Lucene search
+L

99 matches found

OSV
OSV
•added 2023/12/23 12:00 a.m.•28 views

DLA-3693-1 osslsigncode - security update

Bulletin has no description...

7.8CVSS7.5AI score0.003EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2023/12/23 12:00 a.m.•33 views

Debian dla-3693 : osslsigncode - security update

The remote Debian 10 host has a package installed that is affected by a vulnerability as referenced in the dla-3693 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3693-1 [email protected] https://www.debian.org/lts/security/...

7.8CVSS7.8AI score0.003EPSS
SaveExploits0References4
Veracode
Veracode
•added 2023/08/06 2:31 p.m.•26 views

Buffer Overflow

osslsigncode is vulnerable to Buffer Overflows. This vulnerability occurs due to a flaw in the way that mtrojnar osslsigncode handles the processing of large files. An attacker can exploit this vulnerability to cause a denial-of-service DoS attack or potentially execute arbitrary code on the syst...

7.8CVSS7.6AI score0.003EPSS
SaveExploits0References4Affected Software1
SUSE CVE
SUSE CVE
•added 2023/07/05 2:12 a.m.•5 views

SUSE CVE-2023-36377

Buffer Overflow vulnerability in mtrojnar osslsigncode v.2.3 and before allows a local attacker to execute arbitrary code via a crafted .exe, .sys, and .dll files...

7.8CVSS7.6AI score0.003EPSS
SaveExploits0References3
OSV
OSV
•added 2023/07/03 9:15 p.m.•4 views

DEBIAN-CVE-2023-36377

Buffer Overflow vulnerability in mtrojnar osslsigncode v.2.3 and before allows a local attacker to execute arbitrary code via a crafted .exe, .sys, and .dll files...

7.8CVSS8AI score0.003EPSS
SaveExploits0References1
NVD
NVD
•added 2023/07/03 9:15 p.m.•16 views

CVE-2023-36377

Buffer Overflow vulnerability in mtrojnar osslsigncode v.2.3 and before allows a local attacker to execute arbitrary code via a crafted .exe, .sys, and .dll files...

7.8CVSS7.7AI score0.003EPSS
SaveExploits0References4
OSV
OSV
•added 2023/07/03 9:15 p.m.•14 views

UBUNTU-CVE-2023-36377

Buffer Overflow vulnerability in mtrojnar osslsigncode v.2.3 and before allows a local attacker to execute arbitrary code via a crafted .exe, .sys, and .dll files...

7.8CVSS6.2AI score0.003EPSS
SaveExploits0References4
Prion
Prion
•added 2023/07/03 9:15 p.m.•33 views

Buffer overflow

Buffer Overflow vulnerability in mtrojnar osslsigncode v.2.3 and before allows a local attacker to execute arbitrary code via a crafted .exe, .sys, and .dll files...

4.3CVSS7.7AI score0.003EPSS
SaveExploits0References3Affected Software1
UbuntuCve
UbuntuCve
•added 2023/07/03 9:15 p.m.•118 views

CVE-2023-36377

Buffer Overflow vulnerability in mtrojnar osslsigncode v.2.3 and before allows a local attacker to execute arbitrary code via a crafted .exe, .sys, and .dll files...

7.8CVSS7.4AI score0.003EPSS
SaveExploits0References3
CVE
CVE
•added 2023/07/03 12:00 a.m.•70 views

CVE-2023-36377

CVE-2023-36377 affects osslsigncode, a signing tool. A Buffer Overflow in osslsigncode v2.3 and earlier can allow local arbitrary code execution when signing crafted files (.exe/.sys/.dll). Multiple Debian LTS advisories document affected package osslsigncode and fixes via upgraded versions: Debi...

7.8CVSS7.6AI score0.003EPSS
SaveExploits0References4Affected Software1
Positive Technologies
Positive Technologies
•added 2023/07/03 12:00 a.m.•8 views

PT-2023-25562

Name of the Vulnerable Software and Affected Versions mtrojnar osslsigncode versions 2.3 and earlier Description The issue allows a local attacker to execute arbitrary code via crafted .exe, .sys, and .dll files. This is due to a Buffer Overflow vulnerability. Recommendations For mtrojnar...

7.8CVSS7.9AI score0.003EPSS
SaveExploits0References21
Debian CVE
Debian CVE
•added 2023/07/03 12:00 a.m.•34 views

CVE-2023-36377

Buffer Overflow vulnerability in mtrojnar osslsigncode v.2.3 and before allows a local attacker to execute arbitrary code via a crafted .exe, .sys, and .dll files...

7.8CVSS7.7AI score0.003EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/07/03 12:00 a.m.•0 views

CVE-2023-36377: Buffer Copy without Checking Size of Input

Buffer Overflow vulnerability in mtrojnar osslsigncode v.2.3 and before allows a local attacker to execute arbitrary code via a crafted .exe, .sys, and .dll files...

7.8CVSS7.8AI score0.003EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2023/07/03 12:00 a.m.•34 views

CVE-2023-36377

Buffer Overflow vulnerability in mtrojnar osslsigncode v.2.3 and before allows a local attacker to execute arbitrary code via a crafted .exe, .sys, and .dll files...

7.9AI score0.003EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2023/07/03 12:00 a.m.•17 views

CVE-2023-36377

Buffer Overflow vulnerability in mtrojnar osslsigncode v.2.3 and before allows a local attacker to execute arbitrary code via a crafted .exe, .sys, and .dll files...

7.8AI score0.003EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2023/07/03 12:00 a.m.•14 views

osslsigncode 安全漏洞

osslsigncode is a small tool by Michał Trojnara, a personal developer. It implements part of the functionality of the Microsoft tool signtool.exe. A security vulnerability exists in osslsigncode v.2.3 and earlier versions, which stems from the presence of a buffer overflow vulnerability that coul...

7.8CVSS8.1AI score0.003EPSS
SaveExploits0References6
OSV
OSV
•added 2023/07/03 12:00 a.m.•30 views

CVE-2023-36377

Buffer Overflow vulnerability in mtrojnar osslsigncode v.2.3 and before allows a local attacker to execute arbitrary code via a crafted .exe, .sys, and .dll files...

7.8AI score
SaveExploits0References6
Kitploit
Kitploit
•added 2020/05/13 12:30 p.m.•156 views

Kaiten - A Undetectable Payload Generation

A Undetectable Payload Generation. This tool is for educational purpose only, usage of Kaiten for attacking targets without prior mutual consent is illegal. Developers assume no liability and are not responsible for any misuse or damage cause by this program. Official Kaiten Repository. What is i...

7.3AI score
SaveExploits0References1
GithubExploit
GithubExploit
•added 2020/02/03 1:58 p.m.•94 views

Exploit for Improper Certificate Validation in Microsoft

CVE-2020-0601 PoC for CVE-2020-0601 – Windows CryptoAPI Cry...

8.1CVSS7.5AI score0.89436EPSS
SaveExploits15
Rows per page
Query Builder