82 matches found
Exploit for Absolute Path Traversal in Rarlab Winrar
This is a PoC exploit for CVE-2018-20250. The exploit targets a vulnerability in the Microsoft Visual C++ compiler, specifically in the way it handles certain types of code. The vulnerability allows for arbitrary code execution. The exploit is likely to be used to demonstrate the vulnerability an...
JITSploitation III: Subverting Control Flow
Posted by Samuel Groß, Project Zero This three-part series highlights the technical challenges involved in finding and exploiting JavaScript engine vulnerabilities in modern web browsers and evaluates current exploit mitigation technologies. The exploited vulnerability, CVE-2020-9802, was fixed i...
Design/Logic Flaw
An issue was discovered in Xen through 4.13.x, allowing Intel guest OS users to gain privileges or cause a denial of service because of non-atomic modification of a live EPT PTE. When mapping guest EPT nested paging tables, Xen would in some circumstances use a series of non-atomic bitfield write...
CVE-2018-20375
An issue was discovered in Tiny C Compiler aka TinyCC or TCC 0.9.27. Compiling a crafted source file leads to an 8 byte out of bounds write in the sympop function in tccgen.c...
CVE-2018-20374
An issue was discovered in Tiny C Compiler aka TinyCC or TCC 0.9.27. Compiling a crafted source file leads to an 8 byte out of bounds write in the usesection1 function in tccasm.c...
frames-compiler remote code execution vulnerability
The frames-compiler is a suite of software for building a wide range of applications, providing a graphical user interface that supports multiple platforms. A security vulnerability exists in frames-compiler that originates when the program downloads binary resources over the HTTP protocol. A...
CentOS 7 : golang (CESA-2018:0878)
An update for golang is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...
Xen CMPXCHG8B Emulation Information Disclosure (XSA-200)
According to its self-reported version number, the Xen hypervisor installed on the remote host is missing a security update. It is, therefore, affected by an information disclosure vulnerability due to a flaw in the x86 instruction CMPXCHG8B when handling prefixes. This is triggered because legac...
GNU gcc Local Security Bypass Vulnerability
GNU gcc GNU Compiler Collection is an open source compiler for programming languages developed by the GNU Project. A local security bypass vulnerability exists in GNU gcc, which can be exploited by attackers to bypass security restrictions and perform unauthorized operations...
Adobe Flash Player & Compiler Denial of Service Vulnerability (CNVD-2016-01051)
Adobe Flash Player& Compiler is an integrated multimedia player from the American company Audobee Adobe, short and compact, able to be used on a variety of browsers, operating systems and mobile devices. A security vulnerability exists in several Adobe products. An attacker could exploit the...
Adobe Flash Player & Compiler Denial of Service Vulnerability (CNVD-2016-01050)
Adobe Flash Player& Compiler is an integrated multimedia player from the American company Audobee Adobe, short and compact, able to be used on a variety of browsers, operating systems and mobile devices. A security vulnerability exists in several Adobe products. An attacker could exploit the...
Adobe Flash Player & Compiler Denial of Service Vulnerability (CNVD-2016-01048)
Adobe Flash Player& Compiler is an integrated multimedia player from the American company Audobee Adobe, short and compact, able to be used on a variety of browsers, operating systems and mobile devices. A security vulnerability exists in several Adobe products. An attacker could exploit the...
Adobe Flash Player & Compiler Denial of Service Vulnerability (CNVD-2016-01071)
Adobe Flash Player& Compiler is an integrated multimedia player from the American company Audobee Adobe, short and compact, able to be used on a variety of browsers, operating systems and mobile devices. A security vulnerability exists in several Adobe products. An attacker could exploit the...
Adobe Flash Player & Compiler Denial of Service Vulnerability (CNVD-2016-01046)
Adobe Flash Player& Compiler is an integrated multimedia player from the American company Audobee Adobe, short and compact, able to be used on a variety of browsers, operating systems and mobile devices. A security vulnerability exists in several Adobe products. An attacker could exploit the...
Adobe Flash Player & Compiler Denial of Service Vulnerability (CNVD-2016-01053)
Adobe Flash Player& Compiler is an integrated multimedia player from the American company Audobee Adobe, short and compact, able to be used on a variety of browsers, operating systems and mobile devices. A security vulnerability exists in several Adobe products. An attacker could exploit the...
Code injection
The bpfintjitcompile function in arch/x86/net/bpfjitcomp.c in the Linux kernel before 4.0.6 allows local users to cause a denial of service system crash by creating a packet filter and then loading crafted BPF instructions that trigger late convergence by the JIT compiler...
Apple Xcode LLVM CLANG stack-guard security protection bypass vulnerability
Apple Xcode is a programming software developed by Apple and is the quickest way for developers to build OS X and iOS applications. A security vulnerability exists in the Apple Xcode LLVM CLANG stack-guard, which allows an attacker to bypass the stack-protection mechanism and execute malicious co...
MS07-040: Vulnerabilities in .NET Framework Could Allow Remote Code Execution (931212) (uncredentialed check)
The remote web server is running a version of the ASP.NET framework that contains multiple vulnerabilities : - A PE Loader vulnerability could allow an attacker to execute arbitrary code with the privilege of the logged-on user. - A ASP.NET NULL byte termination vulnerability could allow an...
[Full-disclosure] [xfocus-SD-060206]BCB compiler incorrect deal sizeof operator vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Title:xfocus-SD-060206BCB compiler incorrect deal sizeof operator vulnerability Affected version : = BCB6+entupd4 Vendor: http://borland.com/ Url: http://www.xfocus.net/releases/200602/a849.html XFOCUS http://www.xfocus.org had already discovered a...
