5164 matches found
The vulnerability of the PHP interpreter allows a remote attacker to trigger a service failure or cause other effects on the system.
The vulnerability of the PHP interpreter in the file module fileinfo for the Fileinfo component lies in the incomplete reading of available data during a pread call. Exploiting this vulnerability allows an attacker to cause service failures by accessing uninitialized memory, or to otherwise affec...
Exim 4 (Debian 8 Ubuntu 16.04) - Spool Privilege Escalation
Exim 4 Debian 8 Ubuntu 16.04 - Spool Privilege Escalation / -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Hello List, This is just a minor issue in Exim, no replies so far, so publication should be OK. Introduction: ============ Exim4 in some variants is started as root but switches to uid/gid...
Exim 4 (Debian 8 / Ubuntu 16.04) - Spool Privilege Escalation
Exploit for linux platform in category local exploits / -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Hello List, This is just a minor issue in Exim, no replies so far, so publication should be OK. Introduction: ============ Exim4 in some variants is started as root but switches to uid/gid...
CVE-2016-5027
dwarfform.c in libdwarf 20160115 allows remote attackers to cause a denial of service crash via a crafted elf file...
libdwarf 'WRITE_UNALIGNED()' Function Denial of Service Vulnerability
libdwarf is a set of tools for reading and writing DWARF2 debugging information. A denial of service vulnerability exists in the 'WRITEUNALIGNED' function of libdwarf. The vulnerability can be exploited to cause a denial of service free copy, heap buffer overflow, and write out of bounds with a...
libdwarf dwarf_elf_access.c File Denial of Service Vulnerability
libdwarf is a set of tools for reading and writing DWARF2 debugging information. A security vulnerability exists in the libdwarfelfaccess.c file of libdwarf. An attacker can exploit this vulnerability to cause a denial of service OOB write...
CentOS 6 : file (CESA-2016:0760)
An update for file is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the C...
file, python security update
CentOS Errata and Security Advisory CESA-2016:0760 An update for file is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...
file security, bug fix, and enhancement update
5.04-30 - fix CVE-2014-3538 unrestricted regular expression matching 5.04-29 - fix 1284826 - try to read ELF header to detect corrupted one 5.04-28 - fix 1263987 - fix bugs found by coverity in the patch 5.04-27 - fix CVE-2014-3587 incomplete fix for CVE-2012-1571 - fix CVE-2014-3710 out-of-bound...
RHEL 6 : file (RHSA-2016:0760)
The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2016:0760 advisory. The file command is used to identify a particular file according to the type of data the file contains. It can identify many different file...
RedHat Update for file RHSA-2016:0760-01
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
RedHat Update for kernel RHSA-2015:1623-01
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Allwinner 3.4 Legacy Kernel Local Privilege Escalation
This module attempts to exploit a debug backdoor privilege escalation in Allwinner SoC based devices. Vulnerable Allwinner SoC chips: H3, A83T or H8 which rely on Kernel 3.4. Vulnerable OS: all OS images available for Orange Pis, any for FriendlyARM's NanoPi M1, SinoVoip's M2+ and M3, Cuebietech'...
Through the ELF dynamic loading of the structure ROP chain Return-to-dl-resolve-the vulnerability warning-the black bar safety net
Play CTF game stick have know that PWN type of vulnerability topic will generally provide an executable program, and provide program run dynamically link the libc library. By the libc. so you can get the library function of the offset address, combined with the leak GOT the table in the libc...
The vulnerability of the Android operating system, which allows a hacker to increase their privileges
The vulnerability of the getbuildid function in the elfutils.cpp file of the Debuggerd application on the Android operating system is related to deficiencies in access control for certain functions. Exploiting this vulnerability could allow a local attacker to enhance their privileges through a...
CTF-Tools - Some setup scripts for security research tools
This is a collection of setup scripts to create an install of various security research tools. Of course, this isn't a hard problem, but it's really nice to have them in one place that's easily deployable to new machines and so forth. Installers for the following tools are included: Category | To...
System Scanner: Binmap
Binmap is a system scanner; it takes a system or system image and walks through all files, looking for programs and libraries and collecting various information such as dependencies, symbols etc. It supports ELF and PE formats. binmap builds a database of hashes and informations for systems. One ...
Analyzing Linux Malware Sandbox: Limon
Limon is a sandbox developed as a research project written in python, which automatically collects, analyzes, and reports on the run time indicators of Linux malware. It allows one to inspect the Linux malware before execution, during execution, and after execution post-mortem analysis by...
