Mac OS X <= 10.3.3 AppleFileServer Remote Root Overflow Exploit

No description provided by source. !/usr/bin/perl Priv8security com remote root exploit for AppleFileServer. PUBLIC VERSION!!!! Bug found by Dave G. and Dino Dai Zovi. URL: http://www.atstake.com/research/advisories/2004/a050304-1.txt wsxz@localhost buffer$ perl priv8afp.pl -h 10.4.12.199 -t 0...

Mac OS X 10.x 'libc/strtod(3)' Memory Corruption Vulnerability

source: http://www.securityfocus.com/bid/37687/info Mac OS X is prone to a memory-corruption vulnerability because the software fails to properly bounds-check data used as an array index. Attackers may exploit this issue to execute arbitrary code within the context of affected applications. Mac O...

Mac OS X <= 10.3.8 (CF_CHARSET_PATH) Local BOF Exploit (2)

No description provided by source. !/usr/bin/perl http://www.digitalmunition.com written by kf kflistsatdigitalmunitiondotcom Variant of CFCHARSETPATH a local root exploit by v9atfakehalo.us I was in the mood for some retro shit this morning, and I need root on some old ass G3 iMacs for a demo. I...

Apple Mac OS X 10.4.x Shared_Region_Make_Private_Np Kernel Function Local Memory Corruption Vulnerability

No description provided by source...

Arkeia Backup Client Type 77 Overflow (Mac OS X)

No description provided by source. $Id: type77.rb 9262 2010-05-09 17:45:00Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Safari + Quicktime <= 7.3 RTSP Content-Type Remote BOF Exploit

No description provided by source. !/usr/bin/perl quickbite.pl Safari + Quicktime = 7.3 RTSP Content-Type overflow exploit for Mac OS X Intel Tested with OS X 10.4. On victim, browse to http://server:8080/ Binds shell on port 4444. by krafty greets to sk, halvar, grugq, and all the ethnical hacke...

Apple Mac OS X 10.x KExtLoad Format String Weakness

No description provided by source. source: http://www.securityfocus.com/bid/20031/info Apple Mac OS X 'kextload' is prone to a format-string vulnerability because it fails to sufficiently sanitize user-supplied input data. This issue is not exploitable by itself, because kextload is not installed...

teamspeak <= 3.0.0-beta25 Multiple Vulnerabilities

No description provided by source. Luigi Auriemma Application: TeamSpeak 3 http://www.teamspeak.com Versions: = 3.0.0-beta23 2.x not affected Platforms: Windows, Mac OS X and Linux Bugs: A execution of various admin commands B various failed assertions C various NULL pointer dereferences...

Apple iOS MobileSafari LibTIFF Buffer Overflow

No description provided by source. $Id: safarilibtiff.rb 15950 2012-10-09 18:31:08Z rapid7 $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use...

Mac OS X <= 10.4.8 pppd Plugin Loading Privilege Escalation Exploit

No description provided by source. Mac OS X = 10.4.8 pppd Plugin Loading Privilege Escalation Exploit http://www.exploit-db.com/sploits/05252007-osxpppd.tar milw0rm.com 2007-05-25...

Apple Mac OS X v10.4.11 2007-008 i386_set_ldt System Call Local Arbitrary Code Execution

No description provided by source. source: http://www.securityfocus.com/bid/26444/info Apple Mac OS X is prone to multiple security vulnerabilities. These issues affect Mac OS X and various applications, including AppleRAID, CFFTP, CFNetwork, CoreFoundation, CoreText, kernel, remotecmds,...

Apple Mac OS X 10.4.x AppleTalk AIOCRegLocalZN IOCTL Stack Buffer Overflow Vulnerability

No description provided by source...

Apple Mac OS X 10.2.2 Directory Kernel Panic Denial of Service

No description provided by source. source: http://www.securityfocus.com/bid/6331/info Mac OS X is the BSD-derived operating system distributed and maintained by Apple Sofware. It has been reported that a denial of service exists in OS X. When a user creates a directory, descends it, creates anoth...

SugarCRM Community Edition 6.5.2 (Build 8410) Multiple Vulnerabilities

No description provided by source. SugarCRM Community Edition 6.5.2 Build 8410 multiple vulnerabilities Brendan Coles http://itsecuritysolutions.org/ 2012-07-26 There are multiple security vulnerabilities in SugarCRM Community Edition 6.5.2 Build 8410 which may allow an attacker to take control o...

Flowerfire Sawmill 5.0.21 Weak Password Encryption Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/1403/info Sawmill is a site statistics package for Unix, Windows and Mac OS. Passwords are encrypted using a weak hash function. This combined with the file disclosure vulnerability in Sawmill bid = 1402 could allow an...

Apple Mac OS X 10.x AirPort Wireless Driver Multiple Buffer Overflow Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/20144/info The Apple Mac OS X AirPort wireless driver is prone to multiple buffer-overflow vulnerabilities because it fails to perform sufficient bounds checking before copying data to finite-sized buffers. An attacker ca...

Mozilla Firefox ESR Multiple Vulnerabilities-01 (Jul 2014) - Mac OS X

Mozilla Firefox ESR is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefoxesr";...

Mac OS X < 2007-005 - (vpnd) Local Privilege Escalation Exploit

Copyright c 2007 Kevin Finisterre kflists at digitalmunition.com CVE-ID: CVE-2007-0753 - http://docs.info.apple.com/article.html?artnum=305530 http://www.exploit-db.com/sploits/05302007-vpenis.tar.gz milw0rm.com 2007-05-30...

MySQL <= 6.0 yaSSL <= 1.7.5 - Hello Message Buffer Overflow

MySQL yaSSL SSL Hello Message Buffer Overflow 1. 漏洞介绍和分析 yaSSL是用于实现SSL的开源软件包。 yaSSL实现上存在多个远程溢出及无效内存访问问题，远程攻击者可能利用此漏洞控制服务器。 向堆栈缓冲区溢出的yaSSL1.7.5和更早的版本实现与MySQL捆绑 = 6.0。通过发送一个专门制作的HEllo 包 ，攻击者可以执行任意代码。 代码分析： 用于包含客户端所接收的Hello报文中的数据的缓冲区结构如下源自yasslimp.hpp： class ClientHello : public HandShakeBase...

Mac OS X 10.9.x < 10.9.4 Multiple Vulnerabilities

The remote host is running a version of Mac OS X 10.9.x that is prior to 10.9.4. This update contains several security-related fixes for the following components : - Certificate Trust Policy - copyfile - curl - Dock - Graphics Driver - iBooks Commerce - Intel Graphics Driver - Intel Compute -...