Parallels Desktop - Virtual Machine Escape Vulnerability

Exploit for windows platform in category local exploits + Title: Parallels Desktop - Virtual Machine Escape + Product: Parallels + Vendor: http://www.parallels.com/products/desktop/ + Affected Versions: All Version Author : Mohammad Reza Espargham Linkedin : https://ir.linkedin.com/in/rezasp E-Ma...

CVE-2017-5226

CVE-2017-5226 is described across connected docs as a bubblewrap sandbox escape via TIOCSTI: a nonprivileged session could push characters into the terminal input buffer to escape the sandbox. Related entries (e.g., CVE-2020-13753) note this as part of a family using TIOCSTI and CLONE_NEWUSER, hi...

CVE-2016-10124

An issue was discovered in Linux Containers LXC before 2016-02-22. When executing a program via lxc-attach, the nonpriv session can escape to the parent session by using the TIOCSTI ioctl to push characters into the terminal's input buffer, allowing an attacker to escape the container...

Xen Patches VM Escape Vulnerability

The Xen Project, which oversees the open source Xen hypervisor, yesterday patched a seven-year-old vulnerability that allows an attacker to escape a guest virtual machine and attack the host operating system. The flaw is so bad that the developers of the Qubes OS Project, a security-heavy operati...

Beaker Incorrect Label Escape Vulnerability

Beaker is a suite of open source software used to manage and automate test computers in laboratories. Beaker fails to properly escape tags in the search bar when generating JSON, allowing remote attackers to exploit vulnerabilities to inject malicious script or HTML code that can obtain sensitive...

CVE-2012-2242

scripts/dget.pl in devscripts before 2.10.73 allows remote attackers to execute arbitrary commands via a crafted 1 .dsc or 2 .changes file, related to "arguments to external commands" that are not properly escaped, a different vulnerability than CVE-2012-2240...

Recently ie7 the 0day among the shellcode escape+xor21 encryption-vulnerability warning-the black bar safety net

SCRIPT LANGUAGE="VBSCRIPT" Function Encodes,n Dim b b=The UCases For i=1 To Lenb Encode=Encode&ChrwAscMidb,i,1 Xor n Next End Function /script script language="javascript" myrand=window. prompt"url:","http://www.sohu.com/1.exe"; strVariable = Encodemyrand,0x21. toUpperCase function genurl var...

Directory traversal

Directory traversal vulnerability in smbfs smbfs on FreeBSD 4.10 up to 6.1 allows local users to escape chroot restrictions for an SMB-mounted filesystem via "..\" sequences. NOTE: this is similar to CVE-2006-1864, but this is a different implementation of smbfs, so it has a different CVE...