Lucene search
+L

5938 matches found

exploitpack
exploitpack
•added 2017/10/27 12:00 a.m.•195 views

Sync Breeze Enterprise 10.0.28 - Remote Buffer Overflow (PoC)

Sync Breeze Enterprise 10.0.28 - Remote Buffer Overflow PoC / Sync Breeze Enterprise BOF - Ivan Ivanovic Ivanov Иван-дурак недействительный 31337 Team / define WINSOCKDEPRECATEDNOWARNINGS define DEFAULTBUFLEN 512 include include include include DWORD SendRequestchar request, int requestsize WSADA...

0.5AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2017/10/27 12:00 a.m.•41 views

Sync Breeze Enterprise 10.0.28 - Remote Buffer Overflow (PoC)

/ Sync Breeze Enterprise BOF - Ivan Ivanovic Ivanov Иван-дурак недействительный 31337 Team / define WINSOCKDEPRECATEDNOWARNINGS define DEFAULTBUFLEN 512 include include include include DWORD SendRequestchar request, int requestsize WSADATA wsa; SOCKET s; struct sockaddrin server; char...

5.3AI score
SaveExploits0
OSV
OSV
•added 2017/10/24 6:33 p.m.•36 views

GHSA-Q5PQ-PGRV-FH89 dns-sync command injection vulnerability

The dns-sync module before 0.1.1 for node.js allows context-dependent attackers to execute arbitrary commands via shell metacharacters in the first argument to the resolve API function...

10CVSS7.5AI score0.02843EPSS
SaveExploits0References6
Github Security Blog
Github Security Blog
•added 2017/10/24 6:33 p.m.•40 views

dns-sync command injection vulnerability

The dns-sync module before 0.1.1 for node.js allows context-dependent attackers to execute arbitrary commands via shell metacharacters in the first argument to the resolve API function...

10CVSS7.3AI score0.02843EPSS
SaveExploits0References5Affected Software1
NVD
NVD
•added 2017/10/23 1:29 a.m.•31 views

CVE-2017-7079

An issue was discovered in certain Apple products. iTunes before 12.7 is affected. The issue involves the "Data Sync" component. It allows attackers to access iOS backups written by iTunes via a crafted app...

5.5CVSS4.2AI score0.00941EPSS
SaveExploits0References2
OSV
OSV
•added 2017/10/23 1:29 a.m.•17 views

CVE-2017-7079

An issue was discovered in certain Apple products. iTunes before 12.7 is affected. The issue involves the "Data Sync" component. It allows attackers to access iOS backups written by iTunes via a crafted app...

5.5CVSS5.8AI score0.00941EPSS
SaveExploits0References2
Prion
Prion
•added 2017/10/23 1:29 a.m.•27 views

Code injection

An issue was discovered in certain Apple products. iTunes before 12.7 is affected. The issue involves the "Data Sync" component. It allows attackers to access iOS backups written by iTunes via a crafted app...

4.3CVSS4.1AI score0.00941EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2017/10/23 1:00 a.m.•40 views

CVE-2017-7079

An issue was discovered in certain Apple products. iTunes before 12.7 is affected. The issue involves the "Data Sync" component. It allows attackers to access iOS backups written by iTunes via a crafted app...

4.2AI score0.00941EPSS
SaveExploits0References2
CVE
CVE
•added 2017/10/23 1:00 a.m.•106 views

CVE-2017-7079

CVE-2017-7079 affects iTunes before 12.7 (Mac OS X), via the Data Sync component. A crafted app may enable an attacker to access iOS backups created by iTunes. The vulnerability stems from an access control issue in the Data Sync workflow, allowing partial confidentiality impact without integrity...

5.5CVSS4.1AI score0.00941EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/10/23 12:00 a.m.•6 views

CVE-2017-7079: Files or Directories Accessible to External Parties

An issue was discovered in certain Apple products. iTunes before 12.7 is affected. The issue involves the "Data Sync" component. It allows attackers to access iOS backups written by iTunes via a crafted app...

