POP Peeper 3.7 - Local Overflow (SEH)

POP Peeper 3.7 - Local Overflow SEH !/usr/bin/ruby Title: POP Peeper 3.7 SEH Exploit Tested on: Windows XP SP2 EN Target: POP Peeper 3.7.0.0 Download Link: http://www.poppeeper.com/download.php Author: Anastasios Monachos secuid0 - anastasiosmatgmaildotcom Greetz: offsec team, inj3ct0r team appda...

PT-2011-1400

Name of the Vulnerable Software and Affected Versions Linux-PAM version 1.1.2 Description The issue is related to the privilege-dropping implementation in the pam env and pam mail modules. It might allow local users to obtain sensitive information by leveraging an unintended uid. This can be...

PT-2011-1399

Name of the Vulnerable Software and Affected Versions Linux-PAM version 1.1.2 Description The issue is related to the privilege-dropping implementation in the pam env and pam mail modules. It might allow local users to obtain sensitive information by leveraging unintended group permissions. This...

Mandriva Update for gnucash MDVSA-2010:241 (gnucash)

Check for the Version of gnucash OpenVAS Vulnerability Test Mandriva Update for gnucash MDVSA-2010:241 gnucash Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

Mandriva Linux Security Advisory : gnucash (MDVSA-2010:241)

A vulnerability was discovered and corrected in gnucash : gnc-test-env in GnuCash 2.3.15 and earlier places a zero-length directory name in the LDLIBRARYPATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory CVE-2010-3999. The affected...

PT-2010-1045

Name of the Vulnerable Software and Affected Versions Linux-PAM versions 1.1.2 and earlier pam-devel-1.1.1 pam-debuginfo-1.1.1 pam-1.1.1 Description The issue allows local users to potentially run programs with an unintended environment by executing a program that relies on the pam env PAM check...

CVE-2010-3999

CVE-2010-3999 affects GnuCash 2.3.15 and earlier, where gnc-test-env places a zero-length directory name in LD_LIBRARY_PATH, enabling a local attacker to gain privileges via a Trojan horse shared library in the current working directory. Public advisories (Fedora openVAS entries, Mandriva MDVSA-2...

CVE-2010-3999

gnc-test-env in GnuCash 2.3.15 and earlier places a zero-length directory name in the LDLIBRARYPATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory...

PT-2010-5229

Name of the Vulnerable Software and Affected Versions GnuCash versions 2.3.15 and earlier Description The issue allows local users to gain privileges via a Trojan horse shared library in the current working directory. This is due to gnc-test-env placing a zero-length directory name in the LD...

CVE-2010-3999: Undefined Security Weakness

gnc-test-env in GnuCash 2.3.15 and earlier places a zero-length directory name in the LDLIBRARYPATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory...

CVE-2009-4986

Directory traversal vulnerability in index.php in In-Portal 4.3.1, when magicquotesgpc is disabled, allows remote attackers to read arbitrary files via a .. dot dot in the env parameter...

CVE-2009-4986: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in In-Portal 4.3.1, when magicquotesgpc is disabled, allows remote attackers to read arbitrary files via a .. dot dot in the env parameter...

CVE-2008-3926: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in Content Management Made Easy CMME 1.12 allow remote attackers to 1 read arbitrary files via a .. dot dot in the env parameter in a weblog action to index.php, or 2 create arbitrary directories via a .. dot dot in the env parameter in a login action ...

t1lib font filename string overflow

Buffer overflow in the intT1EnvGetCompletePath function in lib/t1lib/t1env.c in t1lib 5.1.1 allows context-dependent attackers to execute arbitrary code via a long FileName parameter. NOTE: this issue was originally reported to be in the imagepsloadfont function in phpgd2.dll in the gd PHPGD2...

Remote file inclusion

PHP remote file inclusion vulnerability in config.php in Sangwan Kim phpIndexPage 1.0.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the envincpath parameter...

CVE-2007-0499: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in config.php in Sangwan Kim phpIndexPage 1.0.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the envincpath parameter...

CVE-2007-0307: Undefined Security Weakness

PHP remote file inclusion vulnerability in include/common.php in Poplar Gedcom Viewer 2.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the envrootPath parameter...

Solaris Runtime Linker (ld.so.1) Buffer Overflow Exploit (SPARC version

No description provided by source. / ld.so.1 exploit SPARC coded by: osker178 bjr213 psu.edu Alright, so this exploits a fairly standard buffer overflow in the default Solaris runtime linker ld.so.1 discovery by Jouko Pynnonen Only real deviation here from the standard overflow and return into li...

PT-2006-4100 · Upb · Ultimate Php Board

Name of the Vulnerable Software and Affected Versions: Ultimate PHP Board UPB versions 1.9.6 and earlier Description: The issue allows remote attackers to gain access by modifying certain parameters in a cookie. These parameters, including user env, pass env, power env, and id env, can be exploit...

PT-2006-4099 · Upb · Ultimate Php Board

Name of the Vulnerable Software and Affected Versions: Ultimate PHP Board UPB versions 1.9.6 and earlier Description: The issue allows remote attackers to determine a suitable decryption key given the plaintext and ciphertext. This is achieved by obtaining the plaintext password, which is sent wh...