DoubleMice

2 exploits Active since Jul 2017
CVE-2018-4013 NOMISEC CRITICAL WORKING POC
live555_media_server 0.92 - Remote Code Execution via HTTP Packet Parsing
An exploitable code execution vulnerability exists in the HTTP packet-parsing functionality of the LIVE555 RTSP server library version 0.92. A specially crafted packet can cause a stack-based buffer overflow, resulting in code execution. An attacker can send a packet to trigger this vulnerability.
7 stars
CVSS 9.8
CVE-2017-11176 NOMISEC HIGH WORKING POC
Linux Kernel <= 4.11.9 - Use-After-Free in mq_notify Netlink Socket Handling
The mq_notify function in the Linux kernel through 4.11.9 does not set the sock pointer to NULL upon entry into the retry logic. During a user-space close of a Netlink socket, it allows attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact.
CVSS 7.8