Mac OS X contains a vulnerability that allows the bypass of the Apple Quarantine and the execution of arbitrary Javascript code without restrictions. The vulnerability is in one html file, part of the Mac OS X core, that is prone to a DOM Based XSS allowing the excution of arbitrary javascript commands in its (unrestricted) context.
Command injection is an attack in which the goal is execution of arbitrary commands on the host operating system via a vulnerable application.
dnsmasq is vulnerable to a buffer overflow vulnerability when one of the following options is specified: --add-mac, --add-cpe-id or --add-subnet. This vulnerability can be exploited by a malicious user to cause a denial of service or potentially execute arbitrary code.
A stack buffer overflow vulnerability exists in the DHCPv6 code of DNSMasq versions 2.78test2-8-ga3303e1 and earlier. The vulnerability is triggered when a malicious DHCPv6 server sends a crafted DHCPv6 reply to a client. This can lead to arbitrary code execution in the context of the DNSMasq process.
A heap buffer overflow vulnerability was discovered in DNSMasq versions 2.78test2-8-ga3303e1 and earlier. The vulnerability is caused by improper bounds checking of the DHCPv6 packet length. An attacker can send a specially crafted DHCPv6 packet to trigger a heap buffer overflow and execute arbitrary code on the target system.
A heap buffer overflow vulnerability was discovered in DNSMasq, a popular DNS forwarding service. The vulnerability occurs when a malicious client sends a DNS request to the DNSMasq server, which is then forwarded to an attacker-controlled DNS server. The attacker-controlled DNS server then responds with a maliciously crafted response that causes a heap buffer overflow in the DNSMasq server. This can lead to arbitrary code execution on the server.
Due to lack of prepared statements an application is prone to SQL Injection attacks. Potential attacker can retrieve data from application database by exploiting the issue.
This module exploits a shellshock vulnerability on Qmail, a public domain MTA written in C that runs on Unix systems. Due to the lack of validation on the MAIL FROM field, it is possible to execute shell code on a system with a vulnerable BASH (Shellshock). This flaw works on the latest Qmail versions (qmail-1.03 and netqmail-1.06). However, in order to execute code, /bin/sh has to be linked to bash (usually default configuration) and a valid recipient must be set on the RCPT TO field (usually admin@exampledomain.com). The exploit does not work on the 'qmailrocks' community version as it ensures the MAILFROM field is well-formed.
Improper sanitization of system commands in the restricted shell interface in UCOPIA Wireless Appliance, prior to 5.1.8, allows remote attackers to gain access to a system shell as the "admin" user. By logging in within these interfaces, we can access to a restricted shell (*clish*) that allows only a few commands. However, the `less` command is allowed, and because `less` allows to execute shell commands when viewing a file, we can use it to escape the restricted shell.
Improper sanitization of system commands in the chroothole_client executable in UCOPIA Wireless Appliance, prior to 5.1.8, allows local attackers to elevate privileges to root user and escape from the chroot.
Services By CQR