BruCON Agnitio workshop Slides and Video Demonstration - Download

BruCON Agnitio workshop Slides and Video Demonstration - Download Workshop by David Rook Security Ninja at BruCON 2011 in Belgium. You can Download Slide from here. Required for the Agnitio hands on demos: A 32bit Windows Operating System XP or 7 preferably – VM will be fine .NET framework 3.5...

Rockwell RSLogix 19 - Denial of Service

Rockwell RSLogix 19 - Denial of Service Luigi Auriemma Application: Rockwell RSLogix http://www.rockwellautomation.com/rockwellsoftware/design/rslogix5000/ Versions: = 19 RsvcHost.exe 2.30.0.23 Platforms: Windows Bug: Denial of Service Exploitation: remote Date: 13 Sep 2011 Author: Luigi Auriemma...

Serendipity Weblog SQL Injection

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...

Integer overflow in foobar2000 1.1.7

Luigi Auriemma Application: foobar2000 http://www.foobar2000.org Versions: = 1.1.7 Platforms: Windows Bug: integer overflow Date: 03 Jul 2011 Author: Luigi Auriemma e-mail: [email protected] web: aluigi.org 1 Introduction 2 Bug 3 The Code 4 Fix =============== 1 Introduction ===============...

Ubuntu Update for linux-ti-omap4 USN-1119-1

Ubuntu Update for Linux kernel vulnerabilities USN-1119-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN11191.nasl 7964 2017-12-01 07:32:11Z santu $ Ubuntu Update for linux-ti-omap4 USN-1119-1 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.n...

Joomla Component com_aist SQL Injection Vulnerability

Exploit for php platform in category web applications | Joomla Component comaist SQL Injection Vulnerability | Author : thecybernuxbie Bugs Founder : g3mb3lzYCL Feat Nuxbie Home : www.thecybernuxbie.com E-mail : email protected Found : 28 April 2011. Tested On : Windows 7 Ultimate 32bit. bajakan....

USN-1119-1: Linux kernel (OMAP4) vulnerabilities

Dan Rosenberg discovered that the RDS network protocol did not correctly check certain parameters. A local attacker could exploit this gain root privileges. CVE-2010-3904 Nelson Elhage discovered several problems with the Acorn Econet protocol driver. A local user could cause a denial of service...

SuSE 11 Security Update : expat (SAT Patch Number 1765)

The previous expat security update CVE-2009-3560 caused parse errors with some xml documents. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyright C Novell, Inc...

Linux Kernel "execve()"内存扩展"OOM-killer"本地拒绝服务漏洞

BUGTRAQ ID: 45004 CVE ID: CVE-2010-4243 Linux Kernel是开放源码操作系统Linux所使用的内核。 Linux Kernel的"OOM-killer"功能在实现上存在安全漏洞，本地攻击者可利用此漏洞终止不相关的进程，造成拒绝服务。 漏洞源于oomkill函数看不到没有附加到任何线程的已分配内存。 Linux kernel 2.6.24.3 - 2.6.37 RedHat Enterprise Linux Desktop v.5 client 厂商补丁： Linux ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载...

Ubuntu: Security Advisory (USN-1041-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-1042-1: PHP vulnerabilities

It was discovered that an integer overflow in the XML UTF-8 decoding code could allow an attacker to bypass cross-site scripting XSS protections. This issue only affected Ubuntu 6.06 LTS, Ubuntu 8.04 LTS, and Ubuntu 9.10. CVE-2009-5016 It was discovered that the XML UTF-8 decoding code did not...

SuSE 11 / 11.1 Security Update : Linux kernel (SAT Patch Numbers 3144 / 3147 / 3148 / 3163 / 3171)

This security update of the SUSE Linux Enterprise 11 GA kernel fixes 3 critical security issues. Following security bugs were fixed : - Mismatch between 32bit and 64bit register usage in the system call entry path could be used by local attackers to gain root privileges. This problem only affects...

Linux Kernel 'setup_arg_pages()' Denial of Service Vulnerability

Exploit for linux platform in category dos / poc ================================================================ Linux Kernel 'setupargpages' Denial of Service Vulnerability ================================================================ / known for over a year, fixed in grsec bug is due to a b...

Linux Kernel 2.6.37 - setup_arg_pages() Denial of Service

Linux Kernel 2.6.37 - setupargpages Denial of Service // source: https://www.securityfocus.com/bid/44301/info / known for over a year, fixed in grsec bug is due to a bad limit on the max size of the stack for 32bit apps on a 64bit OS. Instead of them being limited to 1/4th of a 32bit address spac...

Linux Kernel 2.6.37 - 'setup_arg_pages()' Denial of Service

// source: https://www.securityfocus.com/bid/44301/info / known for over a year, fixed in grsec bug is due to a bad limit on the max size of the stack for 32bit apps on a 64bit OS. Instead of them being limited to 1/4th of a 32bit address space, they're limited to 1/4th of a 64bit address space -...

32bit FTP Client - Remote Stack Buffer Overflow (Metasploit)

$Id: 32bitftplistreply.rb 11039 2010-11-14 19:03:24Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Ubuntu 6.06 LTS / 8.04 LTS / 9.04 / 9.10 / 10.04 LTS / 10.10 : linux, linux-ec2, linux-source-2.6.15 vulnerabilities (USN-1000-1)

Dan Rosenberg discovered that the RDS network protocol did not correctly check certain parameters. A local attacker could exploit this gain root privileges. CVE-2010-3904 Al Viro discovered a race condition in the TTY driver. A local attacker could exploit this to crash the system, leading to a...

32bit FTP Client Stack Buffer Overflow

This module exploits a stack buffer overflow in 32bit ftp client, triggered when trying to download a file that has an overly long filename. Module Options msf use exploit/windows/ftp/32bitftp/listreply msf undefinedlistreply show actions ...actions... msf undefinedlistreply set ACTION msf...

win32 generic - add new local administrator 326 bytes

Exploit for win32 platform in category shellcode ===================================================== win32 generic - add new local administrator 326 bytes ===================================================== / Title: generic win32 - add new local administrator 326 bytes Author: Anastasios...

SuSE Update for kernel SUSE-SA:2010:043

Check for the Version of kernel OpenVAS Vulnerability Test SuSE Update for kernel SUSE-SA:2010:043 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...