The vulnerabilities of Adobe Reader and Adobe Reader Document Cloud, as well as Adobe Acrobat and Adobe Acrobat Document Cloud, allow a perpetrator to trigger service interruptions or execute arbitrary codes.

The vulnerabilities of PDF viewer programs such as Adobe Reader and Adobe Reader Document Cloud, as well as PDF editing programs like Adobe Acrobat and Adobe Acrobat Document Cloud, are due to buffer overflow vulnerabilities. Exploiting these vulnerabilities can allow a malicious actor to execute...

openssh -- sshd -- remote valid user discovery and PAM /bin/login attack

The OpenSSH project reports: sshd8: Mitigate timing differences in password authentication that could be used to discern valid from invalid account names when long passwords were sent and particular password hashing algorithms are in use on the server. CVE-2016-6210, reported by EddieEzra.Harari ...

PT-2017-8945

Name of the Vulnerable Software and Affected Versions Portable UPnP SDK aka libupnp versions prior to 1.6.21 Description The issue allows remote attackers to write to arbitrary files in the webroot via a POST request without a registered handler. This can be achieved by sending a POST request to ...

CoolPlayer+ Portable 2.19.6 Stack Overflow

Exploit Title: CoolPlayer+ Portable build 2.19.6 - .m3u Stack Overflow Egghunter+ASLR bypass Exploit Author: Karn Ganeshen Download link: https://sourceforge.net/projects/portableapps/files/CoolPlayer%2B%20Portable/CoolPlayerPlusPortable2.19.6.paf.exe/download?usemirror=liquidtelecom Version:...

CoolPlayer+ Portable 2.19.6 - '.m3u' File Stack Overflow (Egghunter + ASLR Bypass)

Exploit Title: CoolPlayer+ Portable build 2.19.6 - .m3u Stack Overflow Egghunter+ASLR bypass Exploit Author: Karn Ganeshen Download link: https://sourceforge.net/projects/portableapps/files/CoolPlayer%2B%20Portable/CoolPlayerPlusPortable2.19.6.paf.exe/download?usemirror=liquidtelecom Version:...

Oracle Database Multiple Vulnerabilities (July 2016 CPU) (FREAK)

The remote Oracle Database Server is missing the July 2016 Critical Patch Update CPU. It is, therefore, affected by multiple vulnerabilities : - A security feature bypass vulnerability, known as FREAK Factoring attack on RSA-EXPORT Keys, exists in the RDBMS HTTPS Listener package due to the suppo...

CVE-2016-3479

Unspecified vulnerability in the Portable Clusterware component in Oracle Database Server 11.2.0.4 and 12.1.0.2 allows remote attackers to affect availability via unknown vectors...

CVE-2016-3479

Unspecified vulnerability in the Portable Clusterware component in Oracle Database Server 11.2.0.4 and 12.1.0.2 allows remote attackers to affect availability via unknown vectors...

Unspecified Vulnerability in Oracle Database Server Portable Clusterware

Oracle Database Server is an object-relational database management system. It provides an open, comprehensive, and integrated approach to information management. A security vulnerability exists in the Portable Clusterware component of Oracle Database Server versions 11.2.0.4, 12.1.0.2, which can ...

CVE-2016-3479: Undefined Security Weakness

Unspecified vulnerability in the Portable Clusterware component in Oracle Database Server 11.2.0.4 and 12.1.0.2 allows remote attackers to affect availability via unknown vectors...

PT-2016-5500

Name of the Vulnerable Software and Affected Versions Oracle Database Server versions 11.2.0.4 through 11.2.0.4 Oracle Database Server versions 12.1.0.2 through 12.1.0.2 Description The issue affects the availability of the system. It is related to an unspecified vulnerability in the Portable...

Adobe Reader and Acrobat Memory Corruption Vulnerability

Adobe Reader and Acrobat a PDF file related software. Adobe Reader is a free PDF file reader, Acrobat is a PDF file editing and conversion tools. A memory corruption vulnerability exists in Adobe Reader and Acrobat, which can be exploited by attackers to execute arbitrary code or launch...

The vulnerability of the libpng library, which allows a hacker to execute arbitrary code

The vulnerability of the pngcombinerow function in the libpng library arises due to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted PNG file...

The vulnerability of the libpng library, which allows a hacker to cause a service failure

The vulnerability of the pngPushReadzTXt function in the libpng library is caused by buffer overflow. Exploiting this vulnerability could allow an attacker to trigger a service failure memory out-of-bound reading by setting a high value in the availin field of a PNG image...

The vulnerability of the libpng library, which allows a hacker to cause a service failure or exert other effects

The vulnerability of the pngsetPLTE function in the libpng library arises due to buffer overflow. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service interruptions or other effects such as the termination of an application by using a specially crafted PNG ima...

Adobe Acrobat Reader DC 15.016.20045 - Invalid Font '.ttf' Memory Corruption (4)

Exploit for multiple platform in category dos / poc Application: Adobe Acrobat Reader DC Platforms: Windows,OSX Versions: 15.016.20045 and earlier Author: Sébastien Morin of COSIG Website: https://cosig.gouv.qc.ca/en/advisory/ Twitter: @COSIG Date: July 12, 2016 CVE: CVE-2016-4208 COSIG-2016-27 1...

Mozilla NSPR Denial of Service Vulnerability

Mozilla NSPR Netscape Portable Runtime is a cross-platform library developed by the U.S. Mozilla Foundation, which provides type definitions, thread synchronization and file and memory management APIs. A denial of service vulnerability exists in Mozilla NSPR, which stems from the program failing ...

PT-2016-6361

Name of the Vulnerable Software and Affected Versions Symantec Endpoint Protection versions prior to 15.0.6 Norton Security versions prior to 15.1.2 Description The issue allows remote attackers to cause a denial of service, resulting in memory corruption and system crash, via a malformed Portabl...

USN-3028-1 nspr vulnerability

It was discovered that NSPR incorrectly handled memory allocation. A remote attacker could use this issue to cause NSPR to crash, resulting in a denial of service, or possibly execute arbitrary code...

Adobe Acrobat Reader DC Remote Code Execution Vulnerability (CNVD-2016-04919)

Adobe Reader is PDF document reading software. A security vulnerability exists in Adobe Reader DC that allows an attacker to trigger a memory corruption vulnerability in Adobe Reader DC by means of a carefully constructed PDF file, which can be exploited to execute arbitrary code in the context o...