5506 matches found
openSUSE Security Update : mozilla-xulrunner181 (mozilla-xulrunner181-383)
The Mozilla XULRunner 1.8.1 engine received backports for security problems in 1.9.0.5. The following security issues were fixed : MFSA 2008-68 / CVE-2008-5512 / CVE-2008-5511: Mozilla security researcher mozbugra4 reported that an XBL binding, when attached to an unloaded document, can be used t...
PulseAudio (setuid) Priv. Escalation Exploit (ubu/9.04)(slack/12.2.0)
No description provided by source. PulseAudio setuid Local Privilege Escalation Vulnerability http://www.securityfocus.com/bid/35721 Credit for discovery of bug: Tavis Ormandy, Julien Tinnes and Yorick Koster -- Put files in /tmp/pulseaudio-exp or change config.h. Must be on same fs as the...
Linux Kernel <= 2.6.28.3 set_selection() UTF-8 Off By One Local Exploit
No description provided by source. / CVE-2009-1046 Virtual Console UTF-8 setselection off-by-onetwo Memory Corruption Linux Kernel = 2.6.28.3 coded by: sgrakkyu at antifork.org http://kernelbof.blogspot.com/2009/07/even-when-one-byte-matters.html Dedicated to all people talking nonsense about non...
Linux Kernel <= 2.6.28.3 set_selection() UTF-8 Off By One Local Exploit
Exploit for linux platform in category local exploits ======================================================================= Linux Kernel include include include include include include sys/sock...
Linux Kernel 2.6.24_16-23/2.6.27_7-10/2.6.28.3 (Ubuntu 8.04/8.10 / Fedora Core 10 x86-64) - 'set_selection()' UTF-8 Off-by-One Privilege Escalation
/ CVE-2009-1046 Virtual Console UTF-8 setselection off-by-onetwo Memory Corruption Linux Kernel antifork.org http://kernelbof.blogspot.com/2009/07/even-when-one-byte-matters.html Dedicated to all people talking nonsense about non exploitability of kernel heap off-by-one overflow NOTE-1: you need ...
kernel security and bug fix update
2.6.9-89.0.3.0.1.EL - fix skb alignment that was causing sendto to fail with EFAULT Olaf Kirch orabug 6845794 fix enomem due to larger mtu size page alloc Zach Brown orabug 5486128 - backout patch sysrq-b that queues upto keventd thread Guru Anbalagane orabug 6125546 - netrx/netpoll race avoidanc...
apache -- Prevent chunk-size integer overflow on platforms where sizeof(int) < sizeof(long)
Apache ChangeLog reports: Integer overflow in the approxysendfb function in proxy/proxyutil.c in modproxy in the Apache HTTP Server before 1.3.42 on 64-bit platforms allows remote origin servers to cause a denial of service daemon crash or possibly execute arbitrary code via a large chunk size th...
Fedora 11 : kernel-2.6.29.5-191.fc11 (2009-6768)
Update to kernel 2.6.29.5: http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.29.5 Includes DRM modesetting bug fixes. Adds driver for VIA SD/MMC controllers and full support for the Nano processor in 64-bit mode. Note that Tenable Network Security has extracted the preceding description...
HP-UX PHSS_38148 : s700_800 11.X OV NNM7.53 IA-64 Intermediate Patch 19
s700800 11.X OV NNM7.53 IA-64 Intermediate Patch 19 : The remote HP-UX host is affected by multiple vulnerabilities : - Potential security vulnerabilities have been identified with HP OpenView Network Node Manager OV NNM. The vulnerabilities could be exploited remotely to gain unauthorized access...
HP-UX PHSS_39246 : s700_800 11.X OV NNM7.53 IA-64 Intermediate Patch 22
s700800 11.X OV NNM7.53 IA-64 Intermediate Patch 22 : The remote HP-UX host is affected by multiple vulnerabilities : - Potential security vulnerabilities have been identified with HP OpenView Network Node Manager OV NNM. These vulnerabilities could be exploited remotely to allow execution of...
