Kmalloc_Internals.html
White paper discussing possible exploitation of memory returned by kmalloc().
View ArticlearhontWireless.txt
A clear text account password is obtainable using SNMP on the BT Voyager 2000 Wireless ADSL router.
View ArticleSNS Advisory 76
Internet Explorer allows local users to cause a denial of service against the system when attempting to print a certain HTML page.
View Articlefreebsd.local.txt
It is possible to crash the kernel on FreeBSD/Alpha by passing an unaligned memory address as a 2nd or 3rd argument to execve() syscall. Affected versions: FreeBSD 5.1-RELEASE/Alpha and possibly...
View Articlelinux.5820.txt
There exists an integer overflow in the Broadcom 5820 Cryptonet driver. A user supplied value is used to size a dynamic buffer, and this buffer is subsequently filled with user supplied data. This...
View Article57497.html
An error within the Basic Security Module (BSM) under Sun Solaris versions 7, 8, and 9 allows a malicious local attacker to cause a denial of service against the system.
View Articlelotus.xss.txt
IBM Lotus recognized the potential for a cross-site scripting vulnerability to exist under certain circumstances.
View ArticleiDEFENSE Security Advisory 2004-06-23.t
iDEFENSE Security Advisory 06.23.04: Remote exploitation of a parameter filtering vulnerability in IBM Corp.'s Lotus Notes application allows remote attackers to execute arbitrary code.
View ArticleSSRT4741.txt
DCE for HP Tru64 UNIX is susceptible to a potential RPC buffer overrun attack that can result in a denial of service. Affected releases: All versions of DCE/DFS for Tru64 UNIX are vulnerable v4.1.4...
View Articleargoxp.c
New UPNP exploit that affects Microsoft Windows XP SP0. Binds a shell on port 1981.
View Articlezone-h-drcat.txt
Zone-h Security Advisory - Drcatd is susceptible to multiple local and remote buffer overflows.
View ArticleSecunia Security Advisory 11928
Secunia Security Advisory - VeNoMouS has reported a vulnerability in php-exec-dir, which can be exploited by malicious users to bypass certain security restrictions.
View Articlerlprd204.txt
Vulnerabilities in rlpr version 2.x include a format string error and boundary error in the msg() function that can lead to remote arbitrary code execution.
View Articlerlprd.py.exploit
Remote exploit that makes use of a format string vulnerability in rlpr version 2.x.
View Article57581.html
An unspecified vulnerability has been discovered in Sun StorEdge Enterprise Storage Manager, which can be exploited by malicious, local users to gain root privileges.
View Articlezone-h-gnats.txt
A format string bug has been discovered in the Gnats package version 4.0 which could possibly be exploited to execute arbitrary commands.
View Articlemod_rootme-0.3.tgz
mod_rootme is a very cool module that sets up a backdoor inside of Apache where a simple GET request will allow a remote administrator the ability to grab a root shell on the system without any logging.
View Article
