314 matches found
QEMU: block: iscsi: OOB heap access via an unexpected response of iSCSI Server
An out-of-bounds heap buffer access flaw was found in the way the iSCSI Block driver in QEMU handled a response coming from an iSCSI server while checking the status of a Logical Address Block LBA in an iscsicoblockstatus routine. A remote user could use this flaw to crash the QEMU process,...
CVE-2019-0040
On Junos OS, rpcbind should only be listening to port 111 on the internal routing instance IRI. External packets destined to port 111 should be dropped. Due to an information leak vulnerability, responses were being generated from the source address of the management interface e.g. fxp0 thus...
The vulnerability of Google Chrome’s browser, related to security elements, allows a hacker to bypass the site’s isolation protection by using a specially created HTML page.
The vulnerability of Google Chrome relates to errors in processing URL addresses for blob objects during page isolation. Exploiting this vulnerability allows a malicious actor, operating remotely, to circumvent page isolation protection by using a specially created HTML page...
The vulnerability of the read_reloc function in the GNU Binutils development environment allows a hacker to trigger a service failure.
The vulnerability of the readreloc function in the reloc.c programming tool of the GNU Binutils is related to memory addressing errors. Exploiting this vulnerability can allow an attacker to cause a service failure...
WebRTC - VP9 Processing Use-After-Free Exploit
Exploit for multiple platform in category dos / poc There is a use-after-free in VP9 processing in WebRTC. In the method RtpFrameReferenceFinder::ManageFrameVp9 the following code occurs: auto gofinfoit = gofinfo.findcodecheader.temporalidx == 0 ? codecheader.tl0picidx - 1 : codecheader.tl0picidx...
Microsoft Security Servicing Criteria for Windows
One of our goals in the Microsoft Security Response Center MSRC is to be more transparent with security researchers and our customers on the criteria we use for determining when we intend to address a reported vulnerability through a security update. Our belief is that improving transparency on...
Security Bulletin: ISC DHCP vulnerability affects TS4500 Tape Library (CVE-2018-5732)
Summary The TS4500 Tape Library may be vulnerable to a denial of service attack if dynamic addressing DHCP is used. Vulnerability Details CVEID: CVE-2018-5732 DESCRIPTION: ISC DHCP is vulnerable to a denial of service, caused by a buffer overflow in dhclient. By sending a specially crafted...
PoC
Scripts for porting debug symbol information idb2patriprel...
Microsoft Outlook Information Disclosure Vulnerability
An information disclosure vulnerability exists in Outlook when a message is opened. This vulnerability could potentially result in the disclosure of sensitive information to a malicious site. To exploit the vulnerability, an attacker would have to send a malicious email to a user and convince the...
CVE-2018-0901
The Windows kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server 2016 and Windows Server, version 1709 allows an information disclosure vulnerability due to the way...
CVE-2018-0748
The Windows kernel in Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability due to the way memory...
PT-2018-9048 · Microsoft · Windows 8.1 +7
Name of the Vulnerable Software and Affected Versions: Windows versions prior to the fixed version Description: The issue allows an elevation of privilege due to the way memory addresses are handled. An elevation-of-privilege vulnerability allows attackers to affect the system. Recommendations: F...
WS-Attacker v1.8 - Modular Framework For Web Services Penetration Testing
WS-Attacker is a modular framework for web services penetration testing. It is developed by the Chair of Network and Data Security, Ruhr University Bochum http://nds.rub.de/ and the Hackmanit GmbH http://hackmanit.de/ . The basic idea behind WS-Attacker is to provide a functionality to load WSDL...
NetBox - IP Address Management (IPAM) and Data Center Infrastructure Management (DCIM) Tool
NetBox is an IP address management IPAM and data center infrastructure management DCIM tool. Initially conceived by the network engineering team at DigitalOcean , NetBox was developed specifically to address the needs of network and infrastructure engineers. NetBox runs as a web application atop...
The vulnerability of the Flash Player software allows attackers to carry out attacks related to memory cell addressing errors.
The vulnerability of the Flash Player software is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to perform attacks involving memory cell address errors...
The vulnerability of the Adobe AIR software platform allows attackers to carry out attacks related to memory cell addressing errors.
The vulnerability of the Adobe AIR software platform is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to perform attacks related to memory cell address corruption remotely...
Web Services Penetration Testing: WS-Attacker
WS-Attacker is a modular framework for web services penetration testing. It is developed by the Chair of Network and Data Security, Ruhr University Bochum http://nds.rub.de/ and the Hackmanit GmbH http://hackmanit.de/ . The basic idea behind WS-Attacker is to provide a functionality to load WSDL...
D-Link DSP-W w110 v1.05b01 - Multiple Vulnerabilities
Exploit for hardware platform in category web applications Exploit Title: D-Link DSP-W Arbitrary Arbitrary file upload Date: 30/06/2015 Exploit Author: DNO Vendor Homepage: link Version: w110 v1.05b01 Tested on: linux CVE : N/A ======================================== the only 'filtering' on this...
D-Link DSP-W w110 v1.05b01 - Multiple Vulnerabilities
Exploit Title: D-Link DSP-W Arbitrary Arbitrary file upload Date: 30/06/2015 Exploit Author: DNO Vendor Homepage: link Version: w110 v1.05b01 Tested on: linux CVE : N/A ======================================== the only 'filtering' on this resources appears to be a sprintf call which statically...