HPE Intelligent Management Center PLAT Remote Code Execution Vulnerability (CNVD-2018-06670)

HPE Intelligent Management Center iMC PLAT is a suite of network intelligent management center solutions from Hewlett Packard Enterprise HPE. The solution provides network-wide visibility and enables comprehensive management of resources, services and users. A remote code execution vulnerability...

CVE-2017-1000450

In opencv/modules/imgcodecs/src/utils.cpp, functions FillUniColor and FillUniGray do not check the input length, which can lead to integer overflow. If the image is from remote, may lead to remote code execution or denial of service. This affects Opencv 3.3 and earlier...

UBUNTU-CVE-2017-1000450

In opencv/modules/imgcodecs/src/utils.cpp, functions FillUniColor and FillUniGray do not check the input length, which can lead to integer overflow. If the image is from remote, may lead to remote code execution or denial of service. This affects Opencv 3.3 and earlier...

Advantech WebAccess Stack Buffer Overflow Vulnerability

Advantech WebAccess is a set of HMI/SCADA software from Advantech based on browser architecture. The software supports dynamic graphic display and real-time data control, and provides remote control and management of automation equipment. A stack buffer overflow vulnerability exists in Advantech...

Delta Industrial Automation WPLSoft dvp File Buffer Overflow Vulnerability

Delta Industrial Automation is a global industrial automation manufacturer of power management and thermal solutions. WPLSoft and PMSoft are Delta's PLC programming software. A buffer overflow vulnerability exists in the Delta Industrial Automation WPLSoft dvp file due to a failure to validate th...

Advantech WebAccess nvA1Media Connect MediaUsername Stack Buffer Overflow Remote Code Execution Vulnerability

Advantech WebAccess is a set of HMI/SCADA software from Advantech based on browser architecture. The software supports dynamic graphic display and real-time data control, and provides remote control and management of automation equipment. A stack buffer overflow remote code execution vulnerabilit...

CVE-2016-7055

There is a carry propagating bug in the Broadwell-specific Montgomery multiplication procedure in OpenSSL 1.0.2 and 1.1.0 before 1.1.0c that handles input lengths divisible by, but longer than 256 bits. Analysis suggests that attacks against RSA, DSA and DH private keys are impossible. This is...

PT-2017-18030 · Php +1 · Php +1

Name of the Vulnerable Software and Affected Versions: PHP versions through 7.1.4 Description: The issue allows attackers to cause a denial of service via operations on long strings, resulting in memory consumption and application crash. The vendor disputes this, stating that GMP safely aborts in...

CVE-2015-7975

The nextvar function in NTP before 4.2.8p6 and 4.3.x before 4.3.90 does not properly validate the length of its input, which allows an attacker to cause a denial of service application crash...

DEBIAN-CVE-2015-7975

The nextvar function in NTP before 4.2.8p6 and 4.3.x before 4.3.90 does not properly validate the length of its input, which allows an attacker to cause a denial of service application crash...

CVE-2015-7975

Removed by vendor...

Telegram 3.2 - Input Length Handling Crash (PoC)

Telegram 3.2 - Input Length Handling Crash PoC + Title: Telegram - Input Length Handling Denial of Service Vulnerability + Product: Telegram + Vendor: http://telegram.org/ + SoftWare Link : https://itunes.apple.com/en/app/telegram-messenger/id686449807?mt=8 + Vulnerable Versions: Telegram 3.2 on...

Telegram 3.2 - Input Length Handling Crash PoC Vulnerability

Exploit for macOS platform in category dos / poc + Title: Telegram - Input Length Handling Denial of Service Vulnerability + Product: Telegram + Vendor: http://telegram.org/ + SoftWare Link : https://itunes.apple.com/en/app/telegram-messenger/id686449807?mt=8 + Vulnerable Versions: Telegram 3.2 o...

Telegram 3.2 - Input Length Handling Crash (PoC)

Title: Telegram - Input Length Handling Denial of Service Vulnerability + Product: Telegram + Vendor: http://telegram.org/ + SoftWare Link : https://itunes.apple.com/en/app/telegram-messenger/id686449807?mt=8 + Vulnerable Versions: Telegram 3.2 on IOS 9.0.1 Author : Mohammad Reza Espargham...

Telegram 3.2 Denial Of Service

Title: Telegram - Input Length Handling Denial of Service Vulnerability + Product: Telegram + Vendor: http://telegram.org/ + SoftWare Link : https://itunes.apple.com/en/app/telegram-messenger/id686449807?mt=8 + Vulnerable Versions: Telegram 3.2 on IOS 9.0.1 Author : Mohammad Reza Espargham...

Easy FTP Server 1.7.0.2 Remote BoF

Other vulnerabilities covered in bid:38262 === Infos === Credit: loneferret Found: 18/02/10 Versions affected = 1.7.0.2 === Description === Lack of input length checks for the CWD command result in a buffer overflow vulnerability, allowing the execution of arbitrary code by a remote attacker. ===...

Windows RSH daemon Buffer Overflow

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Windows RSH...

cscope: multiple buffer overflows

Multiple buffer overflows in Cscope before 15.7a allow remote attackers to execute arbitrary code via long strings in input such as 1 source-code tokens and 2 pathnames, related to integer overflows in some cases. NOTE: this issue exists because of an incomplete fix for CVE-2004-2541...

Windows RSH Daemon Buffer Overflow

This module exploits a vulnerability in Windows RSH daemon 1.8. The vulnerability is due to a failure to check for the length of input sent to the RSH server. A CPORT of 512 - 1023 must be configured for the exploit to be successful. This module requires Metasploit: https://metasploit.com/downloa...

QQ Traveler vulnerability analysis and exploit(0day)-vulnerability warning-the black bar safety net

Vulnerability overview Tencent TTQQ Traveleris a multi-page browser has a friendly user interface, offers a variety of skin for the user based on personal preferences, in addition TT is a new more user-friendly features that make surfing the Internet more easily and freely, saving time and effort...