CVE-2015-5961

The COPPA error page in the Accounts setup dialog in Mozilla Firefox OS before 2.2 embeds content from an external web server URL into the System process, which allows man-in-the-middle attackers to bypass intended access restrictions by spoofing that server...

Symantec Endpoint Protection 11.x, 12.x - Kernel Pool Overflow Exploit

Exploit for windows platform in category local exploits from ctypes import from ctypes.wintypes import import struct, sys, os, time ntdll = windll.ntdll kernel32 = windll.kernel32 TH32CSSNAPPROCESS = 0x02 PROCESSALLACCESS = 0x1fffff FORMATMESSAGEFROMSYSTEM = 0x00001000 NULL = 0x0 MEMCOMMIT =...

HP Data Protector DtbClsLogin Buffer Overflow

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...

Libgtop2 Library Local Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/22054/info The 'libgtop2' library is prone to a local buffer-overflow vulnerability because it fails to properly bounds-check user-supplied input before copying into an insufficiently sized memory buffer. An attacker may...

Windows NTUserMessageCall Win32k Kernel Pool Overflow (Schlamperei)

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'msf/core/post/windows/reflectivedllinjection' require 'rex' class Metasploit3 'Windows NTUserMessageCall Win32k Kernel Pool Overflow...

MS11-080 AfdJoinLeaf Privilege Escalation

Exploit for windows platform in category remote exploits This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core'...

HP Data Protector Create New Folder Buffer Overflow

This module exploits a stack buffer overflow in HP Data Protector 5. The overflow occurs in the creation of new folders, where the name of the folder is handled in a insecure way by the dpwindtb.dll component. While the overflow occurs in the stack, the folder name is split in fragments in this...

Design/Logic Flaw

An unspecified function in the Dalvik API in Android 1.5 and earlier allows remote attackers to cause a denial of service system process restart via a crafted application, possibly a related issue to CVE-2009-2656...

CVE-2009-3698: Undefined Security Weakness

An unspecified function in the Dalvik API in Android 1.5 and earlier allows remote attackers to cause a denial of service system process restart via a crafted application, possibly a related issue to CVE-2009-2656...

FreeBSD Security Advisory (FreeBSD-SA-03:17.procfs.asc)

The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-03:17.procfs.asc ADV FreeBSD-SA-03:17.procfs.asc OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Sof...

DoS through HP OpenView Internet Services Probe Builder

It's possible to terminate any system process through TCP/32968...

How to find WEB application vulnerabilities and how to exploit and prevention-vulnerability and early warning-the black bar safety net

The article had intended to send to magazines, because I'm too lazy to write, write it again it sent to their own BLOG. Internetthe security is a very popular topic, whether it is this expert or an ordinary person, are more or less involved therein. In this environment, the intrusion also become...

Bakbone NetVault Multiple Vulnerabilities

Binary data 2784.prm...

SunOS 5.7 Catman - Local Insecure tmp Symlink Clobber

SunOS 5.7 Catman - Local Insecure tmp Symlink Clobber !/usr/local/bin/perl -w The problem is catman creates files in /tmp insecurly. They are based on the PID of the catman process, catman will happily clobber any files that are symlinked to that file. The idea of this script is to watch the...

CVE-1999-0344

NT users can gain debug-level access on a system process using the Sechole exploit...

CVE-1999-0344

CVE-1999-0344 concerns an NT local privilege escalation via the Sechole exploit, allowing debug-level access to a system process (local, no authentication; high impact on confidentiality, integrity, and availability per NVD). Connected citations reiterate NT users gaining debug-level access, with...