OracleVM 3.4 : Unbreakable / etc (OVMSA-2019-0024)

The remote OracleVM system is missing necessary patches to address critical security updates : - hugetlbfs: don't retry when pool page allocations start to fail Mike Kravetz Orabug: 29324267 - x86/speculation: RSB stuffing with retpoline on Skylake+ cpus William Roche Orabug: 29660924 -...

Microsoft Windows - POPMOV SS Privilege Escalation

Microsoft Windows - POPMOV SS Privilege Escalation Demo exploitation of the POP SS vulnerability CVE-2018-8897, leading to unsigned code execution with kernel privilages. - KVA Shadowing should be disabled and the relevant security update should be uninstalled. - This may not work with certain...

Microsoft Windows - 'POP/MOV SS' Privilege Escalation

Demo exploitation of the POP SS vulnerability CVE-2018-8897, leading to unsigned code execution with kernel privilages. - KVA Shadowing should be disabled and the relevant security update should be uninstalled. - This may not work with certain hypervisors like VMWare, which discard the pending DB...

linux/x86 if(read(fd,buf,512)<=2) _exit(1) else buf(); 29 bytes

No description provided by source. / h3ll-core.c by Charles Stevenson [email protected] I made this as a chunk you can paste in to make modular remote exploits. I use it as a first stage payload when I desire to follow up with a real large payload of goodness. This actually is a bit larger than...

kernel-rt: stack corruption when task gets scheduled out using the debug stack

The int3 handler in the Linux kernel before 3.3 relies on a per-CPU debug stack, which allows local users to cause a denial of service stack corruption and panic via a crafted application that triggers certain lock contention...

Information disclosure

The MultipacketReciever::RecievePacket function in S.T.A.L.K.E.R.: Shadow of Chernobyl 1.0006 and earlier allows remote attackers to cause a denial of service server termination via a crafted packet without an expected 0xe0 or 0xe1 value, which triggers the INT3 instruction...

CVE-2008-6705

The MultipacketReciever::RecievePacket function in S.T.A.L.K.E.R.: Shadow of Chernobyl 1.0006 and earlier allows remote attackers to cause a denial of service server termination via a crafted packet without an expected 0xe0 or 0xe1 value, which triggers the INT3 instruction...

S.T.A.L.K.E.R多个远程溢出和拒绝服务漏洞

BUGTRAQ ID: 29997 S.T.A.L.K.E.R.是由GSC Game World开发的第一人称射击游戏。 如果远程攻击者向S.T.A.L.K.E.R.游戏服务器发送了恶意报文的话，就可以触发缓冲区溢出或拒绝服务漏洞。 ---------------------------------------- A IPureServer::Recieve栈溢出 ----------------------------------------...