binary-exploitation

Binary Exploitation — Memory Corruption A hands-on study of t...

binary-exploitation-coursework

Binary Exploitation Coursework Exploit development scripts fr...

PT-2022-22844

Name of the Vulnerable Software and Affected Versions OTFCC version 0.10.4 Description A segmentation violation was discovered in OTFCC via the /x86 64-linux-gnu/libc.so.6+0xbb384 endpoint. Recommendations For OTFCC version 0.10.4, consider restricting access to the /x86...

PT-2022-12747

Name of the Vulnerable Software and Affected Versions Jsish version 3.5.0 Description A heap-use-after-free issue was discovered, which can lead to a Denial of Service DoS. The issue is related to the API endpoint, however no specific endpoint is mentioned, but it involves the library /usr/lib/x8...

PT-2022-12782

Name of the Vulnerable Software and Affected Versions Cesanta MJS version 2.20.0 Description A SEGV issue was found in Cesanta MJS, which can cause a Denial of Service DoS. The issue is related to the "/lib/x86 64-linux-gnu/libc.so.6+0x45a1f" endpoint. Recommendations For version 2.20.0, at the...

I/O port access privilege escalation in x86-64 Linux

ISSUE DESCRIPTION IRET and POPF do not modify EFLAGS.IOPL when executed by code at a privilege level other than zero. Since PV Xen guests run at privilege level 3 for 64-bit ones; 32-bit ones run at privilege level 1, to compensate for this the context switching of EFLAGS.IOPL requires the guest ...

Linux Kernel (x86-64) - Rowhammer Privilege Escalation

Linux Kernel x86-64 - Rowhammer Privilege Escalation Sources: http://googleprojectzero.blogspot.ca/2015/03/exploiting-dram-rowhammer-bug-to-gain.html https://code.google.com/p/google-security-research/issues/detail?id=283 Full PoC:...

dbus -- local dos

Simon McVittie reports: Alexandru Cornea discovered a vulnerability in libdbus caused by an implementation bug in dbusprintfstringupperbound. This vulnerability can be exploited by a local user to crash system services that use libdbus, causing denial of service. It is platform-specific: x86-64...