Security exploits#2

Merged

s0 merged 61 commits intogithub:masterfrom

kevinbackhouse:SecurityExploits

Nov 15, 2019

Commits on May 30, 2018

Add README file.
kevinbackhouse
committed
Exploit PoC for CVE-2017-13782 (DTrace).
kevinbackhouse
committed
Merge pull request #1 from kev/Apple_dtrace

m-y-mo
authored and
GitHub Enterprise
committed

Commits on Jun 8, 2018

Exploit PoC for librelp/rsyslog CVE-2018-1000140.
kevinbackhouse
committed
Merge pull request #2 from kev/rsyslog_snprintf

m-y-mo
authored and
GitHub Enterprise
committed

Commits on Jun 13, 2018

Add Apache License 2.0 and copyright notice.
kevinbackhouse
committed
Merge pull request #3 from kev/License

Sam
authored and
GitHub Enterprise
committed

Commits on Jun 14, 2018

Add note about the sudo password.
kevinbackhouse
committed
Exploit PoC for Apple XNU packet-mangler (CVE-2017-13904, CVE-2018-4249).
kevinbackhouse
committed
No need to duplicate the instructions from the blog.
kevinbackhouse
committed
Merge pull request #4 from kev/rsyslog_snprintf

Sam
authored and
GitHub Enterprise
committed
Merge pull request #5 from kev/Apple_XNU_packet_mangler_CVE-2017-13904

Sam
authored and
GitHub Enterprise
committed

Commits on Jul 5, 2018

Proof-of-concept exploit for CVE-2017-0141.
kevinbackhouse
committed
Merge pull request #6 from kev/ChakraCore_CVE-2017-0141

m-y-mo
authored and
GitHub Enterprise
committed

Commits on Sep 19, 2018

Exploit PoC for Apache Struts (CVE-2018-11776).
kevinbackhouse
committed

Commits on Sep 25, 2018

Fix typo in IP address.
kevinbackhouse
committed

Commits on Sep 27, 2018

Commits on Oct 2, 2018

Merge pull request #9 from kev/strongSwan_CVE-2018-5388

m-y-mo
authored and
GitHub Enterprise
committed

Commits on Oct 9, 2018

Update PoC for Mojave
kevinbackhouse
committed

Commits on Oct 17, 2018

Add instructions for popping a calculator.
kevinbackhouse
committed

Commits on Oct 28, 2018

Update security team name.
kevinbackhouse
committed
Merge pull request #14 from kev/TeamName

sj
authored and
GitHub Enterprise
committed
Exploit PoC for buffer overflow vulnerability in Mac OS NFS client (CVE-2018-4259).
kevinbackhouse
committed
Exploit PoC for buffer overflow in icmp_error (CVE-2018-4407).
kevinbackhouse
committed

Commits on Oct 29, 2018

Update README.
kevinbackhouse
committed

Commits on Oct 30, 2018

Commits on Nov 20, 2018

Enable popping a calculator from inside docker.
kevinbackhouse
committed
Merge pull request #8 from kev/Struts_CVE-2018-11776

Sam
authored and
GitHub Enterprise
committed
Merge remote-tracking branch 'semmle/master' into HEAD
s0
committed

Commits on Nov 21, 2018

Commits on Nov 23, 2018

Merge pull request #16 from kev/Apple_XNU_nfs_vfsops_CVE-2018-4259

Sam
authored and
GitHub Enterprise
committed
Merge pull request #15 from kev/Apple_XNU_icmp_error

Sam
authored and
GitHub Enterprise
committed

Commits on Nov 25, 2018

CVE-2018-4407 PoC docs: Advice to use linux capabilities instead of running with full root privileges
altmas5
committed

Commits on Nov 26, 2018

Merge pull request #3 from RULCSoft/master
sj
authored

Commits on Dec 6, 2018

Exploit PoC for command injection vulnerability in CImg.
kevinbackhouse
committed

Commits on Dec 12, 2018

Commits on Jan 16, 2019

Merge pull request #17 from kev/CImg

Sam
authored and
GitHub Enterprise
committed
Merge pull request #18 from kev/Apple_XNU_packet_mangler_v2

Sam
authored and
GitHub Enterprise
committed
Merge remote-tracking branch 'github/master'
s0
committed

Commits on Jan 28, 2019

Exploit PoC for SPARQL injection in VIVO.
kevinbackhouse
committed

Commits on Feb 4, 2019

Commits on Feb 6, 2019

Make LICENSE, COPYRIGHT, CONTRIBUTING.md, and CODE_OF_CONDUCT.md consistent with other Semmle repositories.
kevinbackhouse
committed

Commits on Feb 14, 2019

Merge pull request #6 from kevinbackhouse/LICENSE
sj
authored

Commits on Feb 22, 2019

Exploit PoC for path traversal vulnerability in Ansible (CVE-2019-3828).
kevinbackhouse
committed

Commits on Mar 15, 2019

Merge pull request #8 from kevinbackhouse/Ansible_CVE-2019-3828
sj
authored

Commits on Apr 4, 2019

Commits on Jun 28, 2019

Exploit PoC for out-of-bounds read in libssh2 version 1.8.2.
kevinbackhouse
committed

Commits on Jul 1, 2019

This vulnerability has now been assigned CVE-2019-13115.
kevinbackhouse
committed

Commits on Jul 2, 2019

Merge pull request #10 from kevinbackhouse/libssh2
s0
authored

Commits on Aug 16, 2019

Commits on Nov 15, 2019