RGui 3.4.4 - Local Buffer Overflow

RGui 3.4.4 - Local Buffer Overflow !/usr/bin/python Exploit Author: bzyo CVE: CVE-2018-9060 Twitter: @bzyo Exploit Title: R 3.4.4 - Local Buffer Overflow Date: 03-27-2018 Vulnerable Software: R 3.4.4 Vendor Homepage: https://www.r-project.org/ Version: 3.4.4 Software Link:...

RGui 3.4.4 - Local Buffer Overflow

!/usr/bin/python Exploit Author: bzyo CVE: CVE-2018-9060 Twitter: @bzyo Exploit Title: R 3.4.4 - Local Buffer Overflow Date: 03-27-2018 Vulnerable Software: R 3.4.4 Vendor Homepage: https://www.r-project.org/ Version: 3.4.4 Software Link: https://cloud.r-project.org/bin/windows/ Tested On: Window...

m-r-c.ru XSS vulnerability

Open Bug Bounty ID: OBB-603960 Description| Value ---|--- Affected Website:| m-r-c.ru Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

PT-2018-9739

Name of the Vulnerable Software and Affected Versions: radare2 version 2.5.0 Description: The issue is a heap-based buffer over-read in the r hex bin2str function, located in libr/util/hex.c. This could allow remote attackers to cause a denial of service by providing a crafted DEX file...

Debian DSA-4173-1 : r-cran-readxl - security update

Marcin Noga discovered multiple vulnerabilities in readxl, a GNU R package to read Excel files via the integrated libxls library, which could result in the execution of arbitrary code if a malformed spreadsheet is processed. C Tenable Network Security, Inc. The descriptive text and package checks...

[SECURITY] [DSA 4173-1] r-cran-readxl security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4173-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff April 16, 2018 https://www.debian.org/security/faq -...

DSA-4173-1 r-cran-readxl - security update

Bulletin has no description...

Debian: Security Advisory (DSA-4173-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2018-3624

Buffer overflow in ETWS processing module Intel XMM71xx, XMM72xx, XMM73xx, XMM74xx and Sofia 3G/R allows remote attacker to potentially execute arbitrary code via an adjacent network...

Buffer overflow

Buffer overflow in ETWS processing module Intel XMM71xx, XMM72xx, XMM73xx, XMM74xx and Sofia 3G/R allows remote attacker to potentially execute arbitrary code via an adjacent network...

CVE-2018-3624

CVE-2018-3624 is a buffer overflow in the ETWS processing module of Intel 2G Modem firmware (XMM71xx/72xx/73xx/74xx, Sofia 3G and Sofia 3G‑R). Root cause: classic buffer overflow (CWE-120) in ETWS handling that can allow a remote attacker to execute arbitrary code via an adjacent network. Public ...

CVE-2018-3624

Buffer overflow in ETWS processing module Intel XMM71xx, XMM72xx, XMM73xx, XMM74xx and Sofia 3G/R allows remote attacker to potentially execute arbitrary code via an adjacent network...

PT-2018-16100

Name of the Vulnerable Software and Affected Versions Intel XMM71xx, XMM72xx, XMM73xx, XMM74xx and Sofia 3G/R affected versions not specified Description A buffer overflow issue exists in the ETWS processing module, potentially allowing a remote attacker to execute arbitrary code via an adjacent...

CVE-2018-3624: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in ETWS processing module Intel XMM71xx, XMM72xx, XMM73xx, XMM74xx and Sofia 3G/R allows remote attacker to potentially execute arbitrary code via an adjacent network...

CVE-2018-1038

The Windows kernel in Windows 7 SP1 and Windows Server 2008 R2 SP1 allows an elevation of privilege vulnerability due to the way it handles objects in memory, aka "Windows Kernel Elevation of Privilege Vulnerability."...

r-phone.it XSS vulnerability

Open Bug Bounty ID: OBB-593581 Description| Value ---|--- Affected Website:| r-phone.it Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

r-line.ru XSS vulnerability

Open Bug Bounty ID: OBB-591367 Description| Value ---|--- Affected Website:| r-line.ru Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

PT-2018-18633

Name of the Vulnerable Software and Affected Versions radare2 version 2.4.0 Description The issue is a heap-based buffer over-read in the r asm disassemble function, which can be exploited by remote attackers to cause a denial of service. This can be achieved through a crafted dex file...

PT-2018-18630

Name of the Vulnerable Software and Affected Versions Yxcms building system version 1.4.7 Description The issue concerns a security problem where an attacker can execute malicious scripts. This is achieved by exploiting the content parameter in specific PHP files, namely extend guestbook.php, whi...

r-k.co.il XSS vulnerability

Open Bug Bounty ID: OBB-582715 Description| Value ---|--- Affected Website:| r-k.co.il Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...