115 matches found
Netwide Assembler (NASM) Invalid Memory Write Vulnerability
Netwide Assembler NASM is a Linux-based assembler that creates binaries and writes bootloaders. An invalid memory write vulnerability exists in the 'expandsmacro' function of the preproc.c file in NASM version 2.14rc15, which can be exploited by an attacker to cause a denial of service invalid...
Exploit for Out-of-bounds Write in Microsoft
Dissecting modern browser exploit: case study of CVE-2018-8174...
TensorFlow Dataset API for increasing training speed of neural networks
by M.Salnikov, Wallarm Research Wallarm AI engine is the heart of our security solution. Two key parameters of our AI engine efficiency are how fast neural networks can be train to reflect the updated training sets and how much compute power need to be dedicated to the training on the on-going...
[SECURITY] Fedora 25 Update: procmail-3.22-44.fc25
Procmail can be used to create mail-servers, mailing lists, sort your incoming mail into separate folders/files real convenient when subscribing to one or more mailing lists or for prioritising your mail, preprocess your mail, start any programs upon mail arrival e.g. to generate different chimes...
[SECURITY] Fedora 27 Update: procmail-3.22-44.fc27
Procmail can be used to create mail-servers, mailing lists, sort your incoming mail into separate folders/files real convenient when subscribing to one or more mailing lists or for prioritising your mail, preprocess your mail, start any programs upon mail arrival e.g. to generate different chimes...
ThinkPHP5 PDO Authenticity Preprocessing suffers from SQL Injection Vulnerability
ThinkPHP V5.0 is a high-performance framework designed for API development. A SQL injection vulnerability exists in ThinkPHP5 PDO authenticity preprocessing. The vulnerability is caused by controlling the value position of the in statement, i.e. by passing in an array, leading to a SQL injection...
Oniguruma 'onigenc_unicode_get_case_fold_codes_by_str()' function stack buffer overflow vulnerability
mbstring Multi-Byte String is a language encoding extension library in PHP PHP: Hypertext Preprocessor; Oniguruma-mod is a regular expression library in Ruby programming language.Oniguruma is one of the a regular expression engine. A stack buffer overflow vulnerability exists in the...
Source Code for CIA’s Tool to Track Whistleblowers Leaked by Wikileaks
Wikileaks has just published a new batch of the Vault 7 leak, exposing the documentation and source code for a CIA project known as "Scribbles." Scribbles, a.k.a. the "Snowden Stopper," is a piece of software allegedly designed to embed 'web beacon' tags into confidential documents, allowing the...
Debian DLA-297-1 : wesnoth-1.8 security update
Wesnoth implements a text preprocessing language that is used in conjunction with its own game scripting language. It also has a built-in Lua interpreter and API. Both the Lua API and the preprocessor make use of the same function filesystem::getwmllocation to resolve file paths so that only...
[SECURITY] [DLA 297-1] wesnoth-1.8 security update
Package : wesnoth-1.8 Version : 1:1.8.5-1+deb6u2 CVE ID : CVE-2015-5069 CVE-2015-5070 Wesnoth implements a text preprocessing language that is used in conjunction with its own game scripting language. It also has a built-in Lua interpreter and API. Both the Lua API and the preprocessor make use o...
DLA-297-1 wesnoth-1.8 - security update
Bulletin has no description...
wesnoth: information leakage
Wesnoth implements a text preprocessing language that is used in conjunction with its own game scripting language. It also has a built-in Lua interpreter and API. Both the Lua API and the preprocessor make use of the same function filesystem::getwmllocation to resolve file paths so that only...
[SECURITY] Fedora 21 Update: procmail-3.22-36.fc21
Procmail can be used to create mail-servers, mailing lists, sort your incoming mail into separate folders/files real convenient when subscribing to one or more mailing lists or for prioritising your mail, preprocess your mail, start any programs upon mail arrival e.g. to generate different chimes...
[SECURITY] Fedora 16 Update: perl-Pod-Plainer-1.03-1.fc16
Pod::Plainer uses Pod::Parser which takes Pod with the new 'C' constructs and returns the older style with just 'C'; '' are replaced by 'E' and 'E'. This can be used to pre-process Pod before using tools which do not recognize the new style Pods...
