5640 matches found
xaviershay-dm-rails Gem for Ruby exposes sensitive information via the process table
xaviershay-dm-rails Gem for Ruby contains a flaw in the execute function in /datamapper/dm-rails/blob/master/lib/dm-rails/storage.rb. The issue is due to the function exposing sensitive information via the process table. This may allow a local attack to gain access to MySQL credential information...
VeryPhoto v3.0 iOS - Command Injection Vulnerability
Document Title: =============== VeryPhoto v3.0 iOS - Command Injection Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1401 Release Date: ============= 2015-01-13 Vulnerability Laboratory ID VL-ID: ==================================== 1401...
ZTE Datacard MF180 Privilege Escalation / DLL Hijacking
/ Exploit Title:ZTE Datacard MF180 PCWTNZNZLMF180V1.0.0B02 Telecom MF180 Modem Insecure Permissions Local Privilege Escalation & PoC Local crash & Path Subversion Arbitrary DLL Injection Code Execution mmsdllr.dll Date: 10/01/2015 Author: Hadji Samir [email protected] Link...
MGASA-2014-0461 Updated hawtjni packages fix security vulnerability
The HawtJNI Library class wrote native libraries to a predictable file name in /tmp/ when the native libraries were bundled in a JAR file, and no custom library path was specified. A local attacker could overwrite these native libraries with malicious versions during the window between when HawtJ...
PayPal Inc #90 PM - Buffer Overflow Vulnerability
Document Title: =============== PayPal Inc 90 PM - Buffer Overflow Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=940 http://www.vulnerability-lab.com/getcontent.php?id=1274 Release Date: ============= 2014-10-02 Vulnerability Laboratory I...
Apple iOS v7.1.2 - (Merge Apps) Bypass Vulnerability
Document Title: =============== Apple iOS v7.1.2 - Merge Apps Bypass Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1280 Video: http://www.vulnerability-lab.com/getcontent.php?id=1281 Vulnerability Magazine:...
F-Secure Key Plaintext Information Disclosure (Mac OS X)
The version of F-Secure Key installed on the remote Mac OS X host is older than 1.5.146. It is, therefore, affected by an unspecified error that could allow a local attacker to dump the contents of memory and obtain sensitive plaintext information. C Tenable Network Security, Inc...
Cisco Small Business SPA300 and SPA500 Series IP Phones Local Code Execution Vulnerability
A vulnerability in the Cisco Small Business SPA300 and SPA500 Series IP Phones could allow an unauthenticated, local attacker to access the debug shell and file system of the affected device. The vulnerability is due to insufficient authentication implementation in the debug console interface. An...
IBM DB2 db2govd Command Line Argument Local Overflow
No description provided by source. source: http://www.securityfocus.com/bid/8990/info IBM DB2 has been reported to be prone to multiple buffer overflow vulnerabilities that present themselves in binaries that are shipped with DB2. The vulnerabilities are likely caused due to a lack of sufficient...
Linux Kernel <= 2.4.23, <= 2.6.0 - "do_mremap" Local Proof of Concept
No description provided by source. / Proof-of-concept exploit code for domremap Copyright C 2004 Christophe Devine and Julien Tinnes This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software...
kon2 Local Buffer Overflow Vulnerability (1)
No description provided by source. source: http://www.securityfocus.com/bid/7790/info A buffer overflow vulnerability has been reported for the kon2 utility shipped with various Linux distributions. Exploitation of this vulnerability may result in a local attacker obtaining elevated privileges on...
HP-UX 10.x stmkfont Alternate Typeface Library Buffer Overflow Vulnerability (2)
No description provided by source. source: http://www.securityfocus.com/bid/6836/info A buffer overflow vulnerability has been reported in the stmkfont utility shipped with HP-UX systems. The problem occurs due to insufficient bounds checking on user-suplied data to the alternate typeface library...
MS Windows Vista - Forged ARP packet Network Stack DoS Exploit
No description provided by source. !/usr/bin/env python :: Kristian Hermansen :: Date: 20070514 Reference: CVE-2007-1531 Description: Microsoft Windows Vista SP0 dumps interfaces when it receives this ARP packet. This DoS is useful for an internet cafe, wireless venue, or legitimate local attack...
Notepad++ 5.4.5 - Local .C/CPP Stack Buffer Overflow PoC (0day)
No description provided by source. / 0dayNotepad++ 5.4.5 Local .C/CPP Stack Buffer Overflow POC by fl0 fl0w / / LATEST FIXES Notepad++ v5.4.5 fixed bugs from v5.4.4 : 1. Fix plugins shortcuts not working bug. 2. Fix the tooltip on toolbar display bug for the plugins icons. 3. Fix a crash that was...
MicroP 0.1.1.1600 - (.mppl) Local Stack Based Buffer Overflow
No description provided by source. !/usr/bin/env ruby Exploit Title:MicroP.mppl Local Stack Based Buffer Overflow Author:Necmettin COSKUN = twitter.com/babayarisi Blog : http://www.ncoskun.com http://www.grisapka.org Vendor :http://sourceforge.net/projects/microp/ Software...
FreeBSD 3.3 angband Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/840/info The version angband shipped with FreeBSD 3.3-RELEASE is vulnerable to a local buffer overflow attack. Since it is setgid games, a compromise of files and directories owned by group games is possible. / FreeBSD 3....
Martin Stover Mars NWE 0.99 Buffer Overflow Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/617/info There are several buffer overflows in the setuid root components of the Mars Netware Emulator package. They allow for a local root compromise through the overflowing of buffers without bounds checking. It is to b...
XFS Deleted Inode Local Information Disclosure Vulnerability
No description provided by source. / stalehandle.c - attempt to create a stale handle and open it Copyright C 2010 Red Hat, Inc. All Rights reserved. This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free...
Zend Platform 2.2.1 PHP.INI File Modification Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/22802/info The Zend Platform is prone to an issue that may let local attackers modify the PHP configuration file 'php.ini'. This issue occurs because the application is installed with an 'inimodifier' program that may be...
SoftiaCom WMailserver 1.0 - Local Information Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/14212/info SoftiaCom WMailserver is prone to a local information disclosure vulnerability. The application stores passwords in the windows registry. A local attacker may exploit this issue to disclose potentially sensitiv...