Lucene search
K

198 matches found

seebug.org
seebug.org
added 2014/07/01 12:0 a.m.22 views

minerCPP 0.4b Remote BOF+Format String Attack Exploit

No description provided by source. !/usr/bin/env python minerCPP 0.4b Remote BOF+Format String Attack Exploit Software Link: http://sourceforge.net/projects/minercpp/ Author: l3D Sites: http://xraysecurity.blogspot.com, http://nullbyte.org.il IRC: irc://irc.nix.co.il Email: [email protected]...

7.1AI score
Exploits0
RedHat Linux
RedHat Linux
added 2013/07/16 6:21 p.m.2 views

kernel: ext3: format string issues

fs/ext3/super.c in the Linux kernel before 3.8.4 uses incorrect arguments to functions in certain circumstances related to printk input, which allows local users to conduct format-string attacks and possibly gain privileges via a crafted application...

6.2CVSS6.4AI score0.00064EPSS
Exploits1References4
NVD
NVD
added 2013/03/22 11:59 a.m.14 views

CVE-2013-1848

fs/ext3/super.c in the Linux kernel before 3.8.4 uses incorrect arguments to functions in certain circumstances related to printk input, which allows local users to conduct format-string attacks and possibly gain privileges via a crafted application...

6.2CVSS5.2AI score0.00064EPSS
Exploits1References15
OSV
OSV
added 2013/03/22 12:0 a.m.1 views

UBUNTU-CVE-2013-1848

fs/ext3/super.c in the Linux kernel before 3.8.4 uses incorrect arguments to functions in certain circumstances related to printk input, which allows local users to conduct format-string attacks and possibly gain privileges via a crafted application...

6.2CVSS6.5AI score0.00064EPSS
Exploits1References8
RedHat Linux
RedHat Linux
added 2012/05/07 6:23 p.m.3 views

php: command line arguments injection when run in CGI mode (VU#520827)

sapi/cgi/cgimain.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a CGI script aka php-cgi, does not properly handle query strings that lack an = equals sign character, which allows remote attackers to execute arbitrary code by placing command-line options in the query string,...

9.8CVSS7.8AI score0.94363EPSS
Exploits41References5
RedHat Linux
RedHat Linux
added 2012/04/30 5:7 p.m.7 views

glibc: FORTIFY_SOURCE format string protection bypass via "nargs" integer overflow

Integer overflow in the vfprintf function in stdio-common/vfprintf.c in glibc 2.14 and other versions allows context-dependent attackers to bypass the FORTIFYSOURCE protection mechanism, conduct format string attacks, and write to arbitrary memory via a large number of arguments...

6.8CVSS7.5AI score0.03036EPSS
Exploits5References4
Positive Technologies
Positive Technologies
added 2012/03/15 12:0 a.m.2 views

PT-2013-1211 · Gnu +3 · Glibc +3

Name of the Vulnerable Software and Affected Versions: glibc versions prior to 2.15-r3 Description: The issue concerns multiple vulnerabilities in the glibc package, which can lead to breaches of confidentiality, integrity, and availability of protected information. Exploitation can occur locally...

6.9CVSS8.9AI score0.03036EPSS
Exploits5References23
Tenable Nessus
Tenable Nessus
added 2012/01/16 12:0 a.m.50 views

MySQL < 4.1.21 / 5.0 Denial of Service

The version of MySQL installed on the remote host is earlier than 4.1.21 / 5.0 and reportedly allows a remote, authenticated user to crash the server via a format string attack. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid17800; scriptversion"1.4";...

4CVSS5.3AI score0.38924EPSS
Exploits0References2
OSV
OSV
added 2011/07/14 11:55 p.m.2 views

DEBIAN-CVE-2011-2505

libraries/auth/swekey/swekey.auth.lib.php in the Swekey authentication feature in phpMyAdmin 3.x before 3.3.10.2 and 3.4.x before 3.4.3.1 assigns values to arbitrary parameters referenced in the query string, which allows remote attackers to modify the SESSION superglobal array via a crafted...

6.4CVSS7.1AI score0.37008EPSS
Exploits15References1
Tenable Nessus
Tenable Nessus
added 2011/05/16 12:0 a.m.37 views

FreeBSD : Exim -- remote code execution and information disclosure (36594c54-7be7-11e0-9838-0022156e8794)

Release notes for Exim 4.76 says : Bugzilla 1106: CVE-2011-1764 - DKIM log line was subject to a format-string attack -- SECURITY: remote arbitrary code execution. DKIM signature header parsing was double-expanded, second time unintentionally subject to list matching rules, letting the header cau...

