PT-2017-3644

Name of the Vulnerable Software and Affected Versions: Android versions 7.0 through 8.1 Description: The issue is related to a missing bounds check in the avrc ctrl pars vendor rsp function of the Bluetooth AVRCtrl, which could lead to an out of bounds write on the stack. This could result in...

Windows Exploit development tutorial series--stack injection a-vulnerability warning-the black bar safety net

! Foreword Welcome to the heap spray tutorial the first part. This Part I will introduce the IE under typical heap spray technique, the second part will introduce the precise injection and IE8 under UAF vulnerabilities. It is worth mentioning that, the stack injection is just a payload Delivery...

PT-2017-3589

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.11 Description: The issue is related to a NULL pointer dereference in the setup ntlmv2 rsp function, located in fs/cifs/cifsencrypt.c. This occurs when an empty TargetInfo field in an NTLMSSP setup negotiation...

kernel security and bug fix update

3.10.0-327.18.2.OL7 - Oracle Linux certificates Alexey Petrenko 3.10.0-327.18.2 - lib keys: Fix ASN.1 indefinite length object parsing David Howells 1308814 1308815 CVE-2016-0758 3.10.0-327.18.1 - scsi bnx2fc: Fix FCP RSP residual parsing Maurizio Lombardi 1322279 1306342 - mm madvise: fix...

rsp-secure.com XSS vulnerability

Vulnerable URL: https://rsp-secure.com/search%20products/Show%20Image.asp?image=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown...

CVE-2015-3291

arch/x86/entry/entry64.S in the Linux kernel before 4.1.6 on the x8664 platform does not properly determine when nested NMI processing is occurring, which allows local users to cause a denial of service skipped NMI by modifying the rsp register, issuing a syscall instruction, and triggering an NM...

UBUNTU-CVE-2015-3291

arch/x86/entry/entry64.S in the Linux kernel before 4.1.6 on the x8664 platform does not properly determine when nested NMI processing is occurring, which allows local users to cause a denial of service skipped NMI by modifying the rsp register, issuing a syscall instruction, and triggering an NM...

PT-2015-6139

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.1.6 Description The issue allows local users to cause a denial of service by modifying the rsp register, issuing a syscall instruction, and triggering an NMI, due to improper determination of nested NMI...

CVE-2015-3291

arch/x86/entry/entry64.S in the Linux kernel before 4.1.6 on the x8664 platform does not properly determine when nested NMI processing is occurring, which allows local users to cause a denial of service skipped NMI by modifying the rsp register, issuing a syscall instruction, and triggering an NM...

RSP MP3 Player - OCX ActiveX Buffer Overflow HeapSpray

RSP MP3 Player - OCX ActiveX Buffer Overflow HeapSpray . . . \ / |/| . | | | ||/ \ .| RSP MP3 Player OCX ActiveX Buffer Overflow heap spray By : MadjiX , Dz8aHotmail.com Discovered by Blake: http://www.exploit-db.com/exploits/14309/ Greetings: His0k4 , Bibi-info , The g0bl!n y , sec4ever.com...

RSP MP3 Player - OCX ActiveX Buffer Overflow HeapSpray

. . . \ / |/| . | | | ||/ \ .| RSP MP3 Player OCX ActiveX Buffer Overflow heap spray By : MadjiX , Dz8aHotmail.com Discovered by Blake: http://www.exploit-db.com/exploits/14309/ Greetings: His0k4 , Bibi-info , The g0bl!n y , sec4ever.com Tested on Windows Xp Sp3 Fr,with IE6 sh =...

RSP MP3 Player OCX ActiveX Buffer Overflow (heap spray)

Exploit for windows platform in category remote exploits ======================================================= RSP MP3 Player OCX ActiveX Buffer Overflow heap spray ======================================================= . . . \ / |/| . | | | ||/ \ .| RSP MP3 Player OCX ActiveX Buffer Overflow...

RSP MP3 Player OCX 3.2 ActiveX Buffer Overflow

Exploit for windows platform in category remote exploits...

RSP MP3 Player OCX 3.2 - ActiveX Buffer Overflow

RSP MP3 Player OCX 3.2 - ActiveX Buffer Overflow ' Exploit Title: RSP MP3 Player OCX 3.2 ActiveX Buffer Overflow ' Date: July 9, 2010 ' Author: Blake ' Software Link: http://download.cnet.com/RSP-MP3-Player-OCX/3000-22064-10860503.html?tag=mncol ' Version: 3.2 ' Tested on: Windows XP SP3 / IE7 in...