Lucene search
+L

145 matches found

Packet Storm
Packet Storm
•added 2011/01/11 12:00 a.m.•53 views

Mono/Moonlight Local Privilege Escalation

Mono and Moonlight is prone to a local privilege-escalation vulnerability. Local attackers can exploit this issue to execute arbitrary code with elevated privileges. Successful exploits will compromise the affected application and possibly the underlying computer. PoC: using System; using...

7.5CVSS0.6AI score0.13649EPSS
SaveExploits2
Exploit DB
Exploit DB
•added 2011/01/11 12:00 a.m.•35 views

Mono/Moonlight Generic Type Argument - Privilege Escalation

Sources: https://www.chrishowie.com/2010/11/24/mutable-strings-in-mono/ https://www.securityfocus.com/bid/45051/info Mono and Moonlight is prone to a local privilege-escalation vulnerability. Local attackers can exploit this issue to execute arbitrary code with elevated privileges. Successful...

7.5CVSS5.2AI score0.13649EPSS
SaveExploits2
UbuntuCve
UbuntuCve
•added 2010/12/06 1:44 p.m.•32 views

CVE-2010-4254

Mono, when Moonlight before 2.3.0.1 or 2.99.x before 2.99.0.10 is used, does not properly validate arguments to generic methods, which allows remote attackers to bypass generic constraints, and possibly execute arbitrary code, via a crafted method call...

7.5CVSS5.9AI score0.13649EPSS
SaveExploits2References1
CVE
CVE
•added 2010/12/03 8:00 p.m.•88 views

CVE-2010-4254

CVE-2010-4254 affects Mono/Moonlight: when Moonlight before 2.3.0.1 or 2.99.x before 2.99.0.10 is used, it does not properly validate arguments to generic methods, allowing remote attackers to bypass generic constraints and possibly execute arbitrary code via a crafted method call. Connected advi...

7.5CVSS7.2AI score0.13649EPSS
SaveExploits2References13Affected Software2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2010/12/03 12:00 a.m.•3 views

CVE-2010-4254: Improper Input Validation

Mono, when Moonlight before 2.3.0.1 or 2.99.x before 2.99.0.10 is used, does not properly validate arguments to generic methods, which allows remote attackers to bypass generic constraints, and possibly execute arbitrary code, via a crafted method call...

7.5CVSS6.2AI score0.13649EPSS
SaveExploits2References2
Rows per page
Query Builder