The vulnerability of the iOS operating system and the Safari browser allows a perpetrator to trigger a service failure or execute arbitrary code.

The vulnerability of the WebKit component of the iOS operating system and the Safari browser arises from an operation that goes beyond the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure memory corruption through a...

Tencent Video Memory Corruption Vulnerability

Tencent Video Player is the video player client product of Tencent Video. Tencent Video fails to properly determine the existence of a memory overflow vulnerability in the application when processing qlv media files, allowing attackers to exploit the vulnerability to launch denial of service...

Hand to hand teach you how to construct the office exploits EXP（third period）-bug warning-the black bar safety net

In the previous term of office vulnerability to share, describes the legendary exploits of cve-2 0 1 3-3 9 0 6 a technical framework, which covers a lot of the overflow class of vulnerability classic. This period give everybody to bring the share is CVE-2 0 1 4-1 7 6 1, this vulnerability is stri...

The vulnerability of the distributed Git version control system allows a hacker to execute arbitrary code.

The vulnerability of the revision.c file in the distributed version control system Git is related to the use of an incorrect integer data type. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a long file name or by manipulating multiple nested trees, resulti...

Ubuntu: Security Advisory (USN-3070-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft GDI+ - DecodeCompressedRLEBitmap Invalid Pointer Arithmetic Out-of-Bounds Write (MS16-097)

Exploit for windows platform in category dos / poc Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=824 The GDI+ library can handle bitmaps originating from untrusted sources through a variety of attack vectors, like EMF files, which may embed bitmaps in records such as EMRPLGBLT...

Instacart: Issues with uploading list images

Hi, There are several issues with uploading images for a list, i.e. with a PUT request to https://www.instacart.com/api/v2/lists/153253 and passing listremoteimageurl. First, information about open ports and SSH information can be disclosed via different urls. For example, PUT-ing localhost:80 wi...

The vulnerability of the Android operating system allows a perpetrator to trigger a service failure or obtain confidential information from the process’s memory.

The vulnerability of the decoder/impeg2dbitstream.c file in the Android operating system is related to resource management errors. Exploiting this vulnerability can allow a remote attacker to obtain confidential information from the process’s memory or trigger a service failure memory overflow...

swfmill length field missing check denial of service vulnerability

Swfmill is an easy to use, intelligent and reliable xml2swf and swf2xml processor. The File::load function in the SWFFile.cpp file in swfmill-0.3.3 and earlier versions fails to correctly check the read length value. This resulted in dynamic memory being exceeded and the operating system crashing...

The vulnerability of the libxml2 library, which allows a hacker to trigger a service failure

The vulnerability of the xmlParseXmlDecl function in the parser.c file of the libxml2 library arises due to an overflow of memory buffer in dynamic memory. Exploiting this vulnerability could allow a malicious actor to cause a service failure by triggering errors after a coding process interrupti...

SUSE-SU-2016:1784-1 Security update for ImageMagick

ImageMagick was updated to fix 66 security issues. These security issues were fixed: - CVE-2014-9810: SEGV in dpx file handler. bsc983803. - CVE-2014-9811: Crash in xwd file handler bsc984032. - CVE-2014-9812: NULL pointer dereference in ps file handling bsc984137. - CVE-2014-9813: Crash on...

The vulnerability of the Adobe Photoshop graphic editor, which allows a hacker to execute arbitrary code or trigger a service failure.

The vulnerability of the Adobe Photoshop graphic editor arises due to an overflow of memory in the dynamic memory. Exploiting this vulnerability allows a local attacker to execute arbitrary code or cause a service failure...

The vulnerability of the Apache HTTP Server’s software allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The status of the competition in the modstatus module of the Apache HTTP Server allows malicious actors operating remotely to trigger service failures overflow of buffers in dynamic memory, gain access to confidential information, or execute arbitrary code through a specially crafted request. Thi...

The vulnerability of Google Chrome browser allows a perpetrator to trigger a service failure.

The vulnerability of the core/fxge/ge/fxgetext.cpp file of the Google Chrome browser’s PDFium component is related to the improper handling of certain index values. Exploiting this vulnerability can allow an attacker to trigger a service failure memory overflow during reading using a specially...

V8 browser kernel vulnerability, which allows a hacker to trigger a service failure

The vulnerability of the regexp implementation in the V8 browser kernel is related to incorrect handling of string lengths. Exploiting this vulnerability can allow an attacker, operating remotely, to trigger a service failure memory overflow, by using specially crafted JavaScript code...

The vulnerability of Google Chrome browser allows a perpetrator to trigger a service failure.

The vulnerability of the CPDFDIBSource::CreateDecoder function located in core/fpdfapi/fpdfrender/fpdfrenderloadimage.cpp in the PDFium browser component of Google Chrome is related to improper handling of initialization errors. Exploiting this vulnerability can allow an attacker to trigger a...

The vulnerability of the PHP interpreter, which allows attackers to trigger a service failure or exert other effects.

The vulnerability of the exifprocessIFDTag function ext/exif/exif.c in the PHP interpreter exists due to incorrect checking of arguments for the spprintf function. Exploiting this vulnerability can allow a malicious actor to trigger a service failure memory overflow or potentially cause other...

The vulnerability of the PHP interpreter, which allows attackers to trigger a service failure or exert other effects.

The vulnerability of the exifprocessIFDinJPEG function ext/exif/exif.c in the PHP interpreter improperly checks the size of the IFD file. Exploiting this vulnerability may allow a malicious actor to trigger a service failure memory overflow or potentially cause other effects through specially...

spice: heap-based memory corruption within smartcard handling

A memory allocation flaw, leading to a heap-based buffer overflow, was found in spice's smartcard interaction, which runs under the QEMU-KVM context on the host. A user connecting to a guest VM using spice could potentially use this flaw to crash the QEMU-KVM process or execute arbitrary code wit...

The vulnerabilities of PDF viewer programs such as Adobe Reader, Adobe Reader Document Cloud, and PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat allow attackers to execute arbitrary code.

The vulnerabilities of PDF viewer programs such as Adobe Reader and Adobe Reader Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, are due to buffer overflow in dynamic memory. Exploiting these vulnerabilities can allow a malicious actor to execu...