PonyOS 0.4.99-mlp Privilege Escalation

Advisory: PonyOS Security Issues John Cartwright Introduction ------------ Like countless others, I was pretty excited about PonyOS yesterday April 1st 2013 and decided to give it a go. After wasting a lot of time nyan'ing, I knew this was the future of desktop OSes. However, I wondered how secur...

CVE-2012-6422: Undefined Security Weakness

The kernel in Samsung Galaxy S2, Galaxy Note 2, MEIZU MX, and possibly other Android devices, when running an Exynos 4210 or 4412 processor, uses weak permissions 0666 for /dev/exynos-mem, which allows attackers to read or write arbitrary physical memory and gain privileges via a crafted...

CVE-2011-4578: Undefined Security Weakness

event.c in acpid aka acpid2 before 2.0.11 does not have an appropriate umask setting during execution of event-handler scripts, which might allow local users to 1 perform write operations within directories created by a script, or 2 read files created by a script, via standard filesystem system...

CVE-2011-4127

The Linux kernel before 3.2.2 does not properly restrict SGIO ioctl calls, which allows local users to bypass intended restrictions on disk read and write operations by sending a SCSI command to 1 a partition block device or 2 an LVM volume...

CVE-2012-0946

The NVIDIA UNIX driver before 295.40 allows local users to access arbitrary memory locations by leveraging GPU device-node read/write privileges...

CVE-2012-0946

The NVIDIA UNIX driver before 295.40 allows local users to access arbitrary memory locations by leveraging GPU device-node read/write privileges...

Ubuntu 11.10 : linux vulnerabilities (USN-1405-1)

Paolo Bonzini discovered a flaw in Linux's handling of the SGIO ioctl command. A local user, or user in a VM could exploit this flaw to bypass restrictions and gain read/write access to all data on the affected block device. CVE-2011-4127 A flaw was found in the Linux kernel's ext4 file system wh...

Non Compliant Scada Modbus Read Write Reg Response

...

Ubuntu: Security Advisory (USN-1388-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

kernel: possible privilege escalation via SG_IO ioctl

The Linux kernel before 3.2.2 does not properly restrict SGIO ioctl calls, which allows local users to bypass intended restrictions on disk read and write operations by sending a SCSI command to 1 a partition block device or 2 an LVM volume...

UBUNTU-CVE-2011-4127

The Linux kernel before 3.2.2 does not properly restrict SGIO ioctl calls, which allows local users to bypass intended restrictions on disk read and write operations by sending a SCSI command to 1 a partition block device or 2 an LVM volume...

PT-2011-4852 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 3.2.2 Description: The issue allows local users to bypass intended restrictions on disk read and write operations. This is achieved by sending a SCSI command to either a partition block device or an LVM volume,...

Serv-U FTP Jail Break

Exploit for windows platform in category remote exploits I m better than TESO! CONFIDENTIAL SOURCE MATERIALS! ---------------------------------------------------- Serv-U FTP Server Jail Break 0day Discovered By Kingcope Year 2011 ---------------------------------------------------- Affected: 220...

GCI Trader MetaTrader v4.2.x - Null Pointer Vulnerability

Document Title: =============== GCI Trader MetaTrader v4.2.x - Null Pointer Vulnerability Release Date: ============= 2011-08-08 Vulnerability Laboratory ID VL-ID: ==================================== 111 Product & Service Introduction: =============================== Marktführende Software im...

[USN-1172-1] logrotate vulnerabilities

========================================================================== Ubuntu Security Notice USN-1172-1 July 21, 2011 logrotate vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: -...

Mandriva Update for tomcat5 MDVSA-2011:030 (tomcat5)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Cisco IOS SNMP File Upload (TFTP)

This module will copy file to a Cisco IOS device using SNMP and TFTP. The action OverrideConfig will override the running config of the Cisco device. A read-write SNMP community is required. The SNMP community scanner module can assist in identifying a read-write community. The target must be abl...

Cisco IOS SNMP Configuration Grabber (TFTP)

This module will download the startup or running configuration from a Cisco IOS device using SNMP and TFTP. A read-write SNMP community is required. The SNMP community scanner module can assist in identifying a read-write community. The target must be able to connect back to the Metasploit system...

AT-TFTP Server v1.8 Remote Directory Traversal Vulnerability

Exploit for windows platform in category remote exploits ============================================================ AT-TFTP Server v1.8 Remote Directory Traversal Vulnerability ============================================================ / / / / / // | / // \ | / / / / / /// / / / / / / / // /...

Microsoft Windows - NTLM Weak Nonce (MS10-012)

Windows SMB NTLM Authentication Weak Nonce Vulnerability Security Advisory Hernan Ochoa [email protected] - Agustin Azubel [email protected] Title: Windows SMB NTLM Authentication Weak Nonce Vulnerability Advisory ID: OCHOA-2010-0209 Advisory URL:...