CVE-2007-3749

The kernel in Apple Mac OS X 10.4 through 10.4.10 does not reset the current Mach Thread Port or Thread Exception Port when executing a setuid program, which allows local users to execute arbitrary code by creating the port before launching the setuid program, then writing to the address space of...

Sony CONNECT Player 4.x (m3u File) Local Stack Overflow Exploit

Exploit for unknown platform in category local exploits =============================================================== Sony CONNECT Player 4.x m3u File Local Stack Overflow Exploit =============================================================== !/usr/bin/python Secunia Advisory : SA27270 Release...

Sony CONNECT Player 4.x - '.m3u' Local Stack Overflow

!/usr/bin/python Secunia Advisory : SA27270 Release Date : 2007-10-29 Sony CONNECT Player M3U Playlist Processing Stack Buffer Overflow m3u File Local Exploit Bug discovered by Parvez Anwar Exploit Written by TaMBaRuS [email protected] Tested on: Sony CONNECT Player SonicStage 4.x installed on...

CVE-2003-1474

CVE-2003-1474 concerns the FreeBSD Ports Collection component slashem-tty, which is reported to be installed with write permissions for the games group. The provided documents state that local users with games group privileges can modify slashem-tty and execute arbitrary code as other users, leve...

jetaudio-local.txt

!/usr/bin/python jetAudio 7.x m3u File 0day Local SEH Overwrite Exploit Bug discovered by Krystian Kloskowski h07 Tested on: jetAudio 7.0.3 Basic / 2k SP4 Polish Shellcode: Windows Execute Command calc Just for fun ; from struct import pack m3u = "EXTM3U\nhttp://%s" shellcode =...

CVE-2007-5225

CVE-2007-5225 is a Solaris local-privilege/ memory-leak issue caused by an integer signedness error in fifofs (FIFO filesystems) that allows a local user to read unspecified memory via a negative value to the I_PEEK ioctl on Solaris 8–10. For Solaris 10, patches exist: 127738-01 for x86 and 12773...

CVE-2007-5201

The FTP backend for Duplicity before 0.4.9 sends the password as a command line argument when calling ncftp, which might allow local users to read the password by listing the process and its arguments...

Design/Logic Flaw

Unquoted Windows search path vulnerability in EMC VMware Workstation before 5.5.5 Build 56455 and 6.x before 6.0.1 Build 55017, Player before 1.0.5 Build 56455 and Player 2 before 2.0.1 Build 55017, ACE before 1.0.3 Build 54075, and Server before 1.0.4 Build 56528 allows local users to gain...

VFAT compat ioctls DoS on 64-bit

The VFAT compat ioctls in the Linux kernel before 2.6.21.2, when run on a 64-bit system, allow local users to corrupt a kerneldirent struct and cause a denial of service system crash via unknown vectors...

AtomixMP3 2.3 (pls File) Local Buffer OverFlow Exploit

Exploit for unknown platform in category local exploits ====================================================== AtomixMP3 2.3 pls File Local Buffer OverFlow Exploit ====================================================== 0x77394540 jmp esp in mswsock.dll Winxp Pro Version 2002 exploit : A x 516 +EI...

OTSTurntables 1.00 (m3u File) Local Buffer Overflow Exploit

No description provided by source. ?php / OTSTurntables 1.00 Buffer OverFlow 0days 224 bytes available for shellcode,, you can replace it with you favourite one,, 0x77394540 jmp esp in shell32.dll Winxp sp0 exploit : A x 277 +EIP - jmp esp - 4 + Nops -10 + Shellcode -224 if you want to exploit th...

OtsTurntables 1.00 - '.m3u' Local Buffer Overflow

?php / OTSTurntables 1.00 Buffer OverFlow 0days 224 bytes available for shellcode,, you can replace it with you favourite one,, 0x77394540 jmp esp in shell32.dll Winxp sp0 exploit : A x 277 +EIP - jmp esp - 4 + Nops -10 + Shellcode -224 && if you want to exploit this vul with SEH ,, take some inf...

Live for Speed S1/S2/Demo (.spr file) Buffer Overflow Exploit

No description provided by source. / 0day Live for speed patch x s2 /s1 and demo local .Spr File buffer over flow Spr file's are also exploitable although i had to go about it a different Way,At first it wasn't possible to do a jmp esp,But with a little more buffer i Managed to get it to point to...

PHP 5.x (win32service) Local Safe Mode Bypass Exploit

No description provided by source. ?php PHP Safemode bypass exploit win32service Note: Tested on 5.2.1 Author: NetJackal Email: nima501atyahoodotcom Website: http://netjackal.by.ru ...

CVE-2007-4004

CVE-2007-4004 affects the IBM AIX ftp client (bundled with AIX 5.3 SP6 and 5.2.0). A local buffer overflow in the ftp client occurs from gets() calls, and because the ftp client runs setuid root, an unprivileged local user can exploit it to execute arbitrary code with root privileges. Public advi...

6ALBlog (newsid) Remote SQL Injection Vulnerability

No description provided by source. +By CrackersChild+ Portal.......: 6ALBlog All Versions Download.....: http://down.otand.com/download/code/php/blog/6alblog.rar Author.......: CrackersChild | [email protected] & [email protected] Class........: Remote SQL Injection and Remote File...

Code injection

daemon.c in cman redhat-cluster-suite before 20070622 does not clear a buffer for reading requests, which might allow local users to obtain sensitive information from previous requests...

Acoustica MP3 CD Burner 4.32 - Local Buffer Overflow (PoC)

/ Credit's to n00b for finding this bug and poc.. Acoustica MP3 CD Burner 4.32 local buffer-overflow poc code. Date : May 31'st 2007 Tested:On win xp sp 2. Acoustica Is prone to a buffer-overflow when parasing a .asx playlist file If you can entice some one to open a specialy crafted .asx play li...

CVE-2007-2553

CVE-2007-2553 affects HP Tru64 UNIX 5.1B-4, 5.1B-3, and 5.1A PK6. The issue is an unspecified vulnerability that lets local users gain privileges by providing a large amount of data in the environment, demonstrated by a long environment variable. The connected sources confirm the affected version...

IrfanView 3.99 .ANI File Local Buffer Overflow Exploit (multiple targets)

Exploit for unknown platform in category local exploits ========================================================================= IrfanView 3.99 .ANI File Local Buffer Overflow Exploit multiple targets ========================================================================= / IrfanView 3.99 .ANI...