625 matches found
Internet Explorer history.go Improper Parameter Handling (MS09-014; CVE-2009-0552)
Microsoft Internet Explorer is the most widely used Internet browser...
Linux Kernel 64 Bit ABI系统调用参数特权提升漏洞
BUGTRAQ ID: 33275 CVE ID:CVE-2009-0029 Linux是一款开放源代码的操作系统。 Linux内核64位ABI系统调用参数处理存在问题,本地攻击者可以利用漏洞提升特权。 部分结构的ABI定义函数调用者必须对每个参数进行符号扩展来填满寄存器宽度,在linux系统调用处理上存在问题。 如在64位上使用这个系统调用: asmlinkage long sysexampleunsigned int index if index 5 return -EINVAL; return examplearrayindex;...
CVE-2008-1149
phpMyAdmin before 2.11.5 accesses $REQUEST to obtain some parameters instead of $GET and $POST, which allows attackers in the same domain to override certain variables and conduct SQL injection and Cross-Site Request Forgery CSRF attacks by using crafted cookies...
Guestex Guestbook 1.00 (email) Remote Code Execution Exploit
Exploit for unknown platform in category web applications ============================================================ Guestex Guestbook 1.00 email Remote Code Execution Exploit ============================================================ Creator: K-sPecial xzziroz.net of .aware awarenetwork.org...