Image Transfer IOS - Remote Crash (PoC)

!/usr/bin/perl -w Title : Image Transfer IOS - Remote Crash Proof Of Concept Affected Versions: All Version Tested on IOS 8.4 12h143 / 2.0 Itunes link : https://itunes.apple.com/us/app/image-transfer-photo-video/id588696602?mt=8 EDB note: Might require to be run multiple times to cause DoS Author...

Tor 'strlcat_chk.c' Remote Denial of Service Vulnerability

Tor is a second-generation implementation of onion routing, used primarily for anonymous access to the Internet. A remote denial of service vulnerability exists in Tor, which allows remote attackers to exploit the vulnerability by submitting a special request to crash the affected application,...

Linux Kernel KVM 'kvm_apic_has_events()' Denial of Service Vulnerability

The Linux kernel is the kernel used by the open source operating system Linux. Linux Kernel KVM has a denial of service vulnerability in the implementation of the 'kvmapichasevents' function. Allowing a remote attacker to exploit this vulnerability could crash the system...

USN-2650-1 wpa, wpasupplicant vulnerabilities

Kostya Kortchinsky discovered multiple flaws in wpasupplicant and hostapd. A remote attacker could use these issues to cause wpasupplicant or hostapd to crash, resulting in a denial of service. CVE-2015-4141, CVE-2015-4142, CVE-2015-4143, CVE-2015-4144, CVE-2015-4145, CVE-2015-4146...

UBUNTU-CVE-2014-8176

The dtls1clearqueues function in ssl/d1lib.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h frees data structures without considering that application data can arrive between a ChangeCipherSpec message and a Finished message, which allows remote DTLS peers to cause a deni...

Viber Remote Crash Proof Of Concept

!/usr/bin/perl -w -- coding: utf-8 - + Author: Mohammad Reza Espargham + Title: Viber Remote Crash on non-printable characters + Product: Viber + Vendor: http://www.viber.com/en/ + SoftWare Link : https://itunes.apple.com/app/viber-free-phone-calls/id382617920?mt=8 + Vulnerable Versions: Viber...

USN-2627-1 t1utils vulnerability

Jakub Wilk discovered that t1utils incorrectly handled certain malformed fonts. If a user or automated system were tricked into opening a specially crafted font, a remote attacker could crash the application, leading to a denial of service, or possibly execute arbitrary code with user privileges...

virtio-win: netkvm: malformed packet can cause BSOD

It was found that the Windows Virtio NIC driver did not sufficiently sanitize the length of the incoming IP packets, as demonstrated by a packet with IP options present but the overall packet length not being adjusted to reflect the length of those options. A remote attacker able to send a...

SAP Afaria XComms Process Remote Buffer Overflow Vulnerability

SAP Afaria is a mobile device management solution. The solution supports the effective management of mobile devices, applications, and data lifecycles and ensures their security during transmission and storage. A remote buffer overflow vulnerability exists in SAP Afaria, which allows remote...

Debian DSA-3270-1 : postgresql-9.4 - security update

Several vulnerabilities have been found in PostgreSQL-9.4, a SQL database system. - CVE-2015-3165 Remote crash SSL clients disconnecting just before the authentication timeout expires can cause the server to crash. - CVE-2015-3166 Information exposure The replacement implementation of snprintf...

UBUNTU-CVE-2015-3905

Buffer overflow in the setcsstart function in t1disasm.c in t1utils before 1.39 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted font file...

[SECURITY] [DSA 3269-1] postgresql-9.1 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3269-1 [email protected] http://www.debian.org/security/ Christoph Berg May 22, 2015 http://www.debian.org/security/faq -...

Debian Security Advisory DSA 3269-1 (postgresql-9.1 - security update)

Several vulnerabilities have been found in PostgreSQL-9.1, a SQL database system. CVE-2015-3165 Remote crash SSL clients disconnecting just before the authentication timeout expires can cause the server to crash. CVE-2015-3166 Information exposure The replacement implementation of snprintf failed...

DSA-3269-1 postgresql-9.1 - security update

Bulletin has no description...

Debian: Security Advisory (DSA-3270-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

DEBIAN-CVE-2015-3885

Integer overflow in the ljpegstart function in dcraw 7.00 and earlier allows remote attackers to cause a denial of service crash via a crafted image, which triggers a buffer overflow, related to the len variable...

Unspecified Denial of Service Vulnerability in Foxit Reader/Enterprise Reader and PhantomPDF GIF Handling

Foxit Reader, Enterprise Reader and PhantomPDF are PDF file processing programs. A security vulnerability in the handling of GIF files in Foxit Reader, Enterprise Reader and PhantomPDF versions prior to 7.1.5 allows remote attackers to exploit the vulnerability to construct malicious files that c...

Oxide file picker memory misreference vulnerability

Oxide is a library that supports embedding Chromium the engine used by Google Chrome based WebView in applications. A memory misreference vulnerability exists in the file picker implementation of Oxide prior to version 1.6.5. A remote attacker could exploit this vulnerability via a specially...

UBUNTU-CVE-2015-1863

Heap-based buffer overflow in wpasupplicant 1.0 through 2.4 allows remote attackers to cause a denial of service crash, read memory, or possibly execute arbitrary code via crafted SSID information in a management frame when creating or updating P2P entries...

[ MDVSA-2015:134 ] pulseaudio

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2015:134 http://www.mandriva.com/en/support/security/ Package : pulseaudio Date : March 29, 2015 Affected: Business Server 2.0 Problem Description: Updated pulseaudio package fixes RTP remote crash vulnerability:...