el

Hackers Expose Security Flaws With Elvis Presley Passport




el

Foreign Office Changes Tourist Advice After Israeli Inquiry




el

Intelbras Wireless N 150Mbps WRN240 Authentication Bypass

Intelbras Wireless N 150Mbps WRN240 suffers from a configuration upload authentication bypass vulnerability.




el

rConfig 3.9.4 searchField Remote Code Execution

rConfig version 3.9.4 searchField unauthenticated remote root code execution exploit.




el

Vesta Control Panel Authenticated Remote Code Execution

This Metasploit module exploits command injection vulnerability in v-list-user-backups bash script file. Low privileged authenticated users can execute arbitrary commands under the context of the root user. An authenticated attacker with a low privileges can inject a payload in the file name starts with dot. During the user backup process, this file name will be evaluated by the v-user-backup bash scripts. As result of that backup process, when an attacker try to list existing backups injected payload will be executed.




el

Vesta Control Panel Authenticated Remote Code Execution

This Metasploit module exploits an authenticated command injection vulnerability in the v-list-user-backups bash script file in Vesta Control Panel to gain remote code execution as the root user.




el

Linux/x86 Add Root User Shellcode

107 bytes small Linux/x86 shellcode that adds the user 'ctl' with the password 'ctl' to the /etc/passwd file with the UID and GID of 0 (root). This shellcode uses legacy passwd functionality. Therefore the /etc/shadow file does not need to be accessed or modified.




el

Linux/x86 Dynamic MMX+FPU Encoded Add Root User Shellcode

155 bytes small Linux/x86 shellcode that has a MMX stub decoder that dynamically decodes the payload in memory. The FPU GetPC technique is used to determine the offset from EIP dynamically in running memory. Once decoded. this shellcode adds the user 'ctl' with the password 'ctl' to the /etc/passwd file with the UID and GID of 0 (root). This shellcode uses legacy passwd functionality. Therefore the /etc/shadow file does not need to be accessed or modified.






el

WebAssembly Changes Could Ruin Meltdown And Spectre Patches




el

007 Code Helps Stop Spectre Exploits Before They Exist





el

Intel's Commitment To Making Its Stuff Secure Is Called Into Question








el

Lenovo Patches Intel Firmware Flaws In Multiple Product Lines




el

Intel Patches High-Severity Flaws In Media SDK, Mini PC




el

Intel Fixes Severe NUC Firmware, Web Console Vulnerabilities








el

Intel CMSE Bug Is Worse Than Previously Thought




el

Intel Fixes High-Severity Flaws In NUC, Discontinues Buggy Compute Module




el

vReliable Datagram Sockets (RDS) rds_page_copy_user Privilege Escalation

This Metasploit module exploits a vulnerability in the rds_page_copy_user function in net/rds/page.c (RDS) in Linux kernel versions 2.6.30 to 2.6.36-rc8 to execute code as root (CVE-2010-3904). This module has been tested successfully on Fedora 13 (i686) kernel version 2.6.33.3-85.fc13.i686.PAE and Ubuntu 10.04 (x86_64) with kernel version 2.6.32-21-generic.




el

netkit-telnet 0.17 Remote Code Execution

netkit-telnet version 0.17 telnetd on Fedora 31 BraveStarr remote code execution exploit.







el

Linux/x64 Anti-Debug Trick INT3 Trap Shellcode

113 bytes small Linux/x64 anti-debug trick (INT3 trap) with execve("/bin/sh") shellcode that is NULL free.








el

Digital Whisper Electronic Magazine #87

Digital Whisper Electronic Magazine issue 87. Written in Hebrew.




el

Digital Whisper Electronic Magazine #88

Digital Whisper Electronic Magazine issue 88. Written in Hebrew.




el

Digital Whisper Electronic Magazine #89

Digital Whisper Electronic Magazine issue 89. Written in Hebrew.




el

Digital Whisper Electronic Magazine #90

Digital Whisper Electronic Magazine issue 90. Written in Hebrew.




el

Digital Whisper Electronic Magazine #92

Digital Whisper Electronic Magazine issue 92. Written in Hebrew.




el

Digital Whisper Electronic Magazine #93

Digital Whisper Electronic Magazine issue 93. Written in Hebrew.




el

Digital Whisper Electronic Magazine #94

Digital Whisper Electronic Magazine issue 94. Written in Hebrew.




el

Digital Whisper Electronic Magazine #95

Digital Whisper Electronic Magazine issue 95. Written in Hebrew.




el

Digital Whisper Electronic Magazine #96

Digital Whisper Electronic Magazine issue 96. Written in Hebrew.




el

Digital Whisper Electronic Magazine #97

Digital Whisper Electronic Magazine issue 97. Written in Hebrew.




el

Digital Whisper Electronic Magazine #98

Digital Whisper Electronic Magazine issue 98. Written in Hebrew.




el

Digital Whisper Electronic Magazine #99

Digital Whisper Electronic Magazine issue 99. Written in Hebrew.




el

Phrack - Viewer Discretion Advised - (De)coding An iOS Kernel Vulnerability

Phrack Viewer Discretion Advised write up called (De)coding an iOS Kernel Vulnerability.