libjpeg-turbo -- Issue in the PPM reader causing a buffer overrun in cjpeg, TJBench, or the tjLoadImage() function.

libjpeg-turbo releases reports: This release fixes the following security issue: Heap-based buffer over-read in getrgbrow in rdppm.c via a malformed PPM input file...

ImageMagick WritePNMImage Buffer Overflow Information Disclosure

The vulnerability of the WritePNMImage function in the console-based image editing tool ImageMagick is related to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures and expose sensitive informati...

iOS tvOS macOS watchOS Safari iTunes iCloud Buffer Overflow

Vulnerabilities of operating systems such as iOS, tvOS, macOS, watchOS, the browser Safari, the multimedia player iTunes for operating systems Windows, and the iCloud service for operating systems Windows are related to the execution of operations outside of the buffer in memory. Exploitation of...

Squid Proxy Authentication Code Execution

The vulnerability of the Proxy-Authentication component of the Squid proxy server is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures or execute arbitrary code...

Cisco Wireless LAN Controllers Frame Processing Buffer Overflow DoS

The vulnerability of the Generic Advertising Service GAS frame processing function in Cisco Wireless LAN Controllers based on the 802.11 protocol is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to cause a service failure ...

ChakraCore Buffer Overflow RCE

The vulnerability of the ChakraCore JavaScript script handler is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Adobe Illustrator CC Buffer Overflow

The vulnerability of Adobe Illustrator CC 2020 is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code on the target system by opening a malicious file...

iOS tvOS macOS watchOS Safari iTunes iCloud Buffer Overflow

Vulnerabilities of operating systems such as iOS, tvOS, macOS, watchOS, the browser Safari, the multimedia player iTunes for operating systems Windows, and the iCloud service for operating systems Windows are related to the execution of operations outside of the buffer in memory. Exploitation of...

Adobe Illustrator CC Buffer Overflow

The vulnerability of Adobe Illustrator CC 2020 is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code on the target system by opening a malicious file...

Microsoft Color Management Privilege Escalation

The vulnerability of the Microsoft Color Management color control module in the Windows operating system relates to operations that go beyond the buffer limits in memory. Exploiting this vulnerability can allow a remote attacker to increase their privileges or gain access to modify, add, or delet...

Microsoft JET Database Engine Code Execution

The vulnerability of the Microsoft JET Database Engine for Windows operating systems arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created file...

HAProxy hpack_dht_insert Buffer Overflow

The vulnerability of the hpackdhtinsert function in the HAProxy networking software library is related to the execution of operations within acceptable buffer data limits. Exploiting this vulnerability could allow an attacker to gain unauthorized access to confidential data, cause service failure...

Win32k Privilege Escalation

The vulnerability of the Win32k component in Windows operating systems is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges and gain full control over the system through a specially create...

GDI Component Code Execution

The vulnerability of the Graphics Device Interface GDI component in Windows operating systems is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted web page or...

Google Chrome V8 Heap Buffer Overflow DoS

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine is related to incorrect implementation of the engine. Exploiting this vulnerability can allow a malicious actor to cause service failures...

Windows Codecs Library Code Execution

The vulnerability of the Windows Codecs Library component in Windows operating systems is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Windows Jet Database Engine Code Execution

The vulnerability of the Windows Jet Database Engine database management system in Windows operating systems is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Win32k Privilege Escalation

The vulnerability of the Win32k component in Windows operating systems is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges and gain full control over the system through a specially create...

Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Microsoft

This is a PoC exploit for CVE-2020-0796, a SMBv3 RCE vulnerability. The exploit is a simple scanner that checks if a server is vulnerable by sending a specially crafted SMB request. The scanner is designed to test whether a server is vulnerable, not for research or development. It checks for SMB...

Security Bulletin: Vulnerability in curl affects IBM Cloud Pak System (CVE-2018-14618)

Summary Vulnerability is identified in curl used in Cloud Pak System. Cloud Pak System has addressed the vulnerability. Vulnerability Details CVEID: CVE-2018-14618 DESCRIPTION: curl before version 7.61.1 is vulnerable to a buffer overrun in the NTLM authentication code. The internal function...