Category: Security

[dos] Android – binder Use-After-Free via racy Initialization of ->allow_user_free

[dos] Linux < 4.20.14 – Virtual Address 0 is Mappable via Privileged write() to /proc/*/mem

[dos] Android – getpidcon() Usage in Hardware binder ServiceManager Permits ACL Bypass

[webapps] OpenDocMan 1.3.4 – 'search.php where' SQL Injection

[webapps] OpenDocMan 1.3.4 – 'search.php where' SQL Injection

[shellcode] Linux/x86 – XOR Encoder / Decoder execve() /bin/sh Shellcode (45 bytes)

[shellcode] Linux/x86 – XOR Encoder / Decoder execve() /bin/sh Shellcode (45 bytes)

[webapps] zzzphp CMS 1.6.1 – Cross-Site Request Forgery

[webapps] Splunk Enterprise 7.2.4 – Custom App Remote Command Execution (Persistent Backdoor / Custom Binary)

[shellcode] Linux/x86 – iptables -F Shellcode (43 bytes)