Stack overflow

Multiple stack-based buffer overflows in the magicmouserawevent function in drivers/hid/hid-magicmouse.c in the Magic Mouse HID driver in the Linux kernel through 3.16.3 allow physically proximate attackers to cause a denial of service system crash or possibly execute arbitrary code via a crafted...

CVE-2014-3181

Multiple stack-based buffer overflows in the magicmouserawevent function in drivers/hid/hid-magicmouse.c in the Magic Mouse HID driver in the Linux kernel through 3.16.3 allow physically proximate attackers to cause a denial of service system crash or possibly execute arbitrary code via a crafted...

CVE-2014-3181

Multiple stack-based buffer overflows in the magicmouserawevent function in drivers/hid/hid-magicmouse.c in the Magic Mouse HID driver in the Linux kernel through 3.16.3 allow physically proximate attackers to cause a denial of service system crash or possibly execute arbitrary code via a crafted...

PT-2014-5121 · Linux +5 · Linux Kernel +5

Name of the Vulnerable Software and Affected Versions: Linux kernel versions through 3.16.3 Description: The issue is related to multiple stack-based buffer overflows in the magicmouse raw event function in the Magic Mouse HID driver. This allows physically proximate attackers to cause a denial o...

CVE-2014-3181

Multiple stack-based buffer overflows in the magicmouserawevent function in drivers/hid/hid-magicmouse.c in the Magic Mouse HID driver in the Linux kernel through 3.16.3 allow physically proximate attackers to cause a denial of service system crash or possibly execute arbitrary code via a crafted...

UBUNTU-CVE-2014-3181

Multiple stack-based buffer overflows in the magicmouserawevent function in drivers/hid/hid-magicmouse.c in the Magic Mouse HID driver in the Linux kernel through 3.16.3 allow physically proximate attackers to cause a denial of service system crash or possibly execute arbitrary code via a crafted...

eShop Magic 0.1 - eshop-magic/download.php file Parameter Traversal Arbitrary File Access

The Eshop Magic WordPress plugin was affected by an eshop-magic/download.php file Parameter Traversal Arbitrary File Access security vulnerability...

齐博cmsV7整站系统sql注入

简要描述： 应该逻辑有点小错误? 详细说明： http://down.qibosoft.com/down.php?v=v7 刚下载来测试的 发现点问题。 function AddS$array foreach$array as $key=$value if!isarray$value @eregi"'\"&+",$key && die'ERROR KEY!'; $value=strreplace"&x","& x",$value; //过滤一些不安全字符 $value=pregreplace"/eval/i","eva l",$value; //过滤不安全函数...

[SECURITY] Fedora 19 Update: ipython-0.13.2-4.fc19

IPython provides a replacement for the interactive Python interpreter with extra functionality. Main features: Comprehensive object introspection. Input history, persistent across sessions. Caching of output results during a session with automatically generated references. Readline based name...

World Of Warcraft 3.3.5a - macros-cache.txt Stack Overflow

World Of Warcraft 3.3.5a - macros-cache.txt Stack Overflow Exploit Title: World Of Warcraft 3.3.5a Stack Overflow macros-cache.txt Date: 21 Jul 2014 Exploit Author: Alireza Chegini @nimaarek Vendor Homepage: http://us.battle.net/wow/ Version: 3.3.5a Tested on: Win7 Output: --WoWError CrashDUmp :...

Reamday Enterprises Magic News Plus 1.0.2 Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/37566/info Magic News Plus is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in t...

chCounter <= 3.1.3 - SQL Injection Vulnerability

No description provided by source. !/usr/bin/python Exploit Title: chCounter = 3.1.3 SQLInjection Date: 2010/11/18 Author: Matias [email protected]. Software Link: http://chcounter.org/chCounter3/getfile.php?id=5 Version: 3.1.3 Tested on: Ubuntu Server 10.04 with apache...

Mambo/Joomla Component rsgallery <= 2.0b5 (catid) SQL Injection Vuln

No description provided by source. \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV86$2007 ----------------------------------------------------------------------------------------- ECHOADV86$2007 Mambo/Joomla Component rsgallery = 2.0 beta 5 catid Remote...

pSys 0.7.0 Alpha - (chatbox.php) Remote SQL Injection Vulnerability

No description provided by source. '/ -.- ---------------------oOO------OOo-------------------- | pSys v0.7.0 Alpha chatbox.php Remote SQL Injection | | works only with magic quotes = off | | coded by DNX | -------------------------------------------------------- ! Discovered.: DNX ! Vendor.....:...

minitwitter 0.3-beta (sql/xss) Multiple Vulnerabilities

No description provided by source. || || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH! ---------------------...

OvBB 0.16a - Multiple Local File Inclusion Vulnerabilities

No description provided by source. OvBB v0.16a Multiple Local File Inclusion Vulnerabilities Found by cOndemned Tested on Linux Debian apache + php5 + mysql download at http://sourceforge.net/projects/ovbb/ source of /skins/default/addevent.tpl.php 1. ?php 2. // Header. 3. $strPageTitle = ::...

ig shop 1.0 (eval/SQL Injection) Multiple Vulnerabilities

No description provided by source. If eval is the answer, then you are asking the wrong question. --Unknowen ig-shop suffers from two eval's that can be controlled by an attacker: http://127.0.0.1/igshop/cart.php?action=;phpinfo;// ./cart.php line 692: eval cart$action;;...

Online University (Auth Bypass) SQL Injection Vulnerability

No description provided by source. '/ -.- --------------------oOO------OOo----------------------------- | Online University Auth Bypass SQL Injection Vulnerability | | works only with magicquotesgpc = off | ---------------------------------------------------------------- ! Discovered: cr4wl3r...

Magic Photo Storage Website user/add_category.php _config[site_path] Parameter Remote File Inclusion

No description provided by source. source: http://www.securityfocus.com/bid/21965/info Magic Photo Storage Website is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the...

Blue Eye CMS <= 1.0.0 - Remote Cookie SQL Injection Vulnerability

No description provided by source. BlueEye CMS = 1.0.0 Remote Cookie SQL Injection Vulnerability found by ka0x ka0x01alt+64gmail.com Download: http://kent.dl.sourceforge.net/sourceforge/blueeyecms/blueeyecms-100preRC.rar need magicquotesgpc = Off - Vuln code: 10: if !empty$COOKIEBlueEyeCMSlogin /...