CVE-2008-1518

CVE-2008-1518 describes a local privilege escalation in Kaspersky Lab products. The vulnerable component is the kernel driver kl1.sys used by Kaspersky Anti-Virus 6.0/7.0 and Internet Security 6.0/7.0. The issue is a stack-based buffer overflow triggered in the handling of IOCTL 0x800520e8 due to...

CVE-2008-1518: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in kl1.sys in Kaspersky Anti-Virus 6.0 and 7.0 and Internet Security 6.0 and 7.0 allows local users to gain privileges via an IOCTL 0x800520e8 call...

Kaspersky Multiple Products kl1.sys Driver Local Overflow

The version of the Kaspersky product installed on the remote host contains a stack-based overflow in its 'kl1.sys' kernel driver involving its handling of IOCTL 0x800520e8. A local attacker may be able to leverage this issue to gain complete control of the affected system. C Tenable Network...

bpblog-sql.txt

--==+=================== Spanish Hackers Team www.spanish-hackers.com =================+==-- --==+ bp blog = 0 Exploit2: http://localhost/path/templatepermalink.asp?id=78 and exists select from TABLE Example: http://localhost/path/templatepermalink.asp?id=78 AND SELECT Count FROM tblauthor = 0...

BP Blog 6.0 - 'id' Blind SQL Injection

--==+=================== Spanish Hackers Team www.spanish-hackers.com =================+==-- --==+ bp blog = 0 Exploit2: http://localhost/path/templatepermalink.asp?id=78 and exists select from TABLE Example: http://localhost/path/templatepermalink.asp?id=78 AND SELECT Count FROM tblauthor = 0...

BP Blog 6.0 - id Blind SQL Injection

BP Blog 6.0 - id Blind SQL Injection --==+=================== Spanish Hackers Team www.spanish-hackers.com =================+==-- --==+ bp blog = 0 Exploit2: http://localhost/path/templatepermalink.asp?id=78 and exists select from TABLE Example: http://localhost/path/templatepermalink.asp?id=78 A...

StanWeb.CMS (default.asp id) Remote SQL Injection Exploit

--==+=================== Spanish Hackers Team www.spanish-hackers.com =================+==-- --==+ StanWeb.CMS default.asp id Remote SQL Injection Exploit +==-- --==+====================================================================================+==-- + JosS + Spanish Hackers Team + Sys -...

StanWeb.CMS (default.asp id) Remote SQL Injection Exploit

No description provided by source. --==+=================== Spanish Hackers Team www.spanish-hackers.com =================+==-- --==+ StanWeb.CMS default.asp id Remote SQL Injection Exploit +==-- --==+====================================================================================+==-- + JosS...

StanWeb.CMS - SQL Injection

StanWeb.CMS - SQL Injection --==+=================== Spanish Hackers Team www.spanish-hackers.com =================+==-- --==+ StanWeb.CMS default.asp id Remote SQL Injection Exploit +==-- --==+====================================================================================+==-- + JosS +...

StanWeb.CMS - SQL Injection

--==+=================== Spanish Hackers Team www.spanish-hackers.com =================+==-- --==+ StanWeb.CMS default.asp id Remote SQL Injection Exploit +==-- --==+====================================================================================+==-- + JosS + Spanish Hackers Team + Sys -...

CVE-2008-1932

CVE-2008-1932 affects Realtek HD Audio Codec Drivers RTKVHDA.sys and RTKVHDA64.sys on Windows Vista. The root cause is an integer overflow triggered by a crafted IOCTL request, enabling a local user to execute arbitrary code . The vulnerability is described as a local privilege escalation in mult...

CVE-2008-1931

The CVE-2008-1931 issue affects Realtek HD Audio Codec Drivers RTKVHDA.sys and RTKVHDA64.sys on Windows Vista. A crafted IOCTL request lets a local user create, write, and read registry keys, indicating a local privilege escalation vulnerability. The root cause is improper handling of IOCTLs by t...

CVE-2008-1932: Undefined Security Weakness

Integer overflow in Realtek HD Audio Codec Drivers RTKVHDA.sys and RTKVHDA64.sys before 6.0.1.5605 on Windows Vista allows local users to execute arbitrary code via a crafted IOCTL request...

CVE-2008-1931: Undefined Security Weakness

Realtek HD Audio Codec Drivers RTKVHDA.sys and RTKVHDA64.sys before 6.0.1.5605 on Windows Vista allow local users to create, write, and read registry keys via a crafted IOCTL request...

Koobi CMS 4.2.4/4.2.5/4.3.0 Multiple Remote SQL Injection Vulnerabilities

No description provided by source. --==+=================== Spanish Hackers Team www.spanish-hackers.com =================+==-- --==+ Koobi CMS 4.3.0, 4.2.5, 4.2.4 Multiple Remote SQL Injection +==-- --==+====================================================================================+==-- +...

classifiedscaffe-sql.txt

--==+=================== Spanish Hackers Team www.spanish-hackers.com =================+==-- --==+ Classifieds Caffe index.php catid Remote SQL Injection +==-- --==+====================================================================================+==-- + JosS + Spanish Hackers Team + Sys -...

Dream4 Koobi CMS 4.2.4/4.2.5/4.3.0 - Multiple SQL Injections

--==+=================== Spanish Hackers Team www.spanish-hackers.com =================+==-- --==+ Koobi CMS 4.3.0, 4.2.5, 4.2.4 Multiple Remote SQL Injection +==-- --==+====================================================================================+==-- + JosS + Spanish Hackers Team + Sys -...

CVE-2008-1625: Undefined Security Weakness

aavmker4.sys in avast! Home and Professional 4.7 for Windows does not properly validate input to IOCTL 0xb2d60030, which allows local users to gain privileges via certain IOCTL requests...

Avast! antivirus memory corruption

Kernel memory corruption in aavmker4.sys on IOCTL processing...

Destar 0.2.2-5 - Arbitrary Add Admin

Destar 0.2.2-5 - Arbitrary Add Admin !/usr/bin/python Exploit for destar 0.2.2-5, tested on Linux Debian Bug found and exploit coded by a non root user http://nonroot.blogspot.com/ Enero 2008 This is a PoC, please use it just for learning how to exploit something use: $python ./exploitcode.py...