This exploit allows an attacker to include arbitrary files on the server, leading to potential information disclosure or code execution.
This exploit triggers a buffer overflow in Triologic Media Player 8 (.m3u) file format. It allows an attacker to execute arbitrary code on the target system.
The win32k.sys module in Microsoft Windows 7 does not perform proper bounds checks on HBITMAP handles, which allows local users to gain privileges via a crafted application that triggers a NULL pointer dereference, aka a 'Windows Kernel Elevation of Privilege Vulnerability'.
A race condition exists in the validation stage of the NtCreateThread function in Microsoft Windows. This can be exploited to set the SegCs register to rpl0 and execute code with kernel privileges.
This script demonstrates a buffer overflow vulnerability in Perl. The script takes a target IP as input and creates a buffer with a length of 4100 bytes. It also creates a longer buffer with a length of 1999999 bytes. The script then attempts to exploit the buffer overflow by overwriting the return address with a specific value. The shellcode is also included in the script to execute arbitrary code.
No check of user rights when uploading a file, and file type is checked via HTTP header Content-Type, which can be different from the real. Exploit creates a micro.php shell on the target site.
If you flood the telnet configuration a couple dozen times with long strings, eventually the telnetd service flat out dies. Routing functions of the NetDSL continue to work fine as before. It is unknown whether only the telnetd service is affected, other means of remote configuration may have become unavailable as well.
This exploit allows an attacker to include remote files in the MailForm software. The vulnerability exists in the 'index.php' file, specifically in the 'theme' parameter. By manipulating this parameter, an attacker can execute arbitrary code from a remote location.
The PHP-Nuke-8.1-seo-Arabic script is vulnerable to remote file inclusion. An attacker can exploit this vulnerability by including a malicious file through the 'newlang' parameter in the 'mainfile.php' or the 'ThemeSel' parameter in the 'index.php' file.
A crash due to an invalid read in the Windows kernel can be reliably leveraged into privileged code execution resulting in a privilege escalation local vulnerability. This happens because special values of 'hParent' where not sufficiently taken into account when patching 'xxxCreateWindowsEx' on MS010-032.
Services By CQR
