Design/Logic Flaw

The wanxlioctl function in drivers/net/wan/wanxl.c in the Linux kernel before 3.11.7 does not properly initialize a certain data structure, which allows local users to obtain sensitive information from kernel memory via an ioctl call...

CVE-2013-7271

The CVE-2013-7271 issue affects the Linux kernel up to versions before 3.12.4. The vulnerability exists in x25_recvmsg (net/x25/af_x25.c), where a length value is updated without ensuring the associated data structure is initialized, enabling local attackers to disclose kernel memory content via ...

CORE-2013-0807 - Divide Error in Windows Kernel

Core Security - Corelabs Advisory http://corelabs.coresecurity.com/ Divide Error in Windows Kernel 1. Advisory Information Title: Divide Error in Windows Kernel Advisory ID: CORE-2013-0807 Advisory URL: http://www.coresecurity.com/advisories/divide-error-in-windows-kernel Date published: 2013-12-...

KLA10307 LPE vulnerability in RealVNC

An unspecified vulnerability was found in RealVNC. By exploiting this vulnerability malicious users can gain privileges. This vulnerability can be exploited locally via a specially designed argument. Original advisories - Exploitation Public exploits exist for this vulnerability. Related products...

Windows Live Movie Maker 2011 Denial Of Service

!/usr/bin/env ruby Title: Windows Live Movie Maker 2011 .wav DoS Local Exploit Version: Version 2011 Build 15.4.53508.1109 Tested on: Windows 7 Professional 32-bit SP1 E-Mail: [email protected] Exploit-Author: Osanda Malith Jayathissa Video: https://www.youtube.com/watch?v=SBJYzSNdY6k /!...

QuickHeal AntiVirus 7.1 PRO - Stack Overflow Vulnerability

Document Title: =============== QuickHeal AntiVirus 7.1 PRO - Stack Overflow Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1173 View: http://www.youtube.com/watch?v=6aQR8H6HoCs http://www.vulnerability-lab.com/getcontent.php?id=1171 Resources:...

IcoFX Buffer Overflow Vulnerability

Advisory ID Internal CORE-2013-1107 1. Advisory Information Title: IcoFX Buffer Overflow Vulnerability Advisory ID: CORE-2013-1107 Date published: 2013-12-10 Date of last update: 2013-12-10 Vendors contacted: IcoFX Software Release mode: User release 2. Vulnerability Information Class: Buffer...

CVE-2013-6171

CVE-2013-6171 affects Dovecot up to version 2.2.6 (before 2.2.7). The vulnerability arises in the checkpassword-reply path, which performs setuid operations to a user who is authenticating. This can allow a local attacker to bypass authentication and access virtual email accounts by attaching to ...

PT-2022-2030

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw was found in the Linux kernel in the netfilter subsystem, specifically in the linux/net/netfilter/nf tables api.c file. This issue allows a local user to cause an out-of-bounds...

XADV-2013007 Linux Kernel bt8xx Video Driver IOCTL Heap Overflow

+--------------------------------------------------------------------+ | XADV-2013007 Linux Kernel bt8xx Video Driver IOCTL Heap Overflow | +--------------------------------------------------------------------+ Vulnerable versions: - linux kernel 2.6.18 = Testbed: ubuntu Type: Local Impact: Mediu...

Rootkit Privilege Escalation Signal Hunter

This module searches for rootkits which use signals to elevate process privileges to UID 0 root. Some rootkits install signal handlers which listen for specific signals to elevate process privileges. This module identifies these rootkits by sending signals and observing UID switching to root. Thi...

CVE-2013-4370

The ocaml binding for the xcvcpugetaffinity function in Xen 4.2.x and 4.3.x frees certain memory that may still be intended for use, which allows local users to cause a denial of service heap corruption and crash and possibly execute arbitrary code via unspecified vectors that trigger a 1...

DEBIAN-CVE-2013-4256

Multiple stack-based and heap-based buffer overflows in Network Audio System NAS 1.9.3 allow local users to cause a denial of service crash or possibly execute arbitrary code via the 1 display command argument to the ProcessCommandLine function in server/os/utils.c; 2 ResetHosts function in...

PinApp Mail-SeCure Access Control Failure

Core Security Technologies Advisory - A security vulnerability was discovered in PineApp Mail-SeCure Suite, allowing a non-privileged attacker to get a root shell by sending a specially crafted command from the Mail-SeCure console. A valid user account is needed to launch the attack, so this is a...

PinApp Mail-SeCure 3.70 - Access Control Failure

PinApp Mail-SeCure 3.70 - Access Control Failure Core Security - Corelabs Advisory http://corelabs.coresecurity.com/ PinApp Mail-SeCure Access Control Failure 1. Advisory Information Title: PinApp Mail-SeCure Access Control Failure Advisory ID: CORE-2013-0904 Advisory URL:...

IBM AIX 6.1/7.1 - Local Privilege Escalation

Exploit-DB Note: Screenshot provided by exploit author !/bin/sh Exploit Title: IBM AIX 6.1 / 7.1 local root privilege escalation Date: 2013-09-24 Exploit Author: Kristian Erik Hermansen Vendor Homepage: http://www.ibm.com Software Link: http://www-03.ibm.com/systems/power/software/aix/about.html...

WinAmp 5.63 (winamp.ini) Local Exploit

No description provided by source. Exploit Title: winampevilskin.py Date: 25 August 2013 Exploit Author: Ayman Sagy [email protected] Vendor Homepage: http://www.winamp.com/ Version: 5.63 Tested on: Windows XP Professional SP3 Version 2002 CVE : 2013-4694 Ayman Sagy [email protected] August...

CVE-2013-3956

The NICM.SYS kernel driver (version 3.1.11.0) is vulnerable to local privilege escalation across multiple operating systems, including Windows XP , Windows Vista , Windows 7 , Windows 8 , and various Windows Server versions. The root cause is a failure to validate pointers from user-mode buffers ...

KLA10146 OSI vulnerability in EMC NetWorker

An unspecified vulnerability was found in EMC NetWorker. By exploiting this vulnerability malicious users can obtain configuration information. This vulnerability can be exploited locally. Original advisories - Exploitation Related products EMC-NetWorker CVE list CVE-2013-0943 warning Solution...

CVE-2013-0555: IBM Security Access Manager for Enterprise Single Sign-On information disclosure

ISAM ESSO Sync.exe in IBM Security Access Manager for Enterprise Single Sign-On is vulnerable to a local code-injection flaw that can be exploited by a local administrator to access confidential data. The issue requires administrative authentication, is exploitable only locally, and does not affe...