22 matches found
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003081)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003081 advisory. The replacemapfdwithmapptr function in kernel/bpf/verifier.c in the Linux kernel before 4.5.5 does not properly maintain an fd data structure, which allows local use...
EUVD-2018-21141
Malware in sbrugna...
EUVD-2025-24489
Malicious code in bioql PyPI...
Design/Logic Flaw
Vtiger CRM 7.1.0 before Hotfix2 allows uploading files with the extension "php3" in the logo upload field, if the uploaded file is in PNG format and has a size of 150x40. One can put PHP code into the image; PHP code can be executed using "" tags, as demonstrated by a CompanyDetailsSave action...
CVE-2019-5009
Vtiger CRM 7.1.0 before Hotfix2 contains a file-upload vulnerability in the logo field: an uploaded PNG image of 150x40 with an extension allowed as php3 can carry PHP code, bypassing the extension filter and enabling code execution via the image (e.g., using PHP tags). Affected files/documented ...
CVE-2019-5009
Vtiger CRM 7.1.0 before Hotfix2 allows uploading files with the extension "php3" in the logo upload field, if the uploaded file is in PNG format and has a size of 150x40. One can put PHP code into the image; PHP code can be executed using "" tags, as demonstrated by a CompanyDetailsSave action...
CVE-2018-9547
In unflatten of GraphicBuffer.cpp, there is a possible bad fd close due to improper input validation. This could lead to local escalation of privilege in the system server with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions:...
Input validation
In unflatten of GraphicBuffer.cpp, there is a possible bad fd close due to improper input validation. This could lead to local escalation of privilege in the system server with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions:...
CVE-2018-6261
NVIDIA GeForce Experience prior to 3.15 contains a vulnerability when GameStream is enabled which sets incorrect permissions on a file, which may to code execution, denial of service, or escalation of privileges by users with system access...
USN-3624-1 patch vulnerabilities
It was discovered that Patch incorrectly handled certain files. An attacker could possibly use this to cause a denial of service. CVE-2016-10713 It was discovered that Patch incorrectly handled certain input validation. An attacker could possibly use this to execute arbitrary code. CVE-2018-10001...
PHP Support Tickets 1.9 Cross Site Scripting
Google dork: "PHP Support Tickets v1.9" inurl:index.php?action= "PHP Support Tickets v1.9" by "Triangle Solutions Ltd" allows XSS attack at index.php and some implementations also has a bad uploaded files validation allowing to upload a js with a jpg extension that could be using for bypassing XS...
eXPert PDF Editor 7 Professional Denial Of Service
!/usr/bin/perl sub logo print STDERR Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail : submitat1337day.com 1 0 0 1 1 0 I'm KedAns-Dz member from Inj3ct0r Team 1 1 0...
eXPert PDF Editor 7 Professional Heap PoC
Exploit for windows platform in category dos / poc !/usr/bin/perl sub logo print STDERR Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail : submitat1337day.com 1 0 0 1 1 0 I'm KedAns-Dz member from Inj3ct0r Team 1 1 0...
Windows Media Player 11 (.ogg) PoC Exploit
Exploit for windows platform in category dos / poc !/usr/bin/perl sub logo print STDERR Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail : submitat1337day.com 1 0 0 1 1 0 I'm KedAns-Dz member from Inj3ct0r Team 1 1 0...
Media Player Classic v6.4.9.1 (.au) PoC Exploit
Exploit for windows platform in category dos / poc !/usr/bin/perl --------- Media Player Classic v6.4.9.1 .au Proof Of Concept Exploit Author : KedAns-Dz special thanks to : josalijoe exploit-id.com , and All exploit-id Team --------- Tested in Windows XP sp3 France Creating The Bad File .AU And...
Winamp <=5.6.1 (.au) Denial of Service Exploit
Exploit for windows platform in category dos / poc !/usr/bin/perl --------- Winamp special thanks to : josalijoe exploit-id.com , and All exploit-id Team --------- Tested in Windows XP sp3 Fr Creating The Bad File .AU And Opening ... The Winamp 5.6.1 is Run With Process igfxsrvc.exe and...
Xilisoft Video Converter Ultimate (.au) PoC Exploit
Exploit for windows platform in category dos / poc !/usr/bin/perl --------- Xilisoft Video Converter Ultimate .au Proof Of Concept Exploit Author : KedAns-Dz special thanks to : josalijoe exploit-id.com , and All exploit-id Team --------- Tested in Windows XP sp3 France Creating The Bad File .AU...
Winamp 5.6.1 Denial Of Service
!/usr/bin/perl --------- Winamp special thanks to : josalijoe exploit-id.com , and All exploit-id Team --------- Tested in Windows XP sp3 Fr Creating The Bad File .AU And Opening ... The Winamp 5.6.1 is Run With Process igfxsrvc.exe and Overflow/Blocked !! my $AU =...
Media Player Classic 6.4.9.1 Denial Of Service
!/usr/bin/perl --------- Media Player Classic v6.4.9.1 .au Proof Of Concept Exploit Author : KedAns-Dz special thanks to : josalijoe exploit-id.com , and All exploit-id Team --------- Tested in Windows XP sp3 France Creating The Bad File .AU And Opening ... Stack Fram : quartz.dll ! 7486e82c ! Po...
security flaw
Linux kernel 2.6.x, when using both NFS and EXT3, allows remote attackers to cause a denial of service file system panic via a crafted UDP packet with a V2 lookup procedure that specifies a bad file handle inode number, which triggers an error and causes an exported directory to be remounted...