Calibre E-Book Reader Local Root Race Condition

!/bin/sh .70-Calibrer Assault Mount by Dan Rosenberg @djrbliss and zx2c4 Yesterday we learned how Calibre's ability to mount anything anywhere resulted in a local root. Today's exploit shows a race condition to subvert recent changes preventing symlinks and checking path prefixes. - djrbliss &...

Calibre E-Book Reader Local Root

!/bin/sh .50-Calibrer Assault Mount by zx2c4 Calibre uses a suid mount helper, and like nearly all suid mount helpers that have come before it, it's badly broken. Let's go through Calibre's faulty code available at http://pastebin.com/auz9SULi and look at the array of silly things done, only one ...

Calibre E-Book Reader - Local Privilege Escalation (1)

Calibre E-Book Reader - Local Privilege Escalation 1 !/bin/sh .50-Calibrer Assault Mount by zx2c4 Calibre uses a suid mount helper, and like nearly all suid mount helpers that have come before it, it's badly broken. Let's go through Calibre's faulty code available at http://pastebin.com/auz9SULi...

Calibre E-Book Reader Local Root Exploit

Exploit for linux platform in category local exploits Exploit Title: .60-Calibrer Assault Mount: Another Calibre E-Book Reader Local Root Date: Nov 2, 2011 Author: zx2c4 Software Link: http://calibre-ebook.com/ Tested on: Gentoo Platform: Linux Category: Local CVE: pending !/bin/sh .60-Calibrer...

Calibre E-Book Reader Local Root Exploit

Exploit for linux platform in category local exploits !/bin/sh .50-Calibrer Assault Mount by zx2c4 Calibre uses a suid mount helper, and like nearly all suid mount helpers that have come before it, it's badly broken. Let's go through Calibre's faulty code available at http://pastebin.com/auz9SULi...

Calibre 0.7.34 Cross Site Scripting/ Directory Traversal

waraxe-2010-SA077 - Multiple Vulnerabilities in Calibre 0.7.34 =============================================================================== Author: Janek Vind "waraxe" Date: 20. December 2010 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-77.html Affected Software: Calibre is a fr...

E-Book Store SQL Injection

Exploit Title: E-Book Store SQL Injection Vulnerability Date: 14.06.2010 Author: Valentin Category: webapps/0day Version: unknown Tested on: CVE : Code : :::::::::::::::::::::::::::::::::::::: 0x1 :::::::::::::::::::::::::::::::::::::: General Information Advisory/Exploit Title = E-Book Store SQL...

FlipViewer FViewerLoading - ActiveX Control Buffer Overflow (Metasploit)

$Id: ebookflipviewerfviewerloading.rb 9525 2010-06-15 07:18:08Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

E-Book Store - SQL Injection

:::::::::::::::::::::::::::::::::::::: 0x1 :::::::::::::::::::::::::::::::::::::: General Information Advisory/Exploit Title = E-Book Store SQL Injection Vulnerability Author = Valentin Hoebel Contact = [email protected] :::::::::::::::::::::::::::::::::::::: 0x2...

E-Book Store - SQL Injection

E-Book Store - SQL Injection :::::::::::::::::::::::::::::::::::::: 0x1 :::::::::::::::::::::::::::::::::::::: General Information Advisory/Exploit Title = E-Book Store SQL Injection Vulnerability Author = Valentin Hoebel Contact = [email protected] :::::::::::::::::::::::::::::::::::::: 0x2...

E-Book Store SQL Injection Vulnerability

Exploit for php platform in category web applications ======================================== E-Book Store SQL Injection Vulnerability ======================================== :::::::::::::::::::::::::::::::::::::: 0x1 :::::::::::::::::::::::::::::::::::::: General Information Advisory/Exploit...

E-Book Store File Disclosure

======================================================================= E-book Store File Disclosure Vulnerabilities ======================================================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, ...

E-book Store - Multiple Vulnerabilities

E-book Store - Multiple Vulnerabilities ======================================================================================== | Title : E-book Store Mullti Vulnerability | Author : indoushka | email : [email protected] | Home : www.iqs3cur1ty.com | Web Site : http://dl.p30vel.ir/ | Tested...

E-book Store - Multiple Vulnerabilities

======================================================================================== | Title : E-book Store Mullti Vulnerability | Author : indoushka | email : [email protected] | Home : www.iqs3cur1ty.com | Web Site : http://dl.p30vel.ir/ | Tested on: windows SP2 Français V.Pnx2 2.0 +...

E-book Store (Remote File Upload) Vulnerabilities

Exploit for php platform in category web applications...

E-book Store (File Disclosure) Vulnerabilities

Exploit for php platform in category web applications ============================================== E-book Store File Disclosure Vulnerabilities ============================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, ...

E-Book Store Backup Disclosure

======================================================================================== | Title : E-book Store Mullti Vulnerability | Author : indoushka | email : [email protected] | Home : www.iqs3cur1ty.com | Web Site : http://dl.p30vel.ir/scripts/ebookstore.zip | Tested on: windows SP2...

E-book Store Mullti Vulnerability

E-book Store Mullti Vulnerability. Webapps exploit for php platform ======================================================================================== | Title : E-book Store Mullti Vulnerability | Author : indoushka | email : [email protected] | Home : www.iqs3cur1ty.com | Web Site : |...

E-book Store Mullti Vulnerability

Exploit for php platform in category web applications ================================= E-book Store Mullti Vulnerability ================================= ======================================================================================== | Title : E-book Store Mullti Vulnerability | Author...

FlipViewer FViewerLoading ActiveX Control Buffer Overflow

This module exploits a stack buffer overflow in E-BOOK Systems FlipViewer 4.0. The vulnerability is caused due to a boundary error in the FViewerLoading FlipViewerX.dll ActiveX control when handling the "LoadOpf" method. This module requires Metasploit: https://metasploit.com/download Current...