what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 6 of 6

Files from Dirk-Willem van Gulik

Corona Exposure Notifications API Data Leakage

Posted Sep 30, 2020

Authored by Dirk-Willem van Gulik

It appears that the corona virus Exposure Notifications API for iOS and Android may have a data leakage issue.

tags | exploit, virus, info disclosure

systems | ios

advisories | CVE-2020-24721

SHA-256 | 8e18dbc56574e080e742895300d9e809339058ef58eb5d6a3369cb6d7a66780a

Download | Favorite | View

Ninka License Identification Tool Insufficient Escaping

Posted Apr 2, 2017

Authored by Dirk-Willem van Gulik

The Ninka License identification tool suffers from insufficient escaping of external input.

tags | advisory

advisories | CVE-2017-7239

SHA-256 | 011d43ec94139a9d571c81a157eb2c3e144297c300453b08a83a27b3f01ae61b

Download | Favorite | View

DNS Reverse Lookup Shellshock

Posted Oct 13, 2014

Authored by Dirk-Willem van Gulik, Stephane Chazelas

DNS reverse lookups can be used as a vector of attack for the bash shellshock vulnerability.

tags | exploit, bash

advisories | CVE-2014-3671, CVE-2014-6271, CVE-2014-6277, CVE-2014-6278, CVE-2014-7169, CVE-2014-7186, CVE-2014-7187

SHA-256 | f270585f9a138adfc590970e5d69e843b483a83fdff3980b13aa5bef341cd964

Download | Favorite | View

OsiriX Private Key Disclosure

Posted Nov 6, 2013

Authored by Dirk-Willem van Gulik

OsiriX suffers from a private key disclosure vulnerability. All versions up to and including 5.7.1/2.7-MD are affected. The fix was introduced in version 5.8 and 2.8-MD.

tags | advisory, info disclosure

advisories | CVE-2013-4425

SHA-256 | a1aaad73f338f3e2622bef5fd13f44a5546ecc0c57fad091ab344b8aef7bfd21

Download | Favorite | View

OpenSC.tokend Privacy Leak / File Creation

Posted Mar 21, 2013

Authored by Dirk-Willem van Gulik

OpenSC.tokend OS X module suffers from privacy leak and arbitrary file creation vulnerabilities.

tags | advisory, arbitrary, vulnerability, info disclosure

systems | apple, osx

advisories | CVE-2013-1866

SHA-256 | 602d9d00b3ecc95a349e687f708bdc0655d4cb1110af628d3b4a5bf21c04ed15

Download | Favorite | View

Tokend Privacy Leak / Arbitrary File Creation

Posted Mar 21, 2013

Authored by Dirk-Willem van Gulik

The Tokend OS X module suffers from privacy leak and arbitrary file creation vulnerabilities.

tags | advisory, arbitrary, vulnerability, info disclosure

systems | apple, osx

advisories | CVE-2013-1867

SHA-256 | 469ed91a5c829ea148d876c4ee0888a851d1e1f010c8232c32f9caa78c95e92a

Download | Favorite | View