Out-of-bounds

An exploitable out-of-bounds write exists in the TIFF-parsing functionality of Canvas Draw version 5.0.0. An attacker can deliver a TIFF image to trigger this vulnerability and gain code execution...

CVE-2018-3981

An exploitable out-of-bounds write exists in the TIFF-parsing functionality of Canvas Draw version 5.0.0. An attacker can deliver a TIFF image to trigger this vulnerability and gain code execution...

CVE-2018-3981

An exploitable out-of-bounds write exists in the TIFF-parsing functionality of Canvas Draw version 5.0.0. An attacker can deliver a TIFF image to trigger this vulnerability and gain code execution...

CVE-2018-3981

ACD Systems Canvas Draw 5, TIFF parsing, contains an exploitable out-of-bounds write in version 5.0.0 (CVE-2018-3981). Specifically, a specially crafted TIFF image can cause a lower four bytes of a user-controlled address to be zeroed and used in DIB_resolution_set, triggering an out-of-bounds wr...

PT-2018-16355 · Acd Systems · Canvas Draw

Name of the Vulnerable Software and Affected Versions: Canvas Draw version 5.0.0 Description: An exploitable out-of-bounds write exists in the TIFF-parsing functionality. An attacker can deliver a TIFF image to trigger this issue and gain code execution. Recommendations: For version 5.0.0, update...

CVE-2018-3981: Out-of-bounds Write

An exploitable out-of-bounds write exists in the TIFF-parsing functionality of Canvas Draw version 5.0.0. An attacker can deliver a TIFF image to trigger this vulnerability and gain code execution...

Immunity Canvas: COLDFUSION_RCE

Name| coldfusionrce ---|--- CVE| CVE-2018-15957 Exploit Pack| CANVAS Description| CVE-2018-15957 Notes| CVE Name: CVE-2018-15957 VENDOR: Oracle NOTES: This exploit will work against ColdFusion 2018 update 1, ColdeFusion 2016 = update 6 and ColdFusion 11 = update 14. Repeatability: Infinite...

Immunity Canvas: ALPC_TASKSCHED_LPE

Name| alpctaskschedlpe ---|--- CVE| CVE-2018-8440 Exploit Pack| CANVAS Description| ALPC Tasksched LPE Notes| CVE Name: CVE-2018-8440 Notes: WARNING: The PrintConfig.dll on the target host will be overwritten when the exploit runs. Tested: Windows 10 1703 x64 Windows 10 1803 x86 VENDOR: Microsoft...

GLEG Agora SCADA+ Exploit Pack

OVERVIEW On March 15, 2011, GLEG Ltd. announced the Agora SCADA+ Exploit Pack for Immunity’s CANVAS system. CANVAS is a penetration testing framework that is extensible using CANVAS Exploit Packs. On March 25, 2011, GLEG announced it would be adding exploits for the 35 vulnerabilities released by...

CVE-2017-15417

Inappropriate implementation in Skia canvas composite operations in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

CVE-2017-15417

Inappropriate implementation in Skia canvas composite operations in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

Design/Logic Flaw

Inappropriate implementation in Skia canvas composite operations in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

UBUNTU-CVE-2017-15417

Inappropriate implementation in Skia canvas composite operations in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

CVE-2017-15417

Inappropriate implementation in Skia canvas composite operations in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

CVE-2017-15417

Inappropriate implementation in Skia canvas composite operations in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

CVE-2017-15417

The CVE-2017-15417 issue affects Google Chrome (Chromium) involving Skia canvas operations. The flaw is described as an inappropriate implementation in Skia canvas composite operations that allowed a remote attacker to disclose cross-origin data via a crafted HTML page. CNVD-2018-20145 confirms t...

CVE-2017-15417

Removed by vendor...

CVE-2017-15417: Improper Restriction of Operations within the Bounds of a Memory Buffer

Inappropriate implementation in Skia canvas composite operations in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

Immunity Canvas: SSH_ENUM

Name| sshenum ---|--- CVE| CVE-2018-15473 Exploit Pack| CANVAS Description| sshenum Notes| CVE Name: CVE-2018-15473 VENDOR: The OpenBSD Project NOTES: Module will use different techniques in order to enumerate users on target hosts As for the file containing usernames, they should be one per line...

WebkitGTK+ 2.20.3 - ImageBufferCairo::getImageData() Buffer Overflow (PoC)

WebkitGTK+ 2.20.3 - ImageBufferCairo::getImageData Buffer Overflow PoC Exploit Title: WebkitGTK+ 2.20.3 - 'ImageBufferCairo::getImageData' Buffer Overflow PoC Date: 2018-08-15 Exploit Author: PeregrineX Vendor Homepage: https://webkitgtk.org/ & https://webkit.org/wpe/ Software Link:...