4848 matches found
Linux Kernel <= 2.6.12-rc4 (ioctl_by_bdev) Local Denial of Service Exploit
No description provided by source. / pktcdvddos.c proof-of-concept This is only a lame POC which will crash the machine, no root shell here. --- alert7 2005-5-15 the vulnerability in 2.6 up to and including 2.6.12-rc4 gcc -o pktcdvddos pktcdvddos.c NOTE: require user can read pktcdvd block device...
Linux Kernel < 2.6.19 udp_sendmsg Local Root Exploit
No description provided by source. / hoagieudpsendmsg.c LOCAL LINUX KERNEL ROOT EXPLOIT 2.6.19 - CVE-2009-2698 udpsendmsg bug exploit via output callback function used in dstentry / rtable Bug reported by Tavis Ormandy and Julien Tinnes of the Google Security Team Tested with Debian Etch r0 $ cat...
Xsok 1.02 - "-xsokdir" Local Buffer Overflow Game Exploit
No description provided by source. / 0x333xsok 2 = xsok 1.02 local game exploit Happy new year ! 2 : coded by c0wboy c 0x333 Outsiders Security Labs / www.0x333.org / include stdio.h include unistd.h define BIN /usr/games/xsok define RETADD 0xbffffa3c define SIZE 200 unsigned char shellcode = /...
DelphiTurk FTP 1.0 - Passwords to Local Users Exploit
No description provided by source. / DelphiTurk FTP v1.0 Local Exploit by Kozan Application: DelphiTurk FTP v1.0 Procuder: Delphiturk.com and Delphikitabi.com Vulnerable Description: DelphiTurk FTP v1.0 passwords to local users. Coded by: Kozan Web : www.netmagister.com Web2: www.spyinstructors.c...
Mac OS X <= 10.3.8 (CF_CHARSET_PATH) Local BOF Exploit (2)
No description provided by source. !/usr/bin/perl http://www.digitalmunition.com written by kf kflistsatdigitalmunitiondotcom Variant of CFCHARSETPATH a local root exploit by v9atfakehalo.us I was in the mood for some retro shit this morning, and I need root on some old ass G3 iMacs for a demo. I...
Euphonics Audio Player 1.0 - (.pls) Local Buffer Overflow Exploit
No description provided by source. !/usr/bin/perl -w ----------------------------------------------------------------------------- Author : h4ck3r47 Euphonics Audio Player v1.0 .pls Local Buffer Overflow Exploit Tested in Windows Pro Sp3 English Gr33tz to : str0ke , T.N.T:18 , AlpHaNiX , All...
Vixie Cron crontab 3.0 Privilege Lowering Failure Vulnerability (1)
No description provided by source. source: http://www.securityfocus.com/bid/2687/info Vixie cron is an implementation of the popular UNIX program that runs user-specified programs at periodic scheduled times. When a parsing error occurs after a modification operation, crontab will fail to drop...
dislocate 1.3 - Local i386 Exploit
No description provided by source. / MasterSecuritY www.mastersecurity.fr dislocate.c - Local i386 exploit in v1.3 Secure Locate v2.3 Copyright C 2000 Michel MaXX Kaempf [email protected] Updated versions of this exploit and the corresponding advisory will be made available at:...
Sudo 1.5/1.6 Heap Corruption Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2829/info Sudo superuser do is a security utility that allows administrator to give 'restricted' superuser privileges to certain users. Sudo contains a locally exploitable buffer overrun vulnerability. The overrun conditi...
BSD-Games 2.x Monop Player Name Local Buffer Overrun Vulnerability (1)
No description provided by source. source: http://www.securityfocus.com/bid/8501/info Monop included in bsd-games is prone to a locally exploitable buffer overrun vulnerability. This is due to insufficient bounds checking of player names. Monop is typically installed setgid games, so it is possib...
Password Door 8.4 Local Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/33634/info Password Door is prone to a local buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied input. Attackers may leverage this issue to execute arbitrary code in the...
BitchX <= 1.0c20 Local Buffer Overflow Exploit
No description provided by source. / Tested on BitchX-1.0c19 /str0ke / / P.o.C Exploit Code for BitchX made for Version BitchX-1.0c20cvs -- Date 20020325 C 2004. GroundZero Security Research and Software Development http://www.groundzero-security.com released under the GNU GPL -...
AIMP2 Audio Converter <= 2.53b330 (.pls/.m3u) Unicode Crash PoC
No description provided by source. !/usr/bin/python AIMP2 Audio Converter = 2.53 build 330 .pls/.m3u Unicode local crash PoC Found & exploited by: mrme Download: ftp://www.catode.ru/AIMP/aimp2.51.330.zip Tested on: Wind0ws XP SP3 Unicode overflow, maybe someone with better skills can exploit this...
HexChat 2.9.4 - Local Exploit
No description provided by source. !/usr/bin/python HexChat 2.9.4 Local Exploit Bug found by Jules Carter @iMulitia Exploit by Matt hostess Andreko mandreko at accuvant.com http://www.mattandreko.com/2013/04/buffer-overflow-in-hexchat-294.html junk1 = B30 shellcode = msfvenom -p windows/messagebo...
IRCnet IRCD 2.10 Local Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8817/info IRCnet IRCD has been reported prone to a buffer overflow vulnerability that may be exploited by local users. This issue may be exploited to crash the affected server. Although unconfirmed, due to the nature of...
Oracle Solaris - 'su' Local Solaris Vulnerability
No description provided by source. From http://cvs.opensolaris.org/source/xref/onnv/onnv-gate/usr/src/cmd/su/su.c 521 for j = 0; initenvj != 0; j++ 1 522 if initvar = getenvinitenvj 2 ... 535 else 536 var = char 537 mallocstrleninitenvj 3 538 + strleninitvar 539 + 2; 540 void strcpyvar, initenvj;...
Mandrake 6.x,RedHat 6.x,Turbolinux 3.5 b2/4.x/6.0.2 userhelper/PAM Path Vulnerability (2)
No description provided by source. source: http://www.securityfocus.com/bid/913/info Because of double path vulnerabilities in the binary userhelper and PAM, it is possible to get root locally on RedHat 6.0 and 6.1 systems. Both userhelper and PAM follow .. paths and userhelper allows you to...
CVE-2014-0012
CVE-2014-0012 affects Jinja2 2.7.2: FileSystemBytecodeCache does not securely create temporary directories, allowing a local user to gain privileges by pre-creating a temp directory with that user’s UID. The issue exists due to an incomplete prior fix for CVE-2014-1402. Several connected advisori...
CVE-2014-0135
CVE-2014-0135 affects Kafo before 0.3.17 and 0.4.x before 0.5.2 (as used by Foreman). The issue is that default_values.yaml is world-readable, allowing local users to read passwords and other sensitive information. Remediation is to upgrade Kafo to 0.3.17+ or 0.4.x to 0.5.2+ (where fixed). If not...
CVE-2014-0470
CVE-2014-0470 affects the Super package (version 3.30.0) where the setuid() return value is not checked when the -F flag is used, enabling local privilege escalation via an RLIMIT_NPROC scenario. Root cause: failure to verify setuid() result. Public references (e.g., Debian security advisory DSA-...