Pavel Vasilyev

Results 20 issues of Pavel Vasilyev

![cve](https://user-images.githubusercontent.com/1057453/157128092-ab76720e-2f30-44eb-8635-4d7c3bb3acbb.png)

$ ./get_updates.py 006-B3943-10 $ wget http://download.garmin.com/software/EPIX_Gen2__720.gsp $ unzip EPIX_Gen2__720.gsp Archive: EPIX_Gen2__720.gsp extracting: package.xml inflating: manifest.xml extracting: bundle.gsp $ ./gcdstruct.py bundle.gsp ``` Opening bundle.gsp Traceback (most recent call last): File "./gcdstruct.py",...

006-B3943-10 ```diff diff --git a/grmn/devices.py b/grmn/devices.py index c1b51fe..8c9f61c 100644 --- a/grmn/devices.py +++ b/grmn/devices.py @@ -1232,6 +1232,7 @@ DEVICES = { 3914: "Forerunner 245 redesign", 3927: "Approach G12", 3934: "Approach S42",...

```diff --- a/grmn/updateserver.py +++ b/grmn/updateserver.py @@ -9,7 +9,10 @@ from . import devices from .proto import GetAllUnitSoftwareUpdates_pb2 from xml.dom.minidom import getDOMImplementation, parseString from urllib.parse import unquote +import random +import string...

``` ./get_updates.py -W 3291 Device 3291 (guessed): fenix 6X Pro Querying Garmin WebUpdater ...Traceback (most recent call last): File "./get_updates.py", line 108, in results += us.query_webupdater(device_skus) File "/usr/src/GARMIN/gcd-parser/grmn/updateserver.py", line 132,...

python setup.py install running install running build running build_ext building 'deep_spectre' extension x86_64-linux-gnu-gcc -pthread -DNDEBUG -g -fwrapv -O2 -Wall -Wstrict-prototypes -fno-strict-aliasing -g0 -ggdb0 -Ofast -mtune=native -march=native -mfpmath=sse -fexcess-precision=fast -fno-strict-aliasing --param...

default kernels vm.mmap_min_addr = 65535 --- ``` vm.mmap_min_addr = 65535 ./exploit 0xffffffff81f3f45a / # su tutu / $ ./exploit 0xffffffff81f3f45a [+] Find prepare_kernel_cred... [+] Found prepare_kernel_cred at ffffffff810753d0 [+] Find...

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000410 http://seclists.org/oss-sec/2017/q4/357 http://seclists.org/oss-sec/2017/q4/att-357/l2cap_core_c.patch

Please add to v32 https://git.kernel.org/pub/scm/linux/kernel/git/davem/net.git/commit/?id=fdf7cb4185b60c68e1a75e61691c4afdc15dea0e