Gentoo Linux Data Compromise

The vulnerability of the Subversion package up to version 1.0.4-r1 inclusive of the Gentoo Linux operating system can lead to a violation of the confidentiality of protected information. This vulnerability can be exploited locally...

Gentoo Linux Info Disclosure

The vulnerability of the vixie-cron package up to version 4.1-r10 of the Gentoo Linux operating system can lead to the compromise of protected information. This vulnerability can be exploited locally...

Red Hat Enterprise Linux Data Compromise

The multiple vulnerabilities in the ecryptfs-utils-82 package of the Red Hat Enterprise Linux operating system can be exploited, leading to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited locally...

Red Hat Enterprise Linux Data Compromise

The multiple vulnerabilities in the ecryptfs-utils-gui-75 package of the Red Hat Enterprise Linux operating system can be exploited, leading to breaches of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited locally...

CentOS Data Compromise

The multiple vulnerabilities of the ecryptfs-utils-devel-82 package on the CentOS operating system can lead to breaches of confidentiality, integrity, and accessibility of protected information. Exploitation of these vulnerabilities can be carried out locally...

CentOS Data Compromise

The multiple vulnerabilities in the systemtap-client-1.1 package of the CentOS operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. Exploitation of these vulnerabilities can be carried out locally...

Apple MAC OS X < 10.9/10 - Local Root Exploit

Exploit for macOS platform in category local exploits / osx-irony-assist.m Copyright c 2010 by Apple MACOS X include import import / where you want to write it! / define BACKDOORBIN "/var/db/.AccessibilityAPIEnabled" int doassistivecopyconst char spath, const char dpath NSAutoreleasePool pool =...

Exploit for CVE-2015-1318

CVE-2015-1318 Exploit I used to claim 10% final-grade extra c...

CVE-2015-2831

The CVE-2015-2831 issue affects das-watchdog 0.9.0, where a buffer overflow can be triggered by a large string in the XAUTHORITY environment variable, allowing a local user to escalate to root privileges. Public sources in the connected documents confirm the root-context impact and local-access v...

PT-2015-3328

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to 3.10.77 Description The issue is related to the function load elf binary in the Linux kernel, which incorrectly allocates address space for PIE binaries when CONFIG ARCH BINFMT ELF RANDOMIZE PIE is enabled and a...

Mini-Stream RM-MP3 Converter 2.7.3.700 Buffer Overflow

!/usr/bin/env python + Author: TUNISIAN CYBER + Exploit Title: Mini-sream RM-MP3 Converter v2.7.3.700 Local Buffer Overflow + Date: 25-03-2015 + Type: Local Exploits + Tested on: WinXp/Windows 7 Pro + Vendor:...

Schneider Electric Wonderware System Platform Vulnerabilities

OVERVIEW Ivan Sanchez of WiseSecurity Team has identified a fixed search path vulnerability in Schneider Electric’s Wonderware InTouch, Application Server, Historian, and SuiteLink applications, which are part of the Wonderware System Platform suite. Schneider Electric has produced a patch that...

KLA10480 Security bypass in Linux Kernel

Race condition was found in Linux Kernel. By exploiting this vulnerability malicious users bypass security restrictions. This vulnerability can be exploited locally via manipulating with handlebytes value. Original advisories - Exploitation Related products Linux-Kernel CVE list CVE-2015-1420...

Exploit for CVE-2014-7911

CVE-2014-7911poc Local root exploit for Nexus5 Android 4.4.4...

Crystal Player 1.99 - Memory Corruption

Crystal Player 1.99 - Memory Corruption Document Title: =============== Crystal Player 1.99 - Memory Corruption Vulnerability Date: ============= 21/01/2015 Vendor Homepage: ================ http://www.crystalreality.com/ Abstract Advisory Information: ============================== Memory...

CVE-2014-1425

cmanager 0.32 does not properly enforce nesting when modifying cgroup properties, which allows local users to set cgroup values for all cgroups via unspecified vectors...

ZTE Ucell 3G Modem App - Privilege Escalation Vulnerability

Document Title: =============== ZTE Ucell 3G Modem App - Privilege Escalation Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1387 Release Date: ============= 2014-12-24 Vulnerability Laboratory ID VL-ID: ===================================...

kernel: x86: local privesc due to bad_iret and paranoid entry incompatibility

A flaw was found in the way the Linux kernel handled GS segment register base switching when recovering from a SS stack segment fault on an erroneous return to user space. A local, unprivileged user could use this flaw to escalate their privileges on the system...

Important: Red Hat Security Advisory: libXfont security update

Updated libXfont packages that fix three security issues are now available for Red Hat Enterprise Linux 6 and 7. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

ObjectInputStream deserializable

In Android 5.0, java.io.ObjectInputStream did not check whether the Object that is being deserialized is actually serializable. That issue was fixed in Android 5.0. This means that when ObjectInputStream is used on untrusted inputs, an attacker can cause an instance of any class with a non-privat...