YXCMS has multiple vulnerabilities

Yxcms is an enterprise building system based on PHP and mysql technology. Yxcms 1.4.6 version exists stored XSS, arbitrary file deletion, file write, SQL injection vulnerability, attackers can exploit the vulnerability to obtain control of the web server...

Amazon Fire OS 'havok_write' function stack buffer overflow vulnerability

Amazon Fire OS is a set of mobile operating systems based on the Android platform from Amazon USA. A stack buffer overflow vulnerability exists in the 'havokwrite' function in the drivers/staging/havok/havok.c file in Amazon Fire OS. An attacker can exploit this vulnerability by sending a long...

Ubuntu: Security Advisory (USN-3583-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

File Write Vulnerability in Cscms v4.1.8

Cscms is a diversified content management system developed using PHP5+MYSQL as the technical basis. A file write vulnerability exists in Cscms v4.1.8, which is due to the system failing to effectively filter input parameters and file paths. An attacker can use this vulnerability to inject Trojan...

Multiple Adobe Products JavaScript API Out-of-Bounds Memory Write Vulnerability

Adobe Acrobat DC for Windows and Macintosh and so on are the United States of America Odobie Adobe company based on Windows and Macintosh platform products.Adobe Acrobat DC for Windows and Macintosh is a desktop version of the PDF solution; Acrobat Reader DC for Windows and Macintosh is a set of...

openSUSE Security Update : freeimage (openSUSE-2018-121)

This update for freeimage fixes one issues. This security issue was fixed : - CVE-2016-5684: Prevent out-of-bounds write vulnerability in the XMP image handling functionality. A specially crafted XMP file could have caused an arbitrary memory overwrite resulting in code execution boo1002621...

CVE-2018-0088

The CVE-2018-0088 issue affects Cisco Industrial Ethernet 4010 Series Switches running Cisco IOS Software. It stems from a diagnostic test CLI command that allows writing to device memory, enabling an authenticated local attacker (privilege level 15) to cause arbitrary code execution or a denial ...

Microsoft Edge Chakra JIT - Out-of-Bounds Write Exploit

Exploit for windows platform in category dos / poc // Here's the PoC demonstrating OOB write. function optarr, start, end for let i = start; i end; i++ if i === 10 i += 0; // -- a arri = 2.3023e-320; function main let arr = new Array100; arr.fill1.1; for let i = 0; i 1000; i++ optarr, 0, 3; optar...

K7 Antivirus Premium Arbitrary Memory Location Write Vulnerability

K7 Antivirus Premium is a suite of anti-virus software from K7 Computing India. A security vulnerability exists in K7 Antivirus Premium versions prior to 15.1.0.53. A local attacker can exploit this vulnerability with input to perform a write operation to an arbitrary memory location...

Debian DLA-1243-1 : xbmc security update

The Check Point Research Team discovered that the XBMC media center allows arbitrary file write when a malicious subtitle file is downloaded in zip format. This update requires the new dependency libboost-regex1.49. For Debian 7 'Wheezy', these problems have been fixed in version...

Debian: Security Advisory (DLA-900-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2014-4994

lib/gyazo/client.rb in the gyazo gem 1.0.0 for Ruby allows local users to write to arbitrary files via a symlink attack on a temporary file, related to time-based filenames...

CVE-2017-14964

In IKARUS anti.virus before 2.16.18, the ntguard.sys driver contains an Arbitrary Write vulnerability because of not validating input values from IOCtl 0x8300005c...

CVE-2017-14966

The IKARUS anti.virus ntguard.sys driver contains an Arbitrary Write vulnerability in all 2.x releases before 2.16.18, caused by failure to validate input values from IOCTL 0x830000c0. This allows a local attacker with access to trigger arbitrary writes, potentially compromising kernel memory. Af...

UBUNTU-CVE-2017-17509

In HDF5 1.10.1, there is an out of bounds write vulnerability in the function H5Gentdecodevec in H5Gcache.c in libhdf5.a. For example, h5dump would crash or possibly have unspecified other impact someone opens a crafted hdf5 file...

CVE-2017-8181

CVE-2017-8181 affects Huawei smartphones with MTK-based camera driver prior to Nice-AL00C00B155. The vulnerability stems from insufficient input verification in the MTK camera driver, enabling an attacker to trick a user into installing a malicious app with elevated privileges and send a specific...

UBUNTU-CVE-2017-2896

An exploitable out-of-bounds write vulnerability exists in the xlsmergedCells function of libxls 1.4. . A specially crafted XLS file can cause a memory corruption resulting in remote code execution. An attacker can send malicious XLS file to trigger this vulnerability...

CVE-2017-14961

In IKARUS anti.virus 2.16.7, the ntguard.sys driver contains an Arbitrary Write vulnerability because of not validating input values from IOCtl 0x8300000c...

Eaton ELCSoft LAD File Parsing Out-of-Bounds Write Remote Code Execution Vulnerability

The Eaton ELCSoft programmable logic control software runs on a PC and can help configure the ELC controller. Eaton ELCSoft suffers from an out-of-bounds write remote code execution vulnerability that can be exploited by an attacker to execute arbitrary code in the context of the current process...

sam2p file write vulnerability

sam2p is a UNIX command line utility program written in C++ that converts images to PDF and other formats. A file write vulnerability exists in sam2p version 0.49.3. An attacker can exploit this vulnerability to write to an illegal address...