Race condition

Race condition in backend/ctrl.c in KDM in KDE Software Compilation SC 2.2.0 through 4.4.2 allows local users to change the permissions of arbitrary files, and consequently gain privileges, by blocking the removal of a certain directory that contains a control socket, related to improper...

CVE-2010-0436

CVE-2010-0436 is a KDE KDM local privilege-escalation via a race condition in backend/ctrl.c; affects KDE SC 2.2.0–4.4.2, enabling a local user to change permissions of arbitrary files by blocking removal of a directory containing a control socket (ksm interaction). The issue is acknowledged in m...

OpenJDK No ClassCastException for HashAttributeSet constructors if run with -Xcomp (6894807)

Unspecified vulnerability in the HotSpot Server component in Oracle Java SE and Java for Business 6 Update 18, 5.0, Update, and 23 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors...

OpenJDK No ClassCastException for HashAttributeSet constructors if run with -Xcomp (6894807)

Unspecified vulnerability in the HotSpot Server component in Oracle Java SE and Java for Business 6 Update 18, 5.0, Update, and 23 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors...

[SECURITY] Fedora 11 Update: mingw32-libltdl-1.5.26-17.fc11

The mingw32-libltdl package contains the GNU Libtool Dynamic Module Loader, a library that provides a consistent, portable interface which simplifies the process of using dynamic modules, for the mingw32 cross compilation environment. These runtime libraries are needed by programs that link...

[SECURITY] Fedora 12 Update: mingw32-libltdl-1.5.26-20.fc12

The mingw32-libltdl package contains the GNU Libtool Dynamic Module Loader, a library that provides a consistent, portable interface which simplifies the process of using dynamic modules, for the mingw32 cross compilation environment. These runtime libraries are needed by programs that link...

Mediacoder 0.7.3.4605 - Local Buffer Overflow

Mediacoder 0.7.3.4605 - Local Buffer Overflow / Download: http://www.mediacoderhq.com/download.htm Compilation: mediac.c.......Win32cygwin,Devcpp Tested on Windows xp sp3 Date: 24.02.2010 1.We get control of EIP by overwriting a seh handler with pop pop retn instr and pass exception. 2.We positio...

Mediacoder 0.7.3.4605 - Local Buffer Overflow

/ Download: http://www.mediacoderhq.com/download.htm Compilation: mediac.c.......Win32cygwin,Devcpp Tested on Windows xp sp3 Date: 24.02.2010 1.We get control of EIP by overwriting a seh handler with pop pop retn instr and pass exception. 2.We position shellcode where is convienientbasicly anywhe...

Nero Burning ROM 9.4.13.2 - ISO Compilation Local Buffer Invasion (PoC)

Nero Burning ROM 9.4.13.2 - ISO Compilation Local Buffer Invasion PoC !/usr/bin/perl Title: Nero Burning ROM 9 iso compilation Local Buffer Invasion Proof Of Concept Product web page: http://www.nero.com Version tested: 9.4.13.2 OS platform used: Microsoft Windows XP Professional SP3 English...

Nero Burning ROM v9.4.13.2 (iso compilation) Local Buffer Invasion PoC

Exploit for unknown platform in category dos / poc ====================================================================== Nero Burning ROM v9.4.13.2 iso compilation Local Buffer Invasion PoC ====================================================================== !/usr/bin/perl Title: Nero Burning...

Deepburner Pro version 1.9.0.228 dbr file universal buffer overflow exploit

No description provided by source. / Deepburner pro 1.9.0.228 dbr file buffer overflow exploituniversal This is buffer: header 253 bytes + junk+ next seh + seh addr + tail 957 bytes dbr/dbi file Date: 29.01.2010 Dicovery Credits: fl0 fl0w Exploit Credits : fl0 fl0w ?Download latest vuln vs from:...

DeepBurner pro 1.9.0.228 - '.dbr' file Buffer Overflow (Universal)

/ Deepburner pro 1.9.0.228 dbr file buffer overflow exploituniversal This is buffer: header 253 bytes + junk+ next seh + seh addr + tail 957 bytes dbr/dbi file Date: 29.01.2010 Dicovery Credits: fl0 fl0w Exploit Credits : fl0 fl0w ?Download latest vuln vs from: http://www.deepburner.com/?r=downlo...

Killed 3 6 0 the two methods-vulnerability warning-the black bar safety net

Two methods: A BAT a + DOS+RAR BAT code is as follows: Code a patch up, actually is website monitoring for unsafe information, not allowing the release of Halo 4） Then use WINRAR to establish a self-extracting file Path: c:\windows After extracting run the vbs file name. vbs Quiet mode: hide all...

HTMLDOC 1.9.x-r1629 (Windows x86) - '.html' Local Buffer Overflow

/HTMLDOC 1.9.x-r1629 local .html buffer overflowwin32 exploit download: http://www.htmldoc.org/software.php?VERSION=1.9.x-r1629&FILE=htmldoc/snapshots/htmldoc-1.9.x-r1629.tar.bz2 header 19 bytes junk 268 bytes EIP register 4 bytes NOP SLEED 15 bytes calc.exe shellcode 338 bytes PLEASE READ: 1.Run...

Jasc Paint Shop Pro 8 - Local Universal Buffer Overflow

/ Software: Jasc Paint Shop Pro v8 Local Buffer Overflow Exploit UNIVERSAL Bug type: Local buffer overflow Exploitation method: SEH handler overwrite Description: When a crafted .PNG file is oppened a stack buffer overflow occurs because of DEP a SEH handler is overwriten and I overwriten his...

How to find unix broiler-vulnerability warning-the black bar safety net

Why that is I and the x-laser together with looking for broiler? Because all our operations are all in the 3 3 8 9 broiler on. First of all, we are on to the same terminal, premise:the terminal is open,rather than doing it on your own,so that only the Terminal Services Manager can be usedand then...

Snort <= 2.8.5 IPv6 DoS

Exploit for unknown platform in category dos / poc ======================= Snort TCP 2 works x86,x64 /usr/bin/env python from scapy.all import z = "Q" 30 sendIPv6dst="IPv6ADDRHERE",nh=1/ICMPv6NIQueryNOOPtype=4/z nh1 - icmp not v6 IV. SYSTEMS AFFECTED ------------------------- Theses proof of...

CDBurnerXP 4.2.4.1351

No description provided by source. !/usr/bin/env python CDBurnerXP v 4.2.4.1351 Local Crash PoC Found By: DrIDE Tested On: XPSP3, 7RC Usage: Create New Data Disc, Add a Folder, Paste to Rename Folder, Click Save Compilation as ISO Notes: Super lame and most likely not exploitable. ''' Error...

Under Linux the rebound CmdLine Shell tips-vulnerability warning-the black bar safety net

Last nightshould be early this morningplaying for a long time friend of Linux WebShell, and wanted to practice what UDEV to provide the right it, and finally found that the server seems to have been patched. But still there are other harvest, so I just YY under Linux to bounce a shell problem...

MDKA-2007:026 : krb5

The krb5 packages provided with Mandriva Linux 2007.1 had a compilation problem where the kerberos utilities were looking for modules in the wrong location. This update corrects the problem. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently...