CVE-2006-2320

Multiple SQL injection vulnerabilities in Ideal Science Ideal BB 1.5.4a and earlier allow remote attackers to execute arbitrary SQL commands via multiple unspecified vectors related to stored procedure calls. NOTE: due to lack of details from the researcher, it is not clear whether this overlaps...

Unsniff Network Analyzer 1.0 (usnf) Local Heap Overflow PoC

Exploit for unknown platform in category dos / poc =========================================================== Unsniff Network Analyzer 1.0 usnf Local Heap Overflow PoC =========================================================== !/usr/bin/perl Unsniff Network Analyzer 1.0 usnf Local Heap Overflow...

CVE-2006-0058

Signal handler race condition in Sendmail 8.13.x before 8.13.6 allows remote attackers to execute arbitrary code by triggering timeouts in a way that causes the setjmp and longjmp function calls to be interrupted and modify unexpected memory locations...

CVE-2005-3359

The atm module in Linux kernel 2.6 before 2.6.14 allows local users to cause a denial of service panic via certain socket calls that produce inconsistent reference counts for loadable protocol modules...

HiveMail <= 1.3 Multiple Vulnerabilities

GulfTech Security Research February 10, 2006 Vendor : HiveMail URL : http://www.hivemail.com/ Version : HiveMail = 1.3 Risk : Multiple Vulnerabilities Description: HiveMail is a powerful web-based email program that allows you to offer personal email accounts to your visitors. This makes HiveMail...

linux/x86 TCP Proxy Shellcode 236 bytes

No description provided by source. // proxylib.c - is located at http://www.milw0rm.com/id.php?id=1476 /str0ke / hey all.. this is my attempt at a very small very functional tcp proxy shellcode.. to pull this off i ignored the "socks" protocols and invented my own.. sorta.. how to use me.. delive...

CVE-2006-0045

crawl before 4.0.0 does not securely call programs when saving and loading games, which allows local users to gain privileges...

CVE-2006-0045

crawl before 4.0.0 does not securely call programs when saving and loading games, which allows local users to gain privileges...

PT-2006-1134 · Crawl · Crawl

Name of the Vulnerable Software and Affected Versions: crawl versions prior to 4.0.0 Description: The issue allows local users to gain privileges due to insecure calls to programs when saving and loading games. Recommendations: For versions prior to 4.0.0, update to version 4.0.0 or later to...

Clipcomm CPW-100E wireless VoIP phone backdoor

Undocumented TCP/60023 shell access allows remote unauthorized phone control, including calls...

Hooked on prank-vulnerability warning-the black bar safety net

PS. Today on hard disk search for things when there is such an article..... Have been writing for a long time...forget the issue here...are fast becoming my hard disk a program on fossils...... The program did not have any technology, we looked to play it, useful to take to go.... Want to write a...

CVE-2005-4784

Multiple buffer overflows in the POSIX readdirr function, as used in multiple packages, allow local users to cause a denial of service and possibly execute arbitrary code via 1 a symlink attack that exploits a race condition between opendir and pathcon calls and changes the filesystem to one with...

CVE-2005-3359

The atm module in Linux kernel 2.6 before 2.6.14 allows local users to cause a denial of service panic via certain socket calls that produce inconsistent reference counts for loadable protocol modules...

PT-2005-4159 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 2.6.14 Description: The issue allows local users to cause a denial of service, resulting in a system panic, by making certain socket calls that lead to inconsistent reference counts for loadable protocol modules...

CVE-2005-4532

scponlyc in scponly 4.1 and earlier, when the operating system supports LDPRELOAD mechanisms, allows local users to execute arbitrary code with root privileges by creating a chroot directory in their home directory, hard linking to a system setuid application, and using a modified LDPRELOAD to...

CVE-2005-4511

The CVE-2005-4511 is a format-string vulnerability in TN3270 Resource Gateway 1.1.0. The underlying issue is unvalidated format specifiers in syslog function calls, enabling local users to cause a denial of service and potentially execute arbitrary code. The vulnerability is characterized by a lo...

Multiple Vendor BIOS - Keyboard Buffer Password Persistence (1)

source: https://www.securityfocus.com/bid/15751/info Multiple vendors fail to clear the BIOS Basic Input-Output System keyboard buffer after reading the preboot authentication password during the system startup process. Depending on the operating system running on affected computers, the memory...

CVE-2005-3808

Integer overflow in the invalidateinodepages2range function in mm/truncate.c in Linux kernel 2.6.11 to 2.6.14 allows local users to cause a denial of service hang via 64-bit mmap calls that are not properly handled on a 32-bit system...

solaris/sparc setreuid/execve 56 bytes

No description provided by source. / [email protected] setreuid shellcode full description of how it was done and defines at http://www.telegenetic.net/sparc-shellcode.htm / char shellcode = "\x90\x1A\x40\x09" / xor %o1, %o1, %o0 / "\x92\x1A\x40\x09" / xor %o1, %o1, %o1 / "\x82\x10\x20\xCA" /...

CVE-2001-1559

The CVE-2001-1559 issue affects OpenBSD 2.9 and 3.0, where the uipc_syscalls.c logic returns user-mode values to the fdrelease kernel function, enabling local users to trigger a denial of service and a null dereference. The root cause is the mismatched value returned by uipc system calls to a ker...