Integer overflow

Integer overflow in the oombadness function in mm/oomkill.c in the Linux kernel before 3.1.8 on 64-bit platforms allows local users to cause a denial of service memory consumption or process termination by using a certain large amount of memory...

Important: Red Hat Security Advisory: rhev-hypervisor6 security and bug fix update

An updated rhev-hypervisor6 package that fixes three security issues and one bug is now available. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are availabl...

FreeBSD Ports: freetype2

The remote host is missing an update to the system as announced in the referenced advisory. VID 462e2d6c-8017-11e1-a571-bcaec565249c OpenVAS Vulnerability Test $ Description: Auto generated from VID 462e2d6c-8017-11e1-a571-bcaec565249c Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

DEBIAN-CVE-2012-1131

FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, on 64-bit platforms allows remote attackers to cause a denial of service invalid heap read operation and memory corruption or possibly execute arbitrary code via vectors related to the cell table of a font...

OpenSSL "asn1_d2i_read_bio()" DER格式数据处理漏洞

BUGTRAQ ID: 53158 CVE ID: CVE-2012-2110 OpenSSL是一种开放源码的SSL实现，用来实现网络通信的高强度加密，现在被广泛地用于各种网络应用程序中。 OpenSSL在处理DER格式数据时， "asn1d2ireadbio"函数中存在类型转换错误，可被利用造成堆缓冲区溢出，导致执行任意代码。成功利用的平台为64位系统。 0 OpenSSL 1.x OpenSSL 0.x 厂商补丁： OpenSSL Project --------------- OpenSSL Project已经为此发布了一个安全公告（secadv20120419）以及相应补丁:...

Play [EX] 2.1 Playlist File (M3U/PLS/LST) DoS Exploit

Exploit for windows platform in category dos / poc !/usr/bin/perl Play EX 2.1 Playlist File M3U/PLS/LST DoS Exploit Exploit discovered and coded by Death Shadow Dark Tested on Windows 7 Pro 64 bit and Windows XP SP3 Pro Sofware Link http://www.nautrup.com/pex/PlayEXPlayer.html email protected...

Johnny - GUI for John the Ripper

Johnny - GUI for John the Ripper Johnny is a GUI for John the Ripper. It was proposed by Shinnok. s release includes all things from development release plus nice tabbed panel for mode selection and some additional clean-ups. Basic functionality is supposed to work: password could be loaded from...

Microsoft Games Chess.exe DOS PoC

Exploit for windows platform in category dos / poc Exploit Title: Microsoft Games Chess.exe DOS PoC Date: 3/25/2012 Author: Dan Fosco Vendor or Software Link: www.microsoft.com Version: 6.1.7600.16385 Category: dos Google dork: n/a Tested on: Windows 7 SP1 64-bit Greetz: Inj3ct0r Exploit DataBase...

VLC v. 2.0.1.0 .jls DOS

Exploit for windows platform in category dos / poc Exploit Title: VLC v. 2.0.1.0 .jls DOS Date: 3/18/2012 Author: Dan Fosco Vendor or Software Link: www.videolan.org Version: 2.0.1.0 Category: local Google dork: n/a Tested on: Windows XP SP3 64-bit Demo site: n/a Tested on stable 2.0, 1.1.11,...

VLC v. 1.1.11 .nsv DOS

Exploit for windows platform in category dos / poc Exploit Title: VLC v. 1.1.11 .nsv DOS Date: 3/14/2012 Author: Dan Fosco Vendor or Software Link: www.videolan.org Version: 1.1.11 Category: local Google dork: n/a Tested on: Windows XP SP3 64-bit Demo site: n/a include int main FILE f; f =...

VLC v. 1.1.11 .mxf Memory Corruption

Exploit for windows platform in category local exploits Exploit Title: VLC v. 1.1.11 .mxf Memory Corruption Date: 3/14/2012 Author: Dan Fosco Vendor or Software Link: www.videolan.org Version: 1.1.11 Category: local Google dork: n/a Tested on: Windows XP SP3 64-bit Demo site: n/a include int main...

Microsoft Adds New Exploit Mitigations to IE 10

Windows 8 is still off on the horizon somewhere, but the new version of Internet Explorer that’s coming with it–IE 10–already is in consumer preview and it includes some major changes to the exploit mitigations. In addition to the existing implementations of ASLR, DEP and others technologies in...

linux/x86-64 - add user with passwd (189 bytes)

;scadduser01.S ;Arch: x8664, Linux ; ;Author: 0o -- nullnull ; nu11.nu11 at yahoo.com ;Date: 2012-03-05 ; ;compile an executable: nasm -f elf64 scadduser.S ; ld -o scadduser scadduser.o ;compile an object: nasm -o scadduserobj scadduser.S ; ;Purpose: adds user "t0r" with password "Winner" to...

HP-UX PHSS_41607 : s700_800 11.X OV NNM7.53 IA-64 Intermediate Patch 28

s700800 11.X OV NNM7.53 IA-64 Intermediate Patch 28 : The remote HP-UX host is affected by multiple vulnerabilities : - Potential security vulnerabilities have been identified with HP OpenView Network Node Manager OV NNM. The vulnerabilities could be exploited remotely to execute arbitrary code...

HP-UX PHSS_35844 : s700_800 11.23 OV NNM7.51 IA-64 Intermediate Patch 15

s700800 11.23 OV NNM7.51 IA-64 Intermediate Patch 15 : A potential vulnerability has been identified with HP OpenView Network Node Manager OV NNM. This vulnerability could be exploited remotely to gain unauthorized access to certain facilities of the NNM server. %NASLMINLEVEL 70300 C Tenable...

EbizCare => SQL Injection Vulnerability

Exploit for php platform in category web applications =========================================================== + Exploit Title: EbizCare = SQL Injection Vulnerability + Date: March 05, 2012 + Author: dbx + Vendor or Software Link: http://www.ebizcare.com/ + Category: WebApps + Google dork:...

Moderate: Red Hat Security Advisory: kvm security and bug fix update

Updated kvm packages that fix one security issue and several bugs are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

RHEL 5 : xorg-x11-server (RHSA-2012:0303)

Updated xorg-x11-server packages that fix one security issue and various bugs are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

Privilege escalation

afd.sys in the Ancillary Function Driver in Microsoft Windows XP SP2, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 on 64-bit platforms does not properly validate user-mode input passed to kernel mode, which allows local users to...

Microsoft Visio Viewer VSD File Format CVE-2012-0019 Remote Code Execution Vulnerability

Description Microsoft Visio Viewer is prone to a remote code-execution vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the user running the affected application. Failed exploit attempts will result in a denial-of-service condition. Technologies Affected...