CVE-2013-6383

The aaccompatioctl function in drivers/scsi/aacraid/linit.c in the Linux kernel before 3.11.8 does not require the CAPSYSRAWIO capability, which allows local users to bypass intended access restrictions via a crafted ioctl call...

fcron: Information disclosure

Background fcron is a periodic command scheduler for Unix-based systems Description The fcrontab function contains a race condition relating to symlinks. Impact A local attacker could perform symlink attacks to read arbitrary files with the privileges of the user running the application. Workarou...

CVE-2013-6833

The qlseioctl function in sys/dev/qlxge/qlsioctl.c in the kernel in FreeBSD 10 and earlier does not validate a certain size parameter, which allows local users to obtain sensitive information from kernel memory via a crafted ioctl call...

PT-2013-6137

Name of the Vulnerable Software and Affected Versions PineApp Mail-SeCure affected versions not specified Description The issue allows remote attackers to bypass authentication and perform certain operations. Specifically, it involves the admin/management.html page and the it parameter, which can...

CVE-2013-4270

The netctlpermissions function in net/sysctlnet.c in the Linux kernel before 3.11.5 does not properly determine uid and gid values, which allows local users to bypass intended /proc/sys/net restrictions via a crafted application...

acpid2: Privilege escalation

Background acpid2 is a daemon for Advanced Configuration and Power Interface. Description acpid2 does not properly use the pidof program in powerbtn.sh. Impact A local attacker could gain escalated privileges. Workaround There is no known workaround at this time. Resolution All acpid2 users shoul...

PT-2013-5744

Name of the Vulnerable Software and Affected Versions FreeBSD versions 8.3 through 9.2 Description The issue concerns the nullfs implementation in the kernel, specifically in sys/fs/nullfs/null vnops.c. It allows local users with certain permissions to bypass access restrictions. This is achieved...

CVE-2013-5666: Exposure of Sensitive Information to an Unauthorized Actor

The sendfile system-call implementation in sys/kern/uipcsyscalls.c in the kernel in FreeBSD 9.2-RC1 and 9.2-RC2 does not properly pad transmissions, which allows local users to obtain sensitive information kernel memory via a length greater than the length of the file...

CVE-2013-3077: Undefined Security Weakness

Multiple integer overflows in the IPMSFILTER and IPV6MSFILTER features in 1 sys/netinet/inmcast.c and 2 sys/netinet6/in6mcast.c in the multicast implementation in the kernel in FreeBSD 8.3 through 9.2-PRERELEASE allow local users to bypass intended restrictions on kernel-memory read and write...

CVE-2013-4874

The Uboot bootloader on the Verizon Wireless Network Extender SCS-26UC4 allows physically proximate attackers to obtain root access by connecting a crafted HDMI cable and using a sys session to modify the ramboot environment variable...

CVE-2013-4874

The Uboot bootloader on the Verizon Wireless Network Extender SCS-26UC4 allows physically proximate attackers to obtain root access by connecting a crafted HDMI cable and using a sys session to modify the ramboot environment variable...

PT-2013-5251

Name of the Vulnerable Software and Affected Versions Verizon Wireless Network Extender SCS-26UC4 affected versions not specified Description The issue allows physically proximate attackers to obtain root access by connecting a crafted HDMI cable and using a sys session to modify the ramboot...

PT-2013-5176

Name of the Vulnerable Software and Affected Versions TYPO3 Messaging sys messages extension version 1.1.0 and earlier Description The issue is related to a cross-site scripting XSS vulnerability. This allows remote attackers to inject arbitrary web script or HTML. Recommendations For versions...

CVE-2013-2851

Format string vulnerability in the registerdisk function in block/genhd.c in the Linux kernel through 3.9.4 allows local users to gain privileges by leveraging root access and writing format string specifiers to /sys/module/mdmod/parameters/newarray in order to create a crafted /dev/md device nam...

UBUNTU-CVE-2013-2851

Format string vulnerability in the registerdisk function in block/genhd.c in the Linux kernel through 3.9.4 allows local users to gain privileges by leveraging root access and writing format string specifiers to /sys/module/mdmod/parameters/newarray in order to create a crafted /dev/md device nam...

Design/Logic Flaw

The overriderelease function in kernel/sys.c in the Linux kernel before 3.4.16 allows local users to obtain sensitive information from kernel stack memory via a uname system call in conjunction with a UNAME26 personality...

IDA Pro 6.3 - Crash (PoC)

/ IDA Pro 6.3 crash due an internal error ELF anti-debugging/reversing patcher Published @ IOActive Labs Research blog: http://blog.ioactive.com/2012/12/striking-back-gdb-and-ida-debuggers.html - nitr0us http://twitter.com/nitr0usmx Tested under: IDA Pro Starter License 6.3.120531 Mac OS X IDA Pr...

PT-2012-5699

Name of the Vulnerable Software and Affected Versions Layton Helpbox version 4.4.0 Description The issue allows remote authenticated users to modify arbitrary support-ticket data. This is achieved by altering the sys request id parameter in the editrequestuser.asp page. Recommendations For Layton...

PT-2012-2207

Name of the Vulnerable Software and Affected Versions Seotoaster versions 1.9 and earlier Description The issue concerns SQL injection vulnerabilities in the selectUserIdByLoginPass function. Remote attackers can execute arbitrary SQL commands via the login parameter to "sys/login/index" or the...

Gentoo Security Advisory GLSA 201209-19 (nut)

The remote host is missing updates announced in advisory GLSA 201209-19. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...