1239 matches found
av-codec (>=0.1.0, <=0.2.1), av-format (>=0.1.0, <=0.3.0) +3 more potentially affected by CVE-2021-25904 via av-data (>=0.1.0, <=0.2.2)
av-data CARGO version =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.2.1 - libaom 0.2.0 - libvpx 0.1.0 Source cves: CVE-2021-25904 Source advisory: OSV:GHSA-352P-RHVQ-7G78...
Null pointer deference in av-data
An issue was discovered in the av-data crate before 0.3.0 for Rust. A raw pointer is dereferenced, leading to a read of an arbitrary memory address, sometimes causing a segfault...
GHSA-352P-RHVQ-7G78 Null pointer deference in av-data
An issue was discovered in the av-data crate before 0.3.0 for Rust. A raw pointer is dereferenced, leading to a read of an arbitrary memory address, sometimes causing a segfault...
CVE-2020-21688
A heap-use-after-free in the avfreep function in libavutil/mem.c of FFmpeg 4.2 allows attackers to execute arbitrary code...
Injector - Complete Arsenal Of Memory Injection And Other Techniques For Red-Teaming In Windows
Complete Arsenal of Memory injection and other techniques for red-teaming in Windows What does Injector do? Process injection support for shellcode located at remote server as well as local storage. Just specify the shellcode file and it will do the rest. It will by default inject into notepad.ex...
FindObjects-BOF - A Cobalt Strike Beacon Object File (BOF) Project Which Uses Direct System Calls To Enumerate Processes For Specific Loaded Modules Or Process Handles
A Cobalt Strike Beacon Object File BOF project which uses direct system calls to enumerate processes for specific modules or process handles. What is this repository for? Use direct systems calls within Beacon Object files to enumerate processes for specific loaded modules e.g. winhttp.dll,...
Forblaze - A Python Mac Steganography Payload Generator
Forblaze is a project designed to provide steganography capabilities to Mac OS payloads. Using python3, it will build an Obj-C file for you which will be compiled to pull desired encrypted URLs out of the stego file, fetch payloads over https, and execute them directly into memory. It utilizes...
CVE-2021-0476
In FindOrCreatePeer of btifav.cc, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-9...
Command Execution Vulnerability in the Control System of Next-Generation Firewall of Shenzhen Zhongke NetWizard Technology Co. Ltd (CNVD-2021-44001)
ZKNETWORTH's next-generation firewall control system products are based on L2-7 layer access application control, integrating firewall, IPS intrusion detection, DDoS/DOS protection, AV virus protection; realizing comprehensive security protection for intranet, and providing security firewall...
Denial Of Service (DoS)
gpac is vulnerable to denial of service. The vulnerability exists due to an integer overflow in mediatools/avparsers.c in the gfavcreadppsbsinternal...
Experts Warn About Ongoing AutoHotkey-Based Malware Attacks
Cybersecurity researchers have uncovered an ongoing malware campaign that heavily relies on AutoHotkey AHK scripting language to deliver multiple remote access trojans RAT such as Revenge RAT, LimeRAT, AsyncRAT, Houdini, and Vjw0rm on target Windows systems. At least four different versions of th...
DEBIAN-CVE-2021-30014
There is a integer overflow in mediatools/avparsers.c in the hevcparseslicesegment function in GPAC from v0.9.0-preview to 1.0.1 which results in a crash...
CVE-2021-30022
There is a integer overflow in mediatools/avparsers.c in the gfavcreadppsbsinternal in GPAC from 0.5.2 to 1.0.1. ppsid may be a negative number, so it will not return. However, avc-pps only has 255 unit, so there is an overflow, which results a crash...
Integer overflow
There is a integer overflow in mediatools/avparsers.c in the hevcparseslicesegment function in GPAC 1.0.1 which results in a crash...
Integer overflow
There is a integer overflow in mediatools/avparsers.c in the gfavcreadppsbsinternal in GPAC 1.0.1. ppsid may be a negative number, so it will not return. However, avc-pps only has 255 unit, so there is an overflow, which results a crash...
CVE-2021-30022
Removed by vendor...
CVE-2021-30022
GPAC vulnerability CVE-2021-30022 stems from an integer overflow in media_tools/av_parsers.c (gf_avc_read_pps_bs_internal). Affected GPAC versions range from 0.5.2 to 1.0.1; pps_id may be negative, while avc->pps has 255 units, causing a crash. Public disclosures in NVD/CNVD/OSV/NASL variants ...
CVE-2021-30022
There is a integer overflow in mediatools/avparsers.c in the gfavcreadppsbsinternal in GPAC from 0.5.2 to 1.0.1. ppsid may be a negative number, so it will not return. However, avc-pps only has 255 unit, so there is an overflow, which results a crash...
CVE-2021-30014
GPAC contains an integer overflow in media_tools/av_parsers.c (hevc_parse_slice_segment) affecting v0.9.0-preview through 1.0.1, leading to a crash. The issue is described across CVE-2021-30014 and CNVD-2021-30183; multiple sources corroborate the overflow in GPAC’s av_parsers.c. Severity metrics...
PoisonApple - macOS Persistence Tool
Command-line tool to perform various persistence mechanism techniques on macOS. This tool was designed to be used by threat hunters for cyber threat emulation purposes. Install Do it up: $ pip3 install poisonapple --user Note: PoisonApple was written & tested using Python 3.9, it should work usin...