CVE-2020-13576

A code execution vulnerability exists in the WS-Addressing plugin functionality of Genivia gSOAP 2.8.107. A specially crafted SOAP request can lead to remote code execution. An attacker can send an HTTP request to trigger this vulnerability...

Integer Overflow or Wraparound

A code execution vulnerability exists in the WS-Addressing plugin functionality of Genivia gSOAP. A specially crafted SOAP request can lead to remote code execution. An attacker can send an HTTP request to trigger this vulnerability...

CVE-2020-13576

CVE-2020-13576 affects Genivia gSOAP 2.8.107, where the WS-Addressing plugin can be exploited by a crafted SOAP request to achieve remote code execution. Public documents confirm the root cause is in the WS-Addressing plugin, enabling code execution on a networked host. Debian LTS advisories show...

Genivia gSOAP Denial of Service Vulnerability

Genivia gSOAP is a C/C++ software development toolkit with automatic coding capabilities from Genivia, USA. A denial of service vulnerability exists in the WS-Addressing plugin functionality of Genivia gSOAP 2.8.107. An attacker can exploit this vulnerability by sending a specially crafted SOAP...

Genivia gSOAP 代码问题漏洞

Genivia gSOAP is a C/C++ software development toolkit with automatic coding capabilities from Genivia, USA. A denial of service vulnerability exists in the WS-Addressing plugin functionality of Genivia gSOAP 2.8.107. An attacker can exploit this vulnerability by sending a specially crafted SOAP...

Genivia gSOAP WS-Addressing plugin denial-of-service vulnerability

Summary A denial-of-service vulnerability exists in the WS-Addressing plugin functionality of Genivia gSOAP 2.8.107. A specially crafted SOAP request can lead to denial of service. An attacker can send an HTTP request to trigger this vulnerability. Tested Versions Genivia gSOAP 2.8.107 Product UR...

Genivia gSOAP 输入验证错误漏洞

Genivia gSOAP is a C/C++ software development kit with automatic coding capabilities. A security vulnerability exists in the Genivia gSOAP WS-Addressing plugin functionality, which can be exploited by an attacker to achieve remote code execution by sending a specially crafted SOAP request...

Genivia gSOAP WS-Addressing plugin code execution vulnerability

Summary A code execution vulnerability exists in the WS-Addressing plugin functionality of Genivia gSOAP 2.8.107. A specially crafted SOAP request can lead to remote code execution. An attacker can send an HTTP request to trigger this vulnerability. Tested Versions Genivia gSOAP 2.8.107 Product...

Using LL-HLS with byte-range addressing to achieve interoperability in low latency streaming

Introduction HTTP Adaptive Segmented HAS streaming began to be used at scale from 2008 to 2012, with the advent of Move Networks, Microsoft Smooth Streaming, Apple HLS, Adobe HDS, and MPEG DASH. With the typical 10s segment durations of the day, livestream latencies measuring latency as the time...

Using LL-HLS with Byte-Range Addressing to Achieve Interoperability in Low Latency Streaming

HTTP Adaptive Segmented HAS streaming began to be used at scale from 2008 to 2012, with the advent of Move Networks, Microsoft Smooth Streaming, Apple HLS, Adobe HDS, and MPEG DASH. With the typical 10s segment durations of the day, livestream latencies measuring latency as the time from an actio...

PT-2020-6541 · Gsoap +1 · Gsoap +1

Name of the Vulnerable Software and Affected Versions: gSOAP version 2.8.107 Description: The issue is related to an integer overflow in the WS-Addressing plugin of the gSOAP software development environment when processing SOAP requests. This can be exploited by a remote attacker to execute...

PT-2020-6524 · Genivia · Gsoap

Name of the Vulnerable Software and Affected Versions: Genivia gSOAP version 2.8.107 Description: A denial-of-service issue exists in the WS-Addressing plugin functionality of Genivia gSOAP. This is due to errors in handling SOAP requests, which can be triggered by a specially crafted SOAP reques...

Remote code execution

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory. An attacker who successfully exploited this vulnerability could execute arbitrary code on a victim system. An attacker could exploit this vulnerability by enticing a victim to...

SUSE-SU-2020:1764-1 Security update for the Linux Kernel (Live Patch 33 for SLE 12 SP2)

This update for the Linux Kernel 4.4.121-92125 fixes one issue. The following security issue was fixed: - CVE-2020-10757: Fixed an issue where remaping hugepage DAX to anon mmap could have caused user PTE access bsc1172437...

CVE-2020-9773

CVE-2020-9773 describes an information disclosure in iOS/iPadOS 14.0 where a malicious app may identify other installed apps. The issue is stated to be mitigated by improved handling of icon caches and is fixed in iOS 14.0 and iPadOS 14.0. Connected sources corroborate the effect and resolution, ...

QEMU: block: iscsi: OOB heap access via an unexpected response of iSCSI Server

An out-of-bounds heap buffer access flaw was found in the way the iSCSI Block driver in QEMU handled a response coming from an iSCSI server while checking the status of a Logical Address Block LBA in an iscsicoblockstatus routine. A remote user could use this flaw to crash the QEMU process,...

CVE-2019-0040

On Junos OS, rpcbind should only be listening to port 111 on the internal routing instance IRI. External packets destined to port 111 should be dropped. Due to an information leak vulnerability, responses were being generated from the source address of the management interface e.g. fxp0 thus...

The vulnerability of Google Chrome’s browser, related to security elements, allows a hacker to bypass the site’s isolation protection by using a specially created HTML page.

The vulnerability of Google Chrome relates to errors in processing URL addresses for blob objects during page isolation. Exploiting this vulnerability allows a malicious actor, operating remotely, to circumvent page isolation protection by using a specially created HTML page...

The vulnerability of the read_reloc function in the GNU Binutils development environment allows a hacker to trigger a service failure.

The vulnerability of the readreloc function in the reloc.c programming tool of the GNU Binutils is related to memory addressing errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

WebRTC - VP9 Processing Use-After-Free Exploit

Exploit for multiple platform in category dos / poc There is a use-after-free in VP9 processing in WebRTC. In the method RtpFrameReferenceFinder::ManageFrameVp9 the following code occurs: auto gofinfoit = gofinfo.findcodecheader.temporalidx == 0 ? codecheader.tl0picidx - 1 : codecheader.tl0picidx...