Charles Stevenson (core)

EIP-2026-114727 EXPLOITDB perl WORKING POC

Solaris 10 (x86) - DtPrintinfo/Session Privilege Escalation

View Code

CVE-2005-3533 EXPLOITDB perl WORKING POC

Osh < 1.7.14 - Buffer Overflow

Buffer overflow in OSH before 1.7-15 allows local users to execute arbitrary code via a long current working directory and filename.

View Code

CVE-2005-3346 EXPLOITDB bash WORKING POC

Osh - Buffer Overflow

Buffer overflow in the environment variable substitution code in main.c in OSH 1.7-14 allows local users to inject arbitrary environment variables, such as LD_PRELOAD, via pathname arguments of the form "$VAR/EVAR=arg", which cause the EVAR portion to be appended to a buffer returned by a getenv function call.

View Code