9916 matches found
CVE-2017-2403
The CVE-2017-2403 entry affects macOS prior to 10.12.4, specifically the Printing component. A format-string vulnerability allows remote attackers to execute arbitrary code via a crafted ipp: or ipps: URL. Connected sources confirm the issue is tied to macOS Sierra 10.12.x and that Apple released...
CVE-2017-2403: Use of Externally-Controlled Format String
An issue was discovered in certain Apple products. macOS before 10.12.4 is affected. The issue involves the "Printing" component. A format-string vulnerability allows remote attackers to execute arbitrary code via a crafted ipp: or ipps: URL...
PT-2017-1742
Name of the Vulnerable Software and Affected Versions macOS versions prior to 10.12.4 Description The issue is related to a format-string vulnerability in the Printing component of the operating system. This vulnerability can be exploited by a remote attacker using a specially crafted URL, such a...
Format string vulnerability in the use of summary II-vulnerability warning-the black bar safety net
1, No binary format string exploit No binary format string vulnerability race question are generally only to one remote address, according to this articleto shows that this topic is called“blind pwn”is that here is the“blind formatstring”, a littlesql injectioninside a blind mean, fun. Here the...
Mac OS X 10.x < 10.12.4 Multiple Vulnerabilities
Binary data 700032.prm...
Cisco IOS XE for Cisco ASR 920 Series Routers Zero Touch Provisioning DoS (cisco-sa-20170322-ztp)
According to its self-reported version, the Cisco IOS XE software running on the remote Cisco ASR 920 Series device is affected by a denial of service vulnerability due to a format string flaw when processing DHCP packets for Zero Touch Provisioning. An unauthenticated, remote attacker can exploi...
Dropbear SSH < 2016.74.0 Multiple Vulnerabilities
Binary data 700028.prm...
Debian DLA-869-1 : cgiemail security update
The cPanel Security Team discovered several security vulnerabilities in cgiemail, a CGI program used to create HTML forms for sending mails : CVE-2017-5613 A format string injection vulnerability allowed to supply arbitrary format strings to cgiemail and cgiecho. A local attacker with permissions...
Format string vulnerability in the use of small a-vulnerability warning-the black bar safety net
1, Preface Format string vulnerability has now been more and more rare, but in CTF the game will still often encountered. By learning this type of exploit, you can promote us by analogy with other vulnerability types, so as to further deepen the understanding of software vulnerability the basic...
CVE-2017-3859
A vulnerability in the DHCP code for the Zero Touch Provisioning feature of Cisco ASR 920 Series Aggregation Services Routers could allow an unauthenticated, remote attacker to cause an affected device to reload. The vulnerability is due to a format string vulnerability when processing a crafted...
CVE-2017-3859
A vulnerability in the DHCP code for the Zero Touch Provisioning feature of Cisco ASR 920 Series Aggregation Services Routers could allow an unauthenticated, remote attacker to cause an affected device to reload. The vulnerability is due to a format string vulnerability when processing a crafted...
CVE-2017-3859
Summary: CVE-2017-3859 is a DHCP-ZTP denial-of-service vulnerability in Cisco IOS XE on the ASR 920 Series. A format-string flaw in processing crafted DHCP packets for Zero Touch Provisioning can allow an unauthenticated, remote attacker to cause an affected device to reload (DoS). The issue affe...
CVE-2017-3859: Use of Externally-Controlled Format String
A vulnerability in the DHCP code for the Zero Touch Provisioning feature of Cisco ASR 920 Series Aggregation Services Routers could allow an unauthenticated, remote attacker to cause an affected device to reload. The vulnerability is due to a format string vulnerability when processing a crafted...
PT-2017-2016
Name of the Vulnerable Software and Affected Versions Cisco ASR 920 Series Aggregation Services Routers versions 3.13 through 3.18 Description A vulnerability in the DHCP code for the Zero Touch Provisioning feature could allow an unauthenticated, remote attacker to cause an affected device to...
Ruby: sprintf combined format string attack
In a ticket that was also reported to "shopify-scripts" regarding "MRuby", I reported in details a combined attack against the sprintf gem: Information leak Heap buffer underflow The full ticket details can be found in: Ticket 212239 The ticked was opened several minutes ago but I add it in case ...
Format string
Format string vulnerability in Dropbear SSH before 2016.74 allows remote attackers to execute arbitrary code via format string specifiers in the 1 username or 2 host argument...
CVE-2016-7406
Format string vulnerability in Dropbear SSH before 2016.74 allows remote attackers to execute arbitrary code via format string specifiers in the 1 username or 2 host argument...
CVE-2016-7406
Format string vulnerability in Dropbear SSH before 2016.74 allows remote attackers to execute arbitrary code via format string specifiers in the 1 username or 2 host argument...