CVE-2011-1731

Stack-based buffer overflow in OmniInet.exe in the Backup Client Service in HP OpenView Storage Data Protector 6.00, 6.10, and 6.11 allows remote attackers to execute arbitrary code via a malformed EXECINTEGUTIL message...

CVE-2011-1728

Stack-based buffer overflow in OmniInet.exe in the Backup Client Service in HP OpenView Storage Data Protector 6.00, 6.10, and 6.11 allows remote attackers to execute arbitrary code via a malformed EXECBAR message...

os-x/x86 intel reverse_tcp shell x86_64 - 131 bytes

;osx x64 reverse tcp shellcode 131 bytes ;Jacob Hammack ;email protected ;http://www.hammackj.com ; ;props to http://www.thexploit.com/ for the blog posts on x64 osx asm ;I borrowed some of his code ; ;OSX reverse tcp shell 131 bytes ;replace FFFFFFFF around byte 43 with the call back ip in hex...

OSX/Intel reverse_tcp shell x86_64 - 131 bytes

OSX/Intel reversetcp shell x8664 - 131 bytes. Shellcode exploit for osx platform ;osx x64 reverse tcp shellcode 131 bytes ;Jacob Hammack ;[email protected] ;http://www.hammackj.com ; ;props to http://www.thexploit.com/ for the blog posts on x64 osx asm ;I borrowed some of his code ; ;OSX...

PT-2011-3328

Name of the Vulnerable Software and Affected Versions HP OpenView Storage Data Protector versions 6.00 through 6.11 Description The issue is related to a stack-based buffer overflow in the OmniInet.exe component of the Backup Client Service. This can be exploited by remote attackers through a...

PT-2011-3330

Name of the Vulnerable Software and Affected Versions HP OpenView Storage Data Protector versions 6.00 through 6.11 Description The issue is related to a stack-based buffer overflow in the OmniInet.exe component of the Backup Client Service. This allows remote attackers to execute arbitrary code ...

PT-2011-3331

Name of the Vulnerable Software and Affected Versions HP OpenView Storage Data Protector versions 6.00 through 6.11 Description The issue is related to a stack-based buffer overflow in the OmniInet.exe component of the Backup Client Service. This can be exploited by remote attackers through a...

PHP code execution vulnerability references summary-vulnerability warning-the black bar safety net

A code execution function In PHP you can execute the Code of the function. Such as eval , assert , theand system and exec and shellexec and passthru and escapeshellcmd and pcntlexec , etc. demo code 1.1: The second file contains the code injection The file containing the function in the specific...

(Pwn2Own) Microsoft Internet Explorer onPropertyChange Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the way Intern...

Cisco Secure Desktop CSDWebInstaller code exec

Added: 03/23/2011 CVE: CVE-2011-0926 BID: 46536 OSVDB: 63809 Background Cisco Secure Desktop is an endpoint security management product that consists of several components, such as Prelogin Assessment/Policies, Host Scan, Cache Cleaner, Secure Desktop Vault, etc. Problem Cisco Secure Desktop...

kernel: posix-cpu-timers: workaround to suppress the problems with mt exec

Race condition in the exitsignal function in kernel/exit.c in the Linux kernel before 2.6.37-rc2 allows local users to cause a denial of service via vectors related to multithreaded exec, the use of a thread group leader in kernel/posix-cpu-timers.c, and the selection of a new thread group leader...

USN-1080-2: Linux kernel vulnerabilities

Thomas Pollet discovered that the RDS network protocol did not check certain iovec buffers. A local attacker could exploit this to crash the system or possibly execute arbitrary code as the root user. CVE-2010-3865 Vasiliy Kulikov discovered that the Linux kernel X.25 implementation did not...

PT-2011-2804 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 2.6.38-rc5 Description: The issue is related to the creation of transparent huge pages THP during the existence of a temporary stack for an exec system call. This allows local users to cause a denial of service...

kernel security, bug fix, and enhancement update

2.6.32-71.18.1.el6 - netdrv ixgbe: make sure FCoE DDP user buffers are really released by the HW Frantisek Hrbata 674002 617193 - netdrv ixgbe: invalidate FCoE DDP context when no error status is available Frantisek Hrbata 674002 617193 - netdrv ixgbe: avoid doing FCoE DDP when adapter is DOWN or...

kernel: mm: mem allocated invisible to oom_kill() when not attached to any threads

fs/exec.c in the Linux kernel before 2.6.37 does not enable the OOM Killer to assess use of stack memory by arrays representing the 1 arguments and 2 environment, which allows local users to cause a denial of service memory consumption via a crafted exec system call, aka an "OOM dodging issue," a...

ZDI-11-068: Adobe Acrobat Reader U3D Texture bmp RLE Decompression Remote Code Execution Vulnerability

ZDI-11-068: Adobe Acrobat Reader U3D Texture bmp RLE Decompression Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-068 February 8, 2011 -- CVE ID: CVE-2011-0592 -- CVSS: 9, AV:N/AC:L/Au:N/C:P/I:P/A:C -- Affected Vendors: Adobe -- Affected Products: Adobe...

PT-2011-2765

Name of the Vulnerable Software and Affected Versions HP Data Protector affected versions not specified Description The issue allows remote attackers to execute arbitrary programs via an EXEC SETUP command that references a UNC share pathname. This can lead to remote code execution. Recommendatio...

PT-2011-2767

Name of the Vulnerable Software and Affected Versions HP Data Protector affected versions not specified Description The issue concerns the client in HP Data Protector, which fails to verify the contents of files associated with the EXEC CMD command. This allows remote attackers to execute arbitra...

PT-2011-2766

Name of the Vulnerable Software and Affected Versions HP Data Protector affected versions not specified Description The issue is related to the improper validation of EXEC CMD arguments by the client in HP Data Protector. This allows remote attackers to execute arbitrary Perl code via a crafted...

Sql injection

fs/exec.c in the Linux kernel before 2.6.37 does not enable the OOM Killer to assess use of stack memory by arrays representing the 1 arguments and 2 environment, which allows local users to cause a denial of service memory consumption via a crafted exec system call, aka an "OOM dodging issue," a...