Foreman: hosts_controller.rb power/ipmi_boot Symbol creation DoS

The 1 power and 2 ipmiboot actions in the HostController in Foreman before 1.2.2 allow remote attackers to cause a denial of service memory consumption via unspecified input that is converted to a symbol...

Mozilla Firefox 3.6.16 mChannel Use-After-Free漏洞

漏洞分析 此漏洞是由于Mozilla Firefox的xul.dll在处理mChannel标签时，在OnChannelRedirect中对mChannel对象进行创建，但在随后调用Release释放，在释放对象过后没有对该指针进行标记，从而导致在随后的调用用中引用mChannel标签时，由于指针已经被释放，导致call地址不可读，从而引发漏洞，下面对此漏洞进行详细分析。 首先打开PoC，火狐浏览器崩溃，附加调试器，到达漏洞现场。 858.85c: Access violation - code c0000005 first chance First chance exceptions a...

World Of Warcraft 3.3.5a (macros-cache.txt) - Stack Overflow

No description provided by source. Exploit Title: World Of Warcraft 3.3.5a Stack Overflow macros-cache.txt Date: 21 Jul 2014 Exploit Author: Alireza Chegini @nimaarek Vendor Homepage: http://us.battle.net/wow/ Version: 3.3.5a Tested on: Win7 Output: --WoWError CrashDUmp : World of WarCraft build...

World Of Warcraft 3.3.5a Stack Overflow

Exploit Title: World Of Warcraft 3.3.5a Stack Overflow macros-cache.txt Date: 21 Jul 2014 Exploit Author: Alireza Chegini @nimaarek Vendor Homepage: http://us.battle.net/wow/ Version: 3.3.5a Tested on: Win7 Output: --WoWError CrashDUmp : World of WarCraft build 12340 Exe: D:\Wow\Wow.exe Time: Jul...

Linux Kernel 2.6.34+ - CAP_SYS_ADMIN x86 Local Privilege Escalation Exploit

No description provided by source. / Linux Kernel CAPSYSADMIN to root exploit by Dan Rosenberg @djrbliss on twitter Usage: gcc -w caps-to-root.c -o caps-to-root sudo setcap capsysadmin+ep caps-to-root ./caps-to-root This exploit is NOT stable: It only works on 32-bit x86 machines It only works on...

Sielco Sistemi Winlog <= 2.07.16 Buffer Overflow

No description provided by source. !/usr/bin/ruby Exploit Title: Sielco Sistemi Winlog Buffer Overflow = v2.07.16 Date: 05.06.2012 Exploit Author: m1k3 Vendor Homepage: http://www.sielcosistemi.com/en/download/public/winloglite.html Software Link:...

openSUSE Security Update : rubygem-activerecord-2_3 (openSUSE-SU-2013:0660-1)

Changes in rubygem-activerecord-23 : - add patch to fix security issue : - bug-8099322-3-attributesymbols.patch: fix CVE-2013-1854: rubygem-activerecord: Symbol DoS vulnerability in Active Record bnc809932 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package check...

Linux Kernel 3.15-rc4 PTY Race Condition Exploit

Linux Kernel versions above 3.14-rc1 and below 3.15-rc4 raw mode PTY local echo race condition privilege escalation proof of concept exploit. This bug also affects kernel 2.6.31-rc3 and newer. / CVE-2014-0196: Linux kernel = v3.14-rc1 Matthew Daley Usage: $ gcc cve-2014-0196-md.c -lutil -lpthread...

[SECURITY] Fedora 20 Update: elfutils-0.158-3.fc20

Elfutils is a collection of utilities, including ld a linker, nm for listing symbols from object files, size for listing the section sizes of an object or archive file, strip for discarding symbols, readelf to see the raw ELF file structures, and elflint to check for well-formed ELF files...

rubygem-actionpack: Action View string handling denial of service

actionpack/lib/actionview/template/text.rb in Action View in Ruby on Rails 3.x before 3.2.17 converts MIME type strings to symbols during use of the :text option to the render method, which allows remote attackers to cause a denial of service memory consumption by including these strings in heade...

ZIP Password Recovery Professional 5.1 (.zip) - Crash POC

Exploit for windows platform in category dos / poc Exploit Title: ZIP Password Recovery Professional 5.1 .zip - Crash POC Date: 30.11.2013 Exploit Author: KAI - KAISAI12 Version: 5.1 Vendor Homepage: http://www.recoverlostpassword.com/ Tested on: Windows 7...

Foreman: hosts_controller.rb power/ipmi_boot Symbol creation DoS

The 1 power and 2 ipmiboot actions in the HostController in Foreman before 1.2.2 allow remote attackers to cause a denial of service memory consumption via unspecified input that is converted to a symbol...

Fedora Update for ksudoku FEDORA-2013-13499

Check for the Version of ksudoku OpenVAS Vulnerability Test Fedora Update for ksudoku FEDORA-2013-13499 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

[SECURITY] Fedora 18 Update: ksudoku-4.10.5-1.fc18

KSudoku is a logic-based symbol placement puzzle. The player has to fill a grid with symbols so that each column, row and block on the game board contains only one instance of each symbol. In KSudoku the symbols are usually the numbers 1 to 9, but may be the letters A to P or A to Y in larger...

Fedora Update for ksudoku FEDORA-2013-10182

Check for the Version of ksudoku OpenVAS Vulnerability Test Fedora Update for ksudoku FEDORA-2013-10182 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

[SECURITY] Fedora 17 Update: ksudoku-4.10.4-1.fc17

KSudoku is a logic-based symbol placement puzzle. The player has to fill a grid with symbols so that each column, row and block on the game board contains only one instance of each symbol. In KSudoku the symbols are usually the numbers 1 to 9, but may be the letters A to P or A to Y in larger...

[SECURITY] Fedora 18 Update: ksudoku-4.10.4-1.fc18

KSudoku is a logic-based symbol placement puzzle. The player has to fill a grid with symbols so that each column, row and block on the game board contains only one instance of each symbol. In KSudoku the symbols are usually the numbers 1 to 9, but may be the letters A to P or A to Y in larger...

[SECURITY] Fedora 19 Update: ksudoku-4.10.4-1.fc19

KSudoku is a logic-based symbol placement puzzle. The player has to fill a grid with symbols so that each column, row and block on the game board contains only one instance of each symbol. In KSudoku the symbols are usually the numbers 1 to 9, but may be the letters A to P or A to Y in larger...

Health Service dropped data

Challenge The following alerts can be seen in SCOM: Veeam Collector: Health Service dropped data Veeam Collector: Health Service workflows failed The settings of SCOM agent are correct please see KB1026, and clearing OpsMgr cache may help for a short amount of time. The OperationsManager log on...

CVE-2013-0175

multixml gem 0.5.2 for Ruby, as used in Grape before 0.2.6 and possibly other products, does not properly restrict casts of string values, which allows remote attackers to conduct object-injection attacks and execute arbitrary code, or cause a denial of service memory and CPU consumption involvin...