CVE-2017-2900

An exploitable integer overflow exists in the PNG loading functionality of the Blender open-source 3d creation suite version 2.78c. A specially crafted '.png' file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the application...

CVE-2017-2901

An exploitable integer overflow exists in the IRIS loading functionality of the Blender open-source 3d creation suite version 2.78c. A specially crafted '.iris' file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the applicatio...

CVE-2017-2918

An exploitable integer overflow exists in the Image loading functionality of the Blender open-source 3d creation suite v2.78c. A specially crafted .blend file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the application. An...

CVE-2017-12082

An exploitable integer overflow exists in the 'CustomData' Mesh loading functionality of the Blender open-source 3d creation suite. A .blend file with a specially crafted external data file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the...

CVE-2017-12081

An exploitable integer overflow exists in the upgrade of a legacy Mesh attribute of the Blender open-source 3d creation suite v2.78c. A specially crafted .blend file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the applicatio...

CVE-2017-2904

An exploitable integer overflow exists in the RADIANCE loading functionality of the Blender open-source 3d creation suite version 2.78c. A specially crafted '.hdr' file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the...

CVE-2017-12105

An exploitable integer overflow exists in the way that the Blender open-source 3d creation suite v2.78c applies a particular object modifier to a Mesh. A specially crafted .blend file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context...

CVE-2017-2899

An exploitable integer overflow exists in the TIFF loading functionality of the Blender open-source 3d creation suite version 2.78c. A specially crafted '.tif' file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the application...

Application Security Testing — The Wallarm Approach

Testing the security of the corporate applications is a part of every-day life for Ops and DevOps professionals. Larger companies have whole teams dedicated to independent security testing, called Red Teams. These folks use various tools at their disposal to discover the flaws in both application...

PT-2018-19372

Crashmail 1.6 contains a stack-based buffer overflow vulnerability that allows remote attackers to execute arbitrary code by sending malicious input to the application. Attackers can craft payloads with ROP chains to achieve code execution in the application context, with failed attempts...

Infinispan 'hotrod java' client-side remote code execution vulnerability

Infinispan is a distributed in-memory data grid. A remote code execution vulnerability exists in the Infinispan 'hotrod java' client, which allows remote attackers to exploit the vulnerability by submitting a special request to execute arbitrary code in the context of the application...

IBM Tivoli Monitoring Arbitrary Code Execution Vulnerability

IBM Tivoli Monitoring is system monitoring software that manages operating systems, databases, and servers in distributed and mainframe environments. IBM Tivoli Monitoring suffers from a remote code execution vulnerability that can be exploited by an attacker to execute arbitrary code in the...

HPE System Management Homepage Arbitrary Command Execution Vulnerability (CNVD-2017-33367)

HPE System Management Homepage is a Web-based interface from Hewlett Packard Enterprise. An arbitrary command execution vulnerability exists in HPE System Management Homepage, which allows an attacker to submit a special request to execute arbitrary OS commands in an application context...

CVE-2017-2819

An exploitable heap-based buffer overflow exists in the Hangul Word Processor component version 9.6.1.4350 of Hancom Thinkfree Office NEO 9.6.1.4902. A specially crafted document stream can cause an integer underflow resulting in a buffer overflow which can lead to code execution under the contex...

Cerberus FTP Server Remote Buffer Overflow Vulnerability (CNVD-2017-08299)

Cerberus FTP Server is an FTP service program. A buffer overflow vulnerability exists in Cerberus FTP Server, which can be exploited by a remote attacker to conduct a buffer overflow attack on the application, which can be used to execute arbitrary code in the application context...

Microsoft Windows OLE Elevation of Privilege Vulnerability

Microsoft Windows is the popular computer operating system. Microsoft Windows suffers from an implementation elevation of privilege vulnerability that can be exploited by an attacker to execute arbitrary code in an application context...

APNGDis Buffer Overflow Vulnerability

APNGDis is a set of applications that deconstructs APNG files into a series of PNG frames. APNGDis suffers from a buffer overflow vulnerability. An attacker could exploit this vulnerability to execute arbitrary code within the context of the application, and a failed attack could result in a deni...

Tiki Wiki CMS Arbitrary File Disclosure Vulnerability

Tiki Wiki CMS Groupware is a suite of open source content management and portal applications from the Tiki software community that can be used to create web applications, portals, corporate intranets, extranets, and more. An arbitrary file disclosure vulnerability exists in Tiki Wiki CMS version...

gtk-vnc integer overflow vulnerability

GTK-VNC is a for GTK VNC viewer widget. An integer overflow vulnerability exists in gtk-vnc. An attacker can exploit the vulnerability to execute arbitrary code within the context of an application. A failed exploit attempt could result in a denial of service condition...

wongminbin CMS Directory Traversal Vulnerability

wongminbin CMS is a set of maven-based springmvc spring + mybatis development of content management system . A directory traversal vulnerability exists in wongminbin CMS, which can be exploited to read arbitrary files in an overriding application context by sending a request with the directory...