CVE-1999-0997

wu-ftp with FTP conversion enabled allows an attacker to execute commands via a malformed file name that is interpreted as an argument to the program that does the conversion, e.g. tar or uncompress...

APPLE-SA-2015-10-21-7 Xcode 7.1

APPLE-SA-2015-10-21-7 Xcode 7.1 Xcode 7.1 is now available and addresses the following: Swift Available for: OS X Yosemite v10.10.5 or later Impact: Swift programs performing certain type conversions may receive unexpected values Description: A type conversion issue existed that could lead to...

CVE-2015-7030

The Swift implementation in Apple Xcode before 7.1 mishandles type conversion, which has unspecified impact and attack vectors...

Type confusion

The Swift implementation in Apple Xcode before 7.1 mishandles type conversion, which has unspecified impact and attack vectors...

CVE-2015-7030

The Swift implementation in Apple Xcode before 7.1 mishandles type conversion, which has unspecified impact and attack vectors...

CVE-2015-7030

CVE-2015-7030 affects Apple Xcode before 7.1, where the Swift implementation mishandles certain type conversions. Multiple sources describe it as an information-disclosure/logic-conversion issue that could allow an attacker to obtain sensitive information or circumvent program logic; the vendor a...

CVE-2015-7030: Undefined Security Weakness

The Swift implementation in Apple Xcode before 7.1 mishandles type conversion, which has unspecified impact and attack vectors...

PT-2015-7465

Name of the Vulnerable Software and Affected Versions Apple Xcode versions prior to 7.1 Description The issue in Apple Xcode's Swift implementation mishandles type conversion, but the specific impact and attack vectors are not detailed. Recommendations For Apple Xcode versions prior to 7.1, updat...

The vulnerability of the Android operating system, which allows a hacker to execute arbitrary code or cause a service failure

The vulnerability of the Parsewave function in the Sonivox DLS-to-EAS converter for Android operating systems arises from the possibility of using negative numbers when setting the field size. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code or cause service...

Gentoo Security Advisory GLSA 201507-17

Gentoo Linux Local Security Checks GLSA 201507-17 SPDX-FileCopyrightText: 2015 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

MASM32 11R - Crash (PoC)

MASM32 11R - Crash PoC EXPLOIT TITLE: Masm32v11r Buffer OverflowSEH overwrite crash POC AUTHOR: VIKRAMADITYA "-OPTIMUS" Date of Testing: 22nd September 2015 Download Link : http://www.masm32.com/masmdl.htm Tested On : Windows 10 Steps to Crash :- Step 1: Execute this python script Step 2: This...

Corel WordPerfect Heap Buffer Overflow Vulnerability

Corel WordPerfect Office Suite is an office software suite. A heap buffer overflow vulnerability exists in the Microsoft Word document conversion feature of Corel WordPerfect, which can be exploited by a remote attacker to execute arbitrary code via a constructed document...

CVE-2015-6948

Heap-based buffer overflow in the Microsoft Word document conversion feature in Corel WordPerfect allows remote attackers to execute arbitrary code via a crafted document...

CVE-2015-6948: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in the Microsoft Word document conversion feature in Corel WordPerfect allows remote attackers to execute arbitrary code via a crafted document...

openssl: X509_to_X509_REQ NULL pointer dereference

A NULL pointer dereference flaw was found in OpenSSL's X.509 certificate handling implementation. A specially crafted X.509 certificate could cause an application using OpenSSL to crash if the application attempted to convert the certificate to a certificate request...

openssl: X509_to_X509_REQ NULL pointer dereference

A NULL pointer dereference flaw was found in OpenSSL's X.509 certificate handling implementation. A specially crafted X.509 certificate could cause an application using OpenSSL to crash if the application attempted to convert the certificate to a certificate request...

MediaWiki TimedMediaHandler Extension Denial of Service Vulnerability

MediaWiki is a free and freely available web-based wiki engine developed and maintained by the Wikimedia Foundation and the MediaWiki Volunteers for the deployment of in-house knowledge management and content management systems.TimedMediaHandler is one of the extensions used to display audio and...

PT-2015-7422

Name of the Vulnerable Software and Affected Versions Corel WordPerfect affected versions not specified Description A heap-based buffer overflow issue exists in the Microsoft Word document conversion feature of Corel WordPerfect. This allows remote attackers to execute arbitrary code via a crafte...

Google to Pause Flash Ads in Chrome Starting Next Week

Google on Tuesday will begin pausing Flash ads by default in Chrome, a move that is designed mainly to help improve browser speed, but that will also be a security upgrade for users. The company announced the plan back in June and said this week that it will make the behavior the default setting...

HP KeyView Arbitrary Code Execution Vulnerability (CNVD-2015-05719)

HP KeyView is file filtering and conversion software that extracts file content and metadata. A security vulnerability exists in the implementation of HP KeyView versions prior to 10.23.0.1 and prior to 10.24.0.1. A remote attacker can exploit this vulnerability to execute arbitrary code...