Skip to main content

Computer Security Researchs.

Search This Blog

Found vulnerability

on October 02, 2023

Get link
Facebook
X
Pinterest
Email
Other Apps

List of all vulnerability already disclosed publicly found by myself

CVE-2023-27349 BlueZ Audio Profile AVRCP Improper Validation of Array Index Remote Code Execution Vulnerability

CVE-2023-40474 GStreamer MXF File Parsing Integer Overflow Remote Code Execution Vulnerability

CVE-2023-40475 GStreamer MXF File Parsing Integer Overflow Remote Code Execution Vulnerability

CVE-2023-40476 GStreamer H265 Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

CVE-2023-38104 GStreamer RealMedia File Parsing Integer Overflow Remote Code Execution Vulnerability

CVE-2023-38103 GStreamer RealMedia File Parsing Integer Overflow Remote Code Execution Vulnerability

CVE-2023-37329 GStreamer SRT File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

CVE-2023-37328 GStreamer PGS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

CVE-2023-37327 GStreamer FLAC File Parsing Integer Overflow Remote Code Execution Vulnerability

Upcoming vulnerability

BlueZ (1)

GIMP (4)

Gstreamer (5)

Get link
Facebook
X
Pinterest
Email
Other Apps

Comments

Post a Comment

Popular Posts

Freebsd kernel remote debugging. Part1

As Freebsd is an active and maintained operating system. It's offer some debugger software for programmer working on it. There is a user space and kernel space debugger. We'll mostly working on the later one. But before let's resume in one image the final goal we want to achieve. To do a source level, step by step debugging. We need to setup a remote debugging environment consisting mainly of two Freebsd operating system. I'm using Oracle virtualbox as it allow us to setup things easily than using real physical machine which need a serial cable. And you know, modern laptop at least don't support this at all apart from using some usb converter. And in virtualbox we can create a virtual serial connexion between the 2 Freebsd VM. Naming convention: - Target VM: The VM which will be the target of the attack and need to be debugged from another remote VM. - DEBUG VM: The VM used to perform a source level debugging against the target VM. Without fur...

Freebsd kernel remote code execution [RCE]: Introduction

Hello. Kernel exploitation has been a very interesting subject. It's the central core of the OS. Consequence, it's offer a huge amount attack surface. You got a lot of fun in the way of exploring it. In this blog series, I'll share a general techniques that can be applied for a stack based kernel remote buffer overflow in the context of FreeBSD operating system. My main goal while doing this was to practice the exploitation of a remote kernel bug. Even if it's not a real world bug, the techniques applied will be the same. Generally, you can apply all the techniques here to exploit a remote stack buffer overflow bug in kernel space. Some techniques is not new at all, these has been used on Linux kernel and others kernel, but not for FreeBSD publicly as far as i know. So again one reason i choose to do this on FreeBSD. The series will be broken into 4 parts: - First part: Setting up environment: Freebsd kernel remote debugging. - Secd part: Freebsd kernel st...

Powered by Blogger