CVE-2015-2132

Unspecified vulnerability in the execve system-call implementation in HP HP-UX B.11.11, B.11.23, and B.11.31 allows local users to gain privileges via unknown vectors...

Apple iOS IOHIDFamily Buffer Overflow Vulnerability

Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. A buffer overflow vulnerability exists in Apple iOS IOHIDFamily, which allows local users to exploit the vulnerability to execute arbitrary code...

XMPlay 3.8.1.12 Proof Of Concept

!/usr/bin/env python Exploit Title: XMPlay .pls Local Crash poc Date: 2015-08-16 Exploit Author: St0rn Twitter: st0rnpentest Vendor Homepage: http://www.un4seen.com/ Software Link: http://www.un4seen.com/download.php?xmplay38 Version: 3.8.1.12 Tested on: Windows 7 Stack Overflowing xmplay, but we...

Red Hat Enterprise Linux Data Compromise

The vulnerability of the util-linux-2.12a package of the Red Hat Enterprise Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited locally...

SOL16983 - PCRE library vulnerability CVE-2015-2325

Although the BIG-IP/BIG-IQ/Enterprise Manager software contains the vulnerable code, BIG-IP/BIG-IQ/Enterprise Manager does not use the vulnerable code in a way that exposes the vulnerability. An attacker must have local access to BIG-IP/BIG-IQ/Enterprise Manager to trigger an exploit, which the...

Oracle Berkeley DB Local Arbitrary Code Execution Vulnerability (CNVD-2015-04776)

Oracle Berkeley DB is the industry's leading open source, embeddable storage engine that provides developers with a fast, reliable native database that requires no administration. A security vulnerability exists in the Oracle Berkeley DB Data Store component that can be exploited by a local...

Blueberry Express 5.9.0.3678 - Local Buffer Overflow (SEH)

Document Title: =============== Blueberry Express v5.9.x - SEH Buffer Overflow Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1535 Video: http://www.vulnerability-lab.com/getcontent.php?id=1537 Release Date: ============= 2015-06-29...

Blueberry Express 5.9.x SEH Buffer Overflow

Document Title: =============== Blueberry Express v5.9.x - SEH Buffer Overflow Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1535 Video: http://www.vulnerability-lab.com/getcontent.php?id=1537 Release Date: ============= 2015-06-29...

1 Click Extract Audio v2.3.6 - Activex Buffer Overflow

Document Title: =============== 1 Click Extract Audio v2.3.6 - Activex Buffer Overflow References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1507 View Video: https://www.youtube.com/watch?v=O2Qq-0lpU74 Advisory: http://www.vulnerability-lab.com/getcontent.php?id=1506 Release...

Multiple Local Memory Corruption Vulnerabilities in Linux Kernel 'fs/pipe.c'

The Linux Kernel is the kernel of the Linux operating system. A memory corruption vulnerability exists in the Linux kernel's implementation of the vectored pipe read/write function, which fails to take into account already processed I/O vectors when retrying after an atomic access operation has...

Red Hat Enterprise Linux Data Compromise

The vulnerability of the kernel-headers-3.10.0 package of the Red Hat Enterprise Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. The vulnerability can be exploited locally...

Red Hat Enterprise Linux Data Compromise

The vulnerability of the kernel-debug-debuginfo-3.10.0 package of the Red Hat Enterprise Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. The vulnerability can be exploited locally...

Red Hat Enterprise Linux Data Compromise

The vulnerability of the kernel-debug-debuginfo-2.6.18 package of the Red Hat Enterprise Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. The vulnerability can be exploited locally...

Red Hat Enterprise Linux Data Compromise

The vulnerability of the kernel-debuginfo-common-2.6.18 package in the Red Hat Enterprise Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited locally...

Audacity 2.0.5 DLL Hijack

A local dll injection vulnerability has been discovered in the official Audacity 2.0.5. Since the program is not specified with a fully qualified path name the program uses a fixed path to look for specific files or libraries. This path includes directories that may not be trusted or under user...

Comodo GeekBuddy < 4.18.121 - Local Privilege Escalation

Comodo GeekBuddy Local Privilege Escalation CVE-2014-7872 Jeremy Brown jbrown3264/gmail -Synopsis- Comodo GeekBuddy, which is bundled with Comodo Anti-Virus, Comodo Firewall and Comodo Internet Security, runs a passwordless, background VNC server and listens for incoming connections. This can all...

Microsoft Windows Kernel Mode Driver Information Disclosure Vulnerability (CNVD-2015-03070)

Microsoft Windows is a popular operating system. An unspecified security vulnerability in Microsoft Windows Win32k.sys allows local attackers to exploit the vulnerability to build special applications that run on the system to obtain kernel memory information...

OpenSUSE Data Compromise

The vulnerability of the dbus-1-x86 package in the OpenSUSE operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. Exploiting this vulnerability can be carried out locally...

Gentoo Linux Info Disclosure

The vulnerability of the vixie-cron package up to version 4.1-r10 of the Gentoo Linux operating system can lead to the compromise of protected information. This vulnerability can be exploited locally...

Red Hat Enterprise Linux Data Compromise

Multiple vulnerabilities exist in the glibc-2.3.4 package of the Red Hat Enterprise Linux operating system. Exploitation of these vulnerabilities may lead to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited locally...