69 matches found
The vulnerability of the vgem_gem_dumb_create function in Linux kernel allows a hacker to execute arbitrary code.
The vulnerability of the vgemgemdumbcreate function in Linux kernel relates to the use of memory after deallocation. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
CVE-2021-29502 Remote code execution in the WarnSystem module of Laggrons-Dumb-Cogs
WarnSystem is a cog plugin for the Red discord bot. A vulnerability has been found in the code that allows any user to access sensible informations by setting up a specific template which is not properly sanitized. The problem has been patched in version 1.3.18. Users should update and type...
Laggrons-Dumb-Cogs 代码注入漏洞
Laggrons-Dumb-Cogs is a software application. Provides a repository for Laggrons' Dumb Cogs. A code injection vulnerability exists in Laggrons-Dumb-Cogs. The vulnerability stems from the WarnSystem plugin in the program allowing any user to access sensitive information by setting specific templat...
PT-2020-6651 · Linux +4 · Linux Kernel +4
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the use of memory after it has been freed in the vgem gem dumb create function of the Linux kernel. This can be exploited to allow an attacker to execute...
DEBIAN-CVE-2018-7999
In libgraphite2 in graphite2 1.3.11, a NULL pointer dereference vulnerability was found in Segment.cpp during a dumbRendering operation, which may allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .ttf file...
UBUNTU-CVE-2018-7999
In libgraphite2 in graphite2 1.3.11, a NULL pointer dereference vulnerability was found in Segment.cpp during a dumbRendering operation, which may allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .ttf file...
Microsoft Edge Chakra CFG Bypass By Overwriting JavaScript Bytecode Vulnerability
Chakra suffers from a CFG bypass by overwriting JavaScript bytecode. Chakra: CFG bypass by overwriting JavaScript bytecode Assume an attacker has the ability to overwrite Chakra's bytecode, either through a read/write primitive or through an overflow type vulnerability. Let's take a look at the...
[SECURITY] Fedora 25 Update: picocom-2.2-2.fc25
As its name suggests, picocom is a minimal dumb-terminal emulation program. It is, in principle, very much like minicom, only it's "pico" instead of "mini"! It was designed to serve as a simple, manual, modem configuration, testing, and debugging tool. It has also served quite well as a low-tech...
Dumb Deaths on Halloween - Base64 encoded String, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Dumb Deaths on Halloween published at the 'play' market has multiple vulnerabilities...
JetAudio 8.1.1 (.ogg) - Crash PoC
No description provided by source. ''' Exploit Title: JetAudio memory corruption in latest Version 8.1.1 Date: 2014/05/08 Exploit Author: Aryan Bayaninejad Linkedin : https://www.linkedin.com/profile/view?id=276969082 Vendor Homepage: www.jetaudio.com Version: Version 8.1.1 and prior to that Test...
Dumb <= 0.9.3 (it_read_envelope) Remote Heap Overflow PoC
No description provided by source. / by Luigi Auriemma / include stdio.h include stdlib.h include string.h include stdint.h define VER 0.1 define BOF 255 // 25 BOF 256 define INSTRSZ 371 define POCNAME proof-of-concept void fwi08FILE fd, int num; void fwi16FILE fd, int num; void fwi32FILE fd, int...
Catia V5-6R2013 "CATV5_Backbone_Bus" - Stack Buffer Overflow
No description provided by source. ''' Title: Dassault Syst?mes Catia V5-6R2013 CATV5BackboneBus Stack Buffer Overflow Date: 2-18-2014 Author: Mohamed Shetta Email: mshetta |at| live |dot| com Vendor Homepage: http://www.3ds.com/products-services/catia/portfolio/catia-v5/latest-release/ Tested on...
Jet Audio 8.1.1 Memory Corruption
Exploit Title: JetAudio memory corruption in latest Version 8.1.1 Date: 2014/05/08 Exploit Author: Aryan Bayaninejad Linkedin : https://www.linkedin.com/profile/view?id=276969082 Vendor Homepage: www.jetaudio.com Software Link:...
Fedora Extras : dumb-0.9.3-4 (2006-003)
Luigi Auriemma discovered that DUMB, a tracker music library, performs insufficient sanitising of values parsed from IT music files. This could result in a heap-based buffer overflow in the itreadenvelope function in Dynamic Universal Music Bibliotheque DUMB 0.9.3 and earlier and current CVS as o...
Savy Soda Documents - Mobile Office Suite .XLS Denial of Service
Savy Soda Documents - Mobile Office Suite .XLS Denial of Service I wrote a fuzzer "dumb fuzzer" and used a sample from http://www.ccp14.ac.uk/ccp/web-mirrors/bca-spreadsheets/scanplot101.xls which I randomly found on the internet. I mutated the data and tested roughly 1000 cases on several Docume...
Vulnerability in Dumb math captcha for WordPress
Здравствуйте 3APA3A! Сообщаю вам о найденной мною Insufficient Anti-automation уязвимости в плагине Dumb math captcha для WordPress. Insufficient Anti-automation: При передаче параметра action со значением commentopenid, значение ответа капчи не проверяется, что позволяет обойти капчу на страница...
Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc. Dumb math captcha: protection bypass backdoor...
Vulnerabilities in Dumb math captcha for WordPress
Здравствуйте 3APA3A! Сообщаю вам о найденных мною Insufficient Anti-automation и Full path disclosure уязвимостях в плагине Dumb math captcha для WordPress. Insufficient Anti-automation: Капча на страницах записей уязвима к Constant values bypass method, который я описал в проекте Month of Bugs i...
Gentoo Security Advisory GLSA 200608-14 (dumb)
The remote host is missing updates announced in advisory GLSA 200608-14. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Gentoo Security Advisory GLSA 200608-14 (dumb)
The remote host is missing updates announced in advisory GLSA 200608-14. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...