Alphanumeric Shellcode Encoder Decoder

Exploit for generator platform in category shellcode ====================================== Alphanumeric Shellcode Encoder Decoder ====================================== / //////////////////////////////////////////////////////////////////////////////////////////////////////////////////////...

Debian DSA-1343-1 : file - integer overflow

Colin Percival discovered an integer overflow in file, a file type classification tool, which may lead to the execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory...

CVE-2007-3532

CVE-2007-3532 affects NVIDIA drivers (nvidia-drivers) prior to 1.0.7185, 1.0.9639, and 100.14.11 when used in Gentoo Linux and possibly other distributions. The vulnerability arises because the default driver setup creates /dev/nvidia* device files with insecure permissions, enabling a local atta...

iDefense Security Advisory 06.07.07: Linux Kernel cpuset tasks Information Disclosure Vulnerability

Linux Kernel cpuset tasks Information Disclosure Vulnerability iDefense Security Advisory 06.07.07 http://labs.idefense.com/intelligence/vulnerabilities/ Jun 07, 2007 I. BACKGROUND Linux is a clone of the UNIX operating system, written from scratch by Linus Torvalds with assistance from a...

CVE-2007-2875: Undefined Security Weakness

Integer underflow in the cpusettasksread function in the Linux kernel before 2.6.20.13, and 2.6.21.x before 2.6.21.4, when the cpuset filesystem is mounted, allows local users to obtain kernel memory contents by using a large offset when reading the /dev/cpuset/tasks file...

CVE-2007-2623

Multiple buffer overflows in RControl.dll in Remote Display Dev kit 1.2.1.0 allow remote attackers to cause a denial of service Internet Explorer 7 crash via 1 a long first argument to the connect function or 2 a long InternalServer property value, possibly involving ntdll.dll...

Buffer overflow

Multiple buffer overflows in RControl.dll in Remote Display Dev kit 1.2.1.0 allow remote attackers to cause a denial of service Internet Explorer 7 crash via 1 a long first argument to the connect function or 2 a long InternalServer property value, possibly involving ntdll.dll...

CVE-2007-2623

Multiple buffer overflows in RControl.dll in Remote Display Dev kit 1.2.1.0 allow remote attackers to cause a denial of service Internet Explorer 7 crash via 1 a long first argument to the connect function or 2 a long InternalServer property value, possibly involving ntdll.dll...

CVE-2007-2623

CVE-2007-2623 describes multiple buffer overflows in RControl.dll of Remote Display Dev kit 1.2.1.0 that allow remote denial of service (IE7 crash) via either (1) a long first argument to the connect function or (2) a long InternalServer property value, potentially involving ntdll.dll. The availa...

CVE-2007-2592

Multiple cross-site scripting XSS vulnerabilities in Nokia Intellisync Mobile Suite 6.4.31.2, 6.6.0.107, and 6.6.2.2, possibly involving Novell Groupwise Mobile Server and Nokia Intellisync Wireless Email Express, allow remote attackers to inject arbitrary web script or HTML via the 1 username...

CVE-2007-2623: Undefined Security Weakness

Multiple buffer overflows in RControl.dll in Remote Display Dev kit 1.2.1.0 allow remote attackers to cause a denial of service Internet Explorer 7 crash via 1 a long first argument to the connect function or 2 a long InternalServer property value, possibly involving ntdll.dll...

Remote Display Dev kit 1.2.1.0 - RControl.dll Denial of Service

Remote Display Dev kit 1.2.1.0 - RControl.dll Denial of Service 2007/05/10 ----------------------------------------------------------------------------- RControl.dll v. 1.2.1.0 Denial of Service Exploit url: http://www.fruit2004.com/ price: only $20 : author: shinnai mail: shinnaiatautisticidotor...

Remote Display Dev kit 1.2.1.0 - 'RControl.dll' Denial of Service

2007/05/10 ----------------------------------------------------------------------------- RControl.dll v. 1.2.1.0 Denial of Service Exploit url: http://www.fruit2004.com/ price: only $20 : author: shinnai mail: shinnaiatautisticidotorg site: http://shinnai.altervista.org Tested on Windows XP...

Remote Display Dev kit 1.2.1.0 RControl.dll Denial of Service Exploit

Exploit for unknown platform in category dos / poc ===================================================================== Remote Display Dev kit 1.2.1.0 RControl.dll Denial of Service Exploit ===================================================================== 2007/05/10...

Foxit Reader 2.0 (PDF) Remote Denial of Service Exploit

Exploit for unknown platform in category dos / poc ======================================================= Foxit Reader 2.0 PDF Remote Denial of Service Exploit ======================================================= / Created Friday, April 20 2007 Moderator of http://igniteds.net Foxit Reader 2....

Microsoft Windows - GDI Privilege Escalation (MS07-017) (2)

/ GDI Local Elevation of Privilege Vulnerability Exploit MS07-017 Coded by Lionel d'Hauenens http://www.labo-asso.com Development: ------------ Dev-C++ 4.9.9.2 Linked with /lib/libgdi32.a References: ----------- http://www.microsoft.com/technet/security/bulletin/MS07-017.mspx...

WarFTP 1.65 (USER) Remote Buffer Overlow Exploit (multiple targets)

Exploit for unknown platform in category remote exploits =================================================================== WarFTP 1.65 USER Remote Buffer Overlow Exploit multiple targets =================================================================== include include include define VULNSERVE...

Plash sandbox protection bypass

It's possible to execute any command via /dev/tty device...

CVE-2007-1400

Plash permits sandboxed processes to open /dev/tty, which allows local users to escape sandbox restrictions and execute arbitrary commands by sending characters to a shell process on the same termimal via the TIOCSTI ioctl...

CVE-2007-1400

Plash allows sandboxed processes to open /dev/tty via TIOCSTI, enabling local users to escape sandbox restrictions and send characters to a shell process on the same terminal to execute arbitrary commands. This CVE (CVE-2007-1400) is documented with a local-privilege/escalation impact and does no...