Fedora 22 : webkitgtk-2.4.9-2.fc22 / webkitgtk3-2.4.9-2.fc22 (2015-360b358af4)

webkitgtk-2.4.9-2.fc21 - rhbz1189303 - abrt midori: WebCore::SQLiteStatement::prepare: midori killed by SIGSEGV Initialize string in SQLiteStatement before using it webkitgtk-2.4.9-2.fc22 - rhbz1189303 - abrt midori: WebCore::SQLiteStatement::prepare: midori killed by SIGSEGV Initialize string in...

Linux Kernel 4.4.1 - REFCOUNT Overflow Use-After-Free in Keyrings Local Privilege Escalation (2)

Linux Kernel 4.4.1 - REFCOUNT Overflow Use-After-Free in Keyrings Local Privilege Escalation 2 / Exploit Title: Linux kernel REFCOUNT overflow/Use-After-Free in keyrings Date: 19/1/2016 Exploit Author: Perception Point Team CVE : CVE-2016-0728 / / CVE-2016-0728 local root exploit modified by...

Laravel 'prepareForUnserialize()' function remote PHP object injection vulnerability

Laravel is a set of PHP development framework. A remote PHP object injection vulnerability exists in Laravel that allows remote attackers to submit specially crafted serialized objects, delete and read files, and execute arbitrary local script code...

UBUNTU-CVE-2014-9718

The 1 BMDMA and 2 AHCI HBA interfaces in the IDE functionality in QEMU 1.0 through 2.1.3 have multiple interpretations of a function's return value, which allows guest OS users to cause a host OS denial of service memory consumption or infinite loop, and system crash via a PRDT with zero complete...

PT-2015-6161

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.19.6 Description A race condition in the prepare binprm function in fs/exec.c allows local users to gain privileges by executing a setuid program at a time instant when a chown to root is in progress, and the...

UBUNTU-CVE-2015-3339

Race condition in the preparebinprm function in fs/exec.c in the Linux kernel before 3.19.6 allows local users to gain privileges by executing a setuid program at a time instant when a chown to root is in progress, and the ownership is changed but the setuid bit is not yet stripped...

WordPress AdRotate plugin <= 3.6.6 - SQL Injection

No description provided by source. Exploit Title: WordPress AdRotate plugin = 3.6.6 SQL Injection Vulnerability Date: 2011-11-8 Author: Miroslav Stampar miroslav.stamparatgmail.com @stamparm Software Link: http://downloads.wordpress.org/plugin/adrotate.3.6.6.zip Version: 3.6.6 tested Note:...

WordPress Mingle Forum plugin <= 1.0.31 SQL Injection Vulnerability

No description provided by source. Exploit Title: WordPress Mingle Forum plugin = 1.0.31 SQL Injection Vulnerability Date: 2011-09-19 Author: Miroslav Stampar miroslav.stamparatgmail.com @stamparm Software Link: http://downloads.wordpress.org/plugin/mingle-forum.1.0.31.zip Version: 1.0.31 tested...

UBUNTU-CVE-2014-3152

Integer underflow in the LCodeGen::PrepareKeyedOperand function in arm/lithium-codegen-arm.cc in Google V8 before 3.25.28.16, as used in Google Chrome before 35.0.1916.114, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger a...

Fedora 20 : xen-4.3.1-8.fc20 (2014-1552)

PHYSDEVOPprepare,releasemsix exposed to unprivileged pv guests, Out-of-memory condition yielding memory corruption during IRQ setup Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically...

Linux Kernel 3.4 < 3.13.2 (Ubuntu 13.04/13.10 x64) - 'CONFIG_X86_X32=y' Local Privilege Escalation (3)

/ ============================== recvmmsg.c - linux 3.4+ local root CONFIGX86X32=y CVE-2014-0038 / x32 ABI with recvmmsg by rebel @ irc.smashthestack.org ----------------------------------- takes about 13 minutes to run because timeout-tvsec is decremented once per second and 0xff3 is 765. some...

PT-2013-2050

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 1.0.2 Description The issue allows remote attackers to cause a denial of service, resulting in a crash. This is related to the rtp format in the prepare sdp description function in ffserver.c. Recommendations For...

Mozilla: Use-after-free and buffer overflow issues found using Address Sanitizer (MFSA 2012-105)

Use-after-free vulnerability in the nsTextEditorState::PrepareEditor function in Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, Thunderbird ESR 10.x before 10.0.11, and SeaMonkey before 2.14 allows remote attackers to execute arbitrary code or cause a denia...

PT-2012-3100

Name of the Vulnerable Software and Affected Versions DBD::Pg versions prior to 2.19.0 Description The issue concerns multiple format string vulnerabilities in the DBD::Pg module for Perl. These vulnerabilities can be exploited by remote PostgreSQL database servers, allowing them to cause a denia...

PT-2012-1108

Name of the Vulnerable Software and Affected Versions Logsurfer+ versions prior to 1.8 Logsurfer version 1.5b and earlier Logsurfer+ version 1.7 and earlier Description The issue concerns a double free vulnerability in the prepare exec function, which can be exploited remotely. This vulnerability...

WordPress Mingle Forum 1.0.31 SQL Injection

Exploit Title: WordPress Mingle Forum plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0 e.g. curl --data "wpfsecuritycheck=MhWNow%3D%3D&wpfsecuritycode=fail&editpostsubmit=1&message=test&editpostsubject=test&threadid=1&editpostid=-1 AND...

PT-2011-2365

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 2.6.39-rc1 Description The issue is related to the ocfs2 prepare page for write function in the Oracle Cluster File System 2 OCFS2 subsystem, which does not properly handle holes that cross page boundaries. This...

DEBIAN-CVE-2010-4652

Heap-based buffer overflow in the sqlpreparewhere function contrib/modsql.c in ProFTPD before 1.3.3d, when modsql is enabled, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted username containing substitution tags, which are not properly...

PT-2011-1618

Name of the Vulnerable Software and Affected Versions ProFTPD versions prior to 1.3.3d Description The issue is related to a heap-based buffer overflow in the sql prepare where function, which can be exploited when mod sql is enabled. This occurs because substitution tags in a crafted username ar...

Enlightenment - Linux Null PTR Dereference Exploit Framework

No description provided by source. / enlightenment 200909092307 To create your own exploit module for enlightenment, just name it expwhatever.c It will be auto-compiled by the runexploits.sh script and thrown into the list of loaded exploit modules Each module must have the following features: It...