Oracle Database Server SQL Injection In Package SYS.KUPV (CVE-2006-0586)

Oracle Database Server is an enterprise-level relational database application suite. To extend the functionality of the Oracle Database Server, extra packages of related program objects, i.e. procedures, functions, variables, constants, cursors, and exceptions, are provided in order to better...

avast! Professional Edition < 4.8.1356 Multiple Vulnerabilities

The remote Windows host is running avast! Professional Edition. The installed version of avast! Professional Edition is potentially affected by multiple issues : - A local privilege escalation vulnerability because the 'avast4.ini' file is created with insecure permissions on setup. CVE-2009-3524...

CVE-2009-3523

aavmKer4.sys in avast! Home and Professional for Windows before 4.8.1356 does not properly validate input to IOCTLs 1 0xb2d6000c and 2 0xb2d60034, which allows local users to gain privileges via IOCTL requests using crafted kernel addresses that trigger memory corruption, a different vulnerabilit...

Microsoft SRV2.SYS SMB Negotiate ProcessID Function Table Dereference

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Microsoft...

Kaspersky AV 2010 9.0.0.463 - Local Denial of Service

Kaspersky AV 2010 9.0.0.463 - Local Denial of Service include include include include include / Program : Kaspersky Anti-Virus 2010 9.0.0.463 Homepage : http://www.kaspersky.com Discovery : 2009/09/29 Author Contacted : 2009/10/01 Found by : Heurs This Advisory : Heurs Contact :...

Kaspersky AV 2010 9.0.0.463 Local DoS

No description provided by source. include stdio.h include windows.h include winioctl.h include stdlib.h include string.h / Program : Kaspersky Anti-Virus 2010 9.0.0.463 Homepage : http://www.kaspersky.com Discovery : 2009/09/29 Author Contacted : 2009/10/01 Found by : Heurs This Advisory : Heurs...

Kaspersky AV 2010 9.0.0.463 - Local Denial of Service

include include include include include / Program : Kaspersky Anti-Virus 2010 9.0.0.463 Homepage : http://www.kaspersky.com Discovery : 2009/09/29 Author Contacted : 2009/10/01 Found by : Heurs This Advisory : Heurs Contact : [email protected] //----- Application description The most trusted...

Kaspersky AV 2010 9.0.0.463 Local DoS

Exploit for unknown platform in category dos / poc ===================================== Kaspersky AV 2010 9.0.0.463 Local DoS ===================================== Title: Kaspersky AV 2010 9.0.0.463 Local DoS CVE-ID: OSVDB-ID: Author: Heurs Published: 2009-09-29 Verified: yes view source print?...

Avast! Antivirus aswMon2.sys驱动本地权限提升漏洞

BUGTRAQ ID: 36507 Avast! Antivirus是ALMIL公司开发的杀毒软件。 Avast!的aswMon2.sys驱动没有正确地过滤用户所提供的IOCTL输入，本地用户可以通过提交恶意的IOCTL请求触发内核内存破坏，导致系统蓝屏死机或执行任意内核态代码。 ALWIL Software Avast! Antivirus 4.8.1351.0 厂商补丁： ALWIL Software -------------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.avast.com/index.ht...

Avast 4.8.1351.0 Privilege Escalation

Source: https://www.evilfingers.com/advisory/Advisory/AvastaswMon2.syskernelmemorycorruptionandLocalPrivilegeEscalation.php -----------Avast aswMon2.sys kernel memory corruption and Local Privilege Escalation--------- Author: Giuseppe 'Evilcry' Bonfa' E-Mail: evilcry AT GMAIL DOT COM Website:...

Avast Antivirus 4.8.1351.0 DoS and Privilege Escalation

Exploit for unknown platform in category local exploits ======================================================= Avast Antivirus 4.8.1351.0 DoS and Privilege Escalation ======================================================= Title: Avast Antivirus 4.8.1351.0 DoS and Privilege Escalation CVE-ID:...

Avast aswMon2.sys kernel memory corruption and Local Privilege Escalation.

Source: https://www.evilfingers.com/advisory/Advisory/AvastaswMon2.syskernelmemorycorruptionandLocalPrivilegeEscalation.php -----------Avast aswMon2.sys kernel memory corruption and Local Privilege Escalation--------- Author: Giuseppe 'Evilcry' Bonfa' E-Mail: evilcry AT GMAIL DOT COMbr Website:...

Microsoft Windows SMB2 '_Smb2ValidateProviderCallback()'拒绝服务漏洞

Bugraq ID: 36299 Microsoft Windows是一款流行的操作系统。 Microsoft Windows Vista和Windows 7包含的SMB2组件不正确处理用户提交的请求，远程攻击者可以利用漏洞使目标系统触发蓝屏。 SRV2.SYS驱动不正确处理发送给NEGOTIATE PROTOCOL REQUEST功能的畸形SMB头字段数据，NEGOTIATE PROTOCOL REQUEST是客户端发送给SMB服务器的第一个SMB查询，用于识别SMB语言并用于之后的通信。 远程攻击者可以构建Process Id...

Regarding Microsoft srv2.sys SMB2.0 NEGOTIATE BSOD

----------------------- References: Original Advisory Lauren Gaffi http://g-laurent.blogspot.com/2009/09/windows-vista7-smb20-negotiate-protocol.html ----------------------- Hi all, Just for the records since the vulnerability is not only a DoS as stated initially. Below are the technical details...

HTMLDOC 1.8.27 - .html File Handling Stack Buffer Overflow

HTMLDOC 1.8.27 - .html File Handling Stack Buffer Overflow / HTMLDOC 'html' File Handling Remote Stack Buffer Overflow Exploit Linux Reference: https://www.securityfocus.com/bid/35727 Tested on HTMLDOC 1.8.27 on Debian 5.0 +ASLR Credit: ANTHRAX666 for finding the vulnerability Coded by Pankaj Koh...

CVE-2009-3103

Array index error in the SMBv2 protocol implementation in srv2.sys in Microsoft Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold and SP2, and Windows 7 RC allows remote attackers to execute arbitrary code or cause a denial of service system crash via an & ampersand character in a Proces...

Gentoo Security Advisory GLSA 200907-08 (rt2400 rt2500 rt2570 rt61 ralink-rt61)

The remote host is missing updates announced in advisory GLSA 200907-08. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

Oracle 10g SYS. LT. COMPRESSWORKSPACETREE local injection vulnerability-vulnerability warning-the black bar safety net

Oracle 10g SYS. LT. COMPRESSWORKSPACETREE local injection vulnerability This is slightly modified version of: This is based on cursor injection and does not need create function privileges: DECLARE D NUMBER; BEGIN D := DBMSSQL. OPENCURSOR; DBMSSQL. PARSED,'declare pragma autonomoustransaction;...

LightOpenCMS 0.1 Local File Inclusion

LightOpenCMS 0.1 smarty.php cwd Local File Inclusion Vulnerability bug found by Jose Luis Gongora Fernandez a.k.a JosS contact: sys-projectathotmail.com website: http://www.hack0wn.com/ - download: http://sourceforge.net/project/showfiles.php?groupid=251474 smarty.php define"SMARTYDIR",...

LightOpenCMS 0.1 - smarty.php?cwd Local File Inclusion

LightOpenCMS 0.1 - smarty.php?cwd Local File Inclusion LightOpenCMS 0.1 smarty.php cwd Local File Inclusion Vulnerability bug found by Jose Luis Gongora Fernandez a.k.a JosS contact: sys-projectathotmail.com website: http://www.hack0wn.com/ - download:...