3955 matches found
MOAB-05-01-2007: Apple DiskManagement BOM Local Privilege Escalation Vulnerability
Summary Apple DiskManagement.framework is the back-end for the ' diskutil' tool, used to perform disk/file system maintenance tasks. One of these tasks, permissions repair, involves the usage of BOM Bill Of Materials files, which declare the default file permissions and owner among other...
Mac OS X 10.4.8 DiskManagement BOM Local Privilege Escalation Exploit
Exploit for macOS platform in category local exploits ===================================================================== Mac OS X 10.4.8 DiskManagement BOM Local Privilege Escalation Exploit ===================================================================== !/usr/bin/ruby c 2006 LMH Kevin...
JAF CMS Forum.PHP远程文件包含漏洞
Salims Softhouse JAF CMS是一款基于PHP的内容管理程序。 Salims Softhouse JAF CMS不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB进程权限执行任意命令。 问题是由于'Forum.PHP'脚本对用户提交的'applAPPL'参数缺少过滤，提交恶意的远程服务器作为包含对象，可导致以WEB进程权限执行任意PHP代码。 Salims Softhouse JAF CMS 4.0 RC1 Salims Softhouse JAF CMS 3.0 RC Salims Softhouse JAF CMS 2.5 Salims Softhous...
EternalMart Guestbook 1.10 - adminauth.php Remote File Inclusion
EternalMart Guestbook 1.10 - adminauth.php Remote File Inclusion EternalMart Guestbook 1.1.0 emgbadminpath Remote File Include +class : Remote File Include Vulnerability +Author : mdx +Files : +admin/auth.php? +code : + + include"$emgbadminpath/authfunc.php"; + + download link :...
Microsoft Word / Open Office 0-day security vulnerability
2 different unknown vulnerabilities are used for hidden malware installation...
fport. vbs for XP/2 0 0 3-vulnerability warning-the black bar safety net
XP/2 0 0 3 the netstat with the"-o"option, so it is easy to use script to achieve fport features. with new regexp . pattern="..P\s+\S+\s+\S+\s+A-Z\s0-9+" . global=true set ms=. executecreateobject"wscript. shell". exec"netstat-ano". stdout. readall end with for each ps in getobject"winmgmts:\\....
AtomixMP3 <= 2.3 Malformed M3U Buffer Overflow Exploit
No description provided by source. / ======================================================================== 0-day AtomixMP3 = v2.3 Malformed M3U Buffer Overflow PoC ======================================================================== AtomixMP3 Player/Mixer fails to properly handle large fil...
Woltlab Burning Board 2.3.X XSS Vulnerability (0-Day) FIXED VERSION
Woltlab Burning Board 2.3.X "register.php" XSS Vulnerability ==- Release Status -== Released 30.11.2006 ==- Vendor Status -== The vendor hasn't been contacted yet. ==- Found by: -== 666 www.SR-Crew.org ==- Vulnerability: -== register.php | Near line 162 ------------------------------------------ ...
XMPlay Playlist文件缓冲区溢出漏洞
XMPlay是一款媒体播放程序。 XMPlay不正确处理播放文件数据，远程攻击者可以利用漏洞进行缓冲区溢出攻击，可能以进程权限执行任意指令。 问题是在处理播放文件中的M3U中的DisplayName字段或FileName字段时缺少正确的边界条件检查，可造成以应用程序权限执行任意指令。 XMPlayer XMPlayer 3.3 4 http://www.un4seen.com/xmplay.html 0-day XMPlay 3.3.0.4 .PLS Filename Buffer Overflow Exploit /...
Quintessential Player <= 4.50.1.82 (Playlist) Denial of Service PoC
No description provided by source. / 0-day Quintessential Player = 4.50.1.82 Playlist Denial Of Service PoC ======================================================================== ======================================================================== Quintessential Player 4.50.1.82 and lower...
XMPlay 3.3.0.4 (PLS) Local/Remote Buffer Overflow Exploit
No description provided by source. / =================================================================== 0-day XMPlay 3.3.0.4 .PLS Filename Buffer Overflow Exploit =================================================================== XMPlay 3.3.0.4 and lower experiance a stack-based buffer overflow...
XMPlay 3.3.0.4 - .ASX Filename Local Buffer Overflow
XMPlay 3.3.0.4 - .ASX Filename Local Buffer Overflow / =================================================================== 0-day XMPlay 3.3.0.4 .ASX Filename Buffer Overflow Exploit =================================================================== XMPlay 3.3.0.4 and lower experiance a stack-bas...
XMPlay 3.3.0.4 (PLS) Local/Remote Buffer Overflow Exploit
Exploit for unknown platform in category remote exploits ========================================================= XMPlay 3.3.0.4 PLS Local/Remote Buffer Overflow Exploit ========================================================= / ==================================================================...
XMPlay 3.3.0.4 - .PLS Local Buffer Overflow
XMPlay 3.3.0.4 - .PLS Local Buffer Overflow / =================================================================== 0-day XMPlay 3.3.0.4 .PLS Filename Buffer Overflow Exploit =================================================================== XMPlay 3.3.0.4 and lower experiance a stack-based buffer...
XMPlay 3.3.0.4 - '.ASX' Filename Local Buffer Overflow
/ =================================================================== 0-day XMPlay 3.3.0.4 .ASX Filename Buffer Overflow Exploit =================================================================== XMPlay 3.3.0.4 and lower experiance a stack-based buffer overflow when loading malformed .ASX files...
XMPlay 3.3.0.4 - '.M3U' Filename Local Buffer Overflow
/ =================================================================== 0-day XMPlay 3.3.0.4 .M3U Filename Buffer Overflow Exploit =================================================================== XMPlay 3.3.0.4 and lower experiance a stack-based buffer overflow when loading malformed M3U files...
Easy File Sharing Web Server 4 Remote Information Stealer Exploit
No description provided by source. / =================================================================== 0-day Alternative File Stream Exploit for Easy File Share Server 4 =================================================================== Exploit allows malicious users to grab files from the...
BSDi suidperl Local Stack Buffer Overflow Exploit
No description provided by source. / BSDisuidperl buffer overflow, by [email protected]. this is that old buffer overflow in suidperl, but i never saw any version of it for BSDi. so, here it is. this gives euid=0. BSDi/3.0 / define PATH "/usr/bin/suidperl" / path to suidperl on BSDi/3.0. / define...
UNIX 7th Edition /bin/mkdir Local Buffer Overflow Exploit
No description provided by source. / Exploit for /bin/mkdir Unix V7 PDP-11. mkdir has a buffer overflow when checking if the directory in /arg/with/slashes/fname exists. This will run /bin/sh with euid 0, but not uid 0. Since the shell doesn't do anything special about this, we don't really care...
RevilloC MailServer 1.x (RCPT TO) Remote Denial of Service Exploit
Exploit for unknown platform in category dos / poc ================================================================== RevilloC MailServer 1.x RCPT TO Remote Denial of Service Exploit ================================================================== /...