Microsoft Windows SRV2.SYS SMB Negotiate ProcessID Function Table Dereference (MS09-050)

No description provided by source. Microsoft SRV2.SYS SMB Negotiate ProcessID Function Table Dereference --------------------------------------------------------------------- Exploited by Piotr Bania // www.piotrbania.com Exploit for Vista SP2/SP1 only, should be reliable! Tested on: Vista sp2...

Novell NetWare Web Server 2.x convert.bas Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/2025/info Novell NetWare Web Server 2.x versions came with a CGI written in BASIC called convert.bas. This script allows retrieval of files outside of the normal web server context. This can be accomplished simply by...

Look n stop 0day Local Dos

No description provided by source. include stdio.h include windows.h include winioctl.h include stdlib.h include string.h / Program : Look 'n' Stop 2.06p4 / 2.07 6.0.2900.5512 Homepage : http://www.looknstop.com Discovery : 2009/11/08 Author Contacted : 2010/07/15 ... no reply Found by : Heurs Th...

PT-2014-1428

Name of the Vulnerable Software and Affected Versions Samba versions 3.6.x through 3.6.23 Samba versions 4.0.x through 4.0.18 Samba versions 4.1.x through 4.1.8 Description The issue affects the Samba software, allowing remote attackers to cause a denial of service infinite loop and CPU consumpti...

PT-2014-5649

Name of the Vulnerable Software and Affected Versions A10 Networks Advanced Core Operating System ACOS versions prior to 2.7.0-p6 A10 Networks Advanced Core Operating System ACOS versions prior to 2.7.1-P1 55 Description The issue allows remote attackers to cause a denial of service crash and...

D-Bus, GLib: Privilege escalation

Background D-Bus is a daemon providing a framework for applications to communicate with one another. GLib is a library providing a number of GNOME’s core objects and functions. Description When libdbus is used in a setuid program, a user can gain escalated privileges by leveraging the...

用友协作办公平台通杀SQL注入(续一)

简要描述： 用友协作办公平台某目录下存在多个通杀SQL注入，影响众多系统.. Tips:几乎全部以最高权限运行nt authority\system.Ma Ya.. 详细说明： 1 漏洞文件 该系统的/sysform/目录下的多个文件存在SQL注入 存在漏洞的的文件为检查下，应该不止列出来的这些 /sysform/003/editflowmanager.jsp?option=2&GUID=1111 /sysform/003/shareselect.jsp?type=2&fid=111 /sysform/004/addPlugin.jsp?ContainerId=111&flag=1...

Buffer overflow

vmx86.sys in VMware Workstation 10.0.1 build 1379776 and VMware Player 6.0.1 build 1379776 on Windows might allow local users to cause a denial of service read access violation and system crash via a crafted buffer in an IOCTL call. NOTE: the researcher reports "Vendor rated issue as...

PT-2014-4670

Name of the Vulnerable Software and Affected Versions VMware Workstation version 10.0.1 build 1379776 VMware Player version 6.0.1 build 1379776 Description The issue allows local users to cause a denial of service, resulting in a read access violation and system crash, via a crafted buffer in an...

CVE-2014-2384: Undefined Security Weakness

vmx86.sys in VMware Workstation 10.0.1 build 1379776 and VMware Player 6.0.1 build 1379776 on Windows might allow local users to cause a denial of service read access violation and system crash via a crafted buffer in an IOCTL call. NOTE: the researcher reports "Vendor rated issue as...

Exploit for CVE-2014-0816

CVE-2014-0816 ============= This is an exploit for CVE-2014-081...

OneHTTPD 0.8 - Crash PoC

Exploit for windows platform in category dos / poc from requests import get,ConnectionError as cerror from sys import argv iflenargv!=2: print '%s host' % argv0 else: buff = '/'245 script,host=argv try: get'http://'+host+':8080/'+buff except cerror: exit1 0day.today 2018-04-02...

DEBIAN-CVE-2014-0038

The compatsysrecvmmsg function in net/compat.c in the Linux kernel before 3.13.2, when CONFIGX86X32 is enabled, allows local users to gain privileges via a recvmmsg system call with a crafted timeout pointer parameter...

CVE-2014-0377

Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, and 12.1.0.1 allows remote authenticated users to affect confidentiality via vectors related to SYS tables...

CVE-2014-0377

Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, and 12.1.0.1 allows remote authenticated users to affect confidentiality via vectors related to SYS tables...

CVE-2014-0377

CVE-2014-0377 affects Oracle Database Server’s Core RDBMS component on 11.1.0.7, 11.2.0.3/11.2.0.4, and 12.1.0.1. The vulnerability allows remote authenticated users to breach confidentiality via vectors related to SYS tables. The NVD entry lists a CVSSv2 base score of 4.0 (MEDIUM) with network a...

CVE-2014-0377: Undefined Security Weakness

Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, and 12.1.0.1 allows remote authenticated users to affect confidentiality via vectors related to SYS tables...

MySQL debian.cnf Plaintext Credential Disclosure

The version of MySQL installed on the remote host is 5.5.x prior to 5.5.33. It is, therefore, potentially affected by a race condition in the post-installation script of the MySQL server package mysql-server-5.5.postinst that creates the configuration file '/etc/mysql/debian.cnf' with...

CGILua 3.0 /publique/cgi/cgilua.exe/sys/start.htm SQL注入漏洞

No description provided by source...

CGILua <= 3.0 - SQL Injection Vulnerability

Exploit for cgi platform in category web applications Exploit: /cgi/cgilua.exe/sys/start.htm?sid= SQLi Demo: http://www.server.com/publique/cgi/cgilua.exe/sys/start.htm?sid=157 0day.today 2018-01-10...