5607 matches found
FreeBSD 6x/7 - 'protosw' Local Privilege Escalation
/ This is a quick and very dirty exploit for the FreeBSD protosw vulnerability defined here: http://security.freebsd.org/advisories/FreeBSD-SA-08:13.protosw.asc This will overwrite your credential structure in the kernel. This will affect more than just the exploit's process, which is why this...
DEBIAN-CVE-2008-5621
Cross-site request forgery CSRF vulnerability in phpMyAdmin 2.11.x before 2.11.9.4 and 3.x before 3.1.1.0 allows remote attackers to perform unauthorized actions as the administrator via a link or IMG tag to tblstructure.php with a modified table parameter. NOTE: other unspecified pages are also...
Null pointer dereference
The ActionScript 2 virtual machine in Adobe Flash Player 10.x before 10.0.12.36 and 9.x before 9.0.151.0, and Adobe AIR before 1.5, does not validate character elements during retrieval from the dictionary data structure, which allows remote attackers to cause a denial of service NULL pointer...
CUPS < 1.3.10 Multiple Overflows
Binary data 4771.prm...
CVE-2007-6021
Heap-based buffer overflow in Adobe PageMaker 7.0.1 and 7.0.2 allows user-assisted remote attackers to execute arbitrary code via a .PMD file with a crafted font structure...
Heap overflow
Heap-based buffer overflow in Adobe PageMaker 7.0.1 and 7.0.2 allows user-assisted remote attackers to execute arbitrary code via a .PMD file with a crafted font structure...
CVE-2007-5394
Stack-based buffer overflow in AldFs32.dll in Adobe PageMaker 7.0.1 and 7.0.2 allows user-assisted remote attackers to execute arbitrary code via a .PMD file with a crafted font structure, a different vulnerability than CVE-2007-5169 and CVE-2007-6432...
CVE-2007-5394
Stack-based buffer overflow in AldFs32.dll in Adobe PageMaker 7.0.1 and 7.0.2 allows user-assisted remote attackers to execute arbitrary code via a .PMD file with a crafted font structure, a different vulnerability than CVE-2007-5169 and CVE-2007-6432...
CVE-2007-5394
CVE-2007-5394 affects Adobe PageMaker 7.0.1 and 7.0.2 through a stack-based buffer overflow in AldFs32.dll when processing a specially crafted PMD file. The vulnerability could allow a user-assisted remote attacker to execute arbitrary code in the context of the current user. The related connecte...
CVE-2007-6021
Heap-based buffer overflow in Adobe PageMaker 7.0.1 and 7.0.2 allows user-assisted remote attackers to execute arbitrary code via a .PMD file with a crafted font structure...
eFront <= 3.5.1 / build 2710 Remote Arbitrary Upload Vulnerability
No description provided by source. -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- eFront = 3.5.1 / build 2710: Remote File Inclusion Vulnerability -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- $ Program: eFront $ File affected: studentpage.php / professorpag...
efront-upload.txt
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- eFront eNYe-Sec - www.enye-sec.org -- Description by the author's page -- eFront is an easy to use, visually attractive, SCORM compatible, eLearning and Human Capital Development system. It is suitable for both company and...
eFront 3.5.1 / build 2710 - Arbitrary File Upload
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- eFront eNYe-Sec - www.enye-sec.org -- Description by the author's page -- eFront is an easy to use, visually attractive, SCORM compatible, eLearning and Human Capital Development system. It is suitable for both company and...
MS08-0 5 2 WMF vulnerability analysis and vulnerability testing-vulnerability warning-the black bar safety net
------ by CuteK A background knowledge By the file format to start with,to analyze the MS08-0 5 2 vulnerability, and construct a you can make without the patch the program crash pictures, 1 WMF file structure --------------------------| | Files head | |-------------------------| | File-record |...
Gentoo Security Advisory GLSA 200708-10 (mysql)
The remote host is missing updates announced in advisory GLSA 200708-10. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2007-6716
fs/direct-io.c in the dio subsystem in the Linux kernel before 2.6.23 does not properly zero out the dio struct, which allows local users to cause a denial of service OOPS, as demonstrated by a certain fio test...
FreeBSD Security Advisory (FreeBSD-SA-08:04.ipsec.asc)
The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-08:04.ipsec.asc ADV FreeBSD-SA-08:04.ipsec.asc OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft...
Discuz space. php injection vulnerability analysis-vulnerability warning-the black bar safety net
$member = $db-fetchfirst"SELECT m., mf., u. grouptitle, u. type, u. creditshigher, u. creditslower, u. readaccess, u. color AS groupcolor, u. stars AS groupstars, u. allownickname, u. allowuseblog, r. ranktitle, r. color AS rankcolor, r. stars AS rankstars $oltimeadd1 FROM $tablepremembers m LEFT...
[SECURITY] Fedora 9 Update: python-formencode-1.0.1-1.fc9
FormEncode validates and converts nested structures. It allows for a declarative form of defining the validation, and decoupled processes for filling and generating forms...
Linux Kernel sys32_ptrace()函数多个释放后使用漏洞
CVECAN ID: CVE-2008-3077 Linux Kernel是开放源码操作系统Linux所使用的内核。 Linux kernel的arch/x86/kernel/ptrace.c文件中的sys32ptrace函数可能会溢出taskstruct结构的refcount字段，本地攻击者可以在x86-64平台上利用这个漏洞触发释放后使用，导致系统崩溃。 Linux kernel 2.6.25.10 Linux ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...