55 matches found
CVE-2012-0828: Out-of-bounds Write
Heap-based buffer overflow in Xchat-WDK before 1499-4 2012-01-18 xchat 2.8.6 on Maemo architecture could allow remote attackers to cause a denial of service xchat client crash or execute arbitrary code via a UTF-8 line from server containing characters outside of the Basic Multilingual Plane BMP...
KsDumper - Dumping Processes Using The Power Of Kernel Space
I always had an interest in reverse engineering. A few days ago I wanted to look at some game internals for fun, but it was packed & protected by EAC EasyAntiCheat. This means its handle were stripped and I was unable to dump the process from Ring3. I decided to try to make a custom driver that...
NVIDIA Driver - Unchecked Write to User-Provided Pointer in Escape 0x600000D Exploit
Exploit for windows platform in category dos / poc Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=911 The DxgkDdiEscape handler for 0x600000D passes an unchecked user provided pointer as the destination for a memcpy call. This leads to kernel memory corruption. Win 10 x64 372.5...
NVIDIA Driver - Unchecked Write to User-Provided Pointer in Escape 0x600000D
NVIDIA Driver - Unchecked Write to User-Provided Pointer in Escape 0x600000D Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=911 The DxgkDdiEscape handler for 0x600000D passes an unchecked user provided pointer as the destination for a memcpy call. This leads to kernel memory...
ESA-2014-180: EMC Documentum Web Development Kit Multiple Vulnerabilities
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2014-180: EMC Documentum Web Development Kit Multiple Vulnerabilities EMC Identifier: ESA-2014-180 CVE Identifier: CVE-2014-4635, CVE-2014-4636, CVE-2014-4637, CVE-2014-4638, CVE-2014-4639 Severity Rating: See below for individual scores for each...
Design/Logic Flaw
EMC Documentum Web Development Kit WDK before 6.8 allows remote attackers to conduct frame-injection attacks and obtain sensitive information via unspecified vectors...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in EMC Documentum Web Development Kit WDK before 6.8 allows remote attackers to hijack the authentication of arbitrary users for requests that perform Docbase operations...
CVE-2014-4637
EMC Documentum Web Development Kit (WDK) prior to version 6.8 contains a URL Redirection vulnerability (CVE-2014-4637). The issue arises from an unvalidated parameter allowing a remote attacker to redirect users to arbitrary sites, enabling phishing-like redirects. ESA-2014-180 summarizes related...
CVE-2014-4636
EMC Documentum Web Development Kit (WDK) prior to version 6.8 is affected by a Cross-Site Request Forgery (CSRF) vulnerability (CVE-2014-4636). The issue allows an attacker to trick authenticated users into performing Docbase operations with their privileges by visiting a malicious link or page, ...
CVE-2014-4639
CVE-2014-4639 affects EMC Documentum Web Development Kit (WDK) before 6.8. The issue is insufficient randomness in a Webtop component parameter, enabling remote attackers to predict the parameter and carry out phishing via brute-force attempts. The ESA-2014-180 advisory lists this under multiple ...
CVE-2014-4635
EMC Documentum Web Development Kit (WDK) before 6.8 contains multiple Cross-Site Scripting (XSS) vulnerabilities (CVE-2014-4635). The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, potentially impacting users in the context of authenticated sessions....
CVE-2014-4638
EMC Documentum Web Development Kit (WDK) prior to version 6.8 contains a frame-injection vulnerability (CVE-2014-4638). The issue can allow remote attackers to induce the user to load an attacker-controlled page in a frame and potentially harvest sensitive information, with the documented base CV...
CVE-2014-4635
Multiple cross-site scripting XSS vulnerabilities in EMC Documentum Web Development Kit WDK before 6.8 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2014-4637
Open redirect vulnerability in EMC Documentum Web Development Kit WDK before 6.8 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via an unspecified parameter...
CVE-2014-4639
EMC Documentum Web Development Kit WDK before 6.8 does not properly generate random numbers for a certain parameter related to Webtop components, which makes it easier for remote attackers to conduct phishing attacks via brute-force attempts to predict the parameter value...
CVE-2014-4639: Undefined Security Weakness
EMC Documentum Web Development Kit WDK before 6.8 does not properly generate random numbers for a certain parameter related to Webtop components, which makes it easier for remote attackers to conduct phishing attacks via brute-force attempts to predict the parameter value...
CVE-2014-4637: Undefined Security Weakness
Open redirect vulnerability in EMC Documentum Web Development Kit WDK before 6.8 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via an unspecified parameter...
CVE-2014-4636: Cross-Site Request Forgery (CSRF)
Cross-site request forgery CSRF vulnerability in EMC Documentum Web Development Kit WDK before 6.8 allows remote attackers to hijack the authentication of arbitrary users for requests that perform Docbase operations...
CVE-2014-4638: Exposure of Sensitive Information to an Unauthorized Actor
EMC Documentum Web Development Kit WDK before 6.8 allows remote attackers to conduct frame-injection attacks and obtain sensitive information via unspecified vectors...
