cor

connect-core5.c

Linux/ppc shellcode which connects /bin/sh to a host. connect-core5.s is appended.




cor

execve-core.c

execve /bin/sh shellcode for Linux PPC. execve-core.s is appended.




cor

readnexecppc-core.c

read(0,stack,1028); stack(); shellcode for Linux PPC. readnexecppc-core.s appended.











cor

JUNOS (Juniper) Flaw Exposes Core Routers To Kernel Crash







cor

CoronaBlue / SMBGhost Microsoft Windows 10 SMB 3.1.1 Proof Of Concept

CoronaBlue aka SMBGhost proof of concept exploit for Microsoft Windows 10 (1903/1909) SMB version 3.1.1. This script connects to the target host, and compresses the authentication request with a bad offset field set in the transformation header, causing the decompresser to buffer overflow and crash the target.




cor

Microsoft Windows NtFilterToken ParentTokenId Incorrect Setting Privilege Escalation

Microsoft Windows suffers from an NtFilterToken ParentTokenId incorrect setting that allows for elevation of privileges.




cor

ASP.NET Core 5-RC1 HTTP Header Injection

ASP.NET Core version 5.-RC1 suffers from an HTTP header injection vulnerability.







cor

IBM Supercomputer Breaks Speed Record




cor

Google Corrects IBM's Security Math




cor

macOS/iOS ImageIO PVR Image Processing Heap Corruption

macOS and iOS have an ImageIO heap corruption issue when processing malformed PVR images.




cor

macOS / iOS launchd XPC Message Parsing Memory Corruption

launchd on macOS and iOS suffer from a memory corruption issue due to a lack of bounds checking when parsing XPC messages.




cor

iOS / macOS AWDL Heap Corruption / Bounds Checking

A remote iOS / macOS heap corruption issue exists due to insufficient bounds checking in AWDL.






cor

Google's Bug Bounty Program Just Had A Record-Breaking Year Of Payouts




cor

Google Launches Coronavirus Website In The United States




cor

Google Data Shines Light On Whether Coronavirus Lockdowns Worldwide Are Working




cor

Lotus Core CMS 1.0.1 Local File Inclusion

Lotus Core CMS version 1.0.1 suffers from a local file inclusion vulnerability.




cor

NICE Recording eXpress 6.x Root Backdoor / XSS / Bypass

NICE Recording eXpress versions 6.0.x, 6.1.x, 6.2.x, 6.3.x, and 6.5.x suffer from cross site scripting, root backdoor, unauthenticated access, fail authorization, insecure cookie handling, and remote SQL injection vulnerabilities.






cor

Black Hat Asia 2020 Postponed Due To Coronavirus Concerns






cor

Grub2 grub2-set-bootflag Environment Corruption

Grub2 has grub2-set-bootflag setuid in the new Fedora release and has the ability to corrupt the environment.









cor

Trump Administration's Lack Of A Unified Coronavirus Strategy Will Cost Lives, A Dozen Experts Say




cor

Packet Storm Exploit 2013-0827-1 - Oracle Java ByteComponentRaster.verify() Memory Corruption

The ByteComponentRaster.verify() method in Oracle Java versions prior to 7u25 is vulnerable to a memory corruption vulnerability that allows bypassing of "dataOffsets[]" boundary checks. This exploit code demonstrates remote code execution by popping calc.exe. It was obtained through the Packet Storm Bug Bounty program.




cor

Packet Storm Exploit 2013-0917-1 - Oracle Java ShortComponentRaster.verify() Memory Corruption

The ShortComponentRaster.verify() method in Oracle Java versions prior to 7u25 is vulnerable to a memory corruption vulnerability that allows bypassing of "dataOffsets[]" boundary checks when the "numDataElements" field is 0. This exploit code demonstrates remote code execution by popping calc.exe. It was obtained through the Packet Storm Bug Bounty program.




cor

Apple's Corellium Lawsuit Causes Chilling Effect With Security Researchers




cor

Amiga Launches A $2,500 Quad-Core Lunchbox PC




cor

NanoCore Trojan Is Protected In Memory From Being Killed Off