CVE-2012-2320

CVE-2012-2320 concerns ConnMan, where the component does not verify that netlink messages originate from the kernel, allowing remote attackers to bypass access restrictions and cause a denial of service via a crafted netlink message. The vulnerability affects ConnMan up to version prior to 0.85. ...

Code injection

Static code injection vulnerability in edithistory.php in OxYProject OxYBox 0.85 allows remote attackers to inject arbitrary PHP code into oxyhistory.php via the oxymsg parameter...

Webmin Doesn't Clean Env (root exploit)

Not sure if this is known, however I know I've seen quite a few people still using webmin 0.84. Webmin doesn't seem to clean the env properly when starting apache probably in other cases as well It leaves the var HTTPAUTHORIZATION set. All you need to do is run it though a mime 64 decode and you...