HP-UX PHSS_38489 : s700_800 11.X OV NNM7.53 IA-64 Intermediate Patch 20
s700800 11.X OV NNM7.53 IA-64 Intermediate Patch 20 : The remote HP-UX host is affected by multiple vulnerabilities : - Potential vulnerabilities have been identified with HP OpenView Network Node Manager OV NNM. The vulnerabilities could be exploited remotely to create a Denial of Service DoS or...
linux/x86-64 bindshell port:4444 shellcode 132 bytes
No description provided by source. / linux/x86-64 bindshellport 4444 xi4oyu at 80sec.com http://www.80sec.com BITS 64 xor eax,eax xor ebx,ebx xor edx,edx ;socket mov al,0x1 mov esi,eax inc al mov edi,eax mov dl,0x6 mov al,0x29 syscall xchg ebx,eax ;store the server sock ;bind xor rax,rax push rax...
freebsd/x86-64 exec("/bin/sh") shellcode 31 bytes
No description provided by source. / | | | | | | | \ | | | | || |/ |/ | |/ / ' \ | | / | | | | | | | | | | | | | | | | || ||,|||\| || || \/||| http://www.hacknroll.com Description: FreeBSD x86-64 exec"/bin/sh" Shellcode - 31 bytes Authors: Maycon M. Vitali 0ut0fBound Milw0rm .:...
RHEL 4 : kernel (RHSA-2009:1024)
Updated kernel packages are now available as part of the ongoing support and maintenance of Red Hat Enterprise Linux version 4. This is the eighth regular update. These updated packages fix two security issues, hundreds of bugs, and add numerous enhancements. Space precludes a detailed descriptio...
freebsd/x86-64 exec(""/bin/sh"") shellcode 31 bytes
No description provided by source. / | | | | | | | \ | | | | || |/ |/ | |/ / ' \ | | / | | | | | | | | | | | | | | | | || ||,|||\| || || \/||| http://www.hacknroll.com Description: FreeBSD x86-64 exec"/bin/sh" Shellcode - 31 bytes Authors: Maycon M. Vitali 0ut0fBound Milw0rm .:...
linux/x86-64 bindshell port:4444 shellcode 132 bytes
linux/x86-64 bindshell port:4444 shellcode 132 bytes. Shellcode exploit for linx86-64 platform / linux/x86-64 bindshellport 4444 xi4oyu at 80sec.com http://www.80sec.com BITS 64 xor eax,eax xor ebx,ebx xor edx,edx ;socket mov al,0x1 mov esi,eax inc al mov edi,eax mov dl,0x6 mov al,0x29 syscall xc...
freebsd/x86-64 - exec"/bin/sh" shellcode 31 bytes
freebsd/x86-64 exec"/bin/sh" shellcode 31 bytes. Shellcode exploit for freebsdx86-64 platform / | | | | | | | \ | | | | || |/ |/ | |/ / ' \ | | / | | | | | | | | | | | | | | | | || ||,|||\| || || \/||| http://www.hacknroll.com Description: FreeBSD x86-64 exec"/bin/sh" Shellcode - 31 bytes...
linux/x86-64 bindshell port:4444 shellcode 132 bytes
Exploit for linux/x86-64 platform in category shellcode ==================================================== linux/x86-64 bindshell port:4444 shellcode 132 bytes ==================================================== / linux/x86-64 bindshellport 4444 BITS 64 xor eax,eax xor ebx,ebx xor edx,edx...
freebsd/x86-64 execve /bin/sh shellcode 34 bytes
No description provided by source. / Anderson Eduardo c0d3z3r0 Hack'n Roll http://anderson.hacknroll.com http://blog.hacknroll.com .section .text .globl start start: xor %rcx,%rcx jmp string main: popq %rsi movq %rsi,%rdi pushq %rsi pushq %rcx movq %rsp,%rsi movq %rcx,%rdx movb $0x3b,%al syscall...
freebsd/x86-64 execve /bin/sh shellcode 34 bytes
Exploit for freebsd/x86-64 platform in category shellcode ================================================ freebsd/x86-64 execve /bin/sh shellcode 34 bytes ================================================ / Anderson Eduardo Hack'n Roll http://anderson.hacknroll.com http://blog.hacknroll.com...