2925 matches found
CVE-2016-9152
Cross-site scripting XSS vulnerability in ecrire/exec/plonger.php in SPIP 3.1.3 allows remote attackers to inject arbitrary web script or HTML via the rac parameter...
EasyPHP Devserver 16.1.1 - Cross-Site Request Forgery Remote Command Execution
EasyPHP Devserver 16.1.1 - Cross-Site Request Forgery Remote Command Execution + Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/EASYPHP-DEV-SERVER-REMOTE-CMD-EXECUTION.txt + ISR: ApparitionSec Vendor: ===============...
Kernel: powerpc: tm: crash via exec system call on PPC
A vulnerability in the handling of Transactional Memory on powerpc systems was found. An unprivileged local user can crash the kernel by starting a transaction, suspending it, and then calling any of the exec class system calls...
The vulnerability of the Linux operating system allows a hacker to elevate their privileges to the level of the root user.
The vulnerability of the ptrace component in the Linux operating system is related to errors in the code. Exploiting this vulnerability allows a local attacker to elevate their privileges to the level of the root user by combining system calls for exec and ptrace...
Linux Kernel 2.6.22 3.9 (x86x64) - Dirty COW procselfmem Race Condition Privilege Escalation (SUID Method)
Linux Kernel 2.6.22 3.9 x86x64 - Dirty COW procselfmem Race Condition Privilege Escalation SUID Method / EDB-Note: After getting a shell, doing "echo 0 /proc/sys/vm/dirtywritebackcentisecs" may make the system more stable. uncomment correct payload first x86 or x64! $ gcc cowroot.c -o cowroot...
Android Webview remote code execution getClassLoader-vulnerability warning-the black bar safety net
It is well known in the Android 4.4 system on Google has been the default system Webkit kernel is replaced with the own open-source project chromium,and in Issue 2 1 3 6 9 3 0 0 5（https://codereview.chromium.org/213693005）shielding the webview object. getClass, android in 4. 4. 4 version complete...
USN-3070-3 linux-snapdragon vulnerabilities
A missing permission check when settings ACLs was discovered in nfsd. A local user could exploit this flaw to gain access to any file by setting an ACL. CVE-2016-1237 Kangjie Lu discovered an information leak in the Reliable Datagram Sockets RDS implementation in the Linux kernel. A local attacke...
FreePBX 13.0.35 remote code execution
A vulnerability overview 1. Vulnerability description FreePBX is called the Asterisk Management Portal, IP telephony tools Asterisk standardized implementation that provides a Web configuration interface and other workers FreePBX in functions.inc.php file exists for the parameters without...
FreePBX 'functions.inc.php' file remote code execution vulnerability
FreePBX is an Asterisk Dynamic IPPBX package developed using Linux, Apache, MySQL and PHP technologies. The functions.inc.php file in FreePBX has unfiltered parameters that are spliced directly into exec, which can be exploited to cause remote command execution...
USN-3070-1 linux vulnerabilities
A missing permission check when settings ACLs was discovered in nfsd. A local user could exploit this flaw to gain access to any file by setting an ACL. CVE-2016-1237 Kangjie Lu discovered an information leak in the Reliable Datagram Sockets RDS implementation in the Linux kernel. A local attacke...
Foxit Reader ConvertToPDF TIFF Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the ConvertToPDF...
Linux kernel powerpc system denial of service vulnerability
The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel's powerpc system. A local attacker can exploit the vulnerability by starting and stopping a transaction and then calling an...
DEBIAN-CVE-2016-5828
The startthread function in arch/powerpc/kernel/process.c in the Linux kernel through 4.6.3 on powerpc platforms mishandles transactional state, which allows local users to cause a denial of service invalid process state or TM Bad Thing exception, and system crash or possibly have unspecified oth...
Linux x86 /bin/sh Shellcode + ASLR Bruteforce
Linux x86 /bin/sh Shellcode + ASLR Bruteforce. Shellcode exploit for linx86 platform /bin/sh shellcode Ubuntu 14.0.4 32 bit + ASLR Bruteforce shellcodeandaslrbruteforce.c Tested on : Ubuntu 14.04 32 bits Author : Pawan Lal [email protected] vim shellcodeandaslrbruteforce.c include include inclu...
UBUNTU-CVE-2016-5828
The startthread function in arch/powerpc/kernel/process.c in the Linux kernel through 4.6.3 on powerpc platforms mishandles transactional state, which allows local users to cause a denial of service invalid process state or TM Bad Thing exception, and system crash or possibly have unspecified oth...
Internet Bug Bounty: _php_mb_regex_ereg_replace_exec - double free
phpmbregexeregreplaceexec is prone to double free that can be turned into a code execution. Details about the bug: https://bugs.php.net/bug.php?id=72402 already fixed...
Food Battle: The Game - Base64 encoded String, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Food Battle: The Game published at the 'play' market has multiple vulnerabilities...
Ah Shirts - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Ah Shirts published at the 'play' market has multiple vulnerabilities...
Photo Effects - Base64 encoded String, Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Photo Effects published at the 'play' market has multiple vulnerabilities...
CVE-2016-0124
Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Microsoft Edge Memory Corruption Vulnerability," a different vulnerability than CVE-2016-0116, CVE-2016-0123, CVE-2016-0129, and CVE-2016-0130...