WordPress AdRotate plugin <= 3.6.6 - SQL Injection

No description provided by source. Exploit Title: WordPress AdRotate plugin = 3.6.6 SQL Injection Vulnerability Date: 2011-11-8 Author: Miroslav Stampar miroslav.stamparatgmail.com @stamparm Software Link: http://downloads.wordpress.org/plugin/adrotate.3.6.6.zip Version: 3.6.6 tested Note:...

WordPress Mingle Forum plugin <= 1.0.31 SQL Injection Vulnerability

No description provided by source. Exploit Title: WordPress Mingle Forum plugin = 1.0.31 SQL Injection Vulnerability Date: 2011-09-19 Author: Miroslav Stampar miroslav.stamparatgmail.com @stamparm Software Link: http://downloads.wordpress.org/plugin/mingle-forum.1.0.31.zip Version: 1.0.31 tested...

UBUNTU-CVE-2014-3152

Integer underflow in the LCodeGen::PrepareKeyedOperand function in arm/lithium-codegen-arm.cc in Google V8 before 3.25.28.16, as used in Google Chrome before 35.0.1916.114, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger a...

Fedora 20 : xen-4.3.1-8.fc20 (2014-1552)

PHYSDEVOPprepare,releasemsix exposed to unprivileged pv guests, Out-of-memory condition yielding memory corruption during IRQ setup Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically...

Linux Kernel 3.4 < 3.13.2 (Ubuntu 13.04/13.10 x64) - 'CONFIG_X86_X32=y' Local Privilege Escalation (3)

/ ============================== recvmmsg.c - linux 3.4+ local root CONFIGX86X32=y CVE-2014-0038 / x32 ABI with recvmmsg by rebel @ irc.smashthestack.org ----------------------------------- takes about 13 minutes to run because timeout-tvsec is decremented once per second and 0xff3 is 765. some...

Mozilla: Use-after-free and buffer overflow issues found using Address Sanitizer (MFSA 2012-105)

Use-after-free vulnerability in the nsTextEditorState::PrepareEditor function in Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, Thunderbird ESR 10.x before 10.0.11, and SeaMonkey before 2.14 allows remote attackers to execute arbitrary code or cause a denia...

WordPress Mingle Forum 1.0.31 SQL Injection

Exploit Title: WordPress Mingle Forum plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0 e.g. curl --data "wpfsecuritycheck=MhWNow%3D%3D&wpfsecuritycode=fail&editpostsubmit=1&message=test&editpostsubject=test&threadid=1&editpostid=-1 AND...

DEBIAN-CVE-2010-4652

Heap-based buffer overflow in the sqlpreparewhere function contrib/modsql.c in ProFTPD before 1.3.3d, when modsql is enabled, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted username containing substitution tags, which are not properly...

Enlightenment - Linux Null PTR Dereference Exploit Framework

No description provided by source. / enlightenment 200909092307 To create your own exploit module for enlightenment, just name it expwhatever.c It will be auto-compiled by the runexploits.sh script and thrown into the list of loaded exploit modules Each module must have the following features: It...

Enlightenment - Linux Null PTR Dereference Exploit Framework

Exploit for linux platform in category local exploits ============================================================ Enlightenment - Linux Null PTR Dereference Exploit Framework ============================================================ / enlightenment 200909092307 To create your own exploit modu...

security flaw

The blockpreparewrite function in fs/buffer.c for Linux kernel 2.6.x before 2.6.13 does not properly clear buffers during certain error conditions, which allows local users to read portions of files that have been unlinked...