SockPuppet: A Walkthrough of a Kernel Exploit for iOS 12.4

Posted by Ned Williamson, 20% on Project Zero Introduction I have a somewhat unique opportunity in this writeup to highlight my experience as an iOS research newcomer. Many high quality iOS kernel exploitation writeups have been published, but those often feature weaker initial primitives combine...

CVE-2019-15544

An issue was discovered in the protobuf crate before 2.6.0 for Rust. Attackers can exhaust all memory via Vec::reserve calls...

Design/Logic Flaw

An issue was discovered in the protobuf crate before 2.6.0 for Rust. Attackers can exhaust all memory via Vec::reserve calls...

CVE-2019-15544

The CVE-2019-15544 issue affects the protobuf crate for Rust (pre-2.6.0). The vulnerability arises from Vec::reserve being fed by user-supplied input, enabling memory exhaustion. Documented impact: Out-of-Memory conditions, potentially affecting affected Rust crates that rely on this protobuf imp...

CVE-2019-15544

An issue was discovered in the protobuf crate before 2.6.0 for Rust. Attackers can exhaust all memory via Vec::reserve calls...

WhatsApp Flaw Lets Users Modify Group Chats to Spread Fake News

WhatsApp, the most popular messaging application in the world, has been found vulnerable to multiple security vulnerabilities that could allow malicious users to intercept and modify the content of messages sent in both private as well as group conversations. Discovered by security researchers at...

See how do I find the value of 3 thousand 6 thousand USD Google RCE vulnerability-vulnerability warning-the black bar safety net

! This article tells the story of the Uruguayan public University, 18-year-old student Ezequiel Pereira found Google highest level RCE vulnerability-related process. In the beginning of the year, Ezequiel found Google Google App Engine GAEis a non-production environment of a vulnerability, exploi...

IDAsec - IDA plugin for reverse-engineering and dynamic interactions with the Binsec platform

IDA plugin for reverse-engineering and dynamic interactions with the Binsec platform Features Decoding an instruction in DBA IR Loading execution traces generated by Pinsec Triggering analyzes on Binsec and retrieving results Dependencies protobuf ZMQ capstone for trace disassembly graphviz to dr...

Google protobuf heap buffer overflow vulnerability

Google protobuf is a data exchange format of the American Google Google company. A heap buffer overflow vulnerability exists in Google protobuf. A remote attacker could exploit this vulnerability to execute code based on a heap buffer overflow...

PYSEC-2017-150

Withdrawn as duplicate of PYSEC-2017-65 protobuf allows remote authenticated attackers to cause a heap-based buffer overflow...

PYSEC-2017-65

protobuf allows remote authenticated attackers to cause a heap-based buffer overflow...

Heap overflow

protobuf allows remote authenticated attackers to cause a heap-based buffer overflow...

CVE-2015-5237

protobuf allows remote authenticated attackers to cause a heap-based buffer overflow...

UBUNTU-CVE-2015-5237

protobuf allows remote authenticated attackers to cause a heap-based buffer overflow...

CVE-2015-5237

protobuf allows remote authenticated attackers to cause a heap-based buffer overflow...

PYSEC-2017-150

Withdrawn as duplicate of PYSEC-2017-65 protobuf allows remote authenticated attackers to cause a heap-based buffer overflow...

CVE-2015-5237

protobuf allows remote authenticated attackers to cause a heap-based buffer overflow...

PYSEC-2017-65

protobuf allows remote authenticated attackers to cause a heap-based buffer overflow...

CVE-2015-5237

protobuf allows remote authenticated attackers to cause a heap-based buffer overflow...

CVE-2015-5237

CVE-2015-5237 affects Google Protocol Buffers (protobuf). Root cause: integer/heap overflow in MessageLite::SerializeToString leading to a heap‑based buffer overflow. Exploitation could enable remote code execution or denial of service by remote authenticated attackers. In IBM DataStage for Cloud...