2886 matches found
NetBSD <= 1.4,OpenBSD <= 2.5,Solaris <= 7.0 profil(2) Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/570/info Some BSD's use a profil2 system call that dates back to version 6 unix. This system call arranges for the kernel to sample the PC and increment an element of an array on every profile clock tick. The security iss...
Apple Mac OS X 10.x FPathConf System Call Local Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/20982/info Apple Mac OS X is prone to a local denial-of-service vulnerability because the kernel fails to properly handle the execution of a system call. Exploiting this issue allows local, unprivileged users to crash...
MIPS Little Endian Shellcode
No description provided by source. Disassembled MIPS Little Endian Shellcode Shellcode was designed for ACSD exploit on the ASUS RT-AC66U SOHO router. CVE: CVE-2013-4659 Written by Jacob Holcomb, Security Analyst @ Independent Security Evaluators Blog: http://infosec42.blogspot.com Company Websit...
39 bytes sys_setuid(0) & sys_setgid(0) & execve ("/bin/sh") x86 linux shellcode
No description provided by source. / Name : 39 bytes syssetuid0 & syssetgid0 & execve /bin/sh x86 linux shellcode Date : Tue Jun 1 21:29:10 2010 Author : gunslinger yudha.gunslingeratgmail.com Web : http://devilzc0de.org blog : http://gunslingerc0de.wordpress.com tested on : linux debian / includ...
PHP <= 3.0.13 'safe_mode' Failure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/911/info PHP Version 3.0 is an HTML-embedded scripting language. Much of its syntax is borrowed from C, Java and Perl with a couple of unique PHP-specific features thrown in. The goal of the language is to allow web...
WIDZ 1.0/1.5 - Remote Root Compromise Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8479/info WIDZ does not validate untrusted input when generating alerts. Alerts pass the essid of an unknown wireless access point through a system call. By setting the essid of an unauthorized access point to include...
Mozilla FireFox <= 1.0.1 - Remote GIF Heap Overflow Exploit
No description provided by source. / Mozilla FireFox = 1.0.1 Remote GIF Heap Overflow Exploit by Darkeagle of uKt Researcherz darkeagle at linkin-park dot cc greetz to all my friends 8 and... Happy Birthday uKt research team 8 1 year 8 http://unl0ck.org !!!-script kiddie edition-!!!...
Linux group_info refcounter - Overflow Memory Corruption
No description provided by source. / DoS poc for CVE-2014-2851 Linux groupinfo refcounter overflow memory corruption https://lkml.org/lkml/2014/4/10/736 @Tohmaxx - http://thomaspollet.blogspot.be If the app doesn't crash your system, try a different count argv1 Execution takes a while because 2^3...
Corel Linux OS 1.0 Dosemu Distribution Configuration Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1030/info A vulnerability exists in the configuration of Dosemu, the DOS emulator, as shipped with Corel Linux 1.0. Dosemu documentation cautions that the system.com binary should not be made available to users, as it...
Linux kernel 2.2.x/2.4.x I/O System Call File Existence Weakness
No description provided by source. source: http://www.securityfocus.com/bid/7279/info A weakness has been discovered on various systems that may result in an attacker gaining information pertaining to the existence of inaccessible files. The problem lies in the return times when attempting to...
Sun Solaris 2.6/7.0/8/9 vfs_getvfssw function Local Privilege Escalation Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/9962/info It has been reported that Sun Solaris may be prone to a local privilege escalation vulnerability that may allow an attacker to gain root access to a vulnerable system. The issue exists due to insufficient...
IRIX 6.2/6.3/6.4 xfs truncate() Privilege Check Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1540/info The truncate system call on a number of versions of the IRIX operating system with the xfs file system does not properly check permissions before truncating a file, making it possible for unprivileged users to...
SGI IRIX <= 6.4 netprint Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/395/info A vulnerability exists in the netprint program, shipping with Irix 6.x and 5.x by Silicon Graphics. The netprint program calls the disable command via a system call, without specifying an explicit path. Therefore...
Be BeOS 4.5/5.0 Invalid System Call Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1098/info A direct system call containing invalid parameters through int 0x25 will cause the BeOS to crash. Reboot of the machine is required in order to regain normal functionality...
David Bagley xlock 4.16 User Supplied Format String Vulnerability (2)
No description provided by source. source: http://www.securityfocus.com/bid/1585/info A vulnerability exists in versions of the xlockmore program, originally written by David Bagley. It is believed to affect all versions of xlock derived from xlockmore. This includes the xlock shipped with a numb...
DNSTools Software DNSTools 1.0.8/1.10 Input Validation Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1028/info A vulnerability exists in the 1.0.8 release of DNSTools labeled on some areas of their site as 1.08, from DNSTools Software. By manipulating the contents of certain post variables, arbitrary code may be executed...
sco/x86 execve("/bin/sh", ..., NULL); 43 bytes
No description provided by source. / minervini at neuralnoise dot com c 2005 SCOSV scosysv 3.2 5.0.7 i386, execve/bin/sh, ..., NULL; / include sys/types.h include stdio.h char scode = \x31\xc9 // xor %ecx,%ecx \x89\xe3 // mov %esp,%ebx \x68\xd0\x8c\x97\xff // push $0xff978cd0 \x68\xd0\x9d\x96\x91...
Linux/ARM - polymorphic chmod("/etc/shadow", 0777) - 84 Bytes
No description provided by source. / | Title: Linux/ARM - polymorphic chmod/etc/shadow, 0777 - 84 Bytes | Type: Shellcode | Author: Florian Gaultier [email protected] | Platform: Linux ARM ARM926EJ-S rev 5 v51 | + http://www.shell-storm.org / include stdio.h char shellcode =...
Systrace Multiple System Call Wrappers Concurrency Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/25258/info Systrace is prone to multiple concurrency vulnerabilities due to its implementation of system call wrappers. This problem can result in a race condition between a user thread and the kernel. Attackers can explo...
Generic Software Wrappers Toolkit 1.6.3 (GSWTK) Race Condition Local Privilege Escalation
No description provided by source. source: http://www.securityfocus.com/bid/25251/info GSWKT Generic Software Wrappers Toolkit is prone to multiple concurrency vulnerabilities because of its implementation of system call wrappers. This problem can result in a race condition between a user thread...