1892 matches found
functrace
functrace - A function tracer functrace is a tool that helps to analyze a binary file with dynamic instrumentation using DynamoRIO http://dynamorio.org/. These are some implemented features based on DynamoRIO: disassemble all the executed code disassemble a specific function dump if these are...
CVE-2018-8065
Flexense HTTP Server Server-Enable web server on port. El módulo provoca una violación de acceso de escritura en el espacio de usuario en la región de memoria de syncbrs.exe. El número de peticiones que harán fallar el servidor varía entre 200 y 1000 dependiendo de la versión del sistema operativ...
CVE-2023-33802
CVE-2023-33802 SumatraPDF 3.4.6 - 32ビット サービス拒否 DoS 説明 このバグでは、SumatraPDF 32ビットに入力として2つの大きなサイズのテキストファイル（first.txt & second.txt）を開いたときに現れるクラッシュに対処します。 以下のコマンドを実行するか、SumatraPDF 32ビット3.4.6で手動で両方のファイルを開くことができます。 root@kitploit: SumatraPDF.exe first.txt second.txt WinDBGを使用した32ビット版3.4.6アプリケーションのクラッシュレポート...
CVE-2023-50245
CVE-2023-50245 脆弱性概要 CVE-2023-50245 CVSS : 9.8 Dec 11, 2023 Image Viewer の脆弱性 脆弱性説明 GitHub アドバイザリ 任意アドレス書き込み脆弱性 POC 1 root@kitploit: 1404.9264: Access violation - code c0000005 first chance First chance exceptions are reported before any exception handling. This exception may be expected and...
Sync_Breeze_Enterprise_10_6_24_-DOS
SyncBreezeEnterprise10624-DOS root@kitploit: Exploit Title: Sync Breeze Enterprise 10.6.24 - Denial Of Service Vulnerability Date: 03-09-2018 Exploit Author: Ege Balcı Vendor Homepage: http://www.syncbreeze.com Software Link: http://www.syncbreeze.com/setups/syncbreezeentsetupv10.6.24.exe Version...
CVE-2018-12018
CVE-2018-12018 Mitre https://vulners.com/cve/CVE-2018-12018 Go Ethereum（別名geth）1.8.11以前のLESプロトコル実装におけるGetBlockHeadersMsgハンドラは、配列インデックスの整数符号エラーによりアクセス違反を引き起こす可能性があります。これにより、攻撃者はクエリのSkip値に-1を指定したパケットを送信してサービス拒否攻撃を仕掛けることができます。脆弱なリモートノードはこのような攻撃により即座にクラッシュします。これはEPoD（Ethereum Packet of...
CVE-2022-21971
CVE-2022-21971：prauthproviders 中未初始化指针的释放 根本原因 WapAuthProvider::CreateInstance 构造函数分配并初始化了一个 WapAuthProvider 对象（0x78 字节），但未能完全初始化其状态。 偏移量 0x50 处的指针未初始化，并在调用析构函数时被释放（在 WapAuthProvider::WapAuthProvider 中）： root@kitploit: prauthproviders!WapAuthProvider::WapAuthProvider+0x38: 00007ffda91f3078 488b4b...
Astra Linux – Vulnerability in binutils
The readelf.c file in GNU Binutils 2.32 contains an integer overflow vulnerability that allows attackers to trigger a write access violation in the byteputlittleendian function in elfcomm.c through an ELF file, as demonstrated by readelf...
PT-2026-70619
Name of the Vulnerable Software and Affected Versions Microsoft Office Word affected versions not specified Description An out-of-bounds read exists in Microsoft Office Word, which allows an unauthorized attacker to disclose sensitive information locally and affect the system. An out-of-bounds re...
ROS-20260722-73-0029
The vulnerability of the Font component in Google Chrome and Microsoft Edge relates to reading data beyond the permitted range in memory. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...
Medium: golang
Issue Overview: On Unix systems, opening a file in an os.Root improperly follows symlinks to locations outside of the Root when the final path component of the a path is a symbolic link and the path ends in /. For example, 'root.Open"symlink/"' will open "symlink" even when "symlink" is a symboli...
Microsoft Office buffer overflow vulnerability (CNVD-2026-31554)
Microsoft Office is a suite of office software that primarily provides features for document editing, spreadsheet processing, presentation creation, and enterprise collaboration. There is a buffer overflow vulnerability in Microsoft Office. This vulnerability stems from an improper validation of...
EUVD-2026-41217
An access violation in the BaseSplitterFile::Read function of Aleksoid1978 MPC-BE before commit 4341cb3 allows attackers to cause a Denial of Service DoS via a crafted MP4 file...
CVE-2026-36910
An access violation in the BaseSplitterFile::Read function of Aleksoid1978 MPC-BE before commit 4341cb3 allows attackers to cause a Denial of Service DoS via a crafted MP4 file...
CVE-2026-36910
An access violation in the BaseSplitterFile::Read function of Aleksoid1978 MPC-BE before commit 4341cb3 allows attackers to cause a Denial of Service DoS via a crafted MP4 file...
CVE-2026-36910
The vulnerability affects MPC-BE (Aleksoid1978) where an access violation occurs in BaseSplitterFile::Read prior to commit 4341cb3, enabling DoS via a crafted MP4 file. The issue is described consistently across multiple trusted sources (NVD, CVE records, EUVD, CVE list, PT Security, AttackersKB,...
CVE-2026-48109
MessagePack for C is a MessagePack serializer for C. Prior to 2.5.301 and 3.1.7, A vulnerability exists in the optional LZ4 decompression path used by MessagePack compression modes Lz4Block and Lz4BlockArray. The decoder implementation is based on a deprecated fast-decompression algorithm that do...
CVE-2026-48109
CVE-2026-48109 affects MessagePack-CSharp in the optional LZ4 decompression path (Lz4Block, Lz4BlockArray). The vulnerability stems from a deprecated fast-decompression algorithm that does not enforce a source-length bound, enabling a remote attacker to craft payloads with manipulated LZ4 token/l...
CVE-2026-48109 MessagePack-CSharp: LZ4 decompression may fail with AccessViolationException after dereferencing memory from bad input
MessagePack for C is a MessagePack serializer for C. Prior to 2.5.301 and 3.1.7, A vulnerability exists in the optional LZ4 decompression path used by MessagePack compression modes Lz4Block and Lz4BlockArray. The decoder implementation is based on a deprecated fast-decompression algorithm that do...
CVE-2026-48109 MessagePack-CSharp: LZ4 decompression may fail with AccessViolationException after dereferencing memory from bad input
MessagePack for C is a MessagePack serializer for C. Prior to 2.5.301 and 3.1.7, A vulnerability exists in the optional LZ4 decompression path used by MessagePack compression modes Lz4Block and Lz4BlockArray. The decoder implementation is based on a deprecated fast-decompression algorithm that do...