Proof of concept exploit for the Microsoft Windows CurveBall vulnerability where the signature of certificates using elliptic curve cryptography (ECC) is not correctly verified. ECC relies on different parameters. These parameters are standardized for many curves. However, Microsoft did not check all these parameters. The parameter G (the generator) was not checked, and the attacker can therefore supply his own generator, such that when Microsoft tries to validate the certificate against a trusted CA, it will only look for matching public keys, and then use then use the generator of the certificate.
e2fb60e1e15f840f86c3c095bba4a104This is a proof of concept exploit that demonstrates the Microsoft Windows CryptoAPI spoofing vulnerability as described in CVE-2020-0601 and disclosed by the NSA.
d2c133f541a9d87a0a3240f578df147dAllok Video Converter version 4.6.1217 SEH stack overflow proof of concept exploit.
42c4417774f7c851b0cfe5980482b96cCitrix Application Delivery Controller and Citrix Gateway remote code execution proof of concept exploit.
d66a21078f9eb16928f3695e481e9298Tomcat version 9.0.0.M1 proprietaryEvaluate sandbox escape proof of concept.
d33e30810a886a7412766894d0f80db3Django versions prior to 3.0, 2.2, and 1.11 account hijack proof of concept exploit.
2a8eda1ae3f5319be7fbeb030e9bbf52Sony Playstation 4 (PS4) versions prior to 6.72 webkit code execution proof of concept exploit.
d95daaeee630a6ac3ddc9516ea9e0aabDuplicate Cleaner Pro 4 denial of service proof of concept exploit.
92a91b60ba6ba38581539d7fbe7dc61dFTPGetter Professional version 5.97.0.223 null pointer dereference denial of service proof of concept exploit.
7075de9a8e1c61f20efa618be87432d8FTP Navigator version 8.03 stack overflow SEH proof of concept exploit.
78426da5d3b6949020b7975d56c68d3fAVS Audio Converter version 9.1.2.600 stack overflow proof of concept exploit.
46c6cde0d6cf6092eb46863d4eda74b6Microsoft Windows 10 BasicRender.sys denial of service proof of concept exploit.
3c2342d1e7e9dff8e8f4035888ed202cQualys discovered a local privilege escalation in OpenBSD's dynamic loader (ld.so). This vulnerability is exploitable in the default installation (via the set-user-ID executable chpass or passwd) and yields full root privileges. They developed a simple proof of concept and successfully tested it against OpenBSD 6.6 (the current release), 6.5, 6.2, and 6.1, on both amd64 and i386; other releases and architectures are probably also exploitable.
5cd25d74e467c8f83e9ece30c0c6b982Proof of concept exploit that demonstrates a Microsoft Windows 10 UAC bypass for all executable files which are autoelevate true.
be518251e625f0ce8b117adc6513daf5SpotAuditor version 5.3.2 Name and Key proof of concept denial of service exploits.
d66f0f8c99963521d186ed04b3546271InTouch Machine Edition version 8.1 SP1 denial of service proof of concept exploit.
e557240fd076d97a5c76cc55eb0fda35Centova Cast version 3.2.12 denial of service proof of concept exploit.
7d2b1421b9153e8e920109091a56d827Foscam Video Management System version 1.1.4.9 username denial of service proof of concept exploit.
f4ed71a0cf156255d4e06a58ba562112iOS IOUSBDeviceFamily version 12.4.1 IOInterruptEventSource heap corruption proof of concept exploit.
b070d13153419dd7869767dbd75340b8Apple macOS version 10.15.1 denial of service proof of concept exploit.
746b6eb44a388f0941005908f7549278Foscam Video Management System version 1.1.6.6 denial of service proof of concept exploit.
1dcb5cf1a577e9f3e59bc80beea37d24Zabbix versions 4.4 and below authentication bypass demo proof of concept exploit.
f42e7388fa16f251a8660a46ed6ae867IcedTeaWeb suffers from multiple vulnerabilities including directory traversal and validation bypass issues that can lead to remote code execution. The affected versions are 1.7.2 and below, 1.8.2 and below. 1.6 is also vulnerable and not patched due to being EOL. Proof of concepts are provided.
ea6508180f62fca63a4c9cdbaca675adPHP versions 7.0 through 7.3 disable_functions proof of concept exploit.
2888c130ca690ceaa4e27957b0283985Realtek Managed Switch Controller (RTL83xx) stack overflow proof of concept exploit.
2a3475b14eff7426d5bb3fa2a6e605d7
© 2016 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed