3510 matches found
runC: Privilege escalation
Background RunC is a CLI tool for spawning and running containers according to the OCI specification. Description A vulnerability was discovered in runC that allows additional container processes via ‘runc exec’ to be ptraced by the pid 1 of the container. This allows the main processes of the...
PHPMailer < 5.2.19 - Sendmail Argument Injection (Metasploit)
This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class MetasploitModule 'PHPMailer Sendmail Argument Injection', 'Description' = %q PHPMailer versions up to and including 5.2.19 are affected by a...
CVE-2016-5828
A vulnerability in the handling of Transactional Memory on powerpc systems was found. An unprivileged local user can crash the kernel by starting a transaction, suspending it, and then calling any of the exec class system calls...
CVE-2016-9152
Cross-site scripting XSS vulnerability in ecrire/exec/plonger.php in SPIP 3.1.3 allows remote attackers to inject arbitrary web script or HTML via the rac parameter...
CVE-2016-9152
CVE-2016-9152 concerns SPIP 3.1.3, where an XSS flaw exists in the file ecrire/exec/plonger.php that allows remote attackers to inject arbitrary web script or HTML via the rac parameter. The connected records establish the affected software and vulnerable parameter, with exploitation details not ...
CVE-2016-9152
Cross-site scripting XSS vulnerability in ecrire/exec/plonger.php in SPIP 3.1.3 allows remote attackers to inject arbitrary web script or HTML via the rac parameter...
EasyPHP Devserver 16.1.1 - Cross-Site Request Forgery Remote Command Execution
EasyPHP Devserver 16.1.1 - Cross-Site Request Forgery Remote Command Execution + Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/EASYPHP-DEV-SERVER-REMOTE-CMD-EXECUTION.txt + ISR: ApparitionSec Vendor: ===============...
Kernel: powerpc: tm: crash via exec system call on PPC
A vulnerability in the handling of Transactional Memory on powerpc systems was found. An unprivileged local user can crash the kernel by starting a transaction, suspending it, and then calling any of the exec class system calls...
The vulnerability of the Linux operating system allows a hacker to elevate their privileges to the level of the root user.
The vulnerability of the ptrace component in the Linux operating system is related to errors in the code. Exploiting this vulnerability allows a local attacker to elevate their privileges to the level of the root user by combining system calls for exec and ptrace...
Linux Kernel 2.6.22 3.9 (x86x64) - Dirty COW procselfmem Race Condition Privilege Escalation (SUID Method)
Linux Kernel 2.6.22 3.9 x86x64 - Dirty COW procselfmem Race Condition Privilege Escalation SUID Method / EDB-Note: After getting a shell, doing "echo 0 /proc/sys/vm/dirtywritebackcentisecs" may make the system more stable. uncomment correct payload first x86 or x64! $ gcc cowroot.c -o cowroot...
Android Webview remote code execution getClassLoader-vulnerability warning-the black bar safety net
It is well known in the Android 4.4 system on Google has been the default system Webkit kernel is replaced with the own open-source project chromium,and in Issue 2 1 3 6 9 3 0 0 5（https://codereview.chromium.org/213693005）shielding the webview object. getClass, android in 4. 4. 4 version complete...
USN-3070-3 linux-snapdragon vulnerabilities
A missing permission check when settings ACLs was discovered in nfsd. A local user could exploit this flaw to gain access to any file by setting an ACL. CVE-2016-1237 Kangjie Lu discovered an information leak in the Reliable Datagram Sockets RDS implementation in the Linux kernel. A local attacke...
FreePBX 13.0.35 remote code execution
A vulnerability overview 1. Vulnerability description FreePBX is called the Asterisk Management Portal, IP telephony tools Asterisk standardized implementation that provides a Web configuration interface and other workers FreePBX in functions.inc.php file exists for the parameters without...
FreePBX 'functions.inc.php' file remote code execution vulnerability
FreePBX is an Asterisk Dynamic IPPBX package developed using Linux, Apache, MySQL and PHP technologies. The functions.inc.php file in FreePBX has unfiltered parameters that are spliced directly into exec, which can be exploited to cause remote command execution...
USN-3070-1 linux vulnerabilities
A missing permission check when settings ACLs was discovered in nfsd. A local user could exploit this flaw to gain access to any file by setting an ACL. CVE-2016-1237 Kangjie Lu discovered an information leak in the Reliable Datagram Sockets RDS implementation in the Linux kernel. A local attacke...
Foxit Reader ConvertToPDF TIFF Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the ConvertToPDF...
Linux kernel powerpc system denial of service vulnerability
The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel's powerpc system. A local attacker can exploit the vulnerability by starting and stopping a transaction and then calling an...
DEBIAN-CVE-2016-5828
The startthread function in arch/powerpc/kernel/process.c in the Linux kernel through 4.6.3 on powerpc platforms mishandles transactional state, which allows local users to cause a denial of service invalid process state or TM Bad Thing exception, and system crash or possibly have unspecified oth...
Linux x86 /bin/sh Shellcode + ASLR Bruteforce
Linux x86 /bin/sh Shellcode + ASLR Bruteforce. Shellcode exploit for linx86 platform /bin/sh shellcode Ubuntu 14.0.4 32 bit + ASLR Bruteforce shellcodeandaslrbruteforce.c Tested on : Ubuntu 14.04 32 bits Author : Pawan Lal [email protected] vim shellcodeandaslrbruteforce.c include include inclu...
UBUNTU-CVE-2016-5828
The startthread function in arch/powerpc/kernel/process.c in the Linux kernel through 4.6.3 on powerpc platforms mishandles transactional state, which allows local users to cause a denial of service invalid process state or TM Bad Thing exception, and system crash or possibly have unspecified oth...