75 matches found
SQL Injection in Pixie
Vulnerability ID: HTB22785 Reference: http://www.htbridge.ch/advisory/sqlinjectioninpixie.html Product: Pixie Vendor: Lucid Crew http://www.getpixie.co.uk/ Vulnerable Version: 1.04 Vendor Notification: 06 January 2011 Vulnerability Type: SQL Injection Status: Awaiting Vendor Response Risk level:...
Pixie 1.04 SQL Injection
================================== Vulnerability ID: HTB22786 Reference: http://www.htbridge.ch/advisory/sqlinjectioninpixie1.html Product: Pixie Vendor: Lucid Crew http://www.getpixie.co.uk/ Vulnerable Version: 1.04 Vendor Notification: 06 January 2011 Vulnerability Type: SQL Injection Status:...
Linux Kernel < 2.6.36-rc6 pktcdvd Kernel Memory Disclosure
Exploit for linux platform in category local exploits ========================================================== Linux Kernel http://jon.oberheide.org Information: https://bugzilla.redhat.com/showbug.cgi?id=638085 The PKTCTRLCMDSTATUS device ioctl retrieves a pointer to a pktcdvddevice from the...
Linux Kernel < 2.6.36-rc1 CAN BCM Privilege Escalation Exploit
No description provided by source. / i-CAN-haz-MODHARDEN.c Linux Kernel 2.6.36-rc1 CAN BCM Privilege Escalation Exploit Jon Oberheide [email protected] http://jon.oberheide.org Information: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2959 Ben Hawkes discovered an integer overflow in th...
Ubuntu 10.04 LTS - Lucid Lynx ftp Client v0.17-19build1 ACCT Buffer Overflow
No description provided by source. Exploit Title: Ubuntu 10.04 LTS - Lucid Lynx ftp Client v0.17-19build1 ACCT Buffer Overflow Date: 23/07/2010 Author: d0lc3 d0lc3xatgmaildomcom Software Link: http://packages.ubuntu.com/ Version: 0.17-19build1 Tested on: Linux ubuntu32 2.6.32-23-generic x64...
Lucid Lynx FTP Client 0.17-19build1 ACCT Buffer Overflow
Exploit Title: Ubuntu 10.04 LTS - Lucid Lynx ftp Client v0.17-19build1 ACCT Buffer Overflow Date: 23/07/2010 Author: d0lc3 d0lc3xatgmaildomcom Software Link: http://packages.ubuntu.com/ Version: 0.17-19build1 Tested on: Linux ubuntu32 2.6.32-23-generic x64 Summary: Packet: ftp Version:...
FTP Client 0.17-19build1 ACCT (Ubuntu 10.04) - Buffer Overflow (PoC)
FTP Client 0.17-19build1 ACCT Ubuntu 10.04 - Buffer Overflow PoC Exploit Title: Ubuntu 10.04 LTS - Lucid Lynx ftp Client v0.17-19build1 ACCT Buffer Overflow Date: 23/07/2010 Author: d0lc3 d0lc3xatgmaildomcom Software Link: http://packages.ubuntu.com/ Version: 0.17-19build1 Tested on: Linux ubuntu...
Linux PAM 1.1.0 (Ubuntu 9.1010.04) - MOTD File Tampering Privilege Escalation (1)
Linux PAM 1.1.0 Ubuntu 9.1010.04 - MOTD File Tampering Privilege Escalation 1 !/bin/sh EDB Note: Updated exploit https://www.exploit-db.com/exploits/14339/ Exploit Title: Ubuntu PAM MOTD file tampering privilege escalation Date: July 7, 2010 Author: Kristian Erik Hermansen Software Link:...
Ubuntu PAM MOTD File Tampering (Privilege Escalation)
Exploit for linux platform in category local exploits ===================================================== Ubuntu PAM MOTD File Tampering Privilege Escalation ===================================================== !/bin/sh Exploit Title: Ubuntu PAM MOTD file tampering privilege escalation Date:...
Ubuntu PAM MOTD File Tampering Privilege Escalation
!/bin/sh Exploit Title: Ubuntu PAM MOTD file tampering privilege escalation Date: July 7, 2010 Author: Kristian Erik Hermansen Software Link: http://packages.ubuntu.com/ Version: pam-1.1.0 Tested on: Ubuntu 10.04 LTS Lucid Lynx CVE : CVE-2010-0832 Notes: Affects Ubuntu 9.10 and 10.04 LTS Patch...
CVE-2009-2855
The strListGetItem function in src/HttpHeaderTools.c in Squid 2.7 allows remote attackers to cause a denial of service via a crafted auth header with certain comma delimiters that trigger an infinite loop of calls to the strcspn function...
CVE-2008-4866
Multiple buffer overflows in libavformat/utils.c in FFmpeg 0.4.9 before r14715, as used by MPlayer, allow context-dependent attackers to have an unknown impact via vectors related to execution of DTS generation code with a delay greater than MAXREORDERDELAY...
CVE-2006-3025
Cross-site scripting XSS vulnerability in Cal.PHP3 in Chris Lea Lucid Calendar 0.22 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters. NOTE: the provenance of this information is unknown; the details are obtained from third party information...
CVE-2006-3025
The CVE-2006-3025 entry concerns a cross-site scripting (XSS) flaw in Cal.PHP3 of Chris Lea Lucid Calendar 0.22. The vulnerability allows remote attackers to inject arbitrary script/HTML via unspecified parameters. NVD lists a CVSS v2 base score of 6.8 (NETWORK, MEDIUM) with partial impact on con...