CVE-2018-11385: Session Fixation Issue for Guard Authentication

More info at https://symfony.com/cve-2018-11385...

CVE-2018-11385: Session Fixation Issue for Guard Authentication

More info at https://symfony.com/cve-2018-11385...

CVE-2018-11385: Session Fixation Issue for Guard Authentication

Affected versions Symfony 2.7.0 to 2.7.47, 2.8.0 to 2.8.40, 3.3.0 to 3.3.16, 3.4.0 to 3.4.10 and 4.0.0 to 4.0.10 versions of the Symfony Security component are affected by this security issue. The issue has been fixed in Symfony 2.7.48, 2.8.41, 3.3.17, 3.4.11, and 4.0.11. Note that no fixes are...

PT-2018-3148

Name of the Vulnerable Software and Affected Versions Symfony versions 2.7.x through 2.7.47 Symfony versions 2.8.x through 2.8.40 Symfony versions 3.3.x through 3.3.16 Symfony versions 3.4.x through 3.4.10 Symfony versions 4.0.x through 4.0.10 Description The issue is related to session managemen...

DEBIAN-CVE-2018-1123

procps-ng before version 3.3.15 is vulnerable to a denial of service in ps via mmap buffer overflow. Inbuilt protection in ps maps a guard page at the end of the overflowed buffer, ensuring that the impact of this flaw is limited to a crash temporary denial of service...

UBUNTU-CVE-2018-1123

procps-ng before version 3.3.15 is vulnerable to a denial of service in ps via mmap buffer overflow. Inbuilt protection in ps maps a guard page at the end of the overflowed buffer, ensuring that the impact of this flaw is limited to a crash temporary denial of service...

2345 Security Guard 3.7 2345NsProtect.sys Denial Of Service

Exploit Title: BSOD by IOCTL 0x8000200D in 2345NsProtect.sys of 2345 Security Guard 3.7 Date: 20180513 Exploit Author: anhkgg Vendor Homepage: http://safe.2345.cc/ Software Link: http://dl.2345.cc/2345pcsafe/2345pcsafev3.7.0.9345.exe Version: v3.7 REQUIRED Tested on: Windows X64 CVE : CVE-2018-...

Input validation

In 2345 Security Guard 3.7, the driver file 2345NsProtect.sys, X64 version allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCTL 0x80002019...

CVE-2018-11035

In 2345 Security Guard 3.7, the driver file 2345NsProtect.sys, X64 version allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCTL 0x80002019...

CVE-2018-11034

In 2345 Security Guard 3.7, the driver file 2345NsProtect.sys, X64 version allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCTL 0x8000200D...

CVE-2018-11035

The CVE applies to 2345 Security Guard 3.7, specifically the 64-bit driver 2345NsProtect.sys. The root cause is improper validation of input values from IOCTL 0x80002019, enabling a local attacker to trigger a denial-of-service (BSOD) and potentially other impacts. Documents consistently describe...

CVE-2018-11034

In 2345 Security Guard 3.7, the driver file 2345NsProtect.sys, X64 version allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCTL 0x8000200D...

CVE-2018-11034

CVE-2018-11034 affects 2345 Security Guard 3.7, specifically the 64-bit driver 2345NsProtect.sys. The root cause is lack of input validation for IOCTL 0x8000200D, enabling a local attacker to cause a denial of service (BSOD) and potentially other impact. Public PoCs/exploits exist (e.g., Exploit-...

CVE-2018-11035: Improper Input Validation

In 2345 Security Guard 3.7, the driver file 2345NsProtect.sys, X64 version allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCTL 0x80002019...

2345 Security Guard Denial of Service Vulnerability (CNVD-2018-10962)

2345 Security Guard is a set of computer security protection software from China's 2345 Corporation. A denial of service vulnerability exists in the driver file 2345NsProtect.sys, version X64 in 2345 Security Guard 3.7. The vulnerability arises due to an unvalidated input value from IOCTL...

CVE-2018-11034: Improper Input Validation

In 2345 Security Guard 3.7, the driver file 2345NsProtect.sys, X64 version allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCTL 0x8000200D...

2345 Security Guard 3.7 - 2345NsProtect.sys Denial of Service

2345 Security Guard 3.7 - 2345NsProtect.sys Denial of Service Exploit Title: BSOD by IOCTL 0x8000200D in 2345NsProtect.sys of 2345 Security Guard 3.7 Date: 20180513 Exploit Author: anhkgg Vendor Homepage: http://safe.2345.cc/ Software Link: http://dl.2345.cc/2345pcsafe/2345pcsafev3.7.0.9345.exe...

PT-2018-10256

Name of the Vulnerable Software and Affected Versions 2345 Security Guard version 3.7 Description The issue allows local users to cause a denial of service BSOD or possibly have unspecified other impact. This is because the driver file 2345NsProtect.sys does not validate input values from IOCTL...

PT-2018-10257

Name of the Vulnerable Software and Affected Versions 2345 Security Guard version 3.7 Description The issue allows local users to cause a denial of service BSOD or possibly have unspecified other impact. This is because the driver file 2345NsProtect.sys does not validate input values from IOCTL...

2345 Security Guard Denial of Service Vulnerability (CNVD-2018-10961)

2345 Security Guard is a set of computer security protection software from China's 2345 Corporation. A denial of service vulnerability exists in the driver file 2345NsProtect.sys, version X64 in 2345 Security Guard 3.7. The vulnerability arises due to an unvalidated input value from IOCTL...