phptb20.txt

Class: Input Validation Error CVE: CVE-MAP-NOMATCH Remote: Yes Local: Yes Credit: aLMaSTeR HaCKeR almasterathotmaildotcom Vulnerable: Powered by PHPTB Topic Boards 2.0 ITHINK WORK IN ALL VERSION info PHPTB BOARD IS VERY NICE BOARD U CAN FIND SOURCE OF FORUM IN http://www.phptb.com discussion SQL ...

isec-0023-coredump.txt

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi, since it became clear from the discussion in January about the uselib vulnerability, that the Linux community prefers full, non-embargoed disclosure of kernel bugs, I release full details right now. However to follows at least some of the...

CVE-2001-1570

Technical details about CVE-2001-1570 are not publicly available in the provided connected documents. Monitor for updates.

CVE-2005-2233

CVE-2005-2233 describes a buffer overflow in multiple “p” commands on IBM AIX 5.1, 5.2 and 5.3. The vulnerability arises from long command line arguments to tools such as penable (and other hard-linked files including pdisable, pstart, phold, pdelay, pshare), potentially allowing local users to e...

Willing Webcam 2.8 Licence Info Disclosure Local Exploit

No description provided by source. / Willing Webcam 2.8 licence info disclosure local exploit by Kozan Application: Willing Webcam 2.8 and probably prior versions Vendor: Willing Software - www.willingsoftware.com Vulnerable Description: Willing Webcam 2.8 discloses licence informations username...

Willing Webcam 2.8 - Licence Information Disclosure

/ Willing Webcam 2.8 licence info disclosure local exploit by Kozan Application: Willing Webcam 2.8 and probably prior versions Vendor: Willing Software - www.willingsoftware.com Vulnerable Description: Willing Webcam 2.8 discloses licence informations username and key to local users. Discovered ...

Willing Webcam 2.8 - Licence Information Disclosure

Willing Webcam 2.8 - Licence Information Disclosure / Willing Webcam 2.8 licence info disclosure local exploit by Kozan Application: Willing Webcam 2.8 and probably prior versions Vendor: Willing Software - www.willingsoftware.com Vulnerable Description: Willing Webcam 2.8 discloses licence...

Willing Webcam 2.8 Licence Info Disclosure Local Exploit

Exploit for unknown platform in category local exploits ======================================================== Willing Webcam 2.8 Licence Info Disclosure Local Exploit ======================================================== / Willing Webcam 2.8 licence info disclosure local exploit by Kozan...

CVE-2002-1896

CVE-2002-1896 describes a buffer overflow in Alsaplayer 0.99.71 when installed with setuid root , allowing local users to execute arbitrary code via a long command line argument in either the -f or -o option. The connected documents confirm the affected component, root-cause class (buffer overflo...

CVE-2002-1948

Technical details (affected product/version, root cause, impact, and fixes) are not provided in the initial or connected documents. Monitor for updates.

ePSXe <= 1.6.0 nogui() Local Exploit

No description provided by source. / epsxe-e.c ePSXe v1. local exploit By: Qnix e-mail: q-nixathotmaildotcom ePSXe-website: www.epsxe.com EXP-Sample: root@Qnix:/epsxe gcc -o epsxe-e epsxe-e.c root@Qnix:/epsxe ./epsxe-e ePSXe v1. local exploit by Qnix | Q-nixathotmaildotcom Stack pointer ESP :...

ePSXe <= 1.6.0 nogui() Local Exploit

Exploit for linux platform in category local exploits ==================================== ePSXe char shellcode = "\x31\xc0\xb0\x46\x31\xdb\x31\xc9\xcd\x80\xeb\x16\x5b\x31\xc0" "\x88\x43\x07\x89\x5b\x08\x89\x43\x0c\xb0\x0b\x8d\x4b\x08\x8d"...

CVE-2005-1831

Sudo 1.6.8p7 on SuSE Linux 9.3, and possibly other Linux distributions, allows local users to gain privileges by using sudo to call su, then entering a blank password and hitting CTRL-C. NOTE: SuSE and multiple third-party researchers have not been able to replicate this issue, stating "Sudo...

MS Windows COM Structured Storage Local Exploit (MS05-012)

Exploit for unknown platform in category local exploits ========================================================== MS Windows COM Structured Storage Local Exploit MS05-012 ========================================================== // by Cesar Cerrudo - Argeniss - www.argeniss.com // MS05-012 - CO...

CVE-2004-2125

The CVE-2004-2125 entry describes a local privilege escalation in BlackICE PC Protection before 3.6.ccb, caused by a buffer overflow in blackd.exe when a long packetLog.fileprefix value is written into the application’s INI file. Affected product: BlackICE PC Protection 3.6 and earlier (3.6.ccb)....

Exim <= 4.41 dns_build_reverse Local Exploit

Exploit for linux platform in category local exploits ============================================ Exim = 4.41 dnsbuildreverse Local Exploit ============================================ / ripped straight off iDEFENSE advisory - so lazy I just picked up GDB... bored on a weeknight : nothing to wri...

AIX 5.1 Bellmail Local Race Condition Exploit (Instructions w/ Exploit)

Exploit for aix platform in category local exploits ======================================================================= AIX 5.1 Bellmail Local Race Condition Exploit Instructions w/ Exploit ======================================================================= -bash-2.05b$ -bash-2.05b$ cat...

[Full-disclosure] [SECURITY] [DSA 725-1] New ppxp packages fix local root exploit

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 725-1 [email protected] http://www.debian.org/security/ Martin Schulze May 19th, 2005 http://www.debian.org/security/faq -...

Linux Kernel <= 2.6.12-rc4 (ioctl_by_bdev) Local Denial of Service Exploit

Exploit for linux platform in category dos / poc ========================================================================== Linux Kernel include include include include include include include include include include include include include include include include include include include include...

CVE-2004-2012

The CVE-2004-2012 entry concerns the systrace_exit function in the systrace utility used on NetBSD-current (pre-April 16, 2004) and certain FreeBSD ports. The vulnerability arises because the code path does not verify the owner of the /dec/systrace connection before setting the effective user ID ...