CVE-2009-1786

This exploit leverages a vulnerability in IBM AIX's libc MALLOCDEBUG feature to overwrite arbitrary files with elevated permissions. By setting specific environment variables, an attacker can create or overwrite files with 777 permissions when a setuid root binary is executed.

This exploit leverages a cross-site scripting (XSS) vulnerability in Kingsoft Internet Security 9's WebShield feature to execute arbitrary commands. The payload is URL-encoded and triggers a JavaScript `CallCFunc` method to execute a system command via `calc.exe`.