DEBIAN-CVE-2021-40568

A buffer overflow vulnerability exists in Gpac through 1.0.1 via a malformed MP4 file in the svcparseslice function in avparsers.c, which allows attackers to cause a denial of service, even code execution and escalation of privileges...

PT-2022-11262 · Gpac · Gpac

Name of the Vulnerable Software and Affected Versions: Gpac version 1.0.1 Description: The issue is related to a double-free vulnerability in the avc compute poc function in av parsers.c, which can be exploited by attackers to cause a denial of service, potentially leading to code execution and...

CVE-2021-40565

A Segmentation fault caused by a null pointer dereference vulnerability exists in Gpac through 1.0.1 via the gfavcparsenalu function in avparsers.c when using mp4box, which causes a denial of service...

DEBIAN-CVE-2021-40565

A Segmentation fault caused by a null pointer dereference vulnerability exists in Gpac through 1.0.1 via the gfavcparsenalu function in avparsers.c when using mp4box, which causes a denial of service...

DEBIAN-CVE-2021-40564

A Segmentation fault caused by null pointer dereference vulnerability eists in Gpac through 1.0.2 via the avcparseslice function in avparsers.c when using mp4box, which causes a denial of service...

UBUNTU-CVE-2021-40565

A Segmentation fault caused by a null pointer dereference vulnerability exists in Gpac through 1.0.1 via the gfavcparsenalu function in avparsers.c when using mp4box, which causes a denial of service...

Purple Fox Rootkit Dropped by Malicious Telegram Installers

A malicious Telegram instant-messaging app installer scurries past a slew of antivirus AV engines to deliver Purple Fox malware, evading detection by separating the attack into bite-sized morsels that fly under the radar. In a Monday report, Minerva Labs said that the attack evades detection by A...

Skrull - A Malware DRM, That Prevents Automatic Sample Submission By AV/EDR And Signature Scanning From Kernel

Skrull is a malware DRM, that prevents Automatic Sample Submission by AV/EDR and Signature Scanning from Kernel. It generates launchers that can run malware on the victim using the Process Ghosting technique. Also, launchers are totally anti-copy and naturally broken when got submitted. It's a...

av-tacna.staana.edu.pe Cross Site Scripting vulnerability OBB-2314417

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Registry-Recon - Cobalt Strike Aggressor Script That Performs System/AV/EDR Recon

Cobalt Strike Aggressor Script that Performs System/AV/EDR Recon. Author: Jess Hires Description As a red-team practitioner, we are often using tools that attempt to fingerprint details about a compromised system, preferably in the most stealthy way possible. Some of our usual tooling for this...

CVE-2020-23889

A User Mode Write AV starting at Editor!TMethodImplementationIntercept+0x4189c6 of WildBit Viewer v6.6 allows attackers to cause a denial of service DoS via a crafted ico file...

Design/Logic Flaw

A User Mode Write AV in Editor!TMethodImplementationIntercept+0x3c3682 of WildBit Viewer v6.6 allows attackers to cause a denial of service DoS via a crafted tiff file...

Design/Logic Flaw

A User Mode Write AV in Editor+0x5cd7 of WildBit Viewer v6.6 allows attackers to cause a denial of service DoS via a crafted tiff file...

CVE-2020-23901

Summary (CVE-2020-23901) : The vulnerability affects WildBit Viewer v6.6. According to the provided reports, the issue is a User Mode Write AV in Editor+0x5d15 that can be triggered by a crafted tga file , leading to a denial of service (DoS) . Connected documents corroborate a DoS impact from a ...

CVE-2020-23899

WildBit Viewer v6.6 is affected by a buffer-related vulnerability in Editor+0x5f91 that allows a crafted TGA file to cause a denial of service. The issue is documented across multiple sources (CNVD/CNNVD/Red Hat entry) as a buffer overflow/AV leading to DoS. Affected component: Editor+0x5f91 in W...

CVE-2020-23898

CVE-2020-23898 affects WildBit Viewer v6.6, where a vulnerability in the Editor component at offset 0x5ea2 allows a user-mode write access that can cause a denial of service when processing specially crafted TGA files. The CNVD entry also describes a buffer overflow in Editor 0x5ea2, aligning wit...

CVE-2020-23895

CVE-2020-23895 affects WildBit Viewer 6.6, with a buffer overflow in Editor+0x76af that can be triggered by a specially crafted TIFF file to cause a denial of service. The vulnerability is documented across multiple feeds (NVD/Red Hat/CNVD/CVE lists, etc.), confirming the same root cause and impa...

CVE-2020-23894

A User Mode Write AV in ntdll!RtlpCoalesceFreeBlocks+0x268 of WildBit Viewer v6.6 allows attackers to cause a denial of service DoS via a crafted tiff file...

CVE-2020-23894

WildBit Viewer v6.6 is affected by CVE-2020-23894 due to a User Mode Write AV in ntdll!RtlpCoalesceFreeBlocks+0x268, enabling denial of service via a specially crafted TIFF file. The Red Hat advisory and CNVD/CNNVD entries corroborate the same root cause and impact (DoS). Public details in the pr...

CVE-2020-23893

CVE-2020-23893 affects WildBit Viewer v6.6. A User Mode Write AV in Editor!TMethodImplementationIntercept+0x3c3682 allows a crafted TIFF file to cause a denial of service. The payload is a local impact (due to local access vector) with availability impact reported as High in some references; conc...