5.5CVSS5.9AI score0.00941EPSS
SaveExploits0References2
exploitpack
exploitpack
•added 2017/10/20 12:00 a.m.•13 views

Sync Breeze Enterprise 10.1.16 - POST Remote Buffer Overflow

Sync Breeze Enterprise 10.1.16 - POST Remote Buffer Overflow !/usr/bin/python import socket try: print "\nSending evil buffer..." shellcode = "\xba\x31\x13\x39\xe4\xdb\xd3\xd9\x74\x24\xf4\x5e\x33\xc9\xb1" "\x52\x31\x56\x12\x03\x56\x12\x83\xdf\xef\xdb\x11\xe3\xf8\x9e"...

0.4AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2017/10/20 12:00 a.m.•34 views

Sync Breeze Enterprise 10.1.16 - 'POST' Remote Buffer Overflow

!/usr/bin/python import socket try: print "\nSending evil buffer..." shellcode = "\xba\x31\x13\x39\xe4\xdb\xd3\xd9\x74\x24\xf4\x5e\x33\xc9\xb1" "\x52\x31\x56\x12\x03\x56\x12\x83\xdf\xef\xdb\x11\xe3\xf8\x9e" "\xda\x1b\xf9\xfe\x53\xfe\xc8\x3e\x07\x8b\x7b\x8f\x43\xd9\x77"...

5.3AI score
SaveExploits0
exploitpack
exploitpack
•added 2017/10/13 12:00 a.m.•17 views

Sync Breeze Enterprise 10.1.16 - Remote Buffer Overflow (SEH) (Metasploit)

Sync Breeze Enterprise 10.1.16 - Remote Buffer Overflow SEH Metasploit This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class MetasploitModule 'SyncBreeze v10.1.16 SEH GET Overflow', 'Description' = %...

0.2AI score
SaveExploits0
zdt
zdt
•added 2017/10/12 12:00 a.m.•40 views

Sync Breeze Enterprise 10.1.16 SEH Overflow Exploit

Exploit for windows platform in category remote exploits !/usr/bin/env python Exploit Title : Sync Breeze Enterprise v10.1.16 0day Date : 10/11/2017 Vendor HomePage : http://www.syncbreeze.com Exploit Author : Milton Valencia wetw0rk Software : http://www.syncbreeze.com/downloads.html Version :...

7.1AI score
SaveExploits0
Packet Storm
Packet Storm
•added 2017/10/12 12:00 a.m.•40 views

Sync Breeze Enterprise 10.1.16 SEH Overflow

!/usr/bin/env python Exploit Title : Sync Breeze Enterprise v10.1.16 0day Date : 10/11/2017 Vendor HomePage : http://www.syncbreeze.com Exploit Author : Milton Valencia wetw0rk Software : http://www.syncbreeze.com/downloads.html Version : 10.1.16 Tested on : Windows 7 x86 Description : Sync Breez...

SaveExploits0
OSV
OSV
•added 2017/10/10 1:30 a.m.•6 views

CVE-2017-14980

Buffer overflow in Sync Breeze Enterprise 10.0.28 allows remote attackers to have unspecified impact via a long username parameter to /login...

9.8CVSS5.9AI score0.22312EPSS
SaveExploits7References1
NVD
NVD
•added 2017/10/10 1:30 a.m.•23 views

CVE-2017-14980

Buffer overflow in Sync Breeze Enterprise 10.0.28 allows remote attackers to have unspecified impact via a long username parameter to /login...

9.8CVSS9.8AI score0.22312EPSS
SaveExploits7References1
Prion
Prion
•added 2017/10/10 1:30 a.m.•23 views

Buffer overflow

Buffer overflow in Sync Breeze Enterprise 10.0.28 allows remote attackers to have unspecified impact via a long username parameter to /login...

7.5CVSS9.7AI score0.22312EPSS
SaveExploits7References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/10/10 12:00 a.m.•2 views

CVE-2017-14980: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in Sync Breeze Enterprise 10.0.28 allows remote attackers to have unspecified impact via a long username parameter to /login...

9.8CVSS8.3AI score0.22312EPSS
SaveExploits7References2
Cvelist
Cvelist
•added 2017/10/09 2:00 p.m.•39 views

CVE-2017-14980

Buffer overflow in Sync Breeze Enterprise 10.0.28 allows remote attackers to have unspecified impact via a long username parameter to /login...

9.8AI score0.22312EPSS
SaveExploits7References1
Rows per page
Query Builder