AnMing MP3 CD Burner 2.0 - Denial of Service (PoC)

Exploit Title: AnMing MP3 CD Burner 2.0 Local Dos Exploit Date: 25.04.2019 Vendor Homepage:http://www.ddz1977.com/ Software Link: https://files.downloadnow.com/s/software/10/56/16/74/anmingsetup.zip?token=1556228877063f2dc0aed064ee5d13374d8509661c&fileName=anmingsetup.zip Exploit Author: Achilles...

Apache HTTP Server register_hooks() Auth Bypass

The vulnerability of the registerhooks function modauthmellon in the Apache HTTP Server is related to the possibility of bypassing authentication by executing a special SAML ECP. Exploiting this vulnerability allows a malicious actor to circumvent existing access control mechanisms by using...

PT-2019-5797

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.2 Description The issue is related to errors in saving and restoring the state of register masks for power save functionality, specifically PNV POWERSAVE AMR, PNV POWERSAVE UAMOR, and PNV POWERSAVE AMOR, in the...

CVE-2018-18068

The ARM-based hardware debugging feature on Raspberry Pi 3 module B+ and possibly other devices allows non-secure EL1 code to read/write any EL3 the highest privilege level in ARMv8 memory/register via inter-processor debugging. With a debug host processor A running in non-secure EL1 and a debug...

Magic ISO Maker 5.5(build 281) - Serial Code Denial of Service (PoC)

Magic ISO Maker 5.5build 281 - Serial Code Denial of Service PoC -- coding: utf-8 -- Exploit Title: Magic Iso Maker 5.5build 281 - "Serial Code" Denial of Service PoC Date: 03/04/2019 Author: Alejandra Sánchez Vendor Homepage: http://www.magiciso.com Software Link:...

PT-2019-14470

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.0.6 Description A memory leak issue was discovered in the Linux kernel. This issue occurs when idr alloc fails in genl register family in net/netlink/genlink.c. Recommendations For versions prior to 5.0.6, upda...

PT-2019-4499 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.1 Description: The issue is related to a memory leak in the feat register sp function, which may cause denial of service. This is due to an uncontrolled resource consumption. Recommendations: For Linux kernel...

CVE-2018-19524

An issue was discovered on Shenzhen Skyworth DT741 Converged Intelligent Terminal G/EPON+IPTV SDOTBGN1, DT721-cb SDOTBGN1, and DT741-cb SDOTBGN1 devices. A long password to the Webpasswd function allows remote attackers to cause a denial of service segmentation fault or achieve unauthenticated...

CVE-2018-19524

An issue was discovered on Shenzhen Skyworth DT741 Converged Intelligent Terminal G/EPON+IPTV SDOTBGN1, DT721-cb SDOTBGN1, and DT741-cb SDOTBGN1 devices. A long password to the Webpasswd function allows remote attackers to cause a denial of service segmentation fault or achieve unauthenticated...

Security Updates for Windows 10 / Windows Server 2016 / Windows Server 2019 (March 2019) (Spectre) (Meltdown) (Foreshadow)

The remote Windows host is missing a security update. It is, therefore, missing microcode updates to address the following vulnerabilities: - Spectre Variant 3a CVE-2018-3640: Rogue System Register Read RSRE. - Spectre Variant 4 CVE-2018-3639: Speculative Store Bypass SSB - L1TF CVE-2018-3620,...

WinMPG Video Convert 9.3.5 - Denial of Service

WinMPG Video Convert 9.3.5 - Denial of Service Exploit Title: WinMPG Video Convert Local Dos Exploit Date: 15.03.2019 Vendor Homepage:http://www.winmpg.com Software Link: http://www.winmpg.com/down/WinMPGVideoConvert.zip Exploit Author: Achilles Tested Version: 9.3.5 and older ones Tested on:...

PT-2019-17861

Name of the Vulnerable Software and Affected Versions Nablarch versions 5 through 5u13 Description The issue is related to an incomplete cryptography implementation in the data store function of Nablarch, which uses a hidden tag. This allows remote attackers to obtain stored data information,...

Test IE/EDGE collapse vulnerability of the availability-vulnerability warning-the black bar safety net

Due to the network attack technology the rapid development of the trend, many browser developers are also in their product was added similar to antivirus like features to help protect users from security threats, such as Internet Explorer IEand Edge compared to the previous, in addition to the in...

Integer overflow

In registerapp of btifhd.cc, there is a possible memory corruption due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android-8.0 Android-8.1...

PT-2019-16011

Name of the Vulnerable Software and Affected Versions Android versions 8.0 through 9 Description The issue is related to a possible memory corruption due to an integer overflow in the register app function of btif hd.cc. This could lead to local escalation of privilege with no additional executio...

PT-2019-5418

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.0 Description An issue in the Linux kernel is related to a use-after-free vulnerability in the mdiobus register function, located in drivers/net/phy/mdio bus.c. This function calls put device, which triggers a...

Joomla DT Register 4.0.3 SQL Injection

Exploit Title : Joomla DT Register Components 4.0.3 SQL Injection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 14/02/2019 Vendor Homepage : dthdevelopment.com Software Download Link :...

PT-2019-18641

Name of the Vulnerable Software and Affected Versions JForum version 2.1.8 Description The issue allows an unauthenticated, remote attacker to determine whether a specific user exists by utilizing the "create user" function. This is achieved by sending a register/check/username?username= request...

FreeBSD : FreeBSD -- System call kernel data register leak (683c714d-2d91-11e9-bf3e-a4badb2f4699)

The callee-save registers are used by kernel and for some of them %r8, %r10, and for non-PTI configurations, %r9 the content is not sanitized before return from syscalls, potentially leaking sensitive information. Impact : Typically an address of some kernel data structure used in the syscall...

PT-2019-9152

Name of the Vulnerable Software and Affected Versions 42Gears SureMDM versions prior to 2018-11-27 Description An issue was discovered in the registration API endpoint. An attacker can submit a GET request to "/api/register/:email", where :email is a base64 encoded e-mail address, to receive...