37 matches found
Malicious Package
Overview appdynamics-zmq is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package w...
CVE-2020-36400
CVE-2020-36400 affects ZeroMQ libzmq 4.3.3 and is a heap-based buffer overflow in zmq::tcp_read. Connected sources describe a remote, unauthenticated attacker triggering a buffer overflow on the zeromq server when receiving crafted input, potentially impacting availability, data integrity, and co...
CVE-2020-36400
ZeroMQ libzmq 4.3.3 has a heap-based buffer overflow in zmq::tcpread, a different vulnerability than CVE-2021-20235...
OSV-2020-1887 Heap-buffer-overflow in zmq::tcp_read
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26042 Crash type: Heap-buffer-overflow WRITE Crash state: zmq::tcpread zmq::streamenginebaset::read zmq::streamenginebaset::ineventinternal...
OSV-2020-910 Use-of-uninitialized-value in zmq::stream_engine_base_t::out_event
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24200 Crash type: Use-of-uninitialized-value Crash state: zmq::streamenginebaset::outevent zmq::epollt::loop zmq::workerpollerbaset::workerroutine...
OSV-2020-784 Bad-cast to zmq::session_base_t from invalid vptr
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24018 Crash type: Bad-cast Crash state: Bad-cast to zmq::sessionbaset from invalid vptr zmq::streamenginebaset::ineventinternal zmq::streamenginebaset::inevent...
libzmq:socket_connect_fuzzer: Heap-buffer-overflow in zmq::tcp_read
Project: https://github.com/zeromq/libzmq.git Detailed Report: https://oss-fuzz.com/testcase?key=5765226510417920 Project: libzmq Fuzzing Engine: honggfuzz Fuzz Target: socketconnectfuzzer Job Type: honggfuzzasanlibzmq Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash Address:...
AIL Framework - Framework for Analysis of Information Leaks
AIL is a modular framework to analyse potential information leaks from unstructured data sources like pastes from Pastebin or similar services or unstructured data streams. AIL framework is flexible and can be extended to support other functionalities to mine or process sensitive information e.g...
ZeroMQ libzmq v2_decoder Integer Overflow (CVE-2019-6250)
An integer overflow vulnerability has been reported in ZeroMQ libzmq. The vulnerability is due to improper validation of user-supplied data in the zmq::v2decodert::sizeready function when handling ZMTP version 2 messages...
IDAsec - IDA plugin for reverse-engineering and dynamic interactions with the Binsec platform
IDA plugin for reverse-engineering and dynamic interactions with the Binsec platform Features Decoding an instruction in DBA IR Loading execution traces generated by Pinsec Triggering analyzes on Binsec and retrieving results Dependencies protobuf ZMQ capstone for trace disassembly graphviz to dr...
Logpoint < 5.6.4 - Root Remote Code Execution
Exploit Title: Unauthenticated remote root code execution on logpoint 5.6.4 Date: 11/06/17 Exploit Author: agix Vendor Homepage: https://www.logpoint.com Version: logpoint 5.6.4 Tested on: 5.6.2 Vendor contact 19/04 Exploit details sent to the vendor 24/04 Patch in test mode 05/05 Patch release t...
CVE-2016-8598
Buffer overflow in the zmq interface in cspifzmqhub.c in the libcsp library v1.4 and earlier allows hostile computers connected via a zmq interface to execute arbitrary code via a long packet...
CVE-2016-8598
Buffer overflow in the zmq interface in cspifzmqhub.c in the libcsp library v1.4 and earlier allows hostile computers connected via a zmq interface to execute arbitrary code via a long packet...
Buffer overflow
Buffer overflow in the zmq interface in cspifzmqhub.c in the libcsp library v1.4 and earlier allows hostile computers connected via a zmq interface to execute arbitrary code via a long packet...
CVE-2016-8598
Buffer overflow in the zmq interface in cspifzmqhub.c in the libcsp library v1.4 and earlier allows hostile computers connected via a zmq interface to execute arbitrary code via a long packet...
CVE-2016-8598
CVE-2016-8598 is a buffer overflow in the zmq interface (csp_if_zmqhub.c) of the libcsp library, affecting v1.4 and older. A long packet sent via a zmq connection can allow hostile machines to execute arbitrary code. The vulnerability is documented across multiple sources, and remediation is to u...
