community. A security vulnerability exists in the MySQL native driver for PHP, which can be exploited by an attacker to perform a man-in-the-middle attack,...

Ubuntu 14.04 LTS : PHP vulnerabilities (USN-2952-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2952-1 advisory. It was discovered that the PHP Zip extension incorrectly handled directories when processing certain zip files. A remote attacker could possibly use this...

FBReader PDF plugin - Corrupted files, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application FBReader PDF plugin published at the 'play' market has multiple vulnerabilities...

FBReader: Favorite Book Reader - Corrupted files, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application FBReader: Favorite Book Reader published at the 'play' market has multiple vulnerabilities...

Design/Logic Flaw

libs/binder/IMemory.cpp in the IMemory Native Interface in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 does not properly consider the heap size, which allows attackers to gain privileges via a crafted application, as demonstrated by obtaining...

CVE-2016-0846

libs/binder/IMemory.cpp in the IMemory Native Interface in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 does not properly consider the heap size, which allows attackers to gain privileges via a crafted application, as demonstrated by obtaining...

CVE-2016-0846

CVE-2016-0846 affects the IMemory Native Interface (libs/binder/IMemory.cpp) in Android, where the heap size is not properly accounted for, enabling a local attacker to gain privileged execution (Signature or SignatureOrSystem) via a crafted app. The issue affects Android 4.x up to 4.4.3/4.4.4, 5...

IBM DB2 10.5 < Fix Pack 6 Multiple Vulnerabilities (Bar Mitzvah)

Binary data 9198.prm...

DEBIAN-CVE-2016-1568

Use-after-free vulnerability in hw/ide/ahci.c in QEMU, when built with IDE AHCI Emulation support, allows guest OS users to cause a denial of service instance crash or possibly execute arbitrary code via an invalid AHCI Native Command Queuing NCQ AIO command...

CVE-2016-1568

Use-after-free vulnerability in hw/ide/ahci.c in QEMU, when built with IDE AHCI Emulation support, allows guest OS users to cause a denial of service instance crash or possibly execute arbitrary code via an invalid AHCI Native Command Queuing NCQ AIO command...

Android IMemory Native Interface Elevation of Privilege Vulnerability

Android is a Linux-based open source operating system developed by Google and the Open Handheld Alliance OHA, and the IMemory Native Interface is a memory-sharing interface that uses Ashmem Anonymous Shared Memory Driver. A boost vulnerability exists in Android's IMemory Native Interface. A local...

Adobe Acrobat Reader - External URLs, Native code usage, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Adobe Acrobat Reader published at the 'play' market has multiple vulnerabilities...