GnuTLS libgnutls - Double-Free Certificate List Parsing Remote Denial of Service

Sorry I forgot to write headers in previous mail. Exploit Title: possible ways to exploit CVE-2012-1663 GNUTLS-3.0.13 Google Dork: if relevant we will automatically add these to the GHDB Date: Mar 20, 2013 Exploit Author: Shawn the R0ck Vendor Homepage: http://www.gnutls.org/ Software Link:...

CVE-2013-1427

The configuration file for the FastCGI PHP support for lighttpd before 1.4.28 on Debian GNU/Linux creates a socket file with a predictable name in /tmp, which allows local users to hijack the PHP control socket and perform unauthorized actions such as forcing the use of a different version of PHP...

Race condition

The configuration file for the FastCGI PHP support for lighttpd before 1.4.28 on Debian GNU/Linux creates a socket file with a predictable name in /tmp, which allows local users to hijack the PHP control socket and perform unauthorized actions such as forcing the use of a different version of PHP...

CVE-2013-1427

The configuration file for the FastCGI PHP support for lighttpd before 1.4.28 on Debian GNU/Linux creates a socket file with a predictable name in /tmp, which allows local users to hijack the PHP control socket and perform unauthorized actions such as forcing the use of a different version of PHP...

CVE-2013-1427

The configuration file for the FastCGI PHP support for lighttpd before 1.4.28 on Debian GNU/Linux creates a socket file with a predictable name in /tmp, which allows local users to hijack the PHP control socket and perform unauthorized actions such as forcing the use of a different version of PHP...

The GNU/Linux kernel new features initiator to mention the right vulnerability-vulnerability warning-the black bar safety net

SUSE security research members of the Sebastian Krahmer has published the GNU/Linux kernel to mention the right vulnerability, recent GNU/Linux kernel3.8+have introduced a In order to facilitate the container to achieve the new features: user-namespacesuser-ns, CLONENEWUSER flag, this feature...

GNU/Linux kernel(3.8+)Privilege Escalation Vulnerability

Exploit for linux platform in category local exploits define GNUSOURCE include include include include include include include include include include int go2; char childstack120; extern char environ; void dieconst char msg perrormsg; exiterrno; int childvoid arg char c; closego1; readgo0, &c, 1;...

CVE-2013-1048

The Debian apache2ctl script in the apache2 package squeeze before 2.2.16-6+squeeze11, wheezy before 2.2.22-13, and sid before 2.2.22-13 for the Apache HTTP Server on Debian GNU/Linux does not properly create the /var/lock/apache2 lock directory, which allows local users to gain privileges via an...

CVE-2013-1048: Undefined Security Weakness

The Debian apache2ctl script in the apache2 package squeeze before 2.2.16-6+squeeze11, wheezy before 2.2.22-13, and sid before 2.2.22-13 for the Apache HTTP Server on Debian GNU/Linux does not properly create the /var/lock/apache2 lock directory, which allows local users to gain privileges via an...

PT-2013-2840

Name of the Vulnerable Software and Affected Versions apache2 versions 2.2.16-6+squeeze10 and earlier, versions 2.2.22-12 and earlier Description The issue is related to the improper creation of the /var/lock/apache2 lock directory by the apache2ctl script in the apache2 package for the Apache HT...

PT-2013-1083

Name of the Vulnerable Software and Affected Versions HPLIP versions 3.x through 3.13.11 Description The issue concerns multiple vulnerabilities in the HPLIP package of the Debian GNU/Linux operating system, which can be exploited by a local attacker to compromise the confidentiality, integrity,...

PT-2013-1082

Name of the Vulnerable Software and Affected Versions HP Linux Imaging and Printing HPLIP versions through 3.13.11 Description The issue concerns multiple vulnerabilities in the HPLIP package of the Debian GNU/Linux operating system. These vulnerabilities can be exploited by a local attacker,...

Immunity Canvas: SUDO_TIMESTAMP

Name| sudotimestamp ---|--- CVE| CVE-2013-1775 Exploit Pack| CANVAS Description| sudotimestamp: Linux/MacOS timestamp privilege escalation Notes| CVE Name: CVE-2013-1775 VENDOR: Intel, GNU/Linux, Apple Notes: This exploit runs on GNU/Linux and MacOS X. On both systems this exploit requires: - Use...

PT-2013-1103

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.9-rc7 Debian GNU/Linux affected versions not specified Description The issue affects the Linux kernel and Debian GNU/Linux operating system, allowing a local attacker to exploit multiple vulnerabilities,...

PT-2013-1108

Name of the Vulnerable Software and Affected Versions Debian GNU/Linux affected versions not specified Linux kernel versions prior to 3.9-rc7 Description The issue concerns multiple vulnerabilities in the Linux package of the Debian GNU/Linux operating system, which can be exploited by a local...

[SECURITY] [DSA 2612-1] ircd-ratbox security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2612-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff January 24, 2013 http://www.debian.org/security/faq -...

Novell NCP - Remote Command Execution

Novell NCP - Remote Command Execution In the interest of full-disclosure, here is a remote exploit for the vulnerability found by David Klein: Demonstration Novell NCP Pre-Auth Remote Stack Buffer Overflow Connecting to host 127.0.0.1... Connected! Sending message 1 23 bytes 74 4e 63 50 00 00 00 ...

Novell NCP Pre-Auth Remote Stack Buffer Overflow

/ Novell NCP Pre-Auth Remote Root Exploit Written by Gary Nilson 11-17-2013 Overview US-CERT/NIST CVES:CVE-2012-0432: Stack-based buffer overflow in the Novell NCP implementation in NetIQ eDirectory 8.8.7.x before 8.8.7.2 allows remote attackers to have an unspecified impact via unknown vectors...

WordPress Gallery 3.8.3 Arbitrary File Read

​ Exploit Title : Wordpress gallery-3.8.3 plugin Arbitrary File Read Vulnerability Author : IrIsT.Ir Discovered By : BeniVanda Home : http://IrIsT.Ir/forum/ Software Link : http://wordpress.org/extend/plugins/gallery-plugin/ Security Risk : High Version : All Version Tested on : GNU/Linux Ubuntu ...

PT-2025-18371

Name of the Vulnerable Software and Affected Versions libuv and Node.js versions prior to nodejs 20.19.0+dfsg-2 i386.deb Description The issue arises from certain build processes for libuv and Node.js on 32-bit systems, where the off t size is inconsistent. This inconsistency occurs because the...