Exploits
Some proof of concepts to reproduce and/or exploit vulnerability.
Sevagas
Slogan du site
This site is about IT security. Here we present the authors articles and security tools. This site is cooperative, feel free to comment and criticize any article/application. If you want to publish your articles and/or applications on this site, send a request to contact[at]sevagas.com.
The last articles
Published on 15 December 2016
by Emeric Nasi
by Emeric Nasi
""" Hi, This is another exploit implementation for TVT derived DVR/CCTV devices which have a root cmd injection vulnerability This exploit is based on great work by Exodus ad kerneronsec (see http://www.kerneronsec.com/2016/02/remote-code-execution-in-cctv-dvrs-of.html)
In the (...)
Published on 11 April 2015
by Emeric Nasi
by Emeric Nasi
/* ---------------------------------------------------------------------------------------------------- * cve-2014-7822_poc.c * * The implementation of certain splice_write file operations in the Linux kernel before 3.16 does not enforce a restriction on the maximum size of a single file (...)
Published on 24 February 2015
by Emeric Nasi
by Emeric Nasi
/* ---------------------------------------------------------------------------------------------------- * cve-2014-4943_poc.c * * The PPPoL2TP feature in net/l2tp/l2tp_ppp.c in the Linux kernel through 3.15.6 allows local users to gain privileges by leveraging data-structure * (...)
Published on 23 February 2015
by Emeric Nasi
by Emeric Nasi
/* ---------------------------------------------------------------------------------------------------- * cve-2014-9322_poc.c * * arch/x86/kernel/entry_64.S in the Linux kernel before 3.17.5 does not * properly handle faults associated with the Stack Segment (SS) segment * register, (...)
Published on 23 February 2015
by Emeric Nasi
by Emeric Nasi
/* ---------------------------------------------------------------------------------------------------- * cve-2014-3631_poc.c * * The assoc_array_gc function in the associative-array implementation in lib/assoc_array.c in the Linux kernel before 3.16.3 * does not properly implement (...)