9578 matches found
Adobe Flash Player Heap Overflow (APSB16-18: CVE-2016-4135)
A Heap Overflow vulnerability exists in Adobe Flash Player. The vulnerability is due to an error in Adobe Flash Player while parsing a specially crafted file. A remote attacker can exploit this issue by enticing a victim to open a specially crafted file...
Scientific Linux Security Update : file on SL6.x i386/x86_64 (20160510)
Security Fixes : - Multiple flaws were found in the file regular expression rules for detecting various files. A remote attacker could use these flaws to cause file to consume an excessive amount of CPU. CVE-2014-3538 - A denial of service flaw was found in the way file parsed certain Composite...
Apple QuickTime < 7.7.79.80.95 - PSD File Parsing Memory Corruption
Exploit for multiple platform in category dos / poc Application: Apple Quicktime Platforms: Windows, OSX Versions: before version 7.7.79.80.95 Author: Francis Provencher of COSIG Website: http://www.protekresearchlab.com/ Twitter: @COSIG @protekresearch CVE-2016-1769 1 Introduction 2 Report...
Apple QuickTime < 7.7.79.80.95 - FPX File Parsing Memory Corruption 2
Exploit for multiple platform in category dos / poc Application: Apple Quicktime Platforms: Windows, OSX Versions: before version 7.7.79.80.95 Author: Francis Provencher of COSIG Website: http://www.protekresearchlab.com/ Twitter: @COSIG @protekresearch CVE-2016-1768 1 Introduction 2 Report...
Unitronics VisiLogic OPLC IDE vlp File Parsing Heap Buffer Overflow (CVE-2015-7939)
A heap buffer overflow vulnerability exists in Unitronics VisiLogic OPLC IDE. The vulnerability is due to errors parsing VisiLogic project files. A remote attacker could exploit this vulnerability by enticing a vulnerable user to open a crafted web page or file. Successful exploitation could lead...
NetworkMiner 2.0 - Network Forensic Analysis Tool (NFAT)
NetworkMiner is a Network Forensic Analysis Tool NFAT for Windows but also works in Linux / Mac OS X / FreeBSD. NetworkMiner can be used as a passive network sniffer/packet capturing tool in order to detect operating systems, sessions, hostnames, open ports etc. without putting any traffic on the...
Adobe Photoshop CC Bridge CC - .png Parsing Memory Corruption (2)
Adobe Photoshop CC Bridge CC - .png Parsing Memory Corruption 2 Application: Adobe Photoshop CC & Bridge CC PNG file parsing memory corruption Platforms: Windows Versions: Bridge CC 6.1.1 and earlier versions Version: Photoshop CC 16.1.1 2015.1.1 and earlier versions CVE; 2016-0952 Author: Franci...
Adobe Photoshop CC & Bridge CC - '.png' File Parsing Memory Corruption (1)
Exploit for windows platform in category dos / poc Application: Adobe Photoshop CC & Bridge CC PNG file parsing memory corruption Platforms: Windows Versions: Bridge CC 6.1.1 and earlier versions Version: Photoshop CC 16.1.1 2015.1.1 and earlier versions CVE; 2016-0951 Author: Francis Provencher ...
PT-2016-3841
Name of the Vulnerable Software and Affected Versions Unitronics VisiLogic OPLC IDE versions prior to 9.8.09 Description The issue is related to a heap-based buffer overflow that can be triggered by a long vlp filename, allowing remote attackers to execute arbitrary code. This is a remote code...
Unitronics VisiLogic OPLC IDE File Parsing Buffer Overflow Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Unitronics VisiLogic OPLC IDE. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...
RHEL 7 : file (RHSA-2015:2155)
Updated file packages that fix multiple security issues and several bugs are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings,...
UBUNTU-CVE-2015-7804
Off-by-one error in the pharparsezipfile function in ext/phar/zip.c in PHP before 5.5.30 and 5.6.x before 5.6.14 allows remote attackers to cause a denial of service uninitialized pointer dereference and application crash by including the / filename in a .zip PHAR archive...
PHP 5.6.13 Uninitialized pointer in phar_make_dirstream Vulnerability
Exploit for php platform in category local exploits Description: ------------ When parsing a phar file in zip format pharparsezipfile in ext/phar/zip.c with a directory entry with filename /, the filename length is 1 to start with, but then because it is a directory, it is decremented to 0 line 3...
FreshFTP 5.52 - '.qfl' Crash (PoC)
Exploit Title: FreshFTP .QFL Local DOSWhile Parsing. Date: 9/15/2015 Exploit Author: UnN0n Software Vendor : http://www.freshwebmaster.com/ Software Link: http://www.freshwebmaster.com/download.html Version: 5.52 Tested on: Windows 7 x8632 BIT Steps to Produce the Crash: 1- Goto Directory in whic...
Notepad++ 6.7.3 - Crash PoC
Exploit for windows platform in category dos / poc Title: Notepad++ - Crash Date: 10/07/2015 Author: Rahul Pratap Singh @0x62626262 Vendor Homepage: https://notepad-plus-plus.org Download: https://notepad-plus-plus.org/download/v6.7.3.html Version: v6.7.3 Tested on: WindowsXPx86 & Windows7x86...
Immunity Debugger 1.85 - Crash PoC
Exploit for windows platform in category dos / poc Title: Immunity Debugger - Crash Date: 08/07/2015 Author: Arsyntex Vendor Homepage: http://www.immunityinc.com/products/debugger/ Version: v1.85 Tested on: Windows 8.1 Pro Incorrect path/file EXtEnsion parsing. -Create folder with the name:...
Security update for libXfont (important)
libXFont was updated to fix three vulnerabilities when parsing BDF files bnc921978 As libXfont is used by the X server to read font files, and an unprivileged user with access to the X server can tell the X server to read a given font file from a path of their choosing, these vulnerabilities have...
CVE-2015-1419
Unspecified vulnerability in vsftpd 3.0.2 and earlier allows remote attackers to bypass access restrictions via unknown vectors, related to denyfile parsing...
