functrace

functrace - A function tracer functrace is a tool that helps to analyze a binary file with dynamic instrumentation using DynamoRIO http://dynamorio.org/. These are some implemented features based on DynamoRIO: disassemble all the executed code disassemble a specific function dump if these are...

CVE-2018-8065

Flexense HTTP Server 服务器-在端口上启用 Web 服务器 来启用 Web 服务器。该模块会在 syncbrs.exe 内存区域触发用户空间写入访问冲突。导致服务器崩溃的请求数量在 200-1000 之间，具体取决于操作系统版本和系统内存。据报道，Sync Breeze Enterprise 10.6.24 版本存在漏洞。 漏洞利用 MSF 模块 PYTHON...

CVE-2023-33802

CVE-2023-33802 SumatraPDF 3.4.6 - 32ビット サービス拒否 DoS 説明 このバグでは、SumatraPDF 32ビットに入力として2つの大きなサイズのテキストファイル（first.txt & second.txt）を開いたときに現れるクラッシュに対処します。 以下のコマンドを実行するか、SumatraPDF 32ビット3.4.6で手動で両方のファイルを開くことができます。 SumatraPDF.exe first.txt second.txt WinDBGを使用した32ビット版3.4.6アプリケーションのクラッシュレポート 以下のクラッシュが発生しまし...

CVE-2023-50245

CVE-2023-50245 脆弱性概要 CVE-2023-50245 CVSS : 9.8 Dec 11, 2023 Image Viewer の脆弱性 脆弱性説明 GitHub アドバイザリ 任意アドレス書き込み脆弱性 POC 1 1404.9264: Access violation - code c0000005 first chance First chance exceptions are reported before any exception handling. This exception may be expected and handled...

Sync_Breeze_Enterprise_10_6_24_-DOS

SyncBreezeEnterprise10624-DOS Exploit Title: Sync Breeze Enterprise 10.6.24 - Denial Of Service Vulnerability Date: 03-09-2018 Exploit Author: Ege Balcı Vendor Homepage: http://www.syncbreeze.com Software Link: http://www.syncbreeze.com/setups/syncbreezeentsetupv10.6.24.exe Version: 10.6.24 Teste...

CVE-2018-12018

CVE-2018-12018 Mitre https://vulners.com/cve/CVE-2018-12018 Go Ethereum（別名geth）1.8.11以前のLESプロトコル実装におけるGetBlockHeadersMsgハンドラは、配列インデックスの整数符号エラーによりアクセス違反を引き起こす可能性があります。これにより、攻撃者はクエリのSkip値に-1を指定したパケットを送信してサービス拒否攻撃を仕掛けることができます。脆弱なリモートノードはこのような攻撃により即座にクラッシュします。これはEPoD（Ethereum Packet of...

CVE-2022-21971

CVE-2022-21971：prauthproviders 中未初始化指针的释放 根本原因 WapAuthProvider::CreateInstance 构造函数分配并初始化了一个 WapAuthProvider 对象（0x78 字节），但未能完全初始化其状态。 偏移量 0x50 处的指针未初始化，并在调用析构函数时被释放（在 WapAuthProvider::WapAuthProvider 中）： prauthproviders!WapAuthProvider::WapAuthProvider+0x38: 00007ffda91f3078 488b4b50 mov rcx,qwor...

CVE-2026-91795

Foxit PDF Editor/Reader's FileOpen plugin did not adequately validate certain encryption metadata in specially crafted PDF files. This could leave an internal pointer in an invalid state, resulting in chained read and write access violations and potentially enabling arbitrary code execution...

Astra Linux – Vulnerability in binutils

The readelf.c file in GNU Binutils 2.32 contains an integer overflow vulnerability that allows attackers to trigger a write access violation in the byteputlittleendian function in elfcomm.c through an ELF file, as demonstrated by readelf...

PT-2026-70619

Name of the Vulnerable Software and Affected Versions Microsoft Office Word affected versions not specified Description An out-of-bounds read exists in Microsoft Office Word, which allows an unauthorized attacker to disclose sensitive information locally and affect the system. An out-of-bounds re...

PT-2026-69794

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A slab-use-after-free issue exists in the Bluetooth MGMT component. The MGMT OP LOAD CONN PARAM operation queues the conn update sync function when a parameter update modifies an existin...

ROS-20260722-73-0029

The vulnerability of the Font component in Google Chrome and Microsoft Edge relates to reading data beyond the permitted range in memory. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

Medium: golang

Issue Overview: On Unix systems, opening a file in an os.Root improperly follows symlinks to locations outside of the Root when the final path component of the a path is a symbolic link and the path ends in /. For example, 'root.Open"symlink/"' will open "symlink" even when "symlink" is a symboli...

Microsoft Office buffer overflow vulnerability (CNVD-2026-31554)

Microsoft Office is a suite of office software that primarily provides features for document editing, spreadsheet processing, presentation creation, and enterprise collaboration. There is a buffer overflow vulnerability in Microsoft Office. This vulnerability stems from an improper validation of...

EUVD-2026-41217

An access violation in the BaseSplitterFile::Read function of Aleksoid1978 MPC-BE before commit 4341cb3 allows attackers to cause a Denial of Service DoS via a crafted MP4 file...

CVE-2026-36910

An access violation in the BaseSplitterFile::Read function of Aleksoid1978 MPC-BE before commit 4341cb3 allows attackers to cause a Denial of Service DoS via a crafted MP4 file...

CVE-2026-36910: Improper Restriction of Operations within the Bounds of a Memory Buffer

An access violation in the BaseSplitterFile::Read function of Aleksoid1978 MPC-BE before commit 4341cb3 allows attackers to cause a Denial of Service DoS via a crafted MP4 file...

CVE-2026-36910

An access violation in the BaseSplitterFile::Read function of Aleksoid1978 MPC-BE before commit 4341cb3 allows attackers to cause a Denial of Service DoS via a crafted MP4 file...

CVE-2026-36910

An access violation in the BaseSplitterFile::Read function of Aleksoid1978 MPC-BE before commit 4341cb3 allows attackers to cause a Denial of Service DoS via a crafted MP4 file...

CVE-2026-36910

The software Aleksoid1978 MPC-BE (versions prior to commit 4341cb3 ) contains an access violation within the BaseSplitterFile::Read function. This vulnerability allows an attacker to trigger a Denial of Service (DoS) by providing a crafted MP4 file . Exploitation details are not provided in the d...