The vulnerability of the microprogramming software of Siemens Simatic S7-1200 programmable logic controllers allows a malicious actor to cause malfunctions during maintenance operations.

The software of the Siemens SIMATIC S7-1200 programmable logic controller contains a vulnerability. When this vulnerability is exploited, the device can be switched into an emergency mode by sending a special TCP/IP packet to port 102. This emergency mode persists until a hardware restart is...

Vulnerability of Cisco IOS software, which allows a malicious actor to trigger a service failure

The vulnerability in Cisco IOS and IOS XE allows malicious actors operating remotely to trigger a service failure device reboot through improperly generated IKEv2 packets...

The vulnerability of the BIND Server software allows a malicious attacker to compromise the accessibility of protected information.

The vulnerability exists in libdns within ISC BIND due to incorrect processing of EDNS parameters. Exploiting this vulnerability allows malicious actors operating remotely to trigger a service failure a REQUIRE validation error and termination of the daemon using a specially crafted package...

Vulnerability of Cisco IOS software, which allows a malicious actor to trigger a service failure

The vulnerability in Cisco IOS and IOS XE allows malicious actors operating remotely to trigger a service failure by using improperly crafted IPv6 packets. This causes excessive memory consumption for input/output operations and triggers a device restart...

openstack-swift: Proxy to server DoS through Large Objects

A memory-leak issue was found in OpenStack Object Storage swift, in the proxy-to-server connection. An OpenStack-authenticated attacker could remotely trigger this flaw to cause denial of service through excess memory consumption...

UBUNTU-CVE-2015-5820

WebKit in Apple iOS before 9 allows remote attackers to trigger a dialing action via a crafted 1 tel://, 2 facetime://, or 3 facetime-audio:// URL...

squid -- TLS/SSL parser denial of service vulnerability

Amos Jeffries, release manager of the Squid-3 series, reports: Vulnerable versions are 3.5.0.1 to 3.5.8 inclusive, which are built with OpenSSL and configured for "SSL-Bump" decryption. Integer overflows can lead to invalid pointer math reading from random memory on some CPU architectures. In the...

The Ghost vulnerability the GHOST remote using the EXP-bug warning-the black bar safety net

This article demonstrates one of the Ghost vulnerability the GHOST of EXP, this EXP is Metasploit a module. This Metasploit module can be remote exploit CVE-2 0 1 5-0 2 3 5 out of glibc library gethostbyname function heap overflow vulnerability vulnerability, the goal is to run the Exim mail...

XnView 1.98 Denial of Service Vulnerability PoC

No description provided by source. done by BraniX found: 2011.06.19 published: 2011.06.20 tested on: Windows XP SP3 Home Edition tested on: Windows XP SP3 Professional App: XnView 1.98 latest version App Url: http://www.xnview.com xnview.exe MD5: ebe200d81a095d296e94e887dc40e607 Xjp2.dll MD5:...

Updated python-pymongo packages fix CVE-2013-2132

PyMongo before 2.5.2 is prone to a denial-of-service vulnerability. An attacker can remotely trigger a NULL pointer dereference causing MongoDB to crash CVE-2013-2132...

Xpient POS / Iris 3.8 Cash Drawer Operation Remote Trigger

Core Security - Corelabs Advisory http://corelabs.coresecurity.com/ Xpient Cash Drawer Operation Vulnerability 1. Advisory Information Title: Xpient Cash Drawer Operation Vulnerability Advisory ID: CORE-2013-0517 Advisory URL:...

Fedora 12 : krb5-1.7.1-9.fc12 (2010-8805)

Shawn Emery discovered a remotely-triggerable NULL pointer dereference in the Kerberos GSS-API library which could be used to cause GSS-API-authenticated services to crash. This update incorporates fixes to instead correctly detect the error and return an error code. Note that Tenable Network...

DSA-1695-1 ruby1.8 ruby1.9 - denial of service

Bulletin has no description...

Vinagre < 2.24.2 show_error() Remote Format String PoC

Exploit for unknown platform in category dos / poc ====================================================== Vinagre 2.24.2 showerror Remote Format String PoC ====================================================== -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs...

Vinagre 2.24.2 - show_error() Remote Format String (PoC)

Vinagre 2.24.2 - showerror Remote Format String PoC -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Vinagre showerror format string vulnerability 1. Advisory Information Title: Vinagre showerror format string...

DEBIAN-CVE-2008-5183

cupsd in CUPS 1.3.9 and earlier allows local users, and possibly remote attackers, to cause a denial of service daemon crash by adding a large number of RSS Subscriptions, which triggers a NULL pointer dereference. NOTE: this issue can be triggered remotely by leveraging CVE-2008-5184...

nf}_conntrack_sctp: remotely triggerable NULL ptr dereference

The sctpnew function in 1 ipconntrackprotosctp.c and 2 nfconntrackprotosctp.c in Netfilter in Linux kernel 2.6 before 2.6.20.13, and 2.6.21.x before 2.6.21.4, allows remote attackers to cause a denial of service by causing certain invalid states that trigger a NULL pointer dereference...

Re: GDI+ and Internet Explorer question

IE has its own image decoders for many image types jpeg, ico, etc. You can trigger this bug remotely by renaming your .ico to .emf or .wmf, which forces it be opened by the Picture and Fax Viewer using GDI+. -HD On Saturday 09 June 2007 06:40, [email protected] wrote: fails to crash my Internet...

dsock 1.3 - 'buf' Remote Buffer Overflow (PoC)

A buffer overflow in variable 'buf' exists due to insufficient validation of variable 'name' in function torresolve line 218 of software at http://www.monkey.org/dugsong/dsocks/ url PoC: DaveK At a quick glance, this looks like it could indeed be overflowed quite trivially by passing an overlong...

Microsoft Windows Server 2000 - Multiple COM Object Instantiation Code Execution Vulnerabilities

source: https://www.securityfocus.com/bid/19636/info Microsoft Windows 2000 is prone to multiple memory-corruption vulnerabilities that are related to the instantiation of COM objects. These issues may be remotely triggered through Internet Explorer. The vulnerabilities arise because of the way...