PT-2014-5417 · Linux +4 · Linux Kernel +4

Name of the Vulnerable Software and Affected Versions: Linux kernel versions through 3.17.2 Description: The WRMSR processing functionality in the KVM subsystem does not properly handle the writing of a non-canonical address to a model-specific register. This allows guest OS users to cause a deni...

CVE-2014-0972

The kgsl graphics driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center QuIC Android contributions for MSM devices and other products, does not properly prevent write access to IOMMU context registers, which allows local users to select a custom page table, and consequently write...

Design/Logic Flaw

The kgsl graphics driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center QuIC Android contributions for MSM devices and other products, does not properly prevent write access to IOMMU context registers, which allows local users to select a custom page table, and consequently write...

CVE-2014-0972

The kgsl graphics driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center QuIC Android contributions for MSM devices and other products, does not properly prevent write access to IOMMU context registers, which allows local users to select a custom page table, and consequently write...

CVE-2014-0972

The kgsl graphics driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center QuIC Android contributions for MSM devices and other products, does not properly prevent write access to IOMMU context registers, which allows local users to select a custom page table, and consequently write...

CVE-2014-0972

The kgsl graphics driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center QuIC Android contributions for MSM devices and other products, does not properly prevent write access to IOMMU context registers, which allows local users to select a custom page table, and consequently write...

HP Operations Manager <= 8.16 - (srcvw4.dll) LoadFile()/SaveFile() Remote Unicode Stack Overflow PoC

No description provided by source. html !-- |------------------------------------------------------------------| | | | / / / / | | / / / / / / / \ / / / / \ | | / // // / / / / / // / / / / / // / // / / / / / / | | /// //,// // //,// // // | | | | http://www.corelan.be:8800 | |...

WinAsm Studio 5.1.5.0 - Local Heap Overflow PoC

No description provided by source. WinAsm Studio 5.1.5.0 Local Heap Overflow Poc By Mountassif Moad D0wnload : http://www.winasm.net/index.php?ind=downloads&op=downloadfile&ide=182&file=WinAsm515Full.zip Greatz : Simo-Soft - Skd - fl0 fl0w - Str0ke & By By milw0rm :d Registers EAX 00000001 ECX...

HTML Email Creator & Sender 2.3 - Local Buffer Overflow PoC (SEH)

No description provided by source. /0day HTML Email Creator & Sender v2.3 Local Buffer OverflowSeh Poc Debugging info Seh handler is overwriten , the offset is at 60 bytes in our buffer so you have to build your buffer as follows: PONTER TO NEXT SEH-------SEH HANDLER----NOP------SHELLCODE | | | |...

MS Windows 2000 Debug Registers Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/2764/info A vulnerability exists in the handling of debug registers in Windows 2000. It is possible for unprivileged processes to create breakpoints for arbitrary processes. This can be used to 'kill' arbitrary processes...

lftp <= 2.6.9 - Remote Stack based Overflow Exploit

No description provided by source. / lftp remote stack-based overflow exploit by Li0n7 voila fr Vulnerability discovered by Ulf Harnhammar Ulf.Harnhammar.9485 student uu se Lftp versions later than 2.6.10 are prone to a remotly exploitable stack-based overflow in trynetscapeproxy and trysquideplf...

Catia V5-6R2013 "CATV5_Backbone_Bus" - Stack Buffer Overflow

No description provided by source. ''' Title: Dassault Syst?mes Catia V5-6R2013 CATV5BackboneBus Stack Buffer Overflow Date: 2-18-2014 Author: Mohamed Shetta Email: mshetta |at| live |dot| com Vendor Homepage: http://www.3ds.com/products-services/catia/portfolio/catia-v5/latest-release/ Tested on...

TEC-IT TBarCode OCX ActiveX Control (TBarCode4.ocx 4.1.0) - Crash PoC

No description provided by source. Exploit Title: TEC-IT TBarCode OCX ActiveX Control TBarCode4.ocx 4.1.0 dos poc Date: 29.7.2013 Exploit Author: d3b4g Vendor Homepage:http://www.tec-it.com/en/start/Default.aspx Software Link: http://www.tec-it.com/en/start/Default.aspx Tested on: Windows XP SP3...

Viewpoint Media Player for IE 3.2 - Remote Stack Overflow PoC

No description provided by source. pre codespan style=font: 10pt Courier New;span class=general1-symbolbody bgcolor=E0E0E0----------------------------------------------------------------------------- bViewpoint Media Player for IE 3.2 AxMetaStream.dll Remote Stack Overflow/b url:...

UBUNTU-CVE-2014-2915

Xen 4.4.x, when running on ARM systems, does not properly restrict access to hardware features, which allows local guest users to cause a denial of service host or guest crash via unspecified vectors, related to 1 cache control, 2 coprocessors, 3 debug registers, and 4 other unspecified registers...

CVE-2014-2915

CVE-2014-2915 affects Xen 4.4.x running on ARM. The root cause is improper restriction/configuration of the hardware virtualization platform, allowing a local guest to access hardware features (cache control, coprocessors, debug registers, and other processor-specific registers). This can lead to...

Simple 8-bit Assembler Simulator

A simulator which provides a simplified assembler syntax based on NASM and is simulating a x86 like cpu. Press Help inside the simulator to see an overview about the supported instructions. Features 8-bit CPU 4 general purpose registers 256 bytes of memory Console output Simple 8-bit Assembler...

[ProcessThreadsView] View process threads information

ProcessThreadsView is a small utility that displays extensive information about all threads of the process that you choose. The threads information includes the ThreadID, Context Switches Count, Priority, Created Time, User/Kernel Time, Number of Windows, Window Title, Start Address, and more. Wh...

Mini HTTPD 1.21 - Stack Buffer Overflow POST Exploit

Mini HTTPd version 1.21 stack buffer overflow POST exploit for Windows XP SP3. !/usr/bin/python Title: Mini HTTPD stack buffer overflow POST exploit Author: TheColonial Date: 20 Feb 2013 Software Link: http://www.vector.co.jp/soft/winnt/net/se275154.html Vendor Homepage: http://www.picolix.jp/...

DEBIAN-CVE-2013-2929

The Linux kernel before 3.12.2 does not properly use the getdumpable function, which allows local users to bypass intended ptrace restrictions or obtain sensitive information from IA64 scratch registers via a crafted application, related to kernel/ptrace.c and arch/ia64/include/asm/processor.h...