Apple Crash Reports Help Hackers to create a jailbreak exploit

Apple Crash Reports Help Hackers to create a jailbreak exploit iPhone "jailbreaking" has been a hot topic since Apple released its smartphone more than two years ago. According to the Latest report posted by BBC that Thousands of iPhone owners have joined forces with a team of hackers to help the...

Family Connections less.php Remote Command Execution

Exploit for php platform in category web applications This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

PT-2011-4885

Name of the Vulnerable Software and Affected Versions Google App Engine Python SDK versions prior to 1.5.4 Description The issue is related to the sandbox environment in the Google App Engine Python SDK, which does not properly prevent os.popen calls. This allows local users to bypass intended...

CVE-2011-3599

The Crypt::DSA aka Crypt-DSA module 1.17 and earlier for Perl, when /dev/random is absent, uses the Data::Random module, which makes it easier for remote attackers to spoof a signature, or determine the signing key of a signed message, via a brute-force attack...

PT-2011-4545

Name of the Vulnerable Software and Affected Versions Crypt::DSA module versions 1.17 and earlier Description The issue allows remote attackers to spoof a signature or determine the signing key of a signed message via a brute-force attack when /dev/random is absent, as the module uses the...

Facebook BugBounty #2 - Persistent Web Vulnerability

Document Title: =============== Facebook BugBounty 2 - Persistent Web Vulnerability References: =========== Download: http://www.vulnerability-lab.com/resources/videos/277.wmv View: http://www.youtube.com/watch?v=RkWDcZNjZpg Advisory: http://www.vulnerability-lab.com/getcontent.php?id=239 Release...

Advanced Image Hosting 2.3 Cross Site Scripting

=-=-=-=-=-=-=-=-=-=-=-=-=-=-In The Name Of Allah The Mercifull-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Tybe: suffering from RemotE CrosS SitE ScripT Vendor: yabsoft.info + Software:AIH +Version : v2.3 author: R3d-D3v!L + TEAM: DEV!L OF SYS ? contact: Xathotmail.co.jp - ? Date: 5.53P.2oll ? T!ME: 04:...

Video Merge split Local Buffer Overflow

Exploit for windows platform in category local exploits !/usr/bin/python import sys print "" print " Name:Video Merge split Local Buffer Overflow " print " Author:Angel Injection " print " Home Page:http://dev-point.com/ http://sec-krb.org/ " print " Note:Iam Angel Injection From the country of...

CVE-2011-3263

zabbixagentd in Zabbix before 1.8.6 and 1.9.x before 1.9.4 allows context-dependent attackers to cause a denial of service CPU consumption by executing the vfs.file.cksum command for a special device, as demonstrated by the /dev/urandom device...

PT-2011-4353

Name of the Vulnerable Software and Affected Versions Zabbix versions prior to 1.8.6 Zabbix versions 1.9.x prior to 1.9.4 Description The issue allows context-dependent attackers to cause a denial of service by consuming CPU resources. This can be achieved by executing the vfs.file.cksum command...

CVE-2011-3263: Undefined Security Weakness

zabbixagentd in Zabbix before 1.8.6 and 1.9.x before 1.9.4 allows context-dependent attackers to cause a denial of service CPU consumption by executing the vfs.file.cksum command for a special device, as demonstrated by the /dev/urandom device...

Media Player Classic v1.2.1008 - ALPlayer 10.1029 (ALPSource.ax) Crash

Exploit for windows platform in category dos / poc ============================================================================ Media Player Classic v1.2.1008 - ALPlayer 10.1029 ALPSource.ax Crash POC ============================================================================...

Debian: Security Advisory (DSA-2244-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Xilisoft Video Converter Platinum 6 DLL Hijacking Exploit (wintab32.dll )

Exploit for windows platform in category local exploits 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

VbsEdit v 5.1.3.0(.vbs) Buffer Overflow Vulnerability

Exploit for windows platform in category local exploits =================================================== VbsEdit v 5.1.3.0.vbs Buffer Overflow Vulnerability =================================================== || || | || o,7 || . o7 || 4||| ow, : / /...

SuSE 11.1 Security Update : aaa_base (SAT Patch Number 3910)

The following bug has been fixed : - The boot.localfs init script wrote a file to /dev/shm during shut-down. Since local users may create symlinks there a malicious user could cause corruption of arbitrary files. CVE-2011-0461 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive...

kernel: CAP_SYS_MODULE bypass via CAP_NET_ADMIN

The devload function in net/core/dev.c in the Linux kernel before 2.6.38 allows local users to bypass an intended CAPSYSMODULE capability requirement and load arbitrary modules by leveraging the CAPNETADMIN capability...

Ubuntu 6.06 LTS / 8.04 LTS / 9.10 / 10.04 LTS / 10.10 : dhcp3 vulnerability (USN-1108-1)

Sebastian Krahmer discovered that the dhclient utility incorrectly filtered crafted responses. An attacker could use this flaw with a malicious DHCP server to execute arbitrary code, resulting in root privilege escalation. Note that Tenable Network Security has extracted the preceding description...

PT-2011-1062 · Suse +2 · Ext4Dev-Kmp-Trace +4

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 2.6.38 Description: The issue is related to the Generic Receive Offload GRO implementation in the Linux kernel. A problem in the napi reuse skb function in net/core/dev.c does not reset the values of certain...

PT-2011-2363

Name of the Vulnerable Software and Affected Versions aaa base versions prior to 11.2-43.48.1 in SUSE openSUSE 11.2 aaa base versions prior to 11.3-8.7.1 in openSUSE 11.3 Description The issue allows local users to overwrite arbitrary files via a symlink attack on /dev/shm/mtab. This is due to a...