The vulnerability of the DHCP server service for Windows Server allows a perpetrator to execute arbitrary code.

The vulnerability of the DHCP server service for Windows operating systems arises from an operation that goes beyond the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending a specially crafted packet...

CVE-2019-7321

Usage of an uninitialized variable in the function fzloadjpeg in Artifex MuPDF 1.14 can result in a heap overflow vulnerability that allows an attacker to execute arbitrary code...

PT-2019-2489 · Microsoft · Windows Jet Database Engine +1

Name of the Vulnerable Software and Affected Versions: Windows Jet Database Engine affected versions not specified Description: The issue is related to a buffer overflow in memory, which can be exploited by using a specially crafted file, allowing an attacker to execute arbitrary code. This can...

Heap Overflow Vulnerability in Schneider Electric Twidosuite Software When Processing Its xpr Project Files

Schneider Electric Twidosuite is a programming software. A heap overflow vulnerability exists in the Schneider Electric Twidosuite software when processing its xpr project files. An attacker could exploit the vulnerability to execute malicious code...

Debian DLA-1793-1 : dhcpcd5 security update

It was discovered that there was a read overflow vulnerability in the dhcpcd5 network management protocol client. For Debian 8 'Jessie', this issue has been fixed in dhcpcd5 version 6.0.5-2+deb8u1. Thanks to Roy Marples . We recommend that you upgrade your dhcpcd5 packages. NOTE: Tenable Network...

CVE-2019-3568

A buffer overflow vulnerability in WhatsApp VOIP stack allowed remote code execution via specially crafted series of RTCP packets sent to a target phone number. The issue affects WhatsApp for Android prior to v2.19.134, WhatsApp Business for Android prior to v2.19.44, WhatsApp for iOS prior to...

Antenna House Rainbow PDF Office server document converter TxMasterStyleAtom parsing code execution vulnerability

Summary A buffer overflow vulnerability exists in the PowerPoint document conversion function of Rainbow PDF Office Server Document Converter V7.0 Pro MR1 7,0,2019,0220. While parsing a document text info container, the TxMasterStyleAtom::parse function is incorrectly checking the bounds...

EulerOS Virtualization 3.0.1.0 : kernel (EulerOS-SA-2019-1488)

According to the versions of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A flaw was found in the way the Linux kernel handled IRET faults during the processing of NMIs. An unprivileged, local user could...

OPENSUSE-SU-2019:1352-1 Security update for ovmf

This update for ovmf fixes the following issues: Security issue fixed: - CVE-2019-0161: Fixed a stack overflow in UsbBusDxe and UsbBusPei, which could potentially be triggered by a local unauthenticated user bsc1131361. This update was imported from the SUSE:SLE-15:Update update project...

Important: Red Hat Security Advisory: wget security update

An update for wget is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

Easy Chat Server 3.1 - message Denial of Service (PoC)

Easy Chat Server 3.1 - message Denial of Service PoC !/usr/bin/python --------------------------------------------------------- Title: Easy Chat Server Version 3.1 - DOS Date: 2019-05-07 Author: Miguel Mendez Z Team: www.exploiting.cl Vendor: http://www.echatserver.com Software Link:...

Command Execution Vulnerability in DeepSilicon SSL VPN Appliance

DeepSign Technology Corporation is a provider of products, services and solutions focused on enterprise-class security, cloud computing and infrastructure. An overflow vulnerability exists in DeepSecure VPN-2050, which can be exploited by an attacker to execute commands and gain server privileges...

Heap overflow

DaviewIndy 8.98.7 and earlier versions have a Heap-based overflow vulnerability, triggered when the user opens a malformed JPEG2000 format file that is mishandled by Daview.exe. Attackers could exploit this and arbitrary code execution...

Buffer Overflow Vulnerability in MegaPing Software

MegaPing is a windowed, multifunctional network diagnostic tool that includes most of the Internet utilities. A buffer overflow vulnerability exists in the MegaPing software. An attacker can exploit the vulnerability to execute arbitrary code within the context of the application...

Amazon Linux AMI : wget (ALAS-2019-1194)

A buffer overflow vulnerability was found in GNU Wget. An attacker may be able to cause a denial-of-service DoS or may execute an arbitrary code. CVE-2019-5953 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Amazon Linux AMI Security...

One_gadget and UAF combined with the use of a heap overflow vulnerability research-exploit warning-the black bar safety net

! Overview: through a simple ROP topics understanding Onegadget works, then use it to provide the ROP chain to achieve a heap of UAF vulnerabilities. Stack Overflow as a CTF pwn a big question, very worthy of study. The present article is for a certain Stack Overflow, and the stack use of the...

Security Bulletin: Vyatta 5600 vRouter Software Patches - Release 1801-v

Summary AT&T has released version 1801-v for the Vyatta 5600. Details of this release can be found at https://cloud.ibm.com/docs/infrastructure/virtual-router-appliance?topic=virtual-router-appliance-at-t-vyatta-5600-vrouter-software-patchesat-t-vyatta-5600-vrouter-software-patches Vulnerability...

MGASA-2019-0139 Updated libssh2 packages fix security vulnerability

Possible integer overflow in transport read allows out-of-bounds write. CVE-2019-3855 Possible integer overflow in keyboard interactive handling allows out-of-bounds write. CVE-2019-3856 Possible integer overflow leading to zero-byte allocation and out-of-bounds write. CVE-2019-3857 Possible...

CVE-2019-11008

In GraphicsMagick 1.4 snapshot-20190322 Q8, there is a heap-based buffer overflow in the function WriteXWDImage of coders/xwd.c, which allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted image file...

Debian: Security Advisory (DSA-4425-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...