Wireshark NCP Parser Input Validation Vulnerability

Wireshark formerly known as Ethereal is a suite of network packet analysis software developed by the Wireshark team. The function of the software is to intercept network packets and display detailed data for analysis.NCP dissector is one of the network control protocol parsers. An input validatio...

MGASA-2017-0082 Updated thunderbird packages fix security vulnerability

JIT-spray targeting asm.js combined with a heap spray allows for a bypass of ASLR and DEP protections leading to potential memory corruption attacks. CVE-2017-5400 A crash triggerable by web content in which an ErrorResult references unassigned memory due to a logic error. The resulting crash may...

Cairo 'cairo-png.c' Integer Overflow Vulnerability

Cairo is a cross-platform open source vector graphics library , it supports in multiple contexts to do 2D drawing , and provides high-quality display and printout . An integer overflow vulnerability exists in Cairo 'cairo-png.c'. An attacker may exploit this issue to crash the affected applicatio...

QEMU 'v9fs_link()' function denial of service vulnerability

QEMU aka Quick Emulator is a set of simulation processor software developed by French programmer Fabrice Bellard. The software is fast and cross-platform. A denial of service vulnerability exists in the QEMU 'v9fslink' function. An attacker can exploit this vulnerability to cause a denial of...

WhatsApp Android text Crash 0day Exploit

This code work on all Android versions. Don't work on all android emulators as nexus. It is a short code that acts on android. When Android PROCESS the code, the app gets a crash. Don't work if android don't process directly the code. tested and work 100% on: - whatsapp message. - whatsapp...

Qemu imx_fec_do_tx() function infinite loop vulnerability

QEMU is a simulation processor software developed by French programmer Fabrice Bellard. The software is fast and cross-platform. An infinite loop vulnerability exists in the imxfecdotx function in QEMU, which can be exploited by an attacker with privileges to launch a DoS attack to crash QEMU...

MuPDF Denial of Service Vulnerability

MuPDF is a PDF format analyzer used to read PDF files and create Fitz tree diagrams. MuPDF suffers from a denial of service vulnerability that can be exploited by an attacker to crash an affected application, resulting in a denial of service...

VLC media player handles MIDI file memory corruption vulnerability

VLC media player is a well-known multimedia player that can play video and audio in many formats. The software suffers from a memory corruption vulnerability when handling MIDI format files. This allows attackers to exploit this vulnerability to construct malformed MIDI files and crash the progra...

FireBird gbak Denial of Service Vulnerability

Firebird is the Firebird Foundation's set of open source cross-platform provides multiple ANSI SQL-92 functionality of the relational database management system . A security vulnerability exists in Firebird version 2.5.5 that stems from an error in the program related to the gbak backup tool. An...

Samsung Galaxy S6 Denial of Service Vulnerability

The Samsung Galaxy S6 is a smartphone released by the South Korean company Samsung Samsung. The Samsung Galaxy S6 suffers from a denial of service vulnerability. An attacker can exploit the vulnerability to crash the affected application and deny service to legitimate users...

jasper: double-free in in jas_iccattrval_destroy() (oCERT-2014-012)

A double free flaw was found in the way JasPer parsed ICC color profiles in JPEG 2000 image files. A specially crafted file could cause an application using JasPer to crash or, possibly, execute arbitrary code...

Google Chrome V8 Memory Corruption Vulnerability

Google Chrome is a popular WEB browser. Google Chrome V8 FACTORY.CC suffers from a memory corruption vulnerability that allows attackers to construct malicious WEB pages and trick users into parsing them, which can crash the application or execute arbitrary code...

Wireshark WCCP Parser Remote Denial of Service Vulnerability (CNVD-2015-00207)

Wireshark is an open source network protocol analysis tool. A remote denial of service vulnerability exists in the Wireshark WCCP parser, which can be exploited by an attacker to crash an affected application and deny service to legitimate users...

SunOS Release 5.11 snv_101b - Remote IPv6 Crash Exploit

No description provided by source. / SunOS Release 5.11 Version snv101b Remote IPV6 Kernel Crash Exploit 0day By Kingcope/2009 / include stdio.h include string.h include stdlib.h include netinet/in.h include netdb.h include sys/time.h include sys/types.h include sys/socket.h include arpa/inet.h...

xwine 1.0.1 (.exe file) - Local Crash PoC Exploit

No description provided by source. xwine v1.0.1 .exe file Local Crash PoC Exploit Install: sudo apt-get install xwine Author: JosS Jose Luis Gongora Fernandez mail: sys-projectathotmaildotcom site: http://hack0wn.com/ team: Spanish Hackers Team - SHT This was written for educational purpose. Use ...

kernel: net: sctp: null pointer dereference when processing authenticated cookie_echo chunk

A flaw was found in the way the Linux kernel processed an authenticated COOKIEECHO chunk during the initialization of an SCTP connection. A remote attacker could use this flaw to crash the system by initiating a specially crafted SCTP handshake in order to trigger a NULL pointer dereference on th...

MGASA-2013-0357 Updated 389-ds-base package fixes CVE-2013-4485

Updated 389-ds-base packages fix security vulnerability: It was discovered that the 389 Directory Server did not properly handle certain Get Effective Rights GER search queries when the attribute list, which is a part of the query, included several names using the '@' character. An attacker able ...

VideoLAN VLC Media Player 2.0.8 - '.m3u' Local Crash (PoC)

Exploit Title: VLC Player 2.0.8 ", "inj3ct0rs.m3u"; print file $PoC; print "\n + File successfully created!\n" or d...

httpdx 1.5.4 Heap Overflow

!/usr/bin/perl -w ====================================================================== Exploit Title: httpdx UnhandledExceptionFilter ====================================================================== use strict; use IO::Socket::INET; target my $host = "127.0.0.1"; The perl|php|py|.. page t...

rpm: improper validation of header contents total size in headerLoad()

The headerLoad function in lib/header.c in RPM before 4.9.1.3 does not properly validate region tags, which allows user-assisted remote attackers to cause a denial of service crash and possibly execute arbitrary code via a large region size in a package header...