Frederic Basse

2 exploits Active since Jan 2013

CVE-2012-5958 METASPLOIT ruby WORKING POC

Libupnp < 1.6.17 - Memory Corruption

Stack-based buffer overflow in the unique_service_name function in ssdp/ssdp_server.c in the SSDP parser in the portable SDK for UPnP Devices (aka libupnp, formerly the Intel SDK for UPnP devices) before 1.6.18 allows remote attackers to execute arbitrary code via a UDP packet with a crafted string that is not properly handled after a certain pointer subtraction.

View Code

CVE-2013-2560 EXPLOITDB text WORKING POC

Foscam <11.37.2.49 - Path Traversal

Directory traversal vulnerability in the web interface on Foscam devices with firmware before 11.37.2.49 allows remote attackers to read arbitrary files via a .. (dot dot) in the URI, as demonstrated by discovering (1) web credentials or (2) Wi-Fi credentials.

View Code