824 matches found
Ubuntu 12.04.0-2LTS x64 perf_swevent_init - Kernel Local Root Exploit
No description provided by source. / Ubuntu 12.04 3.x x8664 perfsweventinit Local root exploit by Vitaly Nikolenko [email protected] based on semtex.c by sd Supported targets: 0 Ubuntu 12.04.0 - 3.2.0-23-generic 1 Ubuntu 12.04.1 - 3.2.0-29-generic 2 Ubuntu 12.04.2 - 3.5.0-23-generic $ gcc vnik.c...
Tunnelblick - Local Root Exploit (2)
No description provided by source. !/bin/sh Pwnnel Blicker for kids zx2c4 This is another exploit for Tunnel Blick. Other exploits for Tunnel Blick are available here: http://git.zx2c4.com/Pwnnel-Blicker/tree/ echo + Making vulnerable directory. mkdir -pv /tmp/pwn/openvpn/openvpn-0 echo + Prepari...
TildeSlash Monit 1-4 Authentication Handling Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/10581/info It is reported that TildeSlash Monit is vulnerable to a buffer overflow vulnerability during authentication handling. This issue arises due to a failure of the affected application to properly handle...
LBL traceroute 1.4 a5 Heap Corruption Vulnerability (3)
No description provided by source. source: http://www.securityfocus.com/bid/1739/info Traceroute is a well-known network diagnostic tool used for analyzing the path on a network between two hosts. On unix systems, traceroute is typically installed setuid root because of its use of raw sockets...
Mac OS X Adobe Version Cue - Local Root Exploit
No description provided by source. Proof of concept: haven: fintler$ cd haven: fintler$ id uid=502fintler gid=500fintler groups=500fintler haven: fintler$ echo cp /bin/sh /Users/$USER;chmod 4755 /Users/$USER/sh;chown root /Users/$USER/sh productname.sh haven: fintler$ chmod 0755 ./productname.sh...
H-Sphere Webshell 2.4 - Local Root Exploit
No description provided by source. source: http://www.securityfocus.com/bid/6527/info A vulnerability has been discovered in H-Sphere Webshell. During the pre-authentication phase Webshell fails to perform sufficient bounds checking on user-supplied HTTP parameters. As a result, a malicious...
Linux Kernel 2.6.27+ - x86_64 compat Local Root Exploit
No description provided by source. / Ac1dB1tch3z Vs Linux Kernel x8664 0day Today is a sad day.. R.I.P. Tue, 29 Apr 2008 / Tue, 7 Sep 2010 a bit of history: MCASTMSFILTER Compat mode bug found... upon commit! 2 year life on this one author David L Stevens dlstevens us ibm com Tue, 29 Apr 2008...
ISDN4Linux 3.1 IPPPD Device String SysLog Format String Vulnerability (2)
No description provided by source. source: http://www.securityfocus.com/bid/5437/info isdn4linux is a freely available, open source package of isdn compatibility tools. It is available for Linux operating systems. isdn4linux contains a format string vulnerability in the ipppd utility. In some...
Samba 2.2.8 - Remote Root Exploit - sambal.c
No description provided by source. / Remote root exploit for Samba 2.2.x and prior that works against Linux all distributions, FreeBSD 4.x, 5.x, NetBSD 1.x and OpenBSD 2.x, 3.x and 3.2 non-executable stack. sambal.c is able to identify samba boxes. It will send a netbios name packet to port 137. ...
Leksbot 1.2 - Multiple Unspecified Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/7505/info Multiple vulnerabilities have been reported for Leksbot. The precise nature of these vulnerabilities are currently unknown however, exploitation of this issue may result in an attacker obtaining elevated...
Linux Kernel 3.3-3.8 - SOCK_DIAG Local Root Exploit
影响范围：Linux Kernel 3.3-3.8CVE-ID：CVE-2013-1763Linux内核处理netlink协议时，存在一处内存越界访问，成功利用可执行任意代码，进行本地提权。漏洞代码如下：static int sockdiagrcvmsgstruct skbuff skb, struct nlmsghdr nlh int err; struct sockdiagreq req = NLMSGDATAnlh; struct sockdiaghandler hndl; if nlmsglennlh sizeofreq return -EINVAL; hndl =...
Android 1.x/2.x - Local Root Exploit
No description provided by source. / android 1.x/2.x the real youdev feat. init local root exploit. C 2009/2010 by The Android Exploid Crew. Copy from sdcard to /sqlitestmtjournals/exploid, chmod 0755 and run. Or use /data/local/tmp if available thx to ioerror! It is important to to use...
Linux Kernel <= 2.6.11 (CPL 0) Local Root Exploit (k-rad3.c)
No description provided by source. / k-rad3.c - linux 2.6.11 and below CPL 0 kernel local exploit v3 Discovered and original exploit coded Jan 2005 by sd [email protected] Modified 2005/9 by alert7 [email protected] XFOCUS Security Team http://www.xfocus.org gcc -o k-rad3 k-rad3.c -static -O2 test...
Solaris 2.6/7.0/8 netpr Buffer Overflow Vulnerability (1)
No description provided by source. source: http://www.securityfocus.com/bid/1200/info A buffer overrun exists in the 'netpr' program, part of the SUNWpcu LP package included with Solaris, from Sun Microsystems. Versions of netpr on Solaris 2.6 and 7, on both Sparc and x86 have been confirmed as...
Linux Kernel 2.4.x/2.6.x Bluetooth Signed Buffer Index Vulnerability (2)
No description provided by source. source: http://www.securityfocus.com/bid/12911/info A local signed-buffer-index vulnerability affects the Linux kernel because it fails to securely handle signed values when validating memory indexes. A local attacker may leverage this issue to gain escalated...
Linux Kernel 2.6.13 <= 2.6.17.4 - sys_prctl() Local Root Exploit (2)
No description provided by source. / Linux = 2.6.13 prctl kernel exploit C Julien TINNES If you read the Changelog from 2.6.13 you've probably seen: PATCH setuid core dump This patch mainly adds suidsafe to suiddumpable sysctl but also a new per process, user setable argument to PRSETDUMPABLE. Th...
Linux Kernel < 2.6.19 - udp_sendmsg Local Root Exploit (x86/x64)
No description provided by source. / second verse, same as the first CVE-2009-2698 udpsendmsg, x86/x64 Cheers to Julien/Tavis for the bug, p0c73n1 for just throwing code at NULL and finding it executed This exploit is a bit more nuanced and thoughtful ; use ./therebel.sh for everything At this...
vold asec
Insufficient paramter checking for asec container creation allows an asec container to be mounted over part of the filesystem using directory traversal if the app has the ASEC permissions such as ASECCREATE There is an adb tethered root explot for motorola phones...
Ubuntu 12.04.0-2LTS x64 perf_swevent_init - Kernel Local Root Exploit
Exploit for linux platform in category local exploits / Ubuntu 12.04 3.x x8664 perfsweventinit Local root exploit by Vitaly Nikolenko email protected based on semtex.c by sd Supported targets: 0 Ubuntu 12.04.0 - 3.2.0-23-generic 1 Ubuntu 12.04.1 - 3.2.0-29-generic 2 Ubuntu 12.04.2 -...
Google Android Vold Volume Manager Integer Wrap Root Exploit Privilege Escalation - Ver2 (CVE-2011-1823)
A privilege escalation vulnerability has been reported in Google Android Operating System. Successful exploitation of this vulnerability would allow a remote attacker to gain unauthorized access to the affected system...