CVE-2010-3135: Undefined Security Weakness

Untrusted search path vulnerability in Cisco Packet Tracer 5.2 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse wintab32.dll that is located in the same folder as a .pkt or .pkz file...

Cisco Packet Tracer 5.2 DLL Hijacking Exploit

/ Title: Cisco Packet Tracer 5.2 DLL Hijacking Exploit wintab32.dll Date:05/08/2010 Author: CCNA Tested on: Windows XP SP 2 Extension: .pkt .pkz Greets: xokaido, hex, hektor, classical / include define DllExport declspec dllexport DllExport void WTInfoA theCode; DllExport void WTOpenA theCode;...

Cisco Packet Tracer 5.2 - wintab32.dll DLL Hijacking

Cisco Packet Tracer 5.2 - wintab32.dll DLL Hijacking / Title: Cisco Packet Tracer 5.2 DLL Hijacking Exploit wintab32.dll Date:05/08/2010 Author: CCNA Tested on: Windows XP SP 2 Extension: .pkt .pkz Greets: xokaido, hex, hektor, classical / include define DllExport declspec dllexport DllExport voi...

Cisco Packet Tracer 5.2 DLL Hijacking Exploit (wintab32.dll)

Exploit for windows platform in category local exploits ============================================================ Cisco Packet Tracer 5.2 DLL Hijacking Exploit wintab32.dll ============================================================ / Title: Cisco Packet Tracer 5.2 DLL Hijacking Exploit...

Cisco Packet Tracer 5.2 - 'wintab32.dll' DLL Hijacking

/ Title: Cisco Packet Tracer 5.2 DLL Hijacking Exploit wintab32.dll Date:05/08/2010 Author: CCNA Tested on: Windows XP SP 2 Extension: .pkt .pkz Greets: xokaido, hex, hektor, classical / include define DllExport declspec dllexport DllExport void WTInfoA theCode; DllExport void WTOpenA theCode;...

Mac OS X Security Update 2007-009

The remote host is missing Security Update 2007-009. One or more of the following components are affected: Address Book CFNetwork ColorSync Core Foundation CUPS Desktop Services Flash Player Plug-in GNU Tar iChat IO Storage Family Launch Services Mail perl python Quick Look ruby Safari Safari RSS...

Mac OS X Security Update 2007-009

The remote host is missing Security Update 2007-009. SPDX-FileCopyrightText: 2010 LSS Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

Fedora 11 : kernel-2.6.30.9-96.fc11 (2009-11032)

Tue Nov 3 2009 Kyle McMartin 2.6.30.9-96 - fs/pipe.c: fix NULL pointer dereference CVE-2009-3547 - Sun Oct 25 2009 Chuck Ebbert 2.6.30.9-95 - Disable the stack protector on functions that don't have onstack arrays. - Thu Oct 22 2009 Chuck Ebbert 2.6.30.9-94 - Fix overflow in KVM cpuid code...

Important: Red Hat Security Advisory: kernel-rt security and bug fix update

Updated kernel packages that fix several security issues and several bugs are now available for Red Hat Enterprise MRG 1.1. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages contain the Linux kernel, the core of any Linux...

Code injection

plugins/eventtracer/eventlist.php in PhpWebGallery 1.7.2 and earlier allows remote authenticated administrators to execute arbitrary PHP code via PHP sequences in the sort parameter, which is processed by createfunction...

PHPWebGallery 1.7.2 - Session Hijacking / Code Execution

$b'.$sort.';' 64. ; An attacker could be able to inject and execute PHP code through $GET'sort', that is passed to createfunction at line 63 see https://www.securityfocus.com/bid/31398. Only admin can access to the plugins management interface, but the attacker might be able to retrieve a valid...

Apple Mac OS X v10.5.1 2007-009 Multiple Security Vulnerabilities

CVE-2007-4708 CVE-2007-4709 CVE-2007-4710 CVE-2007-5847 CVE-2007-5848 CVE-2007-5849 CVE-2007-5850 CVE-2007-5851 CVE-2007-5853 CVE-2007-5854 CVE-2007-5855 CVE-2007-5856 CVE-2007-5857 CVE-2007-5859 CVE-2007-5876 CVE-2007-5860 CVE-2007-5861 These issues affect Mac OS X and various applications,...

Design/Logic Flaw

Unspecified vulnerability in Spin Tracer in Apple Mac OS X 10.5.1 allows local users to execute arbitrary code via unspecified output files, involving an "insecure file operation."...

CVE-2007-5860

Unspecified vulnerability in Spin Tracer in Apple Mac OS X 10.5.1 allows local users to execute arbitrary code via unspecified output files, involving an "insecure file operation."...

CVE-2007-5860

CVE-2007-5860 affects Apple Mac OS X 10.5.1 (Spin Tracer). The vulnerability is described as an unspecified local condition that allows an attacker with local access to execute arbitrary code via insecure file operations on output files. This is confirmed by multiple sources in the connected set,...

CVE-2007-5860: Undefined Security Weakness

Unspecified vulnerability in Spin Tracer in Apple Mac OS X 10.5.1 allows local users to execute arbitrary code via unspecified output files, involving an "insecure file operation."...

Ubuntu 5.04 / 5.10 : linux-source-2.6.10, linux-source-2.6.12 vulnerabilities (USN-281-1)

The sysmbind function did not properly verify the validity of the 'maxnod' argument. A local user could exploit this to trigger a buffer overflow, which caused a kernel crash. CVE-2006-0557 The SELinux module did not correctly handle the tracer SID when a process was already being traced. A local...

CVE-2006-1052

The selinuxptrace logic in hooks.c in SELinux for Linux 2.6.6 allows local users with ptrace permissions to change the tracer SID to an SID of another process...

CVE-2006-1052

The selinuxptrace logic in hooks.c in SELinux for Linux 2.6.6 allows local users with ptrace permissions to change the tracer SID to an SID of another process...

[Full-disclosure] [USN-281-1] Linux kernel vulnerabilities

=========================================================== Ubuntu Security Notice USN-281-1 May 04, 2006 linux-source-2.6.10, linux-source-2.6.12 vulnerabilities CVE-2006-0557, CVE-2006-1052, CVE-2006-1055, CVE-2006-1066, CVE-2006-1242, CVE-2006-1343, CVE-2006-1368, CVE-2006-1525...