capstone bug fix and enhancement update

An update is available for capstone. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linux 9.2...

capstone:fuzz_disasmnext: Use-of-uninitialized-value in PPC_post_printer

Detailed Report: https://oss-fuzz.com/testcase?key=6583799132323840 Project: capstone Fuzzing Engine: libFuzzer Fuzz Target: fuzzdisasmnext Job Type: libfuzzermsancapstone Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: PPCpostprinter fillinsn csdisasm...

capstone:fuzz_disasmnext: Use-of-uninitialized-value in DecodeCrosspathX3

Detailed Report: https://oss-fuzz.com/testcase?key=6574941223649280 Project: capstone Fuzzing Engine: libFuzzer Fuzz Target: fuzzdisasmnext Job Type: libfuzzermsancapstone Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: DecodeCrosspathX3 decodeToMCInst4...

capstone:fuzz_disasmnext: Use-of-uninitialized-value in PPC_post_printer

Detailed Report: https://oss-fuzz.com/testcase?key=5475859325911040 Project: capstone Fuzzing Engine: libFuzzer Fuzz Target: fuzzdisasmnext Job Type: libfuzzermsancapstone Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: PPCpostprinter fillinsn csdisasm...

capstone:fuzz_disasmnext: Use-of-uninitialized-value in PPC_post_printer

Detailed Report: https://oss-fuzz.com/testcase?key=6303330858565632 Project: capstone Fuzzing Engine: libFuzzer Fuzz Target: fuzzdisasmnext Job Type: libfuzzermsancapstone Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: PPCpostprinter fillinsn csdisasm...

capstone.bitdegree.ca Cross Site Scripting vulnerability OBB-2635675

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Capstone SEGV caused by a read memory access

Capstone 3.0.4 has an out-of-bounds vulnerability SEGV caused by a read memory access in X86insnregintel in arch/X86/X86Mapping.c...

GHSA-XX4J-RVCC-2VHR Capstone SEGV caused by a read memory access

Capstone 3.0.4 has an out-of-bounds vulnerability SEGV caused by a read memory access in X86insnregintel in arch/X86/X86Mapping.c...

Capstone Integer overflow

Integer overflow in the cswinkernelmalloc function in winkernelmm.c in Capstone 3.0.4 and earlier allows attackers to cause a denial of service heap-based buffer overflow in a kernel driver or possibly have unspecified other impact via a large value...

GHSA-3V99-HPV7-9HH9 Capstone Integer overflow

Integer overflow in the cswinkernelmalloc function in winkernelmm.c in Capstone 3.0.4 and earlier allows attackers to cause a denial of service heap-based buffer overflow in a kernel driver or possibly have unspecified other impact via a large value...

capstone:fuzz_disasmnext: Use-of-uninitialized-value in DecodeCrosspathX3

Detailed Report: https://oss-fuzz.com/testcase?key=4715096922783744 Project: capstone Fuzzing Engine: libFuzzer Fuzz Target: fuzzdisasmnext Job Type: libfuzzermsancapstone Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: DecodeCrosspathX3 decodeToMCInst4...

capstone:fuzz_disasmnext: Use-of-uninitialized-value in printOperand

Detailed Report: https://oss-fuzz.com/testcase?key=4903750467190784 Project: capstone Fuzzing Engine: libFuzzer Fuzz Target: fuzzdisasmnext Job Type: libfuzzermsancapstone Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: printOperand PPCprintInst csdisasm...

capstone:fuzz_disasmnext: Global-buffer-overflow in decodeRegisterClass

Detailed Report: https://oss-fuzz.com/testcase?key=6080076489818112 Project: capstone Fuzzing Engine: honggfuzz Fuzz Target: fuzzdisasmnext Job Type: honggfuzzasancapstone Platform Id: linux Crash Type: Global-buffer-overflow READ 4 Crash Address: 0x00000099c1cc Crash State: decodeRegisterClass...

capstone:fuzz_disasmnext: Global-buffer-overflow in decodeToMCInst_4

Detailed Report: https://oss-fuzz.com/testcase?key=5663723266113536 Project: capstone Fuzzing Engine: afl Fuzz Target: fuzzdisasmnext Job Type: aflasancapstone Platform Id: linux Crash Type: Global-buffer-overflow READ 4 Crash Address: 0x000000a0e428 Crash State: decodeToMCInst4 decodeInstruction...

Iblessing - An iOS Security Exploiting Toolkit, It Mainly Includes Application Information Collection, Static Analysis And Dynamic Analysis

iblessing iblessing is an iOS security exploiting toolkit, it mainly includes application information collection , static analysis and dynamic analysis. iblessing is based on unicorn engine and capstone engine. Features Cross-platform: Tested on macOS and Ubuntu. iOS App static info extract,...

SGN - Encoder Ported Into Go With Several Improvements

SGN is a polymorphic binary encoder for offensive security purposes such as generating statically undetecable binary payloads. It uses a additive feedback loop to encode given binary instructions similar to LSFR. This project is the reimplementation of the original Shikata ga nai in golang with...

capstone:fuzz_disasmnext: Global-buffer-overflow in decodeRegisterClass

Detailed Report: https://oss-fuzz.com/testcase?key=5666610666012672 Project: capstone Fuzzing Engine: libFuzzer Fuzz Target: fuzzdisasmnext Job Type: libfuzzerasancapstone Platform Id: linux Crash Type: Global-buffer-overflow READ 4 Crash Address: 0x00000099292c Crash State: decodeRegisterClass...

Exploit for Improper Input Validation in Nema Dicom_Standard

Bad-DICOM PoC of my handcrafted CVE-2019-11687's exploit tool...

capstone/fuzz_disasmnext: Use-of-uninitialized-value in MOS65XX_group_name

Detailed report: https://oss-fuzz.com/testcase?key=5678434014986240 Project: capstone Fuzzer: libFuzzercapstonefuzzdisasmnext Fuzz target binary: fuzzdisasmnext Job Type: libfuzzermsancapstone Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: MOS65XXgroupname...

capstone/fuzz_disasmnext: Use-of-uninitialized-value in printUInt32

Detailed report: https://oss-fuzz.com/testcase?key=5676826040467456 Project: capstone Fuzzer: libFuzzercapstonefuzzdisasmnext Fuzz target binary: fuzzdisasmnext Job Type: libfuzzermsancapstone Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: printUInt32...