CVE-2006-1991: Undefined Security Weakness

The substrcompare function in string.c in PHP 5.1.2 allows context-dependent attackers to cause a denial of service memory access violation via an out-of-bounds offset argument...

CVE-2006-1902

foldbinary in fold-const.c in GNU Compiler Collection gcc 4.1 improperly handles pointer overflow when folding a certain expr comparison to a corresponding offset comparison in cases other than EQEXPR and NEEXPR, which might introduce buffer overflow vulnerabilities into applications that could b...

CVE-2006-1902

foldbinary in fold-const.c in GNU Compiler Collection gcc 4.1 improperly handles pointer overflow when folding a certain expr comparison to a corresponding offset comparison in cases other than EQEXPR and NEEXPR, which might introduce buffer overflow vulnerabilities into applications that could b...

CVE-2006-1902

foldbinary in fold-const.c in GNU Compiler Collection gcc 4.1 improperly handles pointer overflow when folding a certain expr comparison to a corresponding offset comparison in cases other than EQEXPR and NEEXPR, which might introduce buffer overflow vulnerabilities into applications that could b...

linux/x86 SWAP store shellcode 99 bytes

Exploit for linux/x86 platform in category shellcode ======================================= linux/x86 SWAP store shellcode 99 bytes ======================================= / linux-x86-swap-store.c - SWAP store shellcode 99 bytes for Linux/x86 Copyright c 2006 Gotfault Security & rfdslabs Authors...

linux/x86 SWAP store shellcode 99 bytes

No description provided by source. / linux-x86-swap-store.c - SWAP store shellcode 99 bytes for Linux/x86 Copyright c 2006 Gotfault Security & rfdslabs Authors: dx [email protected] spud [email protected] This shellcode reads the content of '/tmp/sws' and stores on swap device at offset 3133...

linux/x86 - SWAP store shellcode 99 bytes

linux/x86 SWAP store shellcode 99 bytes. Shellcode exploit for linx86 platform / linux-x86-swap-store.c - SWAP store shellcode 99 bytes for Linux/x86 Copyright c 2006 Gotfault Security & rfdslabs Authors: dx spud This shellcode reads the content of '/tmp/sws' and stores on swap device at offset...

CVE-2006-1374

SQL injection vulnerability in viewStatement.php in AdMan 1.0.20051221 and earlier allows remote attackers to execute arbitrary SQL commands via the transactionsoffset parameter...

LibTiff 3.7.1 (BitsPerSample Tag) Local Buffer Overflow Exploit

No description provided by source. / LibTIFF exploit Tested on LibTIFF 3.7.1 Coded by Agustin Gianni agustingianni at gmail.com and Samelat Blog: http://gruba.blogspot.com In other versions and/or Linux distributions you might need to adjust some offsets. gr00vy@kenny:/home/gr00vy/EXPLOIT$ make...

[SLAB] NetBSD / OpenBSD kernfs_xread patch evasion

--- SecurityLab Technologies, Inc. --- Security Advisory --- http://www.securitylab.net Advisory Name: NetBSD / OpenBSD kernfsxread patch evasion Release Date: February 02, 2006 Application: kernfs Platform: NetBSD / OpenBSD Severity: Severe Author: SLAB Research Vendor Status: Patched Reference:...

CVE-2006-0036

ipnatpptp in the PPTP NAT helper netfilter/ipnathelperpptp.c in Linux kernel 2.6.14, and other versions, allows remote attackers to cause a denial of service memory corruption or crash via an inbound PPTPINCALLREQUEST packet that causes a null pointer to be used in an offset calculation...

Null pointer dereference

ipnatpptp in the PPTP NAT helper netfilter/ipnathelperpptp.c in Linux kernel 2.6.14, and other versions, allows remote attackers to cause a denial of service memory corruption or crash via an inbound PPTPINCALLREQUEST packet that causes a null pointer to be used in an offset calculation...

CVE-2005-0036

The DNS implementation in DeleGate 8.10.2 and earlier allows remote attackers to cause a denial of service via a compressed DNS packet with a label length byte with an incorrect offset, which could trigger an infinite loop...

linux/x86 Connect Back shellcode 90 bytes

No description provided by source. /--------------------------------------------------------------------------- 90 byte Connect Back shellcode by Russell Sanford - [email protected] --------------------------------------------------------------------------- filename: x86-linux-connect-back.c info:...

linux/x86 Connect Back shellcode 90 bytes

linux/x86 Connect Back shellcode 90 bytes. Shellcode exploit for linx86 platform /--------------------------------------------------------------------------- 90 byte Connect Back shellcode by Russell Sanford - [email protected]...

security flaw

Multiple integer handling errors in PHP before 4.3.10 allow attackers to bypass safe mode restrictions, cause a denial of service, or execute arbitrary code via 1 a negative offset value to the shmopwrite function, 2 an "integer overflow/underflow" in the pack function, or 3 an "integer...

[SECURITY] [DSA 921-1] New Linux 2.4.27 packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 921-1 [email protected] http://www.debian.org/security/ Martin Schulze December 14th, 2005 http://www.debian.org/security/faq -...

CVE-2004-2592: Improper Input Validation

Quake II server before R1Q2, as used in multiple products, allows remote attackers to cause a denial of service application crash via a modified client that asks the server to send data stored at a negative array offset, which is not handled when processing Configstrings and Baselines...

CVE-2005-3873: Undefined Security Weakness

SQL injection vulnerability in topic.php in ShockBoard 3.0 and 4.0 allows remote attackers to execute arbitrary SQL commands via the offset parameter...

ShockBoard 3.0/4.0 - 'Offset' SQL Injection

source: https://www.securityfocus.com/bid/15592/info ShockBoard is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a compromise of the...