ropr

ropr ropr 是一个极速的多线程 ROP 小工具查找器 什么是 ROP 小工具？ ROP（返回导向编程）小工具是少量汇编指令的小片段，通常以 ret 指令结尾，这些指令已作为可执行代码存在于每个二进制文件或库中。这些小工具可用于二进制利用和破坏易受攻击的可执行文件。 当多个 ROP 小工具的地址被写入缓冲区时，我们就形成了一条 ROP 链。如果攻击者能够将栈指针移入此 ROP 链，则控制权可以完全转移给攻击者。 大多数可执行文件包含足够的小工具来编写一个图灵完备的 ROP 链。对于那些没有的，我们始终可以使用位于同一地址空间中的动态库（如 libc），只要我们知道了它们的地址。 使...

EUVD-2017-5818

Malware in sbrugna...

Heap Corruption

fastecdsa is vulnerable to Denial of Service DoS. The vulnerability is due to the curvemathmul function within curveMath.c being used and interpreted as a user-defined type without proper initialization, leading to potential arbitrary free, realloc, null pointer dereference, and other issues, as...

Uninitialized Variable in fastecdsa

Versions of the package fastecdsa before 2.3.2 use an Uninitialized Variable on the stack, via the curvemathmul function in src/curveMath.c, due to being used and interpreted as user-defined type. Depending on the variable's actual value it could be arbitrary free, arbitrary realloc, null pointer...

CVE-2017-8336

An issue was discovered on Securifi Almond, Almond+, and Almond 2015 devices with firmware AL-R096. The device provides a user with the capability of adding new routes to the device. It seems that the POST parameters passed in this request to set up routes on the device can be set in such a way...