The vulnerability of the MHD_create_post_processor() function, implemented in the HTTP web server library libmicrohttpd, allows a hacker to cause a service failure.

The vulnerability of the MHDcreatepostprocessor function lies in the implementation of the HTTP server in the libmicrohttpd library. This issue is related to incorrect handling of the multipart/form-data boundary. Exploiting this vulnerability could allow an attacker to cause service failures...

Wibu-Systems WibuKey 安全漏洞

Wibu-Systems WibuKey is a digital rights management DRM system from Wibu-Systems, Germany. A security vulnerability exists in Wibu-Systems WibuKey versions prior to 6.70, which arises from a boundary check that allows specially crafted packets to result in arbitrary address writes, and thus kerne...

Wibu-Systems WibuKey 安全漏洞

Wibu-Systems WibuKey is a digital rights management DRM system from Wibu-Systems, Germany. A security vulnerability exists in Wibu-Systems WibuKey versions prior to 6.70, which stems from a boundary check that allows specially crafted packets to cause arbitrary addresses to be read, resulting in ...

PT-2024-6278 · Microsoft · Windows Remote Access Connection Manager +1

Name of the Vulnerable Software and Affected Versions: Windows Remote Access Connection Manager affected versions not specified Description: The issue is related to a memory reading boundary error in the Windows Remote Access Connection Manager. It allows a remote attacker to elevate their...

CVE-2024-32668

An insufficient boundary validation in the USB code could lead to an out-of-bounds write on the heap, with data controlled by the caller. A malicious, privileged software running in a guest VM can exploit the vulnerability to achieve code execution on the host in the bhyve userspace process, whic...

CVE-2024-32668

CVE-2024-32668 describes an out-of-bounds heap write due to insufficient boundary validation in the USB code of bhyve (FreeBSD). A privileged guest VM can exploit this to execute code on the host inside the bhyve userspace process (usually running as root); bhyve operates under a Capsicum sandbox...

CVE-2024-32668 bhyve(8) privileged guest escape via USB controller

An insufficient boundary validation in the USB code could lead to an out-of-bounds write on the heap, with data controlled by the caller. A malicious, privileged software running in a guest VM can exploit the vulnerability to achieve code execution on the host in the bhyve userspace process, whic...

FreeBSD 缓冲区错误漏洞

FreeBSD is a set of Unix-like operating systems from the FreeBSD Foundation. FreeBSD suffers from a buffer error vulnerability that stems from insufficient boundary validation in the USB code that could result in out-of-bounds writes...

ROS-20240904-08

Vulnerability in the MHDcreatepostprocessor function of the HTTP libmicrohttpd web server implementation is related to a improper parsing of the multipart/form-data boundary. Exploitation of the vulnerability could allow an attacker, acting remotely, to cause a denial of service...

The vulnerability in Mozilla Firefox, Mozilla Firefox ESR, and the email client Mozilla Thunderbird arises from performing operations beyond the buffer boundaries in memory, allowing an attacker to execute arbitrary code.

The vulnerabilities of Mozilla Firefox, Mozilla Firefox ESR, and the email client Mozilla Thunderbird are related to the execution of operations beyond the buffer boundaries in memory. Exploiting these vulnerabilities allows a remote attacker to execute arbitrary code...

The vulnerability of the ngx_http_v4_module in NGINX Plus and NGINX OSS web servers, related to reading data from outside of memory, allows attackers to cause service interruptions.

The vulnerability of the ngxhttpv4module in NGINX Plus and NGINX OSS web servers is related to reading data from outside of the memory boundaries. Exploiting this vulnerability can allow attackers to cause service failures...

MediaTek 芯片 安全漏洞

MediaTek chips are a variety of chips from MediaTek, a Chinese company called MediaTek. A security vulnerability exists in the MediaTek chips that stems from a lack of boundary checking in the vdec component, which could result in an out-of-bounds write...

MediaTek 芯片 安全漏洞

MediaTek chips are a variety of chips from MediaTek, a Chinese company called MediaTek. A security vulnerability exists in MediaTek chips, which stems from a lack of boundary checking in the keyinstall component, which could lead to an out-of-bounds read...

MediaTek 芯片 安全漏洞

MediaTek chips are a variety of chips from MediaTek, a Chinese company MediaTek. A security vulnerability exists in the MediaTek chips, which stems from a lack of boundary checking in the power component, which could result in an out-of-bounds fetch...

MediaTek 芯片 安全漏洞

MediaTek chips are a variety of chips from MediaTek, a Chinese company MediaTek. A security vulnerability exists in the MediaTek chips, which stems from a lack of boundary checking in the power component, which could result in an out-of-bounds fetch...

MediaTek 芯片 安全漏洞

MediaTek chips are a variety of chips from MediaTek, a Chinese company called MediaTek. A security vulnerability exists in the MediaTek chips that stems from a lack of boundary checking in the vdec component, which could result in an out-of-bounds write...

Dell OpenManage POST Request Heap Overflow (win32)

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Dell OpenManage POST Request Heap Overflow win32', 'Description' = %q This module exploits a heap overflow in the Dell OpenManage Web Server...

Google Chrome heap buffer overflow vulnerability (CNVD-2024-38577)

Google Chrome is a web browser from Google, an American company. Google Chrome suffers from a heap buffer overflow vulnerability, which is caused by incorrect boundary checking in Skia. An attacker can exploit this vulnerability to cause an overflow buffer to execute arbitrary code on the system ...

Google Chrome heap buffer overflow vulnerability (CNVD-2024-38578)

Google Chrome is a web browser from Google, an American company. Google Chrome suffers from a heap buffer overflow vulnerability that is caused by incorrect boundary checking in Skia. An attacker can exploit this vulnerability to cause an overflow buffer to execute arbitrary code on the system or...

ROS-20240829-02

A vulnerability in the hciqca component of the Linux operating system kernel is related to memory usage after a release. Exploitation of the vulnerability could allow an attacker to cause a denial of service Vulnerability in the gso component of the Linux operating system kernel is related to the...