3897 matches found
10-Strike Network Scanner 3.0 - Local Buffer Overflow (SEH)
Exploit Title: 10-Strike Network Scanner 3.0 - Local Buffer Overflow SEH Exploit Author: Hashim Jawad - ihack4falafel Date: 2018-06-05 Vendor Homepage: https://www.10-strike.com/ Vulnerable Software: https://www.10-strike.com/network-scanner/network-scanner.exe Tested on: Windows XP Professional ...
CVE-2016-10636
grunt-ccompiler is a Closure Compiler Grunt Plugin. grunt-ccompiler downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution RCE by swapping out the requested binary with an attacker controlled binary if the attacker is on...
CVE-2016-10636
** grunt-ccompiler** is a Closure Compiler Grunt Plugin that insecurely downloads executables over HTTP. An attacker with a privileged network position can intercept the response and replace the binary with a malicious one, potentially causing remote code execution on the system running grunt-cco...
CVE-2016-10649
The CVE-2016-10649 entry concerns the frames-compiler project, where binary resources are downloaded over HTTP. The associated disclosures describe that an attacker with privileged network position can intercept the HTTP response and swap the requested binary with a malicious one, potentially lea...
CVE-2016-10636
grunt-ccompiler is a Closure Compiler Grunt Plugin. grunt-ccompiler downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution RCE by swapping out the requested binary with an attacker controlled binary if the attacker is on...
LibSaas null pointer dereference vulnerability (CNVD-2018-15182)
LibSaas is a C/C++ implementation of the Sass compiler. A null pointer dereference vulnerability exists in the Sass::Expand::operator function in LibSaas 3.5.2 and earlier. An attacker could exploit this vulnerability to cause a denial of service application crash or possibly other impact...
riot-compiler denial of service vulnerability
riot-compiler is a compiler for riot user interface library. A security vulnerability exists in the regex in riot-compiler version 2.3.21. An attacker can exploit this vulnerability to cause a denial of service...
LibSaas Out-of-Bounds Read Vulnerability
LibSaas is a C/C++ implementation of the Sass compiler. An out-of-bounds read vulnerability exists in the Sass::handleerror function in LibSaas 3.5.4 and earlier. An attacker could use this vulnerability to obtain information or cause a denial of service...
CVE-2016-10527
The riot-compiler version version 2.3.21 has an issue in a regex Catastrophic Backtracking thats make it unusable under certain conditions...
Design/Logic Flaw
The riot-compiler version version 2.3.21 has an issue in a regex Catastrophic Backtracking thats make it unusable under certain conditions...
CVE-2016-10527
The riot-compiler version version 2.3.21 has an issue in a regex Catastrophic Backtracking thats make it unusable under certain conditions...
CVE-2016-10527
The riot-compiler project (version 2.3.21) contains a regex vulnerability causing a regular expression denial of service (catastrophic backtracking) under certain inputs. This affects riot-compiler’s ability to process some patterns efficiently, potentially impacting availability. The issue is do...
CVE-2016-10527
The riot-compiler version version 2.3.21 has an issue in a regex Catastrophic Backtracking thats make it unusable under certain conditions...
[SECURITY] Fedora 27 Update: ncurses-6.0-14.20170722.fc27
The curses library routines are a terminal-independent method of updating character screens with reasonable optimization. The ncurses new curses library is a freely distributable replacement for the discontinued 4.4 BSD classic curses library. This package contains support utilities, including a...
CVE-2016-10635
broccoli-closure is a Closure compiler plugin for Broccoli. broccoli-closure before 1.3.1 downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution RCE by swapping out the requested binary with an attacker controlled binary...
Linux/x86 - Bind (4444/TCP) Shell (/bin/sh) + IPv6 Shellcode (113 bytes)
Linux/x86 - Bind 4444/TCP Shell /bin/sh + IPv6 Shellcode 113 bytes. Shellcode exploit for Linuxx86 platform // Title: Linux/x86 - IPv6 TCP bind tcp shell on 4444 port // Length : 113 bytes // Author : Matteo Malvica // Tested On : kali linux 4.15 // Contact : [email protected] // Description: it...
DEBIAN-CVE-2018-11319
Syntastic aka vim-syntastic through 3.9.0 does not properly handle searches for configuration files it searches the current directory up to potentially the root. This improper handling might be exploited for arbitrary code execution via a malicious gcc plugin, if an attacker has write access to a...
UBUNTU-CVE-2018-11319
Syntastic aka vim-syntastic through 3.9.0 does not properly handle searches for configuration files it searches the current directory up to potentially the root. This improper handling might be exploited for arbitrary code execution via a malicious gcc plugin, if an attacker has write access to a...
Microsoft Edge Chakra JIT - Bound Check Elimination Bug Exploit
Exploit for windows platform in category dos / poc / Chakra uses the InvariantBlockBackwardIterator class to backpropagate the information about the hoisted bound checks. But the class follows the linked list instaed of the control flow. This may lead to incorrectly remove the bound checks. In th...
Amazon Linux 2 : golang (ALAS-2018-1011)
Arbitrary code execution during go get or go get -d Go before 1.8.4 and 1.9.x before 1.9.1 allows 'go get' remote command execution. Using custom domains, it is possible to arrange things so that example.com/pkg1 points to a Subversion repository but example.com/pkg1/pkg2 points to a Git...