112 matches found
CVE-2013-3495
The Intel VT-d Interrupt Remapping engine in Xen 3.3.x through 4.3.x allows local guests to cause a denial of service kernel panic via a malformed Message Signaled Interrupt MSI from a PCI device that is bus mastering capable that triggers a System Error Reporting SERR Non-Maskable Interrupt NMI...
CVE-2013-3495
The Intel VT-d Interrupt Remapping engine in Xen 3.3.x through 4.3.x allows local guests to cause a denial of service kernel panic via a malformed Message Signaled Interrupt MSI from a PCI device that is bus mastering capable that triggers a System Error Reporting SERR Non-Maskable Interrupt NMI...
MS Windows nt!SeObjectCreateSaclAccessBits() Missed ACE (MS10-047)
Exploit for windows platform in category dos / poc ================================================================== MS Windows nt!SeObjectCreateSaclAccessBits Missed ACE MS10-047 ================================================================== Microsoft Windows nt!SeObjectCreateSaclAccessBits...
Microsoft Windows nt!SeObjectCreateSaclAccessBits() Missed ACE Bounds Checks
Microsoft Windows nt!SeObjectCreateSaclAccessBits missed ACE bounds checks ---------------------------------------------------------------------------- CVE-2010-1890 An ACE is an Access Control Entry, of which many may be attached to an ACL Access Control List. On Windows, an ACL can be of type...
Donar Player 2.2.0 - Local Crash (PoC)
!/usr/bin/python Title: Donar Player 2.2.0 Local Crash PoC Date: 03-21-2010 Author: b0telh0 Link: http://www.donarzone.com/downloads/donar-player-setup-free.exe Tested on: Windows XP SP3 crash = "\x41" 1000 try: file = open'b0t.wma','w'; file.writecrash; file.close; print "\n+ b0t.wma created."...
Easily the jmp esp mode is rewritten to jmp ebx ways-vulnerability warning-the black bar safety net
Reprint: Q version of the hack overflow tutorial book To write this article, I hope to give think I like the beginner buffer overflow rookie some help, because now indeed haven't found a description of such articles. First, the description in stack overflow, our two use—jmp esp and jmp ebx; next,...
Deleting a custom field which has an issue security scheme or permission scheme on it causes system error
A custom field with an issue security scheme based on it is deleted. A subsequent search on a issue under this security scheme causes a system error...
Deleting a custom field which has an issue security scheme or permission scheme on it causes system error
A custom field with an issue security scheme based on it is deleted. A subsequent search on a issue under this security scheme causes a system error...
Deleting a custom field which has an issue security scheme or permission scheme on it causes system error
A custom field with an issue security scheme based on it is deleted. A subsequent search on a issue under this security scheme causes a system error...
jailed processes can attach to other jails
A programming error has been found in the jailattach2 system call which affects the way that system call verifies the privilege level of the calling process. Instead of failing immediately if the calling process was already jailed, the jailattach system call would fail only after changing the...
