5019 matches found
CVE-2018-14016
The rbinmdmpinitdirectoryentry function in mdmp.c in radare2 2.7.0 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted Mini Crash Dump file...
CVE-2018-14016
The rbinmdmpinitdirectoryentry function in mdmp.c in radare2 2.7.0 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted Mini Crash Dump file...
CVE-2018-14016: Out-of-bounds Read
The rbinmdmpinitdirectoryentry function in mdmp.c in radare2 2.7.0 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted Mini Crash Dump file...
CVE-2018-3587
In a firmware memory dump feature in all Android releases from CAF using the Linux kernel Android for MSM, Firefox OS for MSM, QRD Android, a Use After Free condition can occur...
CVE-2018-3587
CVE-2018-3587 is tied to the Qualcomm qcacld-2.0 WLAN driver in Android CAF builds, where a Use-After-Free in a firmware memory dump feature can lead to Elevation of Privilege (EoP). The NVD listing shows a CVSS v3 base score of 7.8 (HIGH) with LOCAL attack vector, low complexity, and privileges ...
CVE-2018-3587
In a firmware memory dump feature in all Android releases from CAF using the Linux kernel Android for MSM, Firefox OS for MSM, QRD Android, a Use After Free condition can occur...
PT-2018-16078
Name of the Vulnerable Software and Affected Versions Android for MSM affected versions not specified Firefox OS for MSM affected versions not specified QRD Android affected versions not specified Description A Use After Free condition can occur in the firmware memory dump feature in Android...
CVE-2018-3587: Use After Free
In a firmware memory dump feature in all Android releases from CAF using the Linux kernel Android for MSM, Firefox OS for MSM, QRD Android, a Use After Free condition can occur...
SUN-RPC Portmapper DUMP Call
SUN-RPC has a scanning interface. This mode may be used to gather information on a server, such as the services and applications running on it. This protection detects use of the SUN-RPC interface scanning...
PT-2018-3513
Name of the Vulnerable Software and Affected Versions: GPAC version 0.7.1 Description: A heap-based buffer over-read issue exists in the hdlr dump function, located in the isomedia/box dump.c file. This issue may allow a remote attacker to impact the confidentiality, integrity, and availability o...
Impacket - Collection Of Python Classes For Working With Network Protocols
Impacket is a collection of Python classes for working with network protocols. Impacket is focused on providing low-level programmatic access to the packets and for some protocols e.g. SMB1-3 and MSRPC the protocol implementation itself. Packets can be constructed from scratch, as well as parsed...
Security Bulletin: The Elastic Storage Server and the GPFS Storage Server are affected by a vulnerability in IBM Spectrum Scale (CVE-2017-1654)
Summary The Elastic Storage Server and the GPFS Storage Server are affected by a vulnerability in IBM Spectrum Scale that could allow a local unprivileged user access to information located in dump files. User data could be sent to IBM during service engagements. Vulnerability Details CVEID:...
Security Bulletin: IBM® Db2® is affected by a vulnerability in IBM Spectrum Scale (CVE-2017-1654)
Summary Db2 is affected by a vulnerability in IBM® Spectrum Scale Version 4.1.1 that is used by DB2® pureScale™ Feature on AIX and Linux. A security vulnerability has been identified in IBM Spectrum Scale that could allow a local unprivileged user access to information in dump files, and result i...
Security Bulletin: Security vulnerability has been identified in IBM Spectrum Scale which is used by IBM PureApplication Systems/Service (CVE-2017-1654)
Summary A security vulnerability has been identified in IBM Spectrum Scale that could allow a local user access to other users data in dump files. Vulnerability Details CVEID: CVE-2017-1654 DESCRIPTION: IBM Spectrum Scale 4.1.1, 4.2.0, 4.2.1, 4.2.2, 4.2.3, and 5.0.0 could allow a local unprivileg...
Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2018-4131)
The remote Oracle Linux 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2018-4131 advisory. - netlink: add a start callback for starting a netlink dump Tom Herbert Orabug: 27169581 CVE-2017-16939 Tenable has extracted the preceding description bloc...
kdump information disclosure vulnerability
kdump is a kernel crash dump functionality component used in the Linux kernel based on kexec. A security vulnerability exists in versions of kdump prior to 2012-01-20, which stems from the program's lack of host key authentication. A remote attacker can exploit this vulnerability to impersonate t...
SonyPlaystation 3 ( #PS3 ) 4.82 - #Jailbreak (ROP) Exploit
Exploit for hardware platform in category local exploits EDB Note http://ps3xploit.com/help/dumper.html EDB Download https://github.com/offensive-security/exploit-database-bin-sploits/raw/master/bin-sploits/44820.zip Dumper Help Warning: Due to the lack of proper checks after exiting the ROP chai...
WordPress MemberMouse SQL Injection Vulnerability
WordPress is the WordPress Software Foundation's set of blogging platform using PHP language development, the platform supports in PHP and MySQL servers to set up personal blog sites.MemberMouse plugin is used in one of the sales management plugin. A SQL injection vulnerability exists in the...
CVE-2018-11309
Blind SQL injection in couponcode in the MemberMouse plugin 2.2.8 and prior for WordPress allows an unauthenticated attacker to dump the WordPress MySQL database via an applyCoupon action in an admin-ajax.php request...
