Microsoft Windows - CreateWindow Function Callback (MS10-048)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://corelabs.coresecurity.com/ Microsoft Windows CreateWindow function callback vulnerability 1. Advisory Information Title: Microsoft Windows CreateWindow function callback vulnerability Advisory Id:...

DedeCmsV5. 6 local contains another use-vulnerability warning-the black bar safety net

Article author: jannock Continued local contains include/arc.datalist.class.php $codefile = isset$needCode ? $needCode : $cfgsoftlang; iffileexistsDEDEINC.'/ code/datalist.'.$ codefile.'. inc' requireonceDEDEINC.'/ code/datalist.'.$ codefile.'. inc'; Contains this file can contain . inc file type...

Microsoft Windows Kernel Virtual Path Local Denial Of Service Vulnerability

Description Microsoft Windows is prone to a local denial-of-service vulnerability that affects the Windows kernel. Attackers may exploit this issue to cause affected computers to become unresponsive and restart, causing a denial-of-service condition. Technologies Affected Avaya Meeting Exchange -...

[SECURITY] [DSA 2015-1] New drbd8 packages fix privilege escalation

------------------------------------------------------------------------ Debian Security Advisory DSA-2015 [email protected] http://www.debian.org/security/ Dann Frazier March 15, 2010 http://www.debian.org/security/faq - ------------------------------------------------------------------------...

CVE-2010-0156

Puppet 0.24.x before 0.24.9 and 0.25.x before 0.25.2 allows local users to overwrite arbitrary files via a symlink attack on the 1 /tmp/daemonout, 2 /tmp/puppetdoc.txt, 3 /tmp/puppetdoc.tex, or 4 /tmp/puppetdoc.aux temporary file...

Debian DSA-1846-1 : kvm - denial of service

Matt T. Yourst discovered an issue in the kvm subsystem. Local users with permission to manipulate /dev/kvm can cause a denial of service hang by providing an invalid cr3 value to the KVMSETSREGS call. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in...

[SECURITY] [DSA 1973-1] New glibc packages fix information disclosure

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1973-1 [email protected] http://www.debian.org/security/ Aurelien Jarno January 19, 2010 http://www.debian.org/security/faq -...

Audiotran 1.4.1 - Direct RET Buffer Overflow

Exploit Title: Audiotran v1.4.1 direct RET BOF Date: 2010-1-16 Author: Jacky Software Link: http://www.e-soft.co.uk/Audiotran.htm Version: 1.4.1 Tested on: Windows XP SP2 CVE : if exists Code : Audiotran v1.4.1 Direct RET local BOF Vulnerability. Exploit Discovered by Sébastien Duquette Greetz to...

Winamp 5.05-5.13 .ini local stack buffer overflow poc

Exploit for unknown platform in category local exploits ===================================================== Winamp 5.05-5.13 .ini local stack buffer overflow poc ===================================================== /Winamp 5.05-5.13 .ini local stack buffer overflow poc The problem is in the sk...

Fedora 11 : kernel-2.6.30.10-105.fc11 (2009-13694)

Fix a local DoS when using fuse. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C...

Xion Audio Player 1.0 121 m3u file buffer overflow

Exploit for unknown platform in category local exploits ================================================== Xion Audio Player 1.0 121 m3u file buffer overflow ================================================== Title: Xion Audio Player 1.0 121 m3u file buffer overflow CVE-ID: OSVDB-ID: Author: Drag...

Linux Kernel 2.6 < 2.6.19 (32bit) ip_append_data() ring0 Root Exploit

No description provided by source. / 0x82-CVE-2009-2698 Linux kernel 2.6 2.6.19 32bit ipappenddata local ring0 root exploit Tested White Box 42.6.9-5.ELsmp, CentOS 4.42.6.9-42.ELsmp, CentOS 4.52.6.9-55.ELsmp, Fedora Core 42.6.11-1.1369FC4smp, Fedora Core 52.6.15-1.2054FC5, Fedora Core...

HyperVM File Permissions Local Vulnerability

HyperVM is a virtualization application that runs off a host node and can provide several Virtual Private Servers. There is a previously unreported vulnerability in HyperVM/Kloxo. It was originally documented in ISSUE 14 by an anonymous author: http://www.milw0rm.com/exploits/8880 It turns out th...

HyperVM File Permissions Local Vulnerability

No description provided by source. HyperVM is a virtualization application that runs off a host node and can provide several Virtual Private Servers. There is a previously unreported vulnerability in HyperVM/Kloxo. It was originally documented in ISSUE 14 by an anonymous author:...

HyperVM File Permissions Local Vulnerability

Exploit for multiple platform in category local exploits ============================================ HyperVM File Permissions Local Vulnerability ============================================ HyperVM is a virtualization application that runs off a host node and can provide several Virtual Private...

ImTOO MPEG Encoder 3.1.53 (.cue/.m3u) Local Buffer Overflow PoC

Exploit for unknown platform in category dos / poc =============================================================== ImTOO MPEG Encoder 3.1.53 .cue/.m3u Local Buffer Overflow PoC =============================================================== !/usr/bin/python print "ImTOO MPEG Encoder 3.1.53...

Linux Kernel 2.6.x - posix-timers.c Null Pointer Dereference Denial of Service

Linux Kernel 2.6.x - posix-timers.c Null Pointer Dereference Denial of Service / source: https://www.securityfocus.com/bid/35976/info The Linux kernel is prone to a local denial-of-service vulnerability. Attackers can exploit this issue to crash the affected kernel, denying service to legitimate...

Linux Kernel 2.6.x - 'posix-timers.c' Null Pointer Dereference Denial of Service

/ source: https://www.securityfocus.com/bid/35976/info The Linux kernel is prone to a local denial-of-service vulnerability. Attackers can exploit this issue to crash the affected kernel, denying service to legitimate users. Given the nature of this issue, attackers may also be able to execute...

Linux Kernel drivers/char/agp/generic.c文件本地信息泄露漏洞

BUGTRAQ ID: 34673 CVECAN ID: CVE-2009-1192 Linux Kernel是开放源码操作系统Linux所使用的内核。 Linux Kernel的agp子系统的drivers/char/agp/generic.c文件没有清零用户空间进程可使用的页面，本地用户可以通过读取这些页面获得敏感信息。 Linux kernel 2.6.x Linux ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

Unsniff Network Analyzer 1.0 (usnf) Local Heap Overflow PoC

Summary Dont just look at hex dumps and protocol trees. With Unsniff Network Analyzer, you can view network traffic at various levels of detail. View high level objects like images, video, HTML pages, VOIP calls, drill down to individual TCP sessions, then onto reassembled PDUs, then finally to...