6393 matches found
CVE-2017-4114
This CVE entry is rejected/not used and does not represent an active vulnerability.
CVE-2017-4422
CVE-2017-4422 is rejected/not used; this CVE entry does not represent an active vulnerability.
CVE-2018-7566
ALSA sequencer core initializes the event pool on demand by invoking sndseqpoolinit when the first write happens and the pool is empty. A user can reset the pool size manually via ioctl concurrently, and this may lead to UAF or out-of-bound access...
Microsoft Windows and Macrovision SafeDisc secdrv.sys Driver Information Disclosure Vulnerability
Microsoft Windows Vista, etc. are a series of operating systems released by Microsoft Corporation, U.S.A. Macrovision SafeDisc is a suite of copy protection programs for Windows applications and games distributed on CD-ROMs from the U.S.A. Macrovision. secdrv. sys is one of the drivers used by...
HackerOne: Unicorn worker pool exhaustion by continuously updating payout preferences
please this time i hope you listen to me - please see the included video as POC - please this is not self DOS , not self DOS, not self DOS - i hope this time you find out that this is last report that i have , please see the video to the end again this is not a self DOS i have invulded one...
CVE-2017-17078
CVE-2017-17078 is rejected/not used per the description.
CVE-2017-3739
CVE-2017-3739 entry is rejected/not used; it does not represent an active vulnerability.
CODE EXECUTION (CVE-2018-5189) WALKTHROUGH ON JUNGO WINDRIVER 12.5.1
INTRODUCTION Windows kernel exploitation can be a daunting area to get into. There are tons of helpful tutorials out there and originally this post was going to add to that list. This is the story of how I found CVE-2018-5189 and a complete walkthrough of the exploit development cycle. The idea w...
Race condition
Race condition in Jungo Windriver 12.5.1 allows local users to cause a denial of service buffer overflow or gain system privileges by flipping pool buffer size, aka a "double fetch" vulnerability...
Microsoft Windows - nt!NtQuerySystemInformation (information class 138, QueryMemoryTopologyInformati
Exploit for windows platform in category dos / poc / We have discovered that the nt!NtQuerySystemInformation system call invoked with the 138 information class discloses portions of uninitialized kernel pool memory to user-mode clients. The specific information class is handled by an internal...
Microsoft Windows - nt!NtQuerySystemInformation (information class 138_ QueryMemoryTopologyInformation) Kernel Pool Memory Disclosure
Microsoft Windows - nt!NtQuerySystemInformation information class 138 QueryMemoryTopologyInformation Kernel Pool Memory Disclosure / We have discovered that the nt!NtQuerySystemInformation system call invoked with the 138 information class discloses portions of uninitialized kernel pool memory to...
CVE-2017-1963
CVE-2017-1963 entry is rejected/not used; this candidate not assigned to issues.
CVE-2017-1999
CVE-2017-1999 is rejected/not used per the initial description; this CVE entry is not an active vulnerability.
CVE-2017-1883
This CVE-2017-1883 entry is rejected and not active.
CVE-2017-2082
This CVE entry is rejected; it is not used and does not represent an active vulnerability.
CVE-2017-2043
CVE-2017-2043 entry is rejected/not used as stated in the Initial Description.
CVE-2017-1845
CVE-2017-1845 is rejected/not used; this entry does not represent an active vulnerability.
CVE-2017-1936
CVE-2017-1936 is rejected/not active; this CVE entry is not used.