4578 matches found
Integer overflow
Integer overflow in the envwrite function in the Alcatel-Lucent Bell Labs Plan 9 kernel allows local users to overwrite certain memory addresses with kernel memory via a large n argument, as demonstrated by 1 modifying the iseve function to gain privileges and 2 making the devpermcheck function...
CVE-2007-1189
Integer overflow in the envwrite function in the Alcatel-Lucent Bell Labs Plan 9 kernel allows local users to overwrite certain memory addresses with kernel memory via a large n argument, as demonstrated by 1 modifying the iseve function to gain privileges and 2 making the devpermcheck function...
CVE-2007-1189
CVE-2007-1189 : Concrete details show an integer overflow in the Plan 9 kernel’s envwrite function (Alcatel-Lucent Bell Labs Plan 9) that can be triggered by a large n argument. This vulnerability allows local users to overwrite kernel memory, with demonstrated effects including privilege escalat...
CVE-2007-1189: Undefined Security Weakness
Integer overflow in the envwrite function in the Alcatel-Lucent Bell Labs Plan 9 kernel allows local users to overwrite certain memory addresses with kernel memory via a large n argument, as demonstrated by 1 modifying the iseve function to gain privileges and 2 making the devpermcheck function...
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 +--------------------------------------- - -- - | SaMuschie Research Labs proudly presents . . . +------------------------------------------- -- - - | Application: wordpress | Version: = 2.1.1 | Vuln./Exploit Type: SQL-Injection | Status: 0day...
WordPress AdminPanel CSRF/XSS - 0day
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 +---------------------------------------------------------------------------+ | SaMuschie Research Labs proudly presents . . . | +---------------------------------------------------------------------------+ | Application: wordpress Version: = 2.1.1 | ...
CVE-2007-0496
PHP remote file inclusion vulnerability in lib/nl/nl.php in Neon Labs Website nlws 3.2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the gstrRootDir parameter...
Remote file inclusion
PHP remote file inclusion vulnerability in lib/nl/nl.php in Neon Labs Website nlws 3.2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the gstrRootDir parameter...
CVE-2007-0496
CVE-2007-0496 affects Neon Labs Website (nlws) 3.2 and earlier, with a PHP remote file inclusion in lib/nl/nl.php. The vulnerability occurs when an attacker supplies a URL in the g_strRootDir parameter, enabling remote PHP code execution. The connected sources corroborate the vulnerability descri...
CVE-2007-0496
PHP remote file inclusion vulnerability in lib/nl/nl.php in Neon Labs Website nlws 3.2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the gstrRootDir parameter...
Microsoft Excel Malformed Palette Record DoS PoC (MS07-002)
Exploit for unknown platform in category dos / poc =========================================================== Microsoft Excel Malformed Palette Record DoS PoC MS07-002 =========================================================== """ MS07-002 EXCEL Malformed Palette Record Vulnerability DOS POC...
Microsoft Excel - Malformed Palette Record Denial of Service (PoC) (MS07-002)
""" MS07-002 EXCEL Malformed Palette Record Vulnerability DOS POC Author LifeAsaGeek at gmail.com ... and Microsoft said that vuln credit is for Greg MacManus of iDefense Labs Vulnerablity Description Bound error occurs when parsing Palette Record and it causes Heap Overflow check out here -...
CVE-2007-0496: Undefined Security Weakness
PHP remote file inclusion vulnerability in lib/nl/nl.php in Neon Labs Website nlws 3.2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the gstrRootDir parameter...
Microsoft Excel - Malformed Palette Record Denial of Service (PoC) (MS07-002)
Microsoft Excel - Malformed Palette Record Denial of Service PoC MS07-002 """ MS07-002 EXCEL Malformed Palette Record Vulnerability DOS POC Author LifeAsaGeek at gmail.com ... and Microsoft said that vuln credit is for Greg MacManus of iDefense Labs Vulnerablity Description Bound error occurs whe...
Neon Labs Website <= 3.2 (nl.php g_strRootDir) Remote Inclusion Vuln
Exploit for unknown platform in category web applications ==================================================================== Neon Labs Website = 3.2 nl.php gstrRootDir Remote Inclusion Vuln ====================================================================...
Neon Labs Website 3.2 - 'nl.php?g_strRootDir' Remote File Inclusion
------------------------------------------------------------------------------------------------------------------------ Script:nlws Affected Version:3.2 Downlaoad:http://neonlabs.structum.com.mx/pkgs/nlws3-2.zip...
Neon Labs Website <= 3.2 (nl.php g_strRootDir) Remote Inclusion Vuln
No description provided by source. ------------------------------------------------------------------------------------------------------------------------ Script:nlws Affected Version:3.2 Downlaoad:http://neonlabs.structum.com.mx/pkgs/nlws3-2.zip...
Neon Labs Website 3.2 - nl.php?g_strRootDir Remote File Inclusion
Neon Labs Website 3.2 - nl.php?gstrRootDir Remote File Inclusion ------------------------------------------------------------------------------------------------------------------------ Script:nlws Affected Version:3.2 Downlaoad:http://neonlabs.structum.com.mx/pkgs/nlws3-2.zip...
Kaspersky Labs Anti-Virus Local Privilege Escalation Vulnerability
Kaspersky Labs Anti-Virus is prone to a local privilege-escalation vulnerability. A local attacker can exploit this issue to execute arbitrary code with SYSTEM-level privileges. This may facilitate a complete compromise of the affected computer Kaspersky Anti-Virus 6.0 暂无...
Code injection
Kaspersky Labs Antivirus Engine 6.0 for Windows and 5.5-10 for Linux before 20070102 enter an infinite loop upon encountering an invalid NumberOfRvaAndSizes value in the Optional Windows Header of a portable executable PE file, which allows remote attackers to cause a denial of service CPU...