338 matches found
Unfixed XSS vulnerability at www.themexp.org
Security researcher kusomiso.com, has submitted on 05/10/2007 a cross-site-scripting XSS vulnerability affecting www.themexp.org, which at the time of submission ranked 7790 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/10/2007. It is...
Design/Logic Flaw
The Hypervisor in Microsoft Xbox 360 kernel 4532 and 4548 does not properly verify the parameters passed to the syscall dispatcher, which allows attackers with physical access to bypass code-signing requirements and execute arbitrary code...
CVE-2007-1221
The Hypervisor in Microsoft Xbox 360 kernel 4532 and 4548 allows attackers with physical access to force execution of the hypervisor syscall with a certain register set, which bypasses intended code protection...
Code injection
The Hypervisor in Microsoft Xbox 360 kernel 4532 and 4548 allows attackers with physical access to force execution of the hypervisor syscall with a certain register set, which bypasses intended code protection...
CVE-2007-1220
The Hypervisor in Microsoft Xbox 360 kernel 4532 and 4548 does not properly verify the parameters passed to the syscall dispatcher, which allows attackers with physical access to bypass code-signing requirements and execute arbitrary code...
CVE-2007-1220
The Hypervisor in Microsoft Xbox 360 kernel 4532 and 4548 does not properly verify the parameters passed to the syscall dispatcher, which allows attackers with physical access to bypass code-signing requirements and execute arbitrary code...
CVE-2007-1221
The Hypervisor in Microsoft Xbox 360 kernel 4532 and 4548 allows attackers with physical access to force execution of the hypervisor syscall with a certain register set, which bypasses intended code protection...
CVE-2007-1220
The CVE-2007-1220 entry describes a vulnerability in the Hypervisor of the Microsoft Xbox 360 kernel (versions 4532 and 4548) where the syscall dispatcher parameters are not properly verified. This allows attackers with physical access to bypass code-signing requirements and execute arbitrary cod...
CVE-2007-1220
The Hypervisor in Microsoft Xbox 360 kernel 4532 and 4548 does not properly verify the parameters passed to the syscall dispatcher, which allows attackers with physical access to bypass code-signing requirements and execute arbitrary code...
CVE-2007-1221
The Hypervisor in Microsoft Xbox 360 kernel 4532 and 4548 allows attackers with physical access to force execution of the hypervisor syscall with a certain register set, which bypasses intended code protection...
CVE-2007-1221
CVE-2007-1221 affects the Xbox 360 hypervisor in kernel versions 4532 and 4548. The issue allows an attacker with physical access to force execution of the hypervisor syscall using a specific register set, bypassing the intended code protection. The vulnerability is local in nature (attack vector...
Re: Xbox 360 Hypervisor Privilege Escalation Vulnerability
The "Example Code" contains a minor typo. Here is the correction: 1b: // -- not 1: lwz r3, 0x1018r4...
Microsoft XBox privilege escalation and code execution
It's possible to execute unsigned code in hypervisor mode because of syscall handling problem. It opens possibility for any actions, including changing of operation system...
Xbox 360 Hypervisor Privilege Escalation Vulnerability
Security Advisory Xbox 360 Hypervisor Privilege Escalation Vulnerability Release Date: February 28, 2007 Author: Anonymous Hacker [email protected] Timeline: Oct 31, 2006 - release of 4532 kernel, which is the first version containing the bug Nov 16, 2006 - proof of concept completed; unsigned...
Xbox Console Detection
Binary data 3926.prm...
[Full-Disclosure] XBOX EvolutionX ftp 'cd' command and telnet 'dir' buffer overflow
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 XBOX EvolutionX ftp 'cd' command and telnet 'dir' buffer overflow Vendor: - ------- http://www.evolutionx.info Vulnerable version: - ------------------- Test on EvolutionX 3921 3935, maybe all version of EvolutionX Vunlnerablity: - --------------...
When full disclosure is the only way...
XBOX Security -= Security Advisory =- Advisory: XBOX Dashboard local vulnerability Release Date: 2003/07/04 Last Modified: 2003/07/04 Author: Stefan Esser [email protected] Application: Microsoft XBOX Dashboard up to today Severity: A vulnerability within the XBOX Dashboard allows to totally...