ZTE AC3633R Authentication Bypass / Denial Of Service

Greetings from vishnu @dH4wk 1. Vulnerable Product Version - ZTE AC3633R MTS Ultra Wifi Modem 2. Vulnerability Information A Authentication Bypass Impact: Attacker gains administrative access Remotely Exploitable: UNKNOWN Locally Exploitable: YES B Device crash which results in reboot Impact:...

MacKeeper Zero Day Remote Code Execution Vulnerability

A controversial piece of security and maintenance software for Mac OS X computers, known as MacKeeper, has been found to be vulnerable to a critical remote code execution vulnerability. MacKeeper antivirus software for Mac OS X is designed to improve Mac performance and security, but it is infamo...

[ MDVSA-2015:122 ] util-linux

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2015:122 http://www.mandriva.com/en/support/security/ Package : util-linux Date : March 29, 2015 Affected: Business Server 2.0 Problem Description: Updated util-linux packages fix security vulnerability: Sebastia...

Fedora 21 setroubleshootd 3.2.22 - Local Privilege Escalation

setroubleshoot tries to find out which rpm a particular file belongs to when it finds SELinux access violation reports. The idea is probably to have convenient reports for the admin which type enforcement rules have to be relaxed. setroubleshoot runs as root although in its own domain. In util.py...

通达T9系统sql注射10处打包(demo站点root权限)

简要描述： T9智能管理平台是基于B/S架构，灵活、稳定、安全、高性能的办公系统。采用自主研发的引擎技术，提供强大的工作流和公文流程管理功能，可完全根据客户需求定制办公门户平台。 详细说明： 接 WooYun: 通达T9 oa系统sql注射12处打包demo站点root权限 测试地址 http://t9.go2oa.com/t9/core/frame/webos/index.jsp 测试帐号及密码 oa/无 注入1：http://t9.go2oa.com/t9/core/funcs/doc/flowrun/list/print/index.jsp?runId=78&flowId=572...

DLA-156-1 samba - security update

Bulletin has no description...

CVE-2014-4813

CVE-2014-4813 affects IBM Tivoli Storage Manager UNIX and Linux clients. A race condition in the client could allow a local attacker to escalate privileges to root. Impact and affected versions are documented in IBM’s security bulletin, listing multiple TSM client branches (including 5.4.x, 5.5.x...

Arris VAP2500 Authentication Bypass Vulnerability

Exploit for hardware platform in category web applications !/usr/bin/env ruby require 'net/http' require 'digest/md5' if !ARGV0 puts "Usage: $0 " exit0 end host = ARGV0 newpass = "h4x0r3d!" http = Net::HTTP.newhost.start users = nil users = http.requestget"/admin.conf".body.split"\n".map! |user|...

Mac OS X IOKit Keyboard Driver Root Privilege Escalation

A heap overflow in IOHIKeyboardMapper::parseKeyMapping allows kernel memory corruption in Mac OS X before 10.10. By abusing a bug in the IORegistry, kernel pointers can also be leaked, allowing a full kASLR bypass. Tested on Mavericks 10.9.5, and should work on previous versions. The issue was...

Fonality Trixbox CE 2.8.0.4 Command Execution

!/usr/bin/perl Title: Fonality trixbox CE remote root exploit Author: Simo Ben youssef Contact: SimoatMorxploitcom Discovered & Coded: 2 June 2014 Published: 17 October 2014 MorXploit Research http://www.MorXploit.com Software: trixbox CE Version: trixbox-2.8.0.4.iso Vendor url:...

Mac OS X VMWare Fusion Root Privilege Escalation Exploit

This abuses the bug in bash environment variables CVE-2014-6271 to get a suid binary inside of VMWare Fusion to launch our payload as root. This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'rex...

SGI IRIX <= 6.2 fsdump Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/355/info A number of vulnerabilities exist in the fsdump program included with Silicon Graphics Inc's IRIX operating system. Each of these holes can be used to obtain root privlilege. Variant 1: irix% /var/rfindd/fsdump...

Solaris 7/8 kcms_configure Command-Line Buffer Overflow Vulnerability (2)

No description provided by source. source: http://www.securityfocus.com/bid/2558/info The Kodak Color Management System, or KCMS, is a package that ships with workstation installations of Solaris 7 and 8. kcmsconfigure, a part of KCMS, is vulnerable to a buffer overflow if it is passed an overly...

AIX 4.1/4.2 pdnsd Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/3237/info The Source Code Browser's Program Database Name Server Daemon pdnsd component of the C Set ++ compiler for AIX contains a remotely exploitable buffer overflow. This vulnerability allows local or remote attackers...

smcFanControl 2.1.2 - Multiple Buffer Overflow Vulnerabilities PoC (OSX)

No description provided by source. vnsecurity.net ADVISORY 2008-11 =============================== :Title: Buffer overflows in smcFanControl 2.1.2 for OSX :Severity: Critical :Reporter: KaiJern, Lau kjlau at vnsecurity.net :Products: smcFanControl 2.1.2 :OS: OSX :Fixed in: to be release...

SGI IRIX 5.3/6.2 ordist Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/415/info A buffer overflow exists in the ordist program, as shipped with Irix 6.x and 5.x from Silicon Graphics. By supplying long arguments to the '-d' option, containing a properly crafted buffer of machine exectuable...

Xmail 0.5/0.6 CTRLServer Remote Arbitrary Commands Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/2360/info Versions of CTRLServer are vulnerable to malicious user-supplied input. A failure to properly bounds-check data passed to the cfgfileget command leads to an overflow, which, properly exploited, can result in...

RedHat Linux <= 6.0, Slackware Linux <= 4.0 Termcap tgetent() Buffer Overflow (2)

No description provided by source. source: http://www.securityfocus.com/bid/588/info A buffer overflow existed in libtermcap's tgetent function, which could cause the user to execute arbitrary code if they were able to supply their own termcap file. Versions of libtermcap 2.0.8 and earliear are...

SpeechD 0.1/0.2 Privileged Command Execution Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/3326/info SpeechD is a device-independent layer for speech synthesis under Linux, providing an interface for speech-based applications or device drivers. SpeechD has been found to contain a flaw under certain...

SCO Open Server 5.0.6 lpusers Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/2557/info SCO OpenServer 5.0.6 and possibly earlier versions ships with several suid bin executables used in printer administration and related tasks. This includes lpusers, a component used to set the queue priority of...