2205 matches found
functrace
functrace - A function tracer functrace is a tool that helps to analyze a binary file with dynamic instrumentation using DynamoRIO http://dynamorio.org/. These are some implemented features based on DynamoRIO: disassemble all the executed code disassemble a specific function dump if these are...
Sync_Breeze_Enterprise_10_6_24_-DOS
SyncBreezeEnterprise10624-DOS Exploit Title: Sync Breeze Enterprise 10.6.24 - Denial Of Service Vulnerability Date: 03-09-2018 Exploit Author: Ege Balcı Vendor Homepage: http://www.syncbreeze.com Software Link: http://www.syncbreeze.com/setups/syncbreezeentsetupv10.6.24.exe Version: 10.6.24 Teste...
CVE-2018-12018
CVE-2018-12018 Mitre https://vulners.com/cve/CVE-2018-12018 The GetBlockHeadersMsg handler in the LES protocol implementation in Go Ethereum aka geth before 1.8.11 may lead to an access violation because of an integer signedness error for the array index, which allows attackers to launch a Denial...
CVE-2026-107729
The multi-format reader SumatraPDF (version 3.7.0.22298) is vulnerable to an out-of-bounds read in src/MobiDoc.cpp during MOBI parsing. The root cause is an unsigned-to-signed conversion where the mobiHdr.hdrLen field is narrowed to a signed integer for validation. Values exceeding INT_MAX become...
CVE-2026-107729 SumatraPDF: Unsigned-to-signed hdrLen validation bypass in SumatraPDF MOBI parsing causes out-of-bounds read
SumatraPDF is a multi-format reader for Windows. In 3.7.0.22298, src/MobiDoc.cpp narrows the untrusted unsigned mobiHdr.hdrLen field to a signed integer for validation; values above INTMAX become negative and bypass the upper-bound check. When the EXTH flag is set, the original unsigned value is...
CVE-2022-21971
CVE-2022-21971: prauthproviders में अप्रारंभित पॉइंटर मुक्त मूल कारण WapAuthProvider::CreateInstance कंस्ट्रक्टर एक WapAuthProvider ऑब्जेक्ट 0x78 बाइट्स आवंटित और आरंभ करता है लेकिन यह अपनी स्थिति को पूरी तरह से आरंभ करने में विफल रहता है। ऑफसेट 0x50 पर पॉइंटर अप्रारंभित है और डिस्ट्रक्टर...
CVE-2018-8065
Flexense HTTP Server Server-Enable web server on port. Module triggers a user space write access violation on syncbrs.exe memory region. Number of requests that will crash the server changes between 200-1000 depending on the OS version and system memory. Sync Breeze Enterprise 10.6.24 version...
CVE-2023-33802
CVE-2023-33802 SumatraPDF 3.4.6 -32-bit Denegación de Servicio DoS Descripción En este error, se aborda un fallo que se manifiesta cuando abrimos dos archivos de texto grandes first.txt & second.txt como entrada en SumatraPDF de 32 bits. Ejecute el siguiente comando, o puede abrir manualmente amb...
CVE-2023-50245
CVE-2023-50245 Resumen de la vulnerabilidad CVE-2023-50245 CVSS : 9.8 11 dic 2023 Vulnerabilidad del visor de imágenes Descripción de la vulnerabilidad github advisories vulnerabilidad de escritura de dirección arbitraria POC 1 1404.9264: Access violation - code c0000005 first chance First chance...
PT-2026-98544
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A slab-use-after-free issue exists in the fbdev vfb component. The FBIOGETCMAP ioctl takes a shallow snapshot of info-cmap and performs a usercopy after releasing info-lock. However, vfb...
CVE-2026-91795
Foxit PDF Editor/Reader's FileOpen plugin did not adequately validate certain encryption metadata in specially crafted PDF files. This could leave an internal pointer in an invalid state, resulting in chained read and write access violations and potentially enabling arbitrary code execution...
Astra Linux – Vulnerability in binutils
The readelf.c file in GNU Binutils 2.32 contains an integer overflow vulnerability that allows attackers to trigger a write access violation in the byteputlittleendian function in elfcomm.c through an ELF file, as demonstrated by readelf...
PT-2026-70619
Name of the Vulnerable Software and Affected Versions Microsoft Office Word affected versions not specified Description An out-of-bounds read exists in Microsoft Office Word, which allows an unauthorized attacker to disclose sensitive information locally and affect the system. An out-of-bounds re...
PT-2026-69794
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A slab-use-after-free issue exists in the Bluetooth MGMT component. The MGMT OP LOAD CONN PARAM operation queues the conn update sync function when a parameter update modifies an existin...
PT-2026-76082
ImageMagick before 7.1.2-19 contains an off-by-one error in morphology validation allowing out-of-bounds heap buffer reads. Attackers can trigger heap buffer overflow by providing incorrect morphology parameters causing single pixel memory access violations...
ROS-20260722-73-0029
The vulnerability of the Font component in Google Chrome and Microsoft Edge relates to reading data beyond the permitted range in memory. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...
Medium: golang
Issue Overview: On Unix systems, opening a file in an os.Root improperly follows symlinks to locations outside of the Root when the final path component of the a path is a symbolic link and the path ends in /. For example, 'root.Open"symlink/"' will open "symlink" even when "symlink" is a symboli...
Microsoft Office buffer overflow vulnerability (CNVD-2026-31554)
Microsoft Office is a suite of office software that primarily provides features for document editing, spreadsheet processing, presentation creation, and enterprise collaboration. There is a buffer overflow vulnerability in Microsoft Office. This vulnerability stems from an improper validation of...
