962 matches found
Apache killer exploit modified for better Results
Apache killer exploit modified for better Results "4L4N4 K!LL3R " or Killapache DDOS tool exploit, previously coded by kingscope 's , re-edited and coded by "S4uR4 " , which kills apache and still many websites are vulnerable. S4uR4 rewrite this exploit on php/curl web based with agressive mode...
Apache Range Header DoS (Apache Killer)
The byterange filter in the Apache HTTP Server 2.0.x through 2.0.64, and 2.2.x through 2.2.19 allows remote attackers to cause a denial of service memory and CPU consumption via a Range header that expresses multiple overlapping ranges, exploit called "Apache Killer". Module Options msf use...
CentOS Update for rgmanager CESA-2009:1339 centos5 i386
Check for the Version of rgmanager OpenVAS Vulnerability Test CentOS Update for rgmanager CESA-2009:1339 centos5 i386 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify ...
Code injection
The adddellistener function in kernel/taskstats.c in the Linux kernel 2.6.39.1 and earlier does not prevent multiple registrations of exit handlers, which allows local users to cause a denial of service memory and CPU consumption, and bypass the OOM Killer, via a crafted application...
CVE-2011-2484
The adddellistener function in kernel/taskstats.c in the Linux kernel 2.6.39.1 and earlier does not prevent multiple registrations of exit handlers, which allows local users to cause a denial of service memory and CPU consumption, and bypass the OOM Killer, via a crafted application...
CVE-2011-2484
CVE-2011-2484 affects the Linux kernel, specifically code paths in kernel/taskstats.c. In kernels 2.6.39.1 and earlier, add_del_listener does not prevent multiple registrations of exit handlers, enabling a local attacker to cause denial of service through memory/CPU exhaustion and potentially byp...
CVE-2011-2484
The adddellistener function in kernel/taskstats.c in the Linux kernel 2.6.39.1 and earlier does not prevent multiple registrations of exit handlers, which allows local users to cause a denial of service memory and CPU consumption, and bypass the OOM Killer, via a crafted application...
Sql injection
fs/exec.c in the Linux kernel before 2.6.37 does not enable the OOM Killer to assess use of stack memory by arrays representing the 1 arguments and 2 environment, which allows local users to cause a denial of service memory consumption via a crafted exec system call, aka an "OOM dodging issue," a...
CVE-2010-4243
fs/exec.c in the Linux kernel before 2.6.37 does not enable the OOM Killer to assess use of stack memory by arrays representing the 1 arguments and 2 environment, which allows local users to cause a denial of service memory consumption via a crafted exec system call, aka an "OOM dodging issue," a...
CVE-2010-4243
CVE-2010-4243 affects the Linux kernel up to version 2.6.37. The issue is in fs/exec.c where the OOM Killer does not assess stack memory usage of the arrays representing (1) arguments and (2) environment during an exec, enabling a local user to cause memory exhaustion (denial of service) via a cr...
Linux Kernel "execve()"内存扩展"OOM-killer"本地拒绝服务漏洞
BUGTRAQ ID: 45004 CVE ID: CVE-2010-4243 Linux Kernel是开放源码操作系统Linux所使用的内核。 Linux Kernel的"OOM-killer"功能在实现上存在安全漏洞,本地攻击者可利用此漏洞终止不相关的进程,造成拒绝服务。 漏洞源于oomkill函数看不到没有附加到任何线程的已分配内存。 Linux kernel 2.6.24.3 - 2.6.37 RedHat Enterprise Linux Desktop v.5 client 厂商补丁: Linux ----- 目前厂商已经发布了升级补丁以修复这个安全问题,请到厂商的主页下载...
Linux Kernel 'setup_arg_pages()' Denial of Service Vulnerability
Exploit for linux platform in category dos / poc ================================================================ Linux Kernel 'setupargpages' Denial of Service Vulnerability ================================================================ / known for over a year, fixed in grsec bug is due to a b...
Unfixed XSS vulnerability at www.everified.com
Security researcher Killer-TR, has submitted on 11/11/2010 a cross-site-scripting XSS vulnerability affecting www.everified.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/01/2012. It is currentl...
kernel: DoS on x86_64
The loadelfbinary function in fs/binfmtelf.c in the Linux kernel before 2.6.32.8 on the x8664 platform does not ensure that the ELF interpreter is available before a call to the SETPERSONALITY macro, which allows local users to cause a denial of service system crash via a 32-bit application that...
Unfixed XSS vulnerability at www.psv.tv
Security researcher Killer-TR, has submitted on 13/10/2010 a cross-site-scripting XSS vulnerability affecting www.psv.tv, which at the time of submission ranked 565596 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/12/2011. It is currently...
Unfixed XSS vulnerability at www.rijnmond.nl
Security researcher Killer-TR, has submitted on 13/10/2010 a cross-site-scripting XSS vulnerability affecting www.rijnmond.nl, which at the time of submission ranked 60965 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/12/2011. It is...
Unfixed XSS vulnerability at www.vkbanen.nl
Security researcher Killer-TR, has submitted on 23/09/2010 a cross-site-scripting XSS vulnerability affecting www.vkbanen.nl, which at the time of submission ranked 89940 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 15/12/2011. It is current...
Unfixed XSS vulnerability at www.kurdiplace.nl
Security researcher Killer-TR, has submitted on 08/11/2010 a cross-site-scripting XSS vulnerability affecting www.kurdiplace.nl, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 11/12/2011. It is currentl...
Unfixed XSS vulnerability at www.eur.nl
Security researcher Killer-TR, has submitted on 25/07/2010 a cross-site-scripting XSS vulnerability affecting www.eur.nl, which at the time of submission ranked 43943 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/12/2011. It is currently...
Unfixed XSS vulnerability at www.bondtegenvloeken.nl
Security researcher Killer-TR, has submitted on 25/07/2010 a cross-site-scripting XSS vulnerability affecting www.bondtegenvloeken.nl, which at the time of submission ranked 17887346 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/12/2011. I...