Exploit for Race Condition in Canonical Ubuntu_Linux

This is a PoC exploit for CVE-2016-5195, a vulnerability in the Linux kernel that allows for a Dirty Cow DC attack. The exploit is implemented in C++ and Go, with a legacy version in C++. The exploit targets the Linux kernel's memory mapping feature, which allows an attacker to map a file into a...

ICU: Integer overflow in UnicodeString::doAppend()

An issue was discovered in International Components for Unicode ICU for C/C++ through 66.1. An integer overflow, leading to a heap-based buffer overflow, exists in the UnicodeString::doAppend function in common/unistr.cpp...

DEBIAN-CVE-2020-10531

An issue was discovered in International Components for Unicode ICU for C/C++ through 66.1. An integer overflow, leading to a heap-based buffer overflow, exists in the UnicodeString::doAppend function in common/unistr.cpp...

ALPINE-CVE-2020-10531

An issue was discovered in International Components for Unicode ICU for C/C++ through 66.1. An integer overflow, leading to a heap-based buffer overflow, exists in the UnicodeString::doAppend function in common/unistr.cpp...

Bento4 Post-Release Reuse Vulnerability

Bento4 is an open source C++ library for reading and writing MP4 files. A resource management error vulnerability exists in the 'AP4Sample::GetOffset' function of the Core/Ap4Sample.h file in Bento4 version 1.5.1.0. The vulnerability stems from mismanagement of system resources e.g., memory, disk...

IBM Sterling Connect:Direct for Unix Privilege Vulnerability

IBM Sterling Connect:Direct is a file-based peer-to-peer file transfer solution from IBM in the United States. A privilege extraction vulnerability exists in IBM Sterling Connect:Direct for Unix versions 6.0.0, 4.3.0, and 4.2.0, which can be exploited by an attacker to gain unauthorized access to...

Zipios Denial of Service Vulnerability

Zipios is a C++ library for reading and writing Zip files. A security vulnerability exists in Zipios that stems from the program's failure to properly handle malformed ZIP files. An attacker can exploit the vulnerability to cause a denial of service or consume system resources...

Unspecified Vulnerability in Google API C++ Client

Google API C++ Client is a C++-based Google API client library from Google USA. An unspecified vulnerability exists in versions of Google API C++ Client prior to 2019-04-10. An attacker can exploit this vulnerability to cause a denial of service...

DEBIAN-CVE-2019-6292

An issue was discovered in singledocparser.cpp in yaml-cpp aka LibYaml-C++ 0.6.2. Stack Exhaustion occurs in YAML::SingleDocParser, and there is a stack consumption problem caused by recursive stack frames: HandleCompactMap, HandleMap, HandleFlowSequence, HandleSequence, HandleNode. Remote...

CVE-2019-0546

A remote code execution vulnerability exists in Visual Studio when the C++ compiler improperly handles specific combinations of C++ constructs, aka "Visual Studio Remote Code Execution Vulnerability." This affects Microsoft Visual Studio...

Facebook Proxygen has an unspecified vulnerability

Facebook Proxygen is a set of open source C++ HTTP class libraries from the U.S. company Facebook . An unspecified vulnerability exists in Facebook Proxygen. An attacker could exploit this vulnerability to cause a denial of service...

DEBIAN-CVE-2018-18928

International Components for Unicode ICU for C/C++ 63.1 has an integer overflow in number::impl::DecimalQuantity::toScientificString in i18n/numberdecimalquantity.cpp...

Microsoft Azure IoT SDK Spoofing Vulnerability

Microsoft Windows is a family of operating systems released by Microsoft Corporation.Microsoft Azure Active Directory Connect is a service from Microsoft Corporation that provides identity and access management in the cloud. A spoofing vulnerability exists in the configuration of Azure IoT device...

UBUNTU-CVE-2018-10529

An issue was discovered in LibRaw 0.18.9. There is an out-of-bounds read affecting the X3F property table list implementation in librawx3f.cpp and librawcxx.cpp...

UBUNTU-CVE-2018-9138

An issue was discovered in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.29 and 2.30. Stack Exhaustion occurs in the C++ demangling functions provided by libiberty, and there are recursive stack frames: demanglenestedargs, demangleargs, doarg, and dotype...

Google Chrome International Components for Unicode for C/C++ Denial of Service Vulnerability

Google Chrome is a web browser developed by Google, Inc.International Components for Unicode ICU for C/C++ is a Unicode-supported, software internationalization, globalization C/C++ library. ICU for C/C++ in Google Chrome versions prior to 40.0.2214.91 A security vulnerability exists in the Regul...

International Components for Unicode (ICU) for C/C++ Buffer Overflow Vulnerability

International Components for Unicode ICU is the U.S. IBM and other companies to develop a C / C + + and Java programming languages provide a complete set of Unicode data manipulation function library, but also an open-source project to support the internationalization of software. A heap buffer...

International Components for Unicode/C++ Denial of Service Vulnerability

International Components for Unicode ICU is a set of libraries for the C/C++ and Java programming languages to manipulate Unicode data, and an open source project to support the internationalization of software. The 'ulocacceptLanguageFromHTTP' function in the common/uloc.cpp file of Internationa...

DEBIAN-CVE-2016-4463

Stack-based buffer overflow in Apache Xerces-C++ before 3.1.4 allows context-dependent attackers to cause a denial of service via a deeply nested DTD...

UBUNTU-CVE-2016-1646

The Array.prototype.concat implementation in builtins.cc in Google V8, as used in Google Chrome before 49.0.2623.108, does not properly consider element data types, which allows remote attackers to cause a denial of service out-of-bounds read or possibly have unspecified other impact via crafted...