Design/Logic Flaw

pygrub tools/pygrub/src/GrubConf.py in Xen 3.0.3, when booting a guest domain, allows local users with elevated privileges in the guest domain to execute arbitrary commands in domain 0 via a crafted grub.conf file whose contents are used in exec statements...

Microsoft Visual Studio 6.0 (PDWizard.ocx) Remote Command Execution

No description provided by source. pre codespan style="font: 10pt Courier New;"span class="general1-symbol"body bgcolor="E0E0E0"------------------------------------------------------------------------------------------------------ bMicrosoft Visual Studio 6.0 PDWizard PDWizard.ocx = 6.0.0.9782...

Python ImageOP模块多个整数溢出漏洞

BUGTRAQ ID: 25696 Python是一种开放源代码的脚本编程语言。 Python的imageop模块实现上存在堆溢出漏洞，本地攻击者可能利用此漏洞提升自己的权限。 Python的imageop模块的imageop.c和rbgimgmodule.c文件中存在整数溢出漏洞，最终会导致堆溢出。如果用户受骗打开了恶意的图形文件的话，就可能触发这些溢出，导致执行任意指令。有漏洞的代码段如下： static PyObject imageoptovideoPyObject self, PyObject args int maxx, maxy, x, y, len;...

Alcatel-Lucent OmniPCX Enterprise Communication Server 7.1 - masterCGI Command Injection (Metasploit)

Alcatel-Lucent OmniPCX Enterprise Communication Server 7.1 - masterCGI Command Injection Metasploit $Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing a...

Alcatel-Lucent OmniPCX Enterprise Communication Server <= 7.1 masterCGI Command Injection

No description provided by source. $Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require...

Microsoft Visual Studio 6.0 (PDWizard.ocx) Remote Command Execution

No description provided by source. pre codespan style="font: 10pt Courier New;"span class="general1-symbol"body bgcolor="E0E0E0"------------------------------------------------------------------------------------------------------ bMicrosoft Visual Studio 6.0 PDWizard PDWizard.ocx = 6.0.0.9782...

Microsoft Visual Studio 6.0 (PDWizard.ocx) Remote Command Execution

Exploit for unknown platform in category remote exploits =================================================================== Microsoft Visual Studio 6.0 PDWizard.ocx Remote Command Execution ===================================================================...

msvs-pdwiz.txt

------------------------------------------------------------------------------------------------------ Microsoft Visual Studio 6.0 PDWizard PDWizard.ocx url: http://www.microsoft.com author: shinnai mail: shinnaiatautisticidotorg site: http://shinnai.altervista.org This was written for educationa...

Microsoft Visual Studio 6.0 - 'PDWizard.ocx' Remote Command Execution

------------------------------------------------------------------------------------------------------ Microsoft Visual Studio 6.0 PDWizard PDWizard.ocx url: http://www.microsoft.com author: shinnai mail: shinnaiatautisticidotorg site: http://shinnai.altervista.org This was written for educationa...

DSA-1366-1 clamav

Bulletin has no description...

Default configuration

The default configuration of Centre for Speech Technology Research CSTR Festival 1.95 beta aka 2.0 beta on Gentoo Linux, SUSE Linux, and possibly other distributions, is run locally with elevated privileges without requiring authentication, which allows local and remote attackers to execute...

CVE-2007-4074

The default configuration of Centre for Speech Technology Research CSTR Festival 1.95 beta aka 2.0 beta on Gentoo Linux, SUSE Linux, and possibly other distributions, is run locally with elevated privileges without requiring authentication, which allows local and remote attackers to execute...

CVE-2007-4074

CVE-2007-4074 affects Festival 1.95 beta (aka 2.0 beta) in Gentoo/SUSE and possibly other distros. The festival daemon runs as root with a passwordless default config, exposing a local daemon on port 1314 that can be abused to execute arbitrary commands by local attackers, with remote access poss...

CVE-2007-4010

The win32std extension in PHP 5.2.3 does not follow safemode and disablefunctions restrictions, which allows remote attackers to execute arbitrary commands via the winshellexecute function...

CVE-2007-3924

Argument injection vulnerability in Microsoft Internet Explorer, when running on systems with Netscape installed and certain URIs registered, allows remote attackers to conduct cross-browser scripting attacks and execute arbitrary commands via shell metacharacters in a -chrome argument to the...

Sql injection

SQL injection vulnerability in Infinite Responder before 1.48 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. NOTE: some of these details are obtained from third party information...

ServerView Servername Parameter Arbitrary Command Execution

The remote host is running ServerView, a web-based suite of asset management tools. The version of ServerView installed on the remote host fails to sanitize user-supplied input to the 'Servername' parameter of the 'SnmpView/SnmpListMibValues' script before using it to execute a shell command. An...

AsteriDex callboth.php Multiple Parameter CRLF Injection Arbitrary Command Execution

The remote host is running AsteriDex, a web-based dialer and address book for Asterisk. The version of AsteriDex installed on the remote host fails to sanitize input to the 'IN' parameter of the 'callboth.php' script before passing it to the Asterisk Call Manager as part of the data stream of an...

CVE-2007-2839

gfax 0.4.2 (and probably other versions) creates temporary files insecurely, which can allow local users to execute arbitrary commands via unknown vectors. Debian security advisory DSA-1329-1 fixes the issue by updating gfax; the advisory describes privilege escalation and root-level impact for v...

FreeType位图字体处理远程溢出漏洞

BUGTRAQ ID: 24708 FreeType是一个流行的字体函数库。 FreeType的src/base/ftbimap.c文件没有正确地处理位图字体，如果用户受骗打开了特制的字体文件的话，就可能触发缓冲区溢出，导致拒绝服务或执行任意指令。 FreeType FreeType 2.3.3 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://downloads.sourceforge.net/freetype/freetype-2.3.4.tar.gz?modtime=1176187387&bigmirror=0...