The Basics of Exploit Development 5: x86-64 Buffer Overflows

In this article we will be covering a technique similar to the one in the first installment of this series, however, with the twist in that this exploit will be of a 64-bit process running on Windows 10. Due to the nature of modern operating systems and the exploit mitigation techniques they...

Vulnerability Spotlight: Memory corruption in Google PDFium

Aleksandar Nikolic of Cisco Talos discovered these vulnerabilities. Blog by Jon Munshaw. Google Chrome's PDFium feature could be exploited by an adversary to corrupt memory and potentially execute remote code. Chrome is a popular, free web browser available on all operating systems. PDFium allows...

The vulnerability of the DirectX component in Windows operating systems allows attackers to gain rights to install programs, view, modify, or delete data, as well as create new accounts with full user privileges.

The vulnerability of the DirectX component in Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to gain privileges to install programs, view, modify, or delete data, and create new user accounts with full user rights using a...

The vulnerability of the Windows Speech Runtime component in operating systems allows attackers to exploit their privileges.

The vulnerability of the Windows Speech Runtime component in operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow attackers to enhance their privileges through a specially created application...

The vulnerability of the Windows Work Folders Service in Windows operating systems allows a hacker to exploit their privileges.

The vulnerability of the Windows Work Folders Service in Windows operating systems arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

The vulnerability of the Win32k component in Windows operating systems, related to errors in memory object handling, allows attackers to exploit this to disclose protected information.

The vulnerability of the Win32k component in Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to disclose sensitive information through a specially created application...

Security Vulnerabilities fixed in Thunderbird 78.2 — Mozilla

If Thunderbird is installed to a user-writable directory, the Mozilla Maintenance Service would execute updater.exe from the install location with system privileges. Although the Mozilla Maintenance Service does ensure that updater.exe is signed by Mozilla, the version could have been rolled back...

Security Vulnerabilities fixed in Firefox ESR 78.2 — Mozilla

If Firefox is installed to a user-writable directory, the Mozilla Maintenance Service would execute updater.exe from the install location with system privileges. Although the Mozilla Maintenance Service does ensure that updater.exe is signed by Mozilla, the version could have been rolled back to ...

Unspecified vulnerability in ImageIO component of multiple Apple products (CNVD-2020-49297)

Apple iOS is an operating system developed for mobile devices.Apple iPadOS is an operating system for iPad tablets.Apple macOS Catalina is a specialized operating system developed for Mac computers.ImageIO ImageIO is a component that reads and writes image data. A security vulnerability exists in...

Microsoft Windows and Microsoft Windows Server Information Disclosure Vulnerability (CNVD-2020-48269)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. An information disclosure vulnerability exists in RPC in Microsoft Windows and Microsoft...

The vulnerability of the Windows Installer installation service on Microsoft Windows operating systems allows attackers to escalate their privileges.

The vulnerability of the Windows Installer installation service on Microsoft Windows operating systems is related to improper handling of file system operations. Exploiting this vulnerability can allow an attacker to increase their privileges...

Travel Management System 1.0 Remote Code Execution Exploit

Exploit for php platform in category web applications Exploit Title: Travel Management System v1.0 - Unauthenticated Remote Code Execution Exploit Author: Adeeb Shah @hyd3sec & Bobby Cooke boku Vulnerability Discovery: Adeeb Shah @hyd3sec Date: August 10, 2020 Vendor Homepage:...

CVE-2020-7205

A potential security vulnerability has been identified in HPE Intelligent Provisioning, Service Pack for ProLiant, and HPE Scripting ToolKit. The vulnerability could be locally exploited to allow arbitrary code execution during the boot process. Note: This vulnerability is related to using insmod...

Information disclosure

A potential security vulnerability has been identified in HPE Intelligent Provisioning, Service Pack for ProLiant, and HPE Scripting ToolKit. The vulnerability could be locally exploited to allow arbitrary code execution during the boot process. Note: This vulnerability is related to using insmod...

GRUB2 Vulnerability – AKA

No description provided...

Denial of Service Vulnerability in OPEN OFFICE

OPEN OFFICE is a set of cross-platform office software, can be executed on WINDOWS, LINUX, MACOS, X X11 and SOLARIS and other operating systems, and each of the major office software suite is compatible with a lot of office software are based on it for secondary development. A denial of service...

PT-2020-6884 · Apple +7 · Ipados +14

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 13.6 iPadOS versions prior to 13.6 tvOS versions prior to 13.4.8 watchOS versions prior to 6.2.8 Safari versions prior to 13.1.2 iTunes versions prior to 12.10.8 for Windows iCloud for Windows versions prior to 11.3 iClo...

The vulnerability of the Connected User Experiences and Telemetry Services for Windows operating systems allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Connected User Experiences and Telemetry Services for Windows operating systems is related to file operation processing errors. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created application...

Microsoft Windows/Windows Server Remote Code Execution Vulnerability (CNVD-2021-65605)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation USA.Microsoft Windows is a set of operating systems for personal devices.Microsoft Windows Server is a set of server operating systems. A remote code execution vulnerability exists in Microsoft Windows/Windo...

RIOT buffer overflow vulnerability

RIOT RIOT-OS is a set of operating systems for applications in the IoT field. A buffer error vulnerability exists in the base64 decoder in RIOT version 2020.04, which stems from the program not properly checking boundaries. A remote attacker can exploit this vulnerability to execute arbitrary cod...