nu11secur1ty/cve-mitre

https://cve.mitre.org/

nu11secur1ty

I'm a System Administrator IT Infrastructure Engineer and Penetration Testing Engineer. I'm also an exploits developer and security researcher at packetstormsecurity.com. 0day.today cxsecurity.com. exploit-db.com, and cve.mitre.org - red-team oriented.

cve-mitre's Issues

CVEs

Hello, Could i contribute CVEs with you ?

POC for CVE-2021-31777 is wrong

The POC for https://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-31777 is completely wrong. The CVE CVE-2021-31777 references an issue in TYPO3 Extension "DCE" (see https://typo3.org/security/advisory/typo3-ext-sa-2021-005), not in TYPO3 core.

Your Screencast actually shows the following:

1. You login to TYPO3 with a valid backend user
2. You edit the attributes of the currently logged in backend user
3. You enter a . in the fields Start and Stop
4. The dot gets automatically transformed to the current date by TYPO3 (see screenshot of you screencast), since the fields Start and Stop are evaluated as date fields by JavaScript.

5. You update the user account

So basically you just disabled the user account by setting the current date in the Stop field, since the account now is only valid until the configured date and login therefore is not possible any more.

CVE-2021-3156 | Other versions of ubuntu?

Hello nu11secur1ty,
I saw that you helped implementing these pocs so,
What do you think about other versions of ubuntu like 16.04 where glibc version is 2.23?
I mean without the tcache implementation present by glibc 2.26 and above, i haven't seen any live poc on previous versions of ubuntu or glibc.
Have you tried debugging on these versions?