215 matches found
AVS4YOU AVS Audio Converter 安全漏洞
AVS4YOU AVS Audio Converter is a software application from AVS4YOU Inc. It is used to convert audio files from one format to another according to your wishes and save them to your hard drive. A security vulnerability exists in AVS4YOU AVS Audio Converter version 10.3 that stems from vulnerability...
PT-2022-27166 · Unknown · Avs Audio Converter
Name of the Vulnerable Software and Affected Versions: AVS Audio Converter version 10.3 Description: The issue is related to a Buffer Overflow. There is no information provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was...
CVE-2022-44283
AVS Audio Converter 10.3 is vulnerable to Buffer Overflow...
CVE-2022-44283
CVE-2022-44283 affects AVS Audio Converter 10.3 and is described as a buffer overflow. Public metrics indicate a critical impact (CVSS v3.1: 9.8, HIGH confidentiality/Integrity/Availability, NETWORK attack vector, no user interaction). The vulnerability targets a component/stream handling within ...
CVE-2022-44283
AVS Audio Converter 10.3 is vulnerable to Buffer Overflow...
avs-sittensen.de Cross Site Scripting vulnerability OBB-3030658
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
AVS Audio Converter 10.3 Stack Overflow
Exploit Title: AVS Audio Converter 10.3 - Stack Overflow SEH Discovered by: Yehia Elghaly - Mrvar0x Discovered Date: 2022-10-16 Tested Version: 10.3.1.633 Tested on OS: Windows 7 Professional x86 pop+ret Address=005154E6 Message= 0x005154e6 : pop ecx pop ebp ret 0x04 | startnull PAGEEXECUTEREAD...
AVS Audio Converter 10.3 Stack Overflow Exploit
Exploit Title: AVS Audio Converter 10.3 - Stack Overflow SEH Discovered by: Yehia Elghaly - Mrvar0x Discovered Date: 2022-10-16 Tested Version: 10.3.1.633 Tested on OS: Windows 7 Professional x86 pop+ret Address=005154E6 Message= 0x005154e6 : pop ecx pop ebp ret 0x04 | startnull PAGEEXECUTEREAD...
GSD-2022-1005129 ASoC: Intel: avs: Fix potential buffer overflow by snprintf()
ASoC: Intel: avs: Fix potential buffer overflow by snprintf This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.4 by commit...
avs-sittensen.de Cross Site Scripting vulnerability OBB-2791986
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
avs-gp.de Cross Site Scripting vulnerability OBB-2713315
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
LDAPFragger - Command And Control Tool That Enables Attackers To Route Cobalt Strike Beacon Data Over LDAP
LDAPFragger is a Command and Control tool that enables attackers to route Cobalt Strike beacon data over LDAP using user attributes. For background information, read the release blog: http://blog.fox-it.com/2020/03/19/ldapfragger-command-and-control-over-ldap-attributes Dependencies and...
Format string
wire-avs is the audio visual signaling AVS component of Wire, an open-source messenger. A remote format string vulnerability in versions prior to 7.1.12 allows an attacker to cause a denial of service or possibly execute arbitrary code. The issue has been fixed in wire-avs 7.1.12. There are...
GHSA-2J6V-XPF3-XVRV Use of Externally-Controlled Format String in wire-avs
Impact A remote format string vulnerability allowed an attacker to cause a denial of service or possibly execute arbitrary code. Patches The issue has been fixed in wire-avs 7.1.12 and is already included on all Wire products currently used version is 8.0.x Workarounds No workaround known...
CVE-2021-41193 Use of Externally-Controlled Format String in wire-avs
wire-avs is the audio visual signaling AVS component of Wire, an open-source messenger. A remote format string vulnerability in versions prior to 7.1.12 allows an attacker to cause a denial of service or possibly execute arbitrary code. The issue has been fixed in wire-avs 7.1.12. There are...
CVE-2021-41193
Wire-AVS (the AVS component of Wire) is affected by a remote format string vulnerability in versions before 7.1.12. The issue can lead to denial of service or potentially arbitrary code execution. A fix is available in wire-avs 7.1.12 and has been integrated into Wire products. Connected sources ...
CVE-2021-41193 Use of Externally-Controlled Format String in wire-avs
wire-avs is the audio visual signaling AVS component of Wire, an open-source messenger. A remote format string vulnerability in versions prior to 7.1.12 allows an attacker to cause a denial of service or possibly execute arbitrary code. The issue has been fixed in wire-avs 7.1.12. There are...
Wire-AVS 格式化字符串错误漏洞
Wire-AVS is the repository is part of the Wire source code. A formatting string error vulnerability exists in Wire-AVS that could be exploited by an attacker to cause a denial of service or possibly execute arbitrary code...
ThreadStackSpoofer - PoC For An Advanced In-Memory Evasion Technique Allowing To Better Hide Injected Shellcode'S Memory Allocation From Scanners And Analysts
A PoC implementation for an advanced in-memory evasion technique that spoofs Thread Call Stack. This technique allows to bypass thread-based memory examination rules and better hide shellcodes while in-process memory. Intro This is an example implementation for Thread Stack Spoofing technique...
