Mozilla Firefox Multiple Vulnerabilities (Dec 2008) - Windows

Mozilla Firefox browser is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mozilla Thunderbird Multiple Vulnerabilities (Dec 2008) - Linux

Mozilla Thunderbird is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Linux Kernel i915驱动drivers/char/drm/i915_dma.c内存破坏漏洞

BUGTRAQ ID: 31792 CVECAN ID: CVE-2008-3831 Linux Kernel是开放源码操作系统Linux所使用的内核。 在使用Intel G33系列芯片组的机器上，非root用户可以通过ioctl调用只有root用户才可以使用的i915内核驱动的i915setstatuspage函数。本地攻击者可以通过向驱动发送特制的IOCTL清零并重新映射内存位置。 Linux kernel 2.6.x Debian ------ Debian已经为此发布了一个安全公告（DSA-1655-1）以及相应补丁: DSA-1655-1：New Linux 2.6.24...

Any combination of instructions to achieve free kill-vulnerability warning-the black bar safety net

Note:writing flower instructions,refer to the following pairs of instructions,can be arbitrary free combination. Free to killeffect. push ebp pop ebp push eax pop eax push esp pop esp push 0 push 0 push 1 0 -------which numbers can be arbitrary,note the following correspondence push -10...

forumpayperpost-sql.txt

-+================================================================================+- -+ Forum Pay Per Post Exchange = 2.0 SQL Injection Vulnerabilitys +- -+================================================================================+- By : Stack...

Mozilla Firefox字符编码跨站脚本漏洞

BUGTRAQ ID: 29303 CVECAN ID: CVE-2008-0416 Firefox是一款流行的开源WEB浏览器。 Firefox及其衍生产品中的HTML解析器没有遵循HTML规范，将退格字符处理为空格，这可能在遵循了上述规范过滤输入的网站上导致跨站脚本攻击。此外Firefox没有正确的解析ShiftJIS编码的0x80控制字符，这可能允许攻击者绕过站点输入过滤执行跨站脚本攻击。 Mozilla Firefox 2.0.0.12 厂商补丁： Debian ------ Debian已经为此发布了一个安全公告（DSA-1489-1）以及相应补丁: DSA-1489-1：Ne...

[SECURITY] [DSA 1538-1] New alsaplayer packages fix arbitrary code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-1538-1 [email protected] http://www.debian.org/security/ Devin Carraway April 04, 2008 http://www.debian.org/security/faq -...

DESlock+ <= 3.2.6 DLMFENC.sys Local Kernel ring0 link list zero PoC

Exploit for unknown platform in category dos / poc =================================================================== DESlock+ DESlock+ include include define DLMFENCIOCTL 0x0FA4204C define DLMFENCFLAG 0xDEADBEEF define ZEROMEM 0xDEADBEEF define ARGSIZEa a-sizeof int2/sizeof void struct ioctlreq...

[SECURITY] [DSA 1448-1] New eggdrop packages fix arbitrary code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-1448-1 [email protected] http://www.debian.org/security/ Steve Kemp January 05, 2008 http://www.debian.org/security/faq -...

MOG-WebShop (index.php group) Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl Indonesian Newhack Security Advisory ------------------------------------ MOG-WebShop = ? - Multiple Remote SQL Injection Vulnerabilities Waktu : Dec 15 2007 11:45AM Software : MOG-WebShop | http://mog-site.com/index.php?act=product&po=detil&id=3...

Apple Mac OSX xnu 1228.0 - 'super_blob' Local kernel Denial of Service (PoC)

/ xnu-superblob-dos.c Copyright c 2007 by Apple MACOS X xnu include include include include include include include define MAXPATHLEN 128 / change this value if no panic / define CSLOTSDIFF 0x69696969 define CSSLOTCODEDIRECTORY 0x0 define CSMAGICCODEDIRECTORY 0xfade0c02 / CodeDirectory blob /...

mercur-v1.txt

!/usr/bin/perl mercur-v1.pl Mercur v5.00.14 win32 remote exploit by mu-b - Dec 2006 - Tested on: Mercur v5.00.14 win32 use Getopt::Std; getopts't:n:', %arg; use Socket; use MIME::Base64; my $target; if defined$arg't' $target = $arg't' if !defined$target my $imapdport = 143; my $senddelay = 1; if...

[SECURITY] Fedora Core 6 Update: xterm-223-1.fc6

The xterm program is a terminal emulator for the X Window System. It provides DEC VT102 and Tektronix 4014 compatible terminals for programs that can't use the window system directly...

[SECURITY] Fedora Core 5 Update: xterm-223-1.fc5

The xterm program is a terminal emulator for the X Window System. It provides DEC VT102 and Tektronix 4014 compatible terminals for programs that can't use the window system directly...

Solaris 8 (x86) : 116833-04

Sun StorEdge EBS 7.2x86 Product Patch SU3. Date this patch was last updated by Sun : Dec/25/06 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...

Solaris 7 (i386) : 106647-03

The remote host is missing Sun Security Patch number 106647-03 SNC 3.2: rpc.pcnfsd has security problem, also hangs and dumps core. Date this patch was last updated by Sun : Wed Dec 08 17:00:00 MST 1999 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999...

Solaris 7 (sparc) : 116832-04

Sun StorEdge EBS 7.2: 64-bit Product Patch SU3. Date this patch was last updated by Sun : Dec/25/06 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...

Solaris 8 (x86) : 116960-21

SunOS 5.8x86: nfs and rpcmod patch. Date this patch was last updated by Sun : Dec/04/07 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Solaris 8 (sparc) : 116959-21

SunOS 5.8: nfs and rpcmod patch. Date this patch was last updated by Sun : Dec/04/07 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

eudora_imap.pm.txt

This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual GPLv2 and Artistic. The latest version of the...