LibTIFF DoS

The vulnerability of the LibTIFF library, which allows a hacker to trigger a service failure...

LibTIFF DoS

The vulnerability of the LibTIFF library, which allows a hacker to trigger a service failure...

MariaDB 10.1.x < 10.1.7 Multiple Vulnerabilities

The version of MariaDB running on the remote host is 10.1.x prior to 10.1.7. It is, therefore, affected by multiple vulnerabilities : - A denial of service vulnerability exists in the baselistiterator::nextfast function within file sql/sqlparse.cc when handling multi-table updates. An...

Grandsteam GXV3611_HD - SQL Injection

Grandsteam GXV3611HD - SQL Injection Exploit Title: Grandstream GXV3611HD Telnet SQL Injection and backdoor command Exploit Author: pizza1337 Vendor Homepage: http://www.grandstream.com/ Version: GXV3611HD Core 1.0.3.6, 1.0.4.3 GXV3611IRHD Core 1.0.3.5 Tested on: -GXV3611HD Bootloader Version:...

CVE-XX-XX:“an Atom of the truncated Hu”the Windows kernel to mention the right vulnerability analysis-vulnerability warning-the black bar safety net

! Author: PlayBoy23333 Royalties of: 500RMB（not taking you to the contributor!） Submission methods: send an email to linwei3 6 0. cn, or visit the web version of the online submission aintroduction A few days ago the Internet fooling around when found Rookitsmm on Github to share a mention the...

Android DoS

The vulnerability of the Android operating system is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to trigger a service failure through a specially created application that exploits the app-pinning mechanism...

PT-2016-7823 · Linux +5 · Linux Kernel +5

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.7 Description: The issue is related to a race condition in the snd pcm period elapsed function in the ALSA subsystem. This can be exploited by local users to cause a denial of service use-after-free or possibl...

Internet Bug Bounty: Use After Free Vulnerability in array_walk()/array_walk_recursive()

https://bugs.php.net/bug.php?id=70713 I think this bugs is still security issue since this bug can be still triggered remotely in some real world&apps. Example: https://github.com/zendframework/zend-loader/blob/ceb32b5129525e1f19b01f37dbbcc6398b0a9635/src/ClassMapAutoloader.phpL210-L215...

IPS Community Suite <= 4.1.12.3 Autoloaded PHP remote code execution vulnerability

Details source: The know Chong Yu 404 security lab A vulnerability overview 1. Vulnerability information "IPS Community Suite "is a foreign of the more common cms. But in its 4. 1. 12. 3 version and the following version, there is a PHP code injection vulnerability that stems from the procedures...

Siemens Simatic S7-1200 PLC

The software of the Siemens SIMATIC S7-1200 programmable logic controller contains a vulnerability. When this vulnerability is exploited, the device can be switched into an emergency mode by sending a special TCP/IP packet to port 102. This emergency mode persists until a hardware restart is...

Cisco Unified Communications Manager DoS

The vulnerability of the Cisco Unified Communications Manager IP telephony management system exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to cause service interruptions by sending specially crafted packets...

Xen Hypervisor DoS

The vulnerability of Xen hypervisors is related to deficiencies in access control for certain functions. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures using the guest operating system...

WebSphere Application Server Information Disclosure

The vulnerability in the IBM Global Security Kit GSKit allows malicious actors to induce a service failure by using a specially crafted handshake during the reestablishment of an SSLv2 session...

Cisco IOS DoS

The vulnerability in Cisco IOS and IOS XE allows malicious actors operating remotely to trigger a service failure device reboot through improperly generated IKEv2 packets...

BIND Server Information Disclosure

The vulnerability exists in libdns within ISC BIND due to incorrect processing of EDNS parameters. Exploiting this vulnerability allows malicious actors operating remotely to trigger a service failure a REQUIRE validation error and termination of the daemon using a specially crafted package...

Cisco IOS DoS

The vulnerability in Cisco IOS and IOS XE allows malicious actors operating remotely to trigger a service failure by using improperly crafted IPv6 packets. This causes excessive memory consumption for input/output operations and triggers a device restart...

Cisco Wireless LAN Controller DoS

The vulnerability in the monitoring service of Multimedia Delivery MLD for Cisco Wireless LAN Controllers WLC – when the MLDv2 Snooping function is enabled – allows malicious actors operating remotely to trigger a device reboot by using improperly crafted IPv6 MLDv2 packets...

Microsoft Lync Server Compromise

The vulnerability in Lync Server allows a malicious individual to trigger a system failure...

Firefox ESR Code Execution

The Mozilla Firefox ESR browser contains numerous vulnerabilities related to memory-related errors. Exploiting these vulnerabilities allows malicious individuals to execute arbitrary code through a specially created website, cause service failures, or trigger an emergency shutdown of the...

Thunderbird Code Execution

Mozilla Thunderbird’s email client contains a vulnerability related to errors in the implementation of the Web IDL technology. Exploiting this vulnerability allows malicious actors operating remotely to execute arbitrary JavaScript code with Chrome privileges, using a fragment of IDL to trigger a...