phpMyAdmin 3.3.X and 3.4.X - Local File Inclusion via XXE Injection

Exploit for php platform in category web applications Exploit Title: poc-phpmyadmin-local-file-inclusion-via-xxe-injection Date: 12-01-2012 Author: Marco Batista Blog Link: http://www.secforce.com/blog/2012/01/cve-2011-4107-poc-phpmyadmin-local-file-inclusion-via-xxe-injection/ Tested on: Windows...

CVE-2011-2462

creationtimestamp| type| source ---|---|--- 2012-01-14 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18366 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/fileformat/adobereaderu3d.rb 2023-06-14 21:10:03+00:00|...

Adobe Reader U3D Memory Corruption Vulnerability

Exploit for windows platform in category remote exploits This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework...

DSA-2388-1 t1lib - several

Bulletin has no description...

PHP 5.3.8 - Multiple Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 PHP 5.3.8 Multiple vulnerabilities Author: Maksymilian Arciemowicz Website: http://cxsecurity.com/ Date: 14.01.2012 CVE: CVE-2011-4153 zendstrndup Original link: http://cxsecurity.com/research/103 --- 1. Multiple NULL Pointer Dereference with...

phpMyAdmin 3.3.x/3.4.x - Local File Inclusion via XML External Entity Injection (Metasploit)

Exploit Title: poc-phpmyadmin-local-file-inclusion-via-xxe-injection Date: 12-01-2012 Author: Marco Batista Blog Link: http://www.secforce.com/blog/2012/01/cve-2011-4107-poc-phpmyadmin-local-file-inclusion-via-xxe-injection/ Tested on: Windows and Linux - phpmyadmin versions: 3.3.6, 3.3.10, 3.4.0...

Adobe Reader - U3D Memory Corruption (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' require 'zlib' class Metasploit3...

CVE-2011-5060

The parmktmpdir function in the PAR module before 1.003 for Perl creates temporary files in a directory with a predictable name without verifying ownership and permissions of this directory, which allows local users to overwrite files when another user extracts a PAR packed program, a different...

CVE-2011-5060

The CVE-2011-5060 issue affects the PAR Perl module (PAR) prior to version 1.003. The vulnerability arises because par_mktmpdir creates temporary files in a directory without verifying ownership and permissions, allowing a local attacker to overwrite files when another user extracts a PAR-packed ...

DEBIAN-CVE-2011-3597

Eval injection vulnerability in the Digest module before 1.17 for Perl allows context-dependent attackers to execute arbitrary commands via the new constructor...

DEBIAN-CVE-2011-2939

Off-by-one error in the decodexs function in Unicode/Unicode.xs in the Encode module before 2.44, as used in Perl before 5.15.6, might allow context-dependent attackers to cause a denial of service memory corruption via a crafted Unicode string, which triggers a heap-based buffer overflow...

CVE-2011-3597

Eval injection vulnerability in the Digest module before 1.17 for Perl allows context-dependent attackers to execute arbitrary commands via the new constructor...

CVE-2011-4057

CVE-2011-4057 affects Wibu-Systems CodeMeter Runtime prior to v4.40 (notably 4.30c and 4.10b). A remote attacker can send crafted TCP packets to port 22350, causing CodeMeter.exe to crash and trigger a denial of service. Remediation: update to CodeMeter Runtime v4.40 or later. If details are not ...

CVE-2011-3597

Eval injection vulnerability in the Digest module before 1.17 for Perl allows context-dependent attackers to execute arbitrary commands via the new constructor...

CVE-2011-3597

CVE-2011-3597 is an eval-injection vulnerability in the Perl Digest module (before 1.17). The vulnerability allows context-dependent attackers to execute arbitrary commands via the module’s new constructor. Affected component: Digest module for Perl; root cause described as improper handling/unsa...

CVE-2011-2939

CVE-2011-2939 refers to an off-by-one error in the Decode_xs function of the Encode module prior to 2.44, used with Perl before 5.15.6. The flaw can allow context-dependent attackers to trigger a heap-based buffer overflow in a crafted Unicode string, potentially enabling a denial of service due ...

CVE-2011-2776

CVE-2011-2776 describes a buffer overflow in the Error function of the Super project (version 3.30.0) caused by the syslog logging path, allowing local users to execute arbitrary code. Multiple sources confirm the root cause in super.c and the impact is local code execution with partial confident...

CVE-2011-4114

The CVE-2011-4114 entry concerns PAR::Packer for Perl. The par_mktmpdir function before version 1.012 creates temporary files in a directory with a predictable name and does not verify ownership/permissions, enabling local users to overwrite files when another user extracts a PAR-packed program. ...

CVE-2011-2939

Off-by-one error in the decodexs function in Unicode/Unicode.xs in the Encode module before 2.44, as used in Perl before 5.15.6, might allow context-dependent attackers to cause a denial of service memory corruption via a crafted Unicode string, which triggers a heap-based buffer overflow...

USN-1328-1: Linux kernel (Marvell DOVE) vulnerabilities

Clement Lecigne discovered a bug in the HFS filesystem. A local attacker could exploit this to cause a kernel oops. CVE-2011-2203 A flaw was found in how the Linux kernel handles user-defined key types. An unprivileged local user could exploit this to crash the system. CVE-2011-4110...