Linux Kernel 64 Bit ABI系统调用参数特权提升漏洞

BUGTRAQ ID: 33275 CVE ID：CVE-2009-0029 Linux是一款开放源代码的操作系统。 Linux内核64位ABI系统调用参数处理存在问题，本地攻击者可以利用漏洞提升特权。 部分结构的ABI定义函数调用者必须对每个参数进行符号扩展来填满寄存器宽度，在linux系统调用处理上存在问题。 如在64位上使用这个系统调用： asmlinkage long sysexampleunsigned int index if index 5 return -EINVAL; return examplearrayindex;...

CVE-2008-1149

phpMyAdmin before 2.11.5 accesses $REQUEST to obtain some parameters instead of $GET and $POST, which allows attackers in the same domain to override certain variables and conduct SQL injection and Cross-Site Request Forgery CSRF attacks by using crafted cookies...

Guestex Guestbook 1.00 (email) Remote Code Execution Exploit

Exploit for unknown platform in category web applications ============================================================ Guestex Guestbook 1.00 email Remote Code Execution Exploit ============================================================ Creator: K-sPecial xzziroz.net of .aware awarenetwork.org...

AOL Instant Messenger goim Handler Screen Name Parameter Handling Overflow

Binary data 1246.prm...