CVE-2014-2889

Off-by-one error in the bpfjitcompile function in arch/x86/net/bpfjitcomp.c in the Linux kernel before 3.1.8, when BPF JIT is enabled, allows local users to cause a denial of service system crash or possibly gain privileges via a long jump after a conditional jump...

CVE-2014-2889

Off-by-one error in the bpfjitcompile function in arch/x86/net/bpfjitcomp.c in the Linux kernel before 3.1.8, when BPF JIT is enabled, allows local users to cause a denial of service system crash or possibly gain privileges via a long jump after a conditional jump...

UBUNTU-CVE-2014-2889

Off-by-one error in the bpfjitcompile function in arch/x86/net/bpfjitcomp.c in the Linux kernel before 3.1.8, when BPF JIT is enabled, allows local users to cause a denial of service system crash or possibly gain privileges via a long jump after a conditional jump...

BlazeDVD Pro Player 6.1 - Stack Based Buffer Overflow Jump ESP

Exploit for windows platform in category local exploits EDB Note, XPSP3 - my $eip = pack'V',0x7c868667; jmp ESP on kernel32.dll Date: Tue Apr 8 2014 Vendor link: http://www.blazevideo.com/download.htmm Software Link: http://www.blazevideo.com/download.php?product=BlazeDVDPro App Version: 6.1 Test...

Adobe Flash Player Jump Opcode Information Leak Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Flash Player. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling ...

Opera 16 Fixes Bugs, Improves HTML5 Performance

Norwegian software company Opera pushed out version 16 of its eponymous Internet browser this week, complete with what it’s calling “tons of bug fixes,” improved performance and a slew of new features and APIs. While the full changelog hasn’t been published yet, Ruarí Ødegaard, a member of Opera’...

Linux/x86 - Egghunter (0x5090) Shellcode (38 bytes)

Linux/x86 - Egghunter 0x5090 Shellcode 38 bytes. Shellcode exploit for Linuxx86 platform / Title : egghunter shellcode : hunter 30 bytes, marker 8 bytes, shellcode 28 bytes Date : 28 May 2013 Author : Russell Willis Testd on: Linux/x86 SMP Debian 3.2.41-2 i686 Comments: Using sigaction system cal...

Lilac vulnerability of small packs containing process, the reflective xss the use of skill-the loophole warning-the black bar safety net

Brief description: Lilac garden a few small packs, xss+url jump Detailed description: http://paper.pubmed.cn/do.php?ac=login&rfu=http://paper. pubmed. cn/ rfu address not verified http://paper.pubmed.cn/do.php?ac=login&rfu=can be configured on any link to jump The main or talk aboutxss?, no...

URL redirect/jump vulnerability explanation-vulnerability warning-the black bar safety net

0x00 relevant background information Due to the application of more and more needs and other third party interactive applications, as well as in its own internal Application according to a different logic the user will be directed to a different page, for example, a typical login interface is oft...

dedecms any address jump-vulnerability warning-the black bar safety net

Brief description: dedecms any address jump Detailed description: http://www.dedecms.com/plus/download.php?open=1&link=aHR0cDovL3d3dy5iYWlkdS5jb20%3D $link = base64decodeurldecode$link; http://www.badguest.cn the link can be configured to any address, below to jump directly. header"location:$link...

Freefloat FTP Server - REST Remote Buffer Overflow (Metasploit)

Freefloat FTP Server - REST Remote Buffer Overflow Metasploit require 'msf/core' class Metasploit3 'FreeFloat FTP Server REST Buffer Overflow', 'Description' = %q This module exploits a FreeFloat FTP Server Buffer Overflow found in the REST command. , 'Author' = 'C4SS!0 G0M3S', Discovery Vuln...

kernel: inet_diag: insufficient validation

The inetdiagbcaudit function in net/ipv4/inetdiag.c in the Linux kernel before 2.6.39.3 does not properly audit INETDIAG bytecode, which allows local users to cause a denial of service kernel infinite loop via crafted INETDIAGREQBYTECODE instructions in a netlink message, as demonstrated by an...

Word List Builder Buffer Overflow Exploit (SEH)

No description provided by source. Exploit Title: Word List Builder Buffer Overflow ExploitSEH Software Link: http://download.cnet.com/Word-List-Builder/3000-185414-10398336.html Version: 1.0 triggering details : open .dic file Tested on: Win XP SP3 French Date: 31/03/2011 Author: h1ch4m Hicham...

Fedora 15 : feh-1.14.1-1.fc15 (2011-8750)

Changes since 0.10.1 : - Bug fixes Make zoomdefault key work properly with --geometry Only create caption directory when actually writing out a caption. read directory contents sorted by filename instead of 'randomly' as returned by readdir by default. Thanks talisein! Show certain warnings in th...

AVS Ringtone Maker '.au'文件缓冲区溢出漏洞

Bugtraq ID: 47851 AVS Ringtone Maker允许用户定制铃声。 AVS Ringtone Maker不正确处理'.au'文件，攻击者构建恶意文件，诱使用户解析可触发缓冲区溢出，成功利用漏洞可以以应用程序安全上下文执行任意代码。 Online Media Technologies Ltd AVS Ringtone Maker 1.6.1 厂商解决方案 目前没有详细解决方案提供： http://www.avs4you.com/AVS-Ringtone-Maker.aspx !/usr/bin/perl system"cls"; sub logo print q'...

AVS Ringtone Maker 1.6.1 - SEH Overflow Exploit

Exploit for windows platform in category local exploits 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

A-PDF WAV To MP3 Converter 1.2.0 DEP Bypass

Exploit Title: A-PDF Wav to MP3 Converter v 1.2.0 DEP Bypass Software Link: http://www.a-pdf.com/wav-to-mp3/a-pdf-wtm.exe Version: 1.2.0 Tested on: Win XP SP3 French Date: 12/05/2011 Author: h1ch4m Hicham Oumounid Email: [email protected] Home: http://net-effects.blogspot.com Big thanks to...

A-PDF All to MP3 Converter v.2.0.0 DEP Bypass

Exploit for windows platform in category local exploits Exploit Title: A-PDF All to MP3 Converter v.2.0.0 DEP Bypass Software Link: http://www.a-pdf.com/all-to-mp3/download.htm Version: 2.0.0 Tested on: Win XP SP3 French Date: 12/05/2011 Author: h1ch4m Email: email protected Home:...

A-PDF All to MP3 Converter 2.0.0 - DEP Bypass

A-PDF All to MP3 Converter 2.0.0 - DEP Bypass Exploit Title: A-PDF All to MP3 Converter v.2.0.0 DEP Bypass Software Link: http://www.a-pdf.com/all-to-mp3/download.htm Version: 2.0.0 Tested on: Win XP SP3 French Date: 12/05/2011 Author: h1ch4m Email: [email protected] Home:...

ABBS Audio Media Player 3.0 .LST Buffer Overflow

Exploit Title: ABBS Audio Media Player Buffer Overflow Exploit SEH Software Link: http://abbs.qsnx.net/downloads/abbs-amp.zip Version: 3.0 Tested on: Win XP SP3 French Date: 14/03/2011 Author: h1ch4m Email: [email protected] Home: http://net-effects.blogspot.com my $file= "exploit.lst"; my $size =...