WebKitGTK 2.1.2 (Ubuntu 14.04) - Heap based Buffer Overflow Exploit

Exploit for linux platform in category local exploits CVE-2014-1303 PoC for Linux CVE-2014-1303 WebKit Heap based BOF proof of concept for Linux. This repository demonstrates the WebKit heap based buffer overflow vulnerability CVE-2014-1303 on Linux. NOTE: Original exploit is written for Mac OS X...

CVE-2014-10070

zsh before 5.0.7 allows evaluation of the initial values of integer variables imported from the environment instead of treating them as literal numbers. That could allow local privilege escalation, under some specific and atypical conditions where zsh is being invoked in privilege-elevation...

CVE-2014-10071

In exec.c in zsh before 5.0.7, there is a buffer overflow for very long fds in the "& fd" syntax...

CVE-2014-10070

Mode C: CVE-2014-10070 affects zsh prior to 5.0.7, where environment-imported initial values of integer variables may be evaluated instead of literals when zsh is invoked in privilege-elevation contexts with unsanitized env (e.g., sudo with env_reset disabled). This can enable local privilege esc...

CVE-2014-10071

In exec.c in zsh before 5.0.7, there is a buffer overflow for very long fds in the "& fd" syntax...

CVE-2014-10072

CVE-2014-10072 is a buffer overflow in zsh when scanning very long directory paths for symbolic links, occurring in code path utils.c and affecting zsh before 5.0.6 . Multiple connected Nessus/NVD-derived entries corroborate the vulnerability alongside related zsh CVEs, indicating a high-severity...

CVE-2014-10070

zsh before 5.0.7 allows evaluation of the initial values of integer variables imported from the environment instead of treating them as literal numbers. That could allow local privilege escalation, under some specific and atypical conditions where zsh is being invoked in privilege-elevation...

CVE-2014-3205

The CVE-2014-3205 issue affects Seagate BlackArmor NAS in backupmgt/pre_connect_check.php, where a backdoor user is authenticated using a hard-coded password '!~@##$$%FREDESWWSED'. The vulnerability is documented across multiple sources (NVD entry, CNVD/CVE records, and CNVD Chinese advisory) and...

CVE-2014-3206

CVE-2014-3206 affects Seagate BlackArmor NAS. It allows remote attackers to execute arbitrary code by sending the session parameter to /backupmgt/localJob.php or the auth_name parameter to /backupmgmt/pre_connect_check.php, enabling remote code execution on the device. Root cause: improper input ...

ManageEngine Desktop Central < 9.0.109 Remote Security Bypass Vulnerability

ManageEngine Desktop Central is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Semrush: SSLv3 Poodle Attack on Ip Of semrush

Summary: POODLE SSLv3 bug on multiple servers Description: CVE-2014-3566: The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which makes it easier for man-in-the-middle attackers to obtain cleartext data via a padding-oracle attack, aka...

Important: Red Hat Security Advisory: Satellite 6.3 security, bug fix, and enhancement update

An update is now available for Red Hat Satellite. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the...

CVE-2014-3972

CVE-2014-3972 affects Apexis APM-J601-WS cameras with firmware before 17.35.2.49. The issue is a directory traversal vulnerability that allows remote attackers to read arbitrary files via unspecified vectors, impacting confidentiality. Publicly disclosed references show the condition and affected...

CVE-2014-0014

CVE-2014-0014 affects Ember.js 1.0.x (before 1.0.1), 1.1.x (before 1.1.3), 1.2.x (before 1.2.1), 1.3.x (before 1.3.1), and 1.4.x (before 1.4.0-beta.2). The issue enables remote XSS by exploiting the application’s use of the {{group}} Helper with a crafted payload. Connected advisories (SUSE, GHSA...

CVE-2014-0013

Ember.js CVE-2014-0013 is an XSS in templates whose context is a user-supplied primitive value combined with the {{this}} variable. Affected: Ember.js 1.0.x prior to 1.0.1; 1.1.x prior to 1.1.3; 1.2.x prior to 1.2.1; 1.3.x prior to 1.3.1; 1.4.x prior to 1.4.0-beta.2. Remediation: upgrade to 1.0.1...

Ubuntu: Security Advisory (USN-3571-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 14.04 LTS / 16.04 LTS : Erlang vulnerabilities (USN-3571-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3571-1 advisory. It was discovered that the Erlang FTP module incorrectly handled certain CRLF sequences. A remote attacker could possibly use this issue to...

CVE-2014-3219

fish before 2.1.1 allows local users to write to arbitrary files via a symlink attack on 1 /tmp/fishd.log.%s, 2 /tmp/.pac-cache.$USER, 3 /tmp/.yum-cache.$USER, or 4 /tmp/.rpm-cache.$USER...

CVE-2014-3219

fish before 2.1.1 allows local users to write to arbitrary files via a symlink attack on 1 /tmp/fishd.log.%s, 2 /tmp/.pac-cache.$USER, 3 /tmp/.yum-cache.$USER, or 4 /tmp/.rpm-cache.$USER...

CVE-2014-8171

CVE-2014-8171 affects the Linux kernel memcg (memory resource controller). The description shows that a local user can spawn new processes within a memory-constrained cgroup, and this handling of OOM could lead to a deadlock, yielding a local denial of service. The incident is tied to the memcg O...