CVE-2014-3926

Cross-site scripting XSS vulnerability in lg.cgi in Cougar LG 1.9 allows remote attackers to inject arbitrary web script or HTML via the "addr" parameter...

CVE-2014-3926: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in lg.cgi in Cougar LG 1.9 allows remote attackers to inject arbitrary web script or HTML via the "addr" parameter...

PT-2017-5889

Name of the Vulnerable Software and Affected Versions: Cougar LG version 1.9 Description: A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via the addr parameter in the lg.cgi file. Recommendations: For version 1.9, avoid using the addr...

PT-2016-7424

Name of the Vulnerable Software and Affected Versions QEMU aka Quick Emulator affected versions not specified Description The issue allows local guest OS administrators to cause a denial of service, resulting in an infinite loop and QEMU process crash. This can be achieved by setting the receive ...

DEBIAN-CVE-2016-0821

The LISTPOISON feature in include/linux/poison.h in the Linux kernel before 4.3, as used in Android 6.0.1 before 2016-03-01, does not properly consider the relationship to the mmapminaddr value, which makes it easier for attackers to bypass a poison-pointer protection mechanism by triggering the...

UBUNTU-CVE-2016-0821

The LISTPOISON feature in include/linux/poison.h in the Linux kernel before 4.3, as used in Android 6.0.1 before 2016-03-01, does not properly consider the relationship to the mmapminaddr value, which makes it easier for attackers to bypass a poison-pointer protection mechanism by triggering the...

Exploit for Improper Input Validation in Linux Linux_Kernel

Exploit for CVE-2017-5123 Step Complile kernel with null...

PT-2016-1597

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.3 Description The issue is related to errors in handling the mmap min addr variable in the LIST POISON function of the Linux kernel. This can allow a remote attacker to bypass a protection mechanism by triggeri...

Oracle: Security Advisory (ELSA-2010-0615)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2015-4295

Name of the Vulnerable Software and Affected Versions Linux kernel versions through 3.18.2 Description The issue concerns the vdso addr function in the Linux kernel, which does not properly choose memory locations for the vDSO area. This makes it easier for local users to bypass the ASLR protecti...

TinyShop二次注入一枚。

简要描述： rt TinyShop v1.0.2 详细说明： 还是 protected\controllers\simple.php文件 public function orderact ................. $address = $model-table"address"-where"id=$addressid"-find; //if!$address$this-redirect"order",false,Req::args; //if!$paymentid$this-redirect"order",false,Req::args; $data'orderno' =...

Php-Stats <= 0.1.9.1b (PC-REMOTE-ADDR) SQL Injection Exploit

No description provided by source. ?php printr' --------------------------------------------------------------------------- Php-Stats = 0.1.9.1b PC-REMOTE-ADDR sql injection / cleat text admin pass disclosure by rgod mail: retrog at alice dot it site: http://retrogod.altervista.org...

Knox Software Arkeia 4.0 Backup Local Overflow

No description provided by source. / source: http://www.securityfocus.com/bid/661/info Knox Software Arkeia 4.0 Backup rnavc & nlserverd HOME Environment Variable Buffer Overflow A local buffer overflow in the handling of the HOME environment variable by the rlserver and rnavc binaries that are...

Android Kernel 2.6 - Local DoS Crash PoC

No description provided by source. Exploit Title: Android Kernel 2.6 Local DoS Date: 12/7/12 Author: G13 Twitter: @g13net Versions: Android 2.2, 2.3 Category: DoS android Vulnerability The Android OS is vulnerable to a local DoS when a filename with a length of 2048 or larger is attempted to be...

Beatport Player 1.0.0.283 - (.M3U File) Local Buffer Overflow PoC

No description provided by source. Beatport Player 1.0.0.283 .M3U File Local Stack Overflow PoC Discovered by SirGod - www.mortal-team.net Error log : Logged at Friday, May 01, 2009 14:03:17 FileVersion: 1.0.0.283 ProductVersion: 1.0.0.0 Exception Code: 0xC0000005 Exception Addr: 0x001B:0x004317F...

Tomcat 3.0/3.1 Snoop Servlet Information Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/1532/info A vulnerability exists in the snoop servlet portion of the Tomcat package, version 3.1, from the Apache Software Foundation. Upon hitting an nonexistent file with the .snp extension, too much information is...

PSOProxy 0.91 Remote Buffer Overflow Vulnerability (2)

No description provided by source. source: http://www.securityfocus.com/bid/9706/info It has been reported that PSOProxy is prone to a remote buffer overflow vulnerability. The issue is due to the insufficient boundary checking. A malicious user may exploit this condition to potentially corrupt...

kernel: xen: off-by-one shift in x86_64 __addr_ok()

Off-by-one error in the addrok macro in Xen 3.3 and earlier allows local 64 bit PV guest administrators to cause a denial of service host crash via unspecified hypercalls that ignore virtual-address bits...

PT-2013-1400 · Xen +1 · Xen +1

Name of the Vulnerable Software and Affected Versions: Xen versions 3.3 and earlier Description: The issue is related to an off-by-one error in the addr ok macro, which can be exploited by local 64-bit PV guest administrators to cause a denial of service, resulting in a host crash. This can be...

libvirt security and bug fix update

0.6.3-33.0.1.el55.3 - Replaced docs/et.png in tarball 0.6.3-33.el55.3 - Explicitly set qcow2 backing store format CVE-2010-2239 - Remap privileged source ports from guests behind NAT CVE-2010-2242 - Eliminate memory leak in xenUnifiedDomainInfoListFree rhbz 619711 0.6.3-33.el55.2 - Fix discrepanc...