7.5CVSS8.2AI score0.04718EPSS
Exploits0References5
FreeBSD
FreeBSD
added 2011/05/10 12:0 a.m.33 views

Exim -- remote code execution and information disclosure

Release notes for Exim 4.76 says: Bugzilla 1106: CVE-2011-1764 - DKIM log line was subject to a format-string attack -- SECURITY: remote arbitrary code execution. DKIM signature header parsing was double-expanded, second time unintentionally subject to list matching rules, letting the header caus...

7.5CVSS1.8AI score0.04718EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2010/07/06 12:0 a.m.27 views

Debian Security Advisory DSA 2065-1 (kvirc)

The remote host is missing an update to kvirc announced via advisory DSA 2065-1. OpenVAS Vulnerability Test $Id: deb20651.nasl 6614 2017-07-07 12:09:12Z cfischer $ Description: Auto-generated from advisory DSA 2065-1 kvirc Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...

10CVSS0.6AI score0.02311EPSS
Exploits0
Packet Storm
Packet Storm
added 2010/07/06 12:0 a.m.38 views

minerCPP 0.4b Buffer Overflow / Format String

!/usr/bin/env python minerCPP 0.4b Remote BOF+Format String Attack Exploit Software Link: http://sourceforge.net/projects/minercpp/ Author: l3D Sites: http://xraysecurity.blogspot.com, http://nullbyte.org.il IRC: irc://irc.nix.co.il Email: [email protected] Tested on Windows 7 In order to make...

0.5AI score
Exploits0
OpenVAS
OpenVAS
added 2010/07/06 12:0 a.m.21 views

Debian: Security Advisory (DSA-2065-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS6.5AI score0.02311EPSS
Exploits0References3
exploitpack
exploitpack
added 2010/07/06 12:0 a.m.20 views

minerCPP 0.4b - Remote Buffer Overflow Format String

minerCPP 0.4b - Remote Buffer Overflow Format String !/usr/bin/env python minerCPP 0.4b Remote BOF+Format String Attack Exploit Software Link: http://sourceforge.net/projects/minercpp/ Author: l3D Sites: http://xraysecurity.blogspot.com, http://nullbyte.org.il IRC: irc://irc.nix.co.il Email:...

0.5AI score
Exploits0
Exploit DB
Exploit DB
added 2010/07/06 12:0 a.m.27 views

minerCPP 0.4b - Remote Buffer Overflow / Format String

!/usr/bin/env python minerCPP 0.4b Remote BOF+Format String Attack Exploit Software Link: http://sourceforge.net/projects/minercpp/ Author: l3D Sites: http://xraysecurity.blogspot.com, http://nullbyte.org.il IRC: irc://irc.nix.co.il Email: [email protected] Tested on Windows 7 In order to make...

7.4AI score
Exploits0
Tenable Nessus
Tenable Nessus
added 2010/06/29 12:0 a.m.34 views

Debian DSA-2065-1 : kvirc - several vulnerabilities

Two security issues have been discovered in the DCC protocol support code of kvirc, a KDE-based next generation IRC client, which allow the overwriting of local files through directory traversal and the execution of arbitrary code through a format string attack. %NASLMINLEVEL 70300 C Tenable...

10CVSS5.6AI score0.02311EPSS
Exploits0References3
Debian
Debian
added 2010/06/27 8:57 p.m.20 views

[SECURITY] [DSA 2065-1] New kvirc packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-2065-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff June 27, 2010 http://www.debian.org/security/faq -...

10CVSS7AI score0.02311EPSS
Exploits0
OpenVAS
OpenVAS
added 2010/03/16 12:0 a.m.27 views

Debian Security Advisory DSA 2007-1 (cups)

The remote host is missing an update to cups announced via advisory DSA 2007-1. OpenVAS Vulnerability Test $Id: deb20071.nasl 6614 2017-07-07 12:09:12Z cfischer $ Description: Auto-generated from advisory DSA 2007-1 cups Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...

6.9CVSS0.5AI score0.0008EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2009/10/07 12:0 a.m.40 views

CGI Generic Format String

The remote web server hosts CGI scripts that fail to adequately sanitize request strings. They seem to be vulnerable to a 'format string' attack. By leveraging this issue, an attacker may be able to execute arbitrary code on the remote host subject to the privileges under which the web server...

6.1AI score
Exploits0References2
Rows per page
Query Builder