kernel: open() call allows setgid bit when user is not in new file's group

fs/open.c in the Linux kernel before 2.6.22 does not properly strip setuid and setgid bits when there is a write to a file, which allows local users to gain the privileges of a different group, and obtain sensitive information or possibly have unspecified other impact, by creating an executable...

BreakPoint Software Hex Workshop Denial of Service vulnerability

Hex Workshop is prone to a denial of service vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

kernel: open() call allows setgid bit when user is not in new file's group

fs/open.c in the Linux kernel before 2.6.22 does not properly strip setuid and setgid bits when there is a write to a file, which allows local users to gain the privileges of a different group, and obtain sensitive information or possibly have unspecified other impact, by creating an executable...

Hex Workshop 5.1.4 Local Buffer Overflow

Hex Workshop 5.1.4 Color Mapping File Local Buffer Overflow Poc other versions are affected By:Encrypt3d.M!nd Merry Christmas & Happy New Year 2009 Greetz:-=Mizo=-Perra :-l,L!0N,El Mariachi,MiNi SpIder,GGY,and all my friends Just import enc.cmap From ToolsColor Mapping And See What Happen ^^ I...

CVE-2008-5756

Buffer overflow in BreakPoint Software Hex Workshop 5.1.4 allows user-assisted attackers to cause a denial of service and possibly execute arbitrary code via a long mapping reference in a Color Mapping .cmap file...

Buffer overflow

Buffer overflow in BreakPoint Software Hex Workshop 5.1.4 allows user-assisted attackers to cause a denial of service and possibly execute arbitrary code via a long mapping reference in a Color Mapping .cmap file...

CVE-2008-5756

Buffer overflow in BreakPoint Software Hex Workshop 5.1.4 allows user-assisted attackers to cause a denial of service and possibly execute arbitrary code via a long mapping reference in a Color Mapping .cmap file...

Hex Workshop 5.1.4 (Color Mapping File) Local Buffer Overflow PoC

No description provided by source. Hex Workshop 5.1.4 Color Mapping File Local Buffer Overflow Poc other versions are affected By:Encrypt3d.M!nd Merry Christmas & Happy New Year 2009 Greetz:-=Mizo=-Perra :-l,L!0N,El Mariachi,MiNi SpIder,GGY,and all my friends Just import enc.cmap From ToolsColor...

Hex Workshop 5.1.4 - Color Mapping File Local Buffer Overflow (PoC)

Hex Workshop 5.1.4 - Color Mapping File Local Buffer Overflow PoC Hex Workshop 5.1.4 Color Mapping File Local Buffer Overflow Poc other versions are affected By:Encrypt3d.M!nd Merry Christmas & Happy New Year 2009 Greetz:-=Mizo=-Perra :-l,L!0N,El Mariachi,MiNi SpIder,GGY,and all my friends Just...

Hex Workshop 5.1.4 (Color Mapping File) Local Buffer Overflow PoC

Exploit for unknown platform in category dos / poc ================================================================= Hex Workshop 5.1.4 Color Mapping File Local Buffer Overflow PoC ================================================================= Hex Workshop 5.1.4 Color Mapping File Local Buffer...

Hex Workshop 5.1.4 - Color Mapping File Local Buffer Overflow (PoC)

Hex Workshop 5.1.4 Color Mapping File Local Buffer Overflow Poc other versions are affected By:Encrypt3d.M!nd Merry Christmas & Happy New Year 2009 Greetz:-=Mizo=-Perra :-l,L!0N,El Mariachi,MiNi SpIder,GGY,and all my friends Just import enc.cmap From ToolsColor Mapping And See What Happen ^^ I...

kernel: open() call allows setgid bit when user is not in new file's group

fs/open.c in the Linux kernel before 2.6.22 does not properly strip setuid and setgid bits when there is a write to a file, which allows local users to gain the privileges of a different group, and obtain sensitive information or possibly have unspecified other impact, by creating an executable...

DEBIAN-CVE-2008-5398

Tor before 0.2.0.32 does not properly process the ClientDNSRejectInternalAddresses configuration option in situations where an exit relay issues a policy-based refusal of a stream, which allows remote exit relays to have an unknown impact by mapping an internal IP address to the destination...

CVE-2008-5398

Tor before 0.2.0.32 does not properly process the ClientDNSRejectInternalAddresses configuration option in situations where an exit relay issues a policy-based refusal of a stream, which allows remote exit relays to have an unknown impact by mapping an internal IP address to the destination...

CVE-2008-5398

Tor before 0.2.0.32 does not properly process the ClientDNSRejectInternalAddresses configuration option in situations where an exit relay issues a policy-based refusal of a stream, which allows remote exit relays to have an unknown impact by mapping an internal IP address to the destination...

CVE-2008-5398

CVE-2008-5398 affects Tor up to version before 0.2.0.32, where the ClientDNSRejectInternalAddresses option is not consistently enforced when an exit relay issues a policy-based stream refusal. This can allow remote exit relays to map an internal IP address to the destination hostname of the refus...

CVE-2008-5398

Tor before 0.2.0.32 does not properly process the ClientDNSRejectInternalAddresses configuration option in situations where an exit relay issues a policy-based refusal of a stream, which allows remote exit relays to have an unknown impact by mapping an internal IP address to the destination...

kernel: open() call allows setgid bit when user is not in new file's group

fs/open.c in the Linux kernel before 2.6.22 does not properly strip setuid and setgid bits when there is a write to a file, which allows local users to gain the privileges of a different group, and obtain sensitive information or possibly have unspecified other impact, by creating an executable...

kernel: missing boundary checks in syscall/syscall32_nopage()

Tavis Ormandy reported missing boundary checks in the Virtual Dynamic Shared Objects vDSO implementation. This could allow a local unprivileged user to cause a denial of service or privilege escalation. CVE-2008-3527, Important...

动力文章(Powereasy)存在严重上传漏洞

动力文章采用无惧上传方式，对于上传文件的判断，只过滤了asp,aspx,asa等扩展上，忽略了cer,cdx等经过asp.dll映射过的其它扩展，以及，动力文章其upfileclass.asp对扩展的判断不严，导致asp 后面有空格，被当作合法的扩展，恶意用户可以通过构造表单，上传asp,asa等恶意扩展。 Access&SQL www.asp163.net下载最新的补丁，用最新的动力文章的upfileclass.asp和upfile.asp替换有漏洞的文件。...