CVE-2016-7055

There is a carry propagating bug in the Broadwell-specific Montgomery multiplication procedure in OpenSSL 1.0.2 and 1.1.0 before 1.1.0c that handles input lengths divisible by, but longer than 256 bits. Analysis suggests that attacks against RSA, DSA and DH private keys are impossible. This is...

PT-2017-18030 · Php +1 · Php +1

Name of the Vulnerable Software and Affected Versions: PHP versions through 7.1.4 Description: The issue allows attackers to cause a denial of service via operations on long strings, resulting in memory consumption and application crash. The vendor disputes this, stating that GMP safely aborts in...

CVE-2015-7975

The nextvar function in NTP before 4.2.8p6 and 4.3.x before 4.3.90 does not properly validate the length of its input, which allows an attacker to cause a denial of service application crash...

DEBIAN-CVE-2015-7975

The nextvar function in NTP before 4.2.8p6 and 4.3.x before 4.3.90 does not properly validate the length of its input, which allows an attacker to cause a denial of service application crash...

CVE-2015-7975

The nextvar function in NTP before 4.2.8p6 and 4.3.x before 4.3.90 does not properly validate the length of its input, which allows an attacker to cause a denial of service application crash...

Telegram 3.2 - Input Length Handling Crash (PoC)

Telegram 3.2 - Input Length Handling Crash PoC + Title: Telegram - Input Length Handling Denial of Service Vulnerability + Product: Telegram + Vendor: http://telegram.org/ + SoftWare Link : https://itunes.apple.com/en/app/telegram-messenger/id686449807?mt=8 + Vulnerable Versions: Telegram 3.2 on...

Telegram 3.2 - Input Length Handling Crash PoC Vulnerability

Exploit for macOS platform in category dos / poc + Title: Telegram - Input Length Handling Denial of Service Vulnerability + Product: Telegram + Vendor: http://telegram.org/ + SoftWare Link : https://itunes.apple.com/en/app/telegram-messenger/id686449807?mt=8 + Vulnerable Versions: Telegram 3.2 o...

Telegram 3.2 - Input Length Handling Crash (PoC)

Title: Telegram - Input Length Handling Denial of Service Vulnerability + Product: Telegram + Vendor: http://telegram.org/ + SoftWare Link : https://itunes.apple.com/en/app/telegram-messenger/id686449807?mt=8 + Vulnerable Versions: Telegram 3.2 on IOS 9.0.1 Author : Mohammad Reza Espargham...

Telegram 3.2 Denial Of Service

Title: Telegram - Input Length Handling Denial of Service Vulnerability + Product: Telegram + Vendor: http://telegram.org/ + SoftWare Link : https://itunes.apple.com/en/app/telegram-messenger/id686449807?mt=8 + Vulnerable Versions: Telegram 3.2 on IOS 9.0.1 Author : Mohammad Reza Espargham...

Easy FTP Server 1.7.0.2 Remote BoF

Other vulnerabilities covered in bid:38262 === Infos === Credit: loneferret Found: 18/02/10 Versions affected = 1.7.0.2 === Description === Lack of input length checks for the CWD command result in a buffer overflow vulnerability, allowing the execution of arbitrary code by a remote attacker. ===...

Windows RSH daemon Buffer Overflow

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Windows RSH...

cscope: multiple buffer overflows

Multiple buffer overflows in Cscope before 15.7a allow remote attackers to execute arbitrary code via long strings in input such as 1 source-code tokens and 2 pathnames, related to integer overflows in some cases. NOTE: this issue exists because of an incomplete fix for CVE-2004-2541...

Windows RSH Daemon Buffer Overflow

This module exploits a vulnerability in Windows RSH daemon 1.8. The vulnerability is due to a failure to check for the length of input sent to the RSH server. A CPORT of 512 - 1023 must be configured for the exploit to be successful. This module requires Metasploit: https://metasploit.com/downloa...

QQ Traveler vulnerability analysis and exploit(0day)-vulnerability warning-the black bar safety net

Vulnerability overview Tencent TTQQ Traveleris a multi-page browser has a friendly user interface, offers a variety of skin for the user based on personal preferences, in addition TT is a new more user-friendly features that make surfing the Internet more easily and freely, saving time and effort...

[Full-Disclosure] Megabook 2.0 -XSS & UA execution

------------------------------------------------------------------ - EXPL-A-2003-011 exploitlabs.com Advisory 011 ------------------------------------------------------------------ -= MegaBook =- exploitlabs.com June 29, 2003 Vunerabilitys: ---------------- 1. XSS and Unchecked Input Length 2...

MFC ISAPI Framework Buffer Overflow

Systems Affected: All ISAs written using MFC ISAPI framework Issue: User-input length values can result in a buffer overflow. Risk: Critical Scope: Remote Server Compromise The MFC ISAPI framework is widely used to build ISAs that run on a multitude of web servers. It has been discovered that the...

[ Hackerslab bug_paper ] HP-UX bdf -t option buffer overflow vul.

================================================================================ Hackerslab bugpaper HP-UX bdf -t option buffer overflow vul ================================================================================ File : /usr/bin/bdf SYSTEM : HP-UX 11.00 Tested by HP-UX B.11.00 INFO : bdf...