PHP-Fusion Mod avatar_studio - Local File Inclusion

Tested on: Spanish version By modifying "avatarstudio" parameter at POST data at avatarstudio.php you can retrieve all images at that dir. Also using "avatarselect" you can add yourself a file as avatar which may not be .jpg Proof of concept: POST /infusions/avatarstudio/avatarstudio.php HTTP/1.1...

kernel security and bug fix update

2.6.9-89.0.18.0.1.EL - fix skb alignment that was causing sendto to fail with EFAULT Olaf Kirch orabug 6845794 - fix enomem due to larger mtu size page alloc Zach Brown orabug 5486128 - backout patch sysrq-b that queues upto keventd thread Guru Anbalagane orabug 6125546 - netrx/netpoll race...

kernel security and bug fix update

2.6.18-164.6.1.0.1.el5 - xen check to see if hypervisor supports memory reservation change Chuck Anderson orabug 7556514 - Add entropy support to igb John Sobecki orabug 7607479 - nfs convert ENETUNREACH to ENOTCONN orabug 7689332 - NET Add xen pv/bonding netconsole support Tina yang orabug 69930...

PT-2009-4703

Name of the Vulnerable Software and Affected Versions VMware Workstation versions 6.5.x through 6.5.3 build 185404 VMware Player versions 2.5.x through 2.5.3 build 185404 VMware ACE versions 2.5.x through 2.5.3 build 185404 VMware Server versions 1.x through 1.0.10 build 203137 VMware Server...

Invalid #PF Exception Code in VMware can result in Guest Privilege Escalation

No description provided by source. Invalid PF Exception Code in VMware can result in Guest Privilege Escalation ----------------------------------------------------------------------------- In protected mode, cpl is usually equal to the two least significant bits of the cs register. However, ther...

VMware PF异常本地权限提升漏洞

BUGTRAQ ID: 36841 CVECAN ID: CVE-2009-2267 VMWare是一款虚拟PC软件，允许在一台机器上同时运行两个或多个Windows、DOS、LINUX系统。 在受保护的模式中，cpl通常等于cs寄存器最不重要的两位，但也有一个例外：在Virtual-8086模式中，无论cs寄存器为何值cpl总是为 3（最少权限）。当处理器出现PF异常时，会向包含有标记的栈上Push一个异常代码，操作系统使用这个标记确定正确地操作阶段。其中的一个标记为 U/S（user/supervisor），当处理器处于用户态时出现错误会设置这个标记。...

VMware Virtual 8086 - Linux Local Ring0

VMware Virtual 8086 - Linux Local Ring0 Bugtraq ID: 36841 Class: Design Error Published: Oct 27 2009 12:00AM Updated: Oct 27 2009 09:18PM Credit: Tavis Ormandy and Julien Tinnes of the Google Security Team Vulnerable: VMWare Workstation 6.5.3 VMWare Workstation 6.5.2 build 156735 VMWare Workstati...

VMWare Virtual 8086 Linux Local Ring0 Exploit

Exploit for unknown platform in category local exploits ============================================= VMWare Virtual 8086 Linux Local Ring0 Exploit ============================================= Title: VMWare Virtual 8086 Linux Local Ring0 Exploit CVE-ID: OSVDB-ID: Author: Tavis Ormandy and Julien...

VMware Virtual 8086 - Linux Local Ring0

Bugtraq ID: 36841 Class: Design Error Published: Oct 27 2009 12:00AM Updated: Oct 27 2009 09:18PM Credit: Tavis Ormandy and Julien Tinnes of the Google Security Team Vulnerable: VMWare Workstation 6.5.3 VMWare Workstation 6.5.2 build 156735 VMWare Workstation 6.5.2 VMWare Workstation 6.5.1 VMWare...

Obama Nominates DHS Intelligence Chief

President Barack Obama has nominated Caryn Wagner to be the Homeland Security Department s intelligence chief, a position that oversees information technology systems designed to share information with federal, state and local officials. If confirmed by the Senate, Wagner would direct DHS Office ...

Mandrake Security Advisory MDVSA-2009:278 (compiz-fusion-plugins-main)

The remote host is missing an update to compiz-fusion-plugins-main announced via advisory MDVSA-2009:278. OpenVAS Vulnerability Test $Id: mdksa2009278.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:278 compiz-fusion-plugins-main Authors: Thomas Rein...

Mandrake Security Advisory MDVSA-2009:278 (compiz-fusion-plugins-main)

The remote host is missing an update to compiz-fusion-plugins-main announced via advisory MDVSA-2009:278. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Integer overflow

Integer overflow in the vmx86 kernel extension in VMware Fusion before 2.0.6 build 196839 allows host OS users to cause a denial of service to the host OS via unspecified vectors...

CVE-2009-3282

Integer overflow in the vmx86 kernel extension in VMware Fusion before 2.0.6 build 196839 allows host OS users to cause a denial of service to the host OS via unspecified vectors...

Code injection

The vmx86 kernel extension in VMware Fusion before 2.0.6 build 196839 does not use correct file permissions, which allows host OS users to gain privileges on the host OS via unspecified vectors...

CVE-2009-3281

The vmx86 kernel extension in VMware Fusion before 2.0.6 build 196839 does not use correct file permissions, which allows host OS users to gain privileges on the host OS via unspecified vectors...

CVE-2009-3282

Integer overflow in the vmx86 kernel extension in VMware Fusion before 2.0.6 build 196839 allows host OS users to cause a denial of service to the host OS via unspecified vectors...

CVE-2009-3282

Summary of findings (CVE-2009-3282 and related CVE-2009-3281) : VMware Fusion before 2.0.6 (build 196839) is affected by two issues in the vmx86 kernel extension. CVE-2009-3282 is an integer overflow that allows an unprivileged user on the host to cause a denial of service. CVE-2009-3281 is a ker...

CVE-2009-3281

Summary (CVE-2009-3281 / CVE-2009-3282 in VMware Fusion) VMware Fusion 2.0.5 and earlier are affected by two kernel issues in the vmx86 extension: CVE-2009-3281 (file-permission problem enabling arbitrary code execution in host kernel context by an unprivileged user) and CVE-2009-3282 (integer ov...

CVE-2009-3281

The vmx86 kernel extension in VMware Fusion before 2.0.6 build 196839 does not use correct file permissions, which allows host OS users to gain privileges on the host OS via unspecified vectors...