Calibre E-Book Reader Local Root Race Condition

!/bin/sh .70-Calibrer Assault Mount by Dan Rosenberg @djrbliss and zx2c4 Yesterday we learned how Calibre's ability to mount anything anywhere resulted in a local root. Today's exploit shows a race condition to subvert recent changes preventing symlinks and checking path prefixes. - djrbliss &...

Calibre E-Book Reader Local Root

!/bin/sh .60-Calibrer Assault Mount by zx2c4 Yesterday we learned how Calibre's usage of execlp allowed us to override PATH and get root, in my ".50-Calibrer Assault Mount" exploit. Today we exploit a more fundumental issue with Calibre's mount helper -- namely, that it allows us to mount a vfat...

Calibre E-Book Reader Local Root

!/bin/sh .50-Calibrer Assault Mount by zx2c4 Calibre uses a suid mount helper, and like nearly all suid mount helpers that have come before it, it's badly broken. Let's go through Calibre's faulty code available at http://pastebin.com/auz9SULi and look at the array of silly things done, only one ...

Calibre E-Book Reader - Local Privilege Escalation (1)

Calibre E-Book Reader - Local Privilege Escalation 1 !/bin/sh .50-Calibrer Assault Mount by zx2c4 Calibre uses a suid mount helper, and like nearly all suid mount helpers that have come before it, it's badly broken. Let's go through Calibre's faulty code available at http://pastebin.com/auz9SULi...

Calibre E-Book Reader Local Root Exploit

Exploit for linux platform in category local exploits Exploit Title: .60-Calibrer Assault Mount: Another Calibre E-Book Reader Local Root Date: Nov 2, 2011 Author: zx2c4 Software Link: http://calibre-ebook.com/ Tested on: Gentoo Platform: Linux Category: Local CVE: pending !/bin/sh .60-Calibrer...

CVE-2010-4990

SQL injection vulnerability in the Front-edit Address Book comaddressbook component for Joomla! allows remote attackers to execute arbitrary SQL commands via the Itemid parameter in a contact action to index.php...

CVE-2010-4982

SQL injection vulnerability in addressbook/contacts.php in My Kazaam Address & Contact Organizer allows remote attackers to execute arbitrary SQL commands via the var1 parameter...

Sql injection

SQL injection vulnerability in the Front-edit Address Book comaddressbook component for Joomla! allows remote attackers to execute arbitrary SQL commands via the Itemid parameter in a contact action to index.php...

CVE-2010-4982

The CVE-2010-4982 entry describes a SQL injection vulnerability in the My Kazaam Address & Contact Organizer. The affected component is address_book/contacts.php, where the var1 parameter is used in a way that allows remote attackers to execute arbitrary SQL commands. The exploitation status is n...

Calibre E-Book Reader Local Root Exploit

Exploit for linux platform in category local exploits !/bin/sh .50-Calibrer Assault Mount by zx2c4 Calibre uses a suid mount helper, and like nearly all suid mount helpers that have come before it, it's badly broken. Let's go through Calibre's faulty code available at http://pastebin.com/auz9SULi...

Announcing Contest Winners for Ghost in the Wires Book

Announcing Contest Winners for Ghost in the Wires Book We ran a competition for the book "Ghost in the Wires by Kevin Mitnick" last week. We'd like to thank the following people for sending in the best of the best of reviews about Kevin Mitnick's new book, "Ghosts in the Wires." All the reviews w...

Announcing Contest Winners for Ghost in the Wires Book

Announcing Contest Winners for Ghost in the Wires Book We ran a competition for the book "Ghost in the Wires by Kevin Mitnick " last week. We'd like to thank the following people for sending in the best of the best of reviews about Kevin Mitnick's new book, "Ghosts in the Wires." All the reviews ...

[Contest] Win "Ghost in the Wires" Book by Kevin Mitnick

Contest Win "Ghost in the Wires " Book by Kevin Mitnick Some call him a saint, some a criminal, others adore him. Industry may loathe him but we here at The Hacker News say, "Get ready, loyal subscribers! " Enter our newest contest and win a copy of Kevin Mitnick's new book titled, "Ghost in the...

[Contest] Win "Ghost in the Wires" Book by Kevin Mitnick

Contest Win "Ghost in the Wires" Book by Kevin Mitnick Some call him a saint, some a criminal, others adore him. Industry may loathe him but we here at The Hacker News say, "Get ready, loyal subscribers!" Enter our newest contest and win a copy of Kevin Mitnick's new book titled, "Ghost in the...

CVE-2010-4923

SQL injection vulnerability in book/detail.php in Virtue Netz Virtue Book Store allows remote attackers to execute arbitrary SQL commands via the bid parameter...

Sql injection

SQL injection vulnerability in book/detail.php in Virtue Netz Virtue Book Store allows remote attackers to execute arbitrary SQL commands via the bid parameter...

CVE-2010-4923

SQL injection vulnerability in book/detail.php in Virtue Netz Virtue Book Store allows remote attackers to execute arbitrary SQL commands via the bid parameter...

CVE-2010-4923

CVE-2010-4923: SQL injection in Virtue Netz Virtue Book Store (book/detail.php) via the bid parameter. Root cause: unsafely constructed SQL using user input. Impact: allows remote command execution with partial impact on confidentiality, integrity, and availability per NVD CVSS 2.0 base metrics (...

Contest Winners Announcement : Wireless Penetration Testing Guide book

Contest Winners Announcement : Wireless Penetration Testing Guide book We ran a competition for the book "Backtrack 5 Wireless Penetration Testing " last week. Today, Vivek Ramachandran, the author of the book and Founder of SecurityTube.net is announcing the winners in the video below. We will b...

[SECURITY] Fedora 16 Update: roundcubemail-0.5.4-1.fc16

RoundCube Webmail is a browser-based multilingual IMAP client with an application-like user interface. It provides full functionality you expect from an e-mail client, including MIME support, address book, folder manipulation, message searching and spell checking. RoundCube Webmail is written in...