CVE-2007-1220

The Hypervisor in Microsoft Xbox 360 kernel 4532 and 4548 does not properly verify the parameters passed to the syscall dispatcher, which allows attackers with physical access to bypass code-signing requirements and execute arbitrary code...

CVE-2007-1221

The Hypervisor in Microsoft Xbox 360 kernel 4532 and 4548 allows attackers with physical access to force execution of the hypervisor syscall with a certain register set, which bypasses intended code protection...

Microsoft XBox privilege escalation and code execution

It's possible to execute unsigned code in hypervisor mode because of syscall handling problem. It opens possibility for any actions, including changing of operation system...

linux/x86-64 execve(/bin/sh) 33 bytes

No description provided by source. Linux/X86-64 Dummy for shellcode: execve"/bin/sh", "/bin/sh", NULL hophet at gmail.com .text .globl start start: xorq %rdx, %rdx movq $0x68732f6e69622fff,%rbx shr $0x8, %rbx push %rbx movq %rsp,%rdi xorq %rax,%rax pushq %rax pushq %rdi movq %rsp,%rsi mov $0x3b,%...

kernel listxattr syscall can corrupt user space programs

Unspecified vulnerability in the listxattr system call in Linux kernel, when a "bad inode" is present, allows local users to cause a denial of service data corruption and possibly gain privileges via unknown vectors...

Mac OS X 10.4.x Kernel shared_region_map_file_np() Memory Corruption

Exploit for macOS platform in category dos / poc ==================================================================== Mac OS X 10.4.x Kernel sharedregionmapfilenp Memory Corruption ==================================================================== / This vulnerability was discovered by Adriano...

Mac OS X syscall DoS

Arguments of sharedregionmapfilenp syscall are not checking, making it's possible to exhaust all available memory...

OpenBSD vga privilege escalation

vgaioctl syscall allows code execution in kernel...

linux/x86 execve read shellcode - 92 bytes

No description provided by source. XCHG Research Group Linux/x86 execve read shellcode - 92 bytes -- Writed by 0ut0fbound -- - http://outofbound.host.sk - http://xchglabs.host.sk .text .globl start start: EAX = 0x04 - syscall write xorl %eax, %eax movb $0x4, %al xorl %ebx, %ebx inc %ebx pushl...

linux/x86 execve read shellcode - 92 bytes

Exploit for linux/x86 platform in category shellcode ========================================== linux/x86 execve read shellcode - 92 bytes ========================================== XCHG Research Group Linux/x86 execve read shellcode - 92 bytes .text .globl start start: EAX = 0x04 - syscall write...

linux/x86 execve read shellcode - 92 bytes

linux/x86 execve read shellcode - 92 bytes. Shellcode exploit for linx86 platform XCHG Research Group Linux/x86 execve read shellcode - 92 bytes -- Writed by 0ut0fbound -- - http://outofbound.host.sk - http://xchglabs.host.sk .text .globl start start: EAX = 0x04 - syscall write xorl %eax, %eax mo...

MOKB-09-11-2006

Title: Mac OS X fpathconf syscall denial of service Warning - wet floor! Description: Failure to handle unknown file types by the Mac OS X kernel XNU fpathconf syscall causes a kernel panic, leading to an exploitable local denial of service by non-privileged users. The bug was fixed by FreeBSD on...

CVE-2006-5836

The fpathconf syscall function in bsd/kern/kerndescrip.c in the Darwin kernel XNU 8.8.1 in Apple Mac OS X allows local users to cause a denial of service kernel panic and possibly execute arbitrary code via a file descriptor with an unrecognized file type...

CVE-2006-5836

The fpathconf syscall function in bsd/kern/kerndescrip.c in the Darwin kernel XNU 8.8.1 in Apple Mac OS X allows local users to cause a denial of service kernel panic and possibly execute arbitrary code via a file descriptor with an unrecognized file type...

CVE-2006-5836

The CVE-2006-5836 entry concerns the Mac OS X kernel (Darwin/XNU) fpathconf() syscall in kern_descrip.c, affecting Darwin 8.8.1. The vulnerability allows an authenticated local attacker to trigger a kernel panic (DoS) via a file descriptor associated with an unrecognized file type (e.g., semaphor...

Linux Kernel 2.4.x mremap() bound checking Root Exploit

No description provided by source. / Linux kernel mremap bound checking bug exploit. Bug found by Paul Starzetz paul isec pl Copyright c 2004 iSEC Security Research. All Rights Reserved. THIS PROGRAM IS FOR EDUCATIONAL PURPOSES ONLY IT IS PROVIDED "AS IS" AND WITHOUT ANY WARRANTY. COPYING,...

Debian DSA-1017-1 : kernel-source-2.6.8 - several vulnerabilities

Several local and remote vulnerabilities have been discovered in the Linux kernel that may lead to a denial of service or the execution of arbitrary code. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2004-1017 Multiple overflows exist in the ioedgepor...

Brief analysis of the Linux and FreeBSD syscall with the shellcode-exploit warning-the black bar safety net

Article author: 7all Information source: evil octal information security team www.eviloctal.com） ==www.cciss.cn.== ==the bbs. cciss. cn.== Brief analysis of the Linux and FreeBSD syscall with the shellcode |=---------------= Brief analysis of the Linux and FreeBSD syscall with the...

Solaris 10 - sysinfo() Local Kernel Memory Disclosure (1)

Solaris 10 - sysinfo Local Kernel Memory Disclosure 1 / Sun Microsystems Solaris sysinfo Kernel Memory Disclosure exploit =================================================================== Local exploitation of an integer overflow vulnerability in Sun Microsystems Inc. Solaris allows attackers t...

CentOS 3 : kernel (CESA-2005:293)

Updated kernel packages that fix several security issues in the Red Hat Enterprise Linux 3 kernel are now available. This security advisory has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel handles the basic functions of the operating syste...