Netwide Assembler 'pp_list_one_macro' function memory misreference vulnerability

Netwide Assembler NASM is a Linux-based assembler that creates binaries and writes bootloaders. A memory misreference vulnerability exists in the 'pplistonemacro' function in the asm/preproc.c file in NASM version 2.14rc0, which stems from the program's failure to properly handle operand type...

Netwide Assembler Denial of Service Vulnerability

Netwide Assembler NASM is a Linux-based assembler that creates binaries and writes bootloaders. A denial of service vulnerability exists in NASM version 2.14rc0, which stems from the program failing to properly handle macro calls. A remote attacker could exploit this vulnerability to cause a deni...

CVE-2017-17810: Improper Input Validation

In Netwide Assembler NASM 2.14rc0, there is a "SEGV on unknown address" that will cause a remote denial of service attack, because asm/preproc.c mishandles macro calls that have the wrong number of arguments...

UBUNTU-CVE-2017-17813

In Netwide Assembler NASM 2.14rc0, there is a use-after-free in the pplistonemacro function in asm/preproc.c that will cause a remote denial of service attack, related to mishandling of line-syntax errors...

UBUNTU-CVE-2017-17815

In Netwide Assembler NASM 2.14rc0, there is an illegal address access in ismmacro in asm/preproc.c that will cause a remote denial of service attack, because of a missing check for the relationship between minimum and maximum parameter counts...

UBUNTU-CVE-2017-17820

In Netwide Assembler NASM 2.14rc0, there is a use-after-free in pplistonemacro in asm/preproc.c that will lead to a remote denial of service attack, related to mishandling of operand-type errors...

PT-2017-15018

Name of the Vulnerable Software and Affected Versions Netwide Assembler NASM version 2.14rc0 Description The issue is related to a use-after-free error in the pp list one macro function, located in asm/preproc.c. This error can lead to a remote denial of service DoS due to the incorrect handling ...

PT-2017-15025

Name of the Vulnerable Software and Affected Versions Netwide Assembler NASM version 2.14rc0 Description The issue is related to a use-after-free in the pp list one macro function in asm/preproc.c, which can lead to a remote denial of service attack. This is due to the mishandling of operand-type...

PT-2017-15015

Name of the Vulnerable Software and Affected Versions Netwide Assembler NASM version 2.14rc0 Description The issue is related to a "SEGV on unknown address" that can cause a remote denial of service attack. This occurs because the asm/preproc.c file mishandles macro calls that have the wrong numb...

CVE-2017-17810

In Netwide Assembler NASM 2.14rc0, there is a "SEGV on unknown address" that will cause a remote denial of service attack, because asm/preproc.c mishandles macro calls that have the wrong number of arguments...

UBUNTU-CVE-2017-17810

In Netwide Assembler NASM 2.14rc0, there is a "SEGV on unknown address" that will cause a remote denial of service attack, because asm/preproc.c mishandles macro calls that have the wrong number of arguments...

MS-Word Payload Delivery: Macro Creator

Invoke-MacroCreator is a powershell Cmdlet that allows for the creation of an MS-Word document embedding a VBA macro with various payload delivery and execution capabilities. Description Basically the script supports three types of payload that you MUST specify using the -t argument: 1. shellcode...

Threat Round Up for Dec 01 - Dec 08

Today, Talos is publishing a glimpse into the most prevalent threats we've observed between December 01 and December 08. As with previous round-ups, this post isn't meant to be an in-depth analysis. Instead, this post will summarize the threats we've observed by highlighting key behavior...

SS-2017-007: CSV Excel Macro Injection

More info at https://www.silverstripe.org/download/security-releases/ss-2017-007/...

The vulnerability of the ms.cgi (/swms/ms.cgi) script in the MRF Web Panel web application allows a attacker to execute arbitrary operating system commands.

The vulnerability of the ms.cgi /swms/ms.cgi script in the MRF Web Panel application exists due to the lack of measures taken to neutralize special elements used in operating system commands. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands on behalf of the...

Atlassian Confluence XSS Vulnerability

Atlassian Confluence is prone to a cross-site scripting vulnerability through various RSS properties in the RSS macro. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Design/Logic Flaw

NVIDIA driver contains a vulnerability where it is possible a use after free malfunction can occur due to improper usage of the listforeach kernel macro which could enable unauthorized code execution and possibly lead to elevation of privileges. This issue is rated as high. Product: Android...

PT-2017-16964

Name of the Vulnerable Software and Affected Versions NVIDIA driver affected versions not specified Description The NVIDIA driver contains an issue where a use after free malfunction can occur due to improper usage of the list for each kernel macro. This could enable unauthorized code execution a...

Atlassian Confluence Cross-Site Scripting Vulnerability (CNVD-2018-00231)

Atlassian Confluence is a teamwork software written in Java and used primarily in enterprise environments. A cross-site scripting vulnerability exists in the RSS Feed macro in Atlassian Confluence before 6.5.2. A remote attacker can exploit this vulnerability to inject arbitrary HTML or JavaScrip...

CVE-2017-16856

The RSS Feed macro in Atlassian Confluence before version 6.5.2 allows remote attackers to inject arbitrary HTML or JavaScript via cross site scripting XSS vulnerabilities in various rss properties which were used as links without restriction on their scheme...