ReGet Deluxe .wjr file SaveTo attribute buffer overflow

Added: 05/14/2010 BID: 37511 Background ReGet Deluxe is a download manager for Windows. Problem A buffer overflow vulnerability allows command execution when a user opens a .wjr file containing a Download tag with a specially crafted SaveTo attribute. Resolution Do not open untrusted .wjr files...

CVE-2010-1914

The Zend Engine in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allows context-dependent attackers to obtain sensitive information by interrupting the handler for the 1 ZENDBWXOR opcode shiftleftfunction, 2 ZENDSL opcode bitwisexorfunction, or 3 ZENDSR opcode shiftrightfunction, related to the...

CVE-2010-1914

The Zend Engine in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allows context-dependent attackers to obtain sensitive information by interrupting the handler for the 1 ZENDBWXOR opcode shiftleftfunction, 2 ZENDSL opcode bitwisexorfunction, or 3 ZENDSR opcode shiftrightfunction, related to the...

CVE-2010-1914

The Zend Engine in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allows context-dependent attackers to obtain sensitive information by interrupting the handler for the 1 ZENDBWXOR opcode shiftleftfunction, 2 ZENDSL opcode bitwisexorfunction, or 3 ZENDSR opcode shiftrightfunction, related to the...

CVE-2010-1914

The Zend Engine in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allows context-dependent attackers to obtain sensitive information by interrupting the handler for the 1 ZENDBWXOR opcode shiftleftfunction, 2 ZENDSL opcode bitwisexorfunction, or 3 ZENDSR opcode shiftrightfunction, related to the...

CVE-2010-1917

Stack consumption vulnerability in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allows context-dependent attackers to cause a denial of service PHP crash via a crafted first argument to the fnmatch function, as demonstrated using a long string...

MOPS-2010-013: PHP sqlite_array_query() Uninitialized Memory Usage Vulnerability

MOPS-2010-013: PHP sqlitearrayquery Uninitialized Memory Usage Vulnerability May 7th, 2010 PHP’s sqlitearrayquery function will use uninitialized memory if it is used with an empty SQL query. This can lead to arbitrary code execution. Affected versions Affected is PHP 5.2 = 5.2.13 Affected is PHP...

MOPS-2010-010: PHP html_entity_decode() Interruption Information Leak Vulnerability

MOPS-2010-010: PHP htmlentitydecode Interruption Information Leak Vulnerability May 6th, 2010 PHP’s htmlentitydecode function can be abused for information leak attacks, because of the call time pass by reference feature. Affected versions Affected is PHP 5.2 = 5.2.13 Affected is PHP 5.3 = 5.3.2...

MOPS-2010-006: PHP addcslashes() Interruption Information Leak Vulnerability

MOPS-2010-006: PHP addcslashes Interruption Information Leak Vulnerability May 3rd, 2010 PHP’s addcslashes function can be abused for information leak attacks, because of the call time pass by reference feature. Affected versions Affected is PHP 5.2 = 5.2.13 Affected is PHP 5.3 = 5.3.2 Credits Th...

MOPS-2010-009: PHP shm_put_var() Already Freed Resource Access Vulnerability

MOPS-2010-009: PHP shmputvar Already Freed Resource Access Vulnerability May 5th, 2010 When PHP’s shmputvar function is interrupted by an object’s sleep function it can destroy the shm resource used by this function which allows to write an arbitrary memory address. Affected versions Affected is...

CVE-2010-1862

The chunksplit function in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allows context-dependent attackers to obtain sensitive information memory contents by causing a userspace interruption of an internal function, related to the call time pass by reference feature...

CVE-2010-1861

The sysvshm extension for PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allows context-dependent attackers to write to arbitrary memory addresses by using an object's sleep function to interrupt an internal call to the shmputvar function, which triggers access of a freed resource...

CVE-2010-1860

The htmlentitydecode function in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allows context-dependent attackers to obtain sensitive information memory contents or trigger memory corruption by causing a userspace interruption of an internal call, related to the call time pass by reference feature...

CVE-2010-1862

CVE-2010-1862 affects PHP 5.2.x up to 5.2.13 and 5.3.x up to 5.3.2. The vulnerability is in the chunk_split function, allowing a context-dependent attacker to obtain memory contents by triggering an interruption of an internal function related to call-time pass by reference. Impact per sources: p...

Linux Kernel 'fasync_helper()' Local Privilege Escalation Vulnerability

Exploit for linux platform in category local exploits ======================================================================= Linux Kernel 'fasynchelper' Local Privilege Escalation Vulnerability ======================================================================= Credit: Tavis Ormandy...

systemtap security update

0.9.7-5.3 - rhbz556564-2: CVE-2009-4273 cont'd aka CVE-2010-0412 - rhbz559719: CVE-2010-0411 - pr11286: stap-client --server operation 0.9.7-5.2 - rhbz556564: CVE-2009-4273...

MySql version 5.2 Change password length shell

Exploit for windows platform in category local exploits ============================================== MySql version 5.2 Change password length shell ============================================== I know I know it's been a while, I've been that much into xss and forget about the rest.. Mad respec...

ReGet Deluxe 5.2 Stack Overflow

import sys print "" print " ReGet Deluxe 5.2 build 330 Stack Overflow Exploit" print " By: Encrypt3d.M!nd " print " http://m1nd3d.wordpress.com/ " print " For Details visit my blog " print "" try: header =...

ReGet Deluxe 5.2 (build 330) Stack Overflow Exploit

No description provided by source. import sys print "" print " ReGet Deluxe 5.2 build 330 Stack Overflow Exploit" print " By: Encrypt3d.M!nd " print " http://m1nd3d.wordpress.com/ " print " For Details visit my blog " print "" try: header =...

ReGet Deluxe 5.2 (build 330) - Local Stack Overflow

ReGet Deluxe 5.2 build 330 - Local Stack Overflow import sys print "" print " ReGet Deluxe 5.2 build 330 Stack Overflow Exploit" print " By: Encrypt3d.M!nd " print " http://m1nd3d.wordpress.com/ " print " For Details visit my blog " print "" try: header =...