Bad_Hoist-WriteUp

Sleirsgoevy 版本的 BadHoist（技术分析）| CVE-2018-4386 !Note 关于 PS4 的背景信息： PlayStation 4 主机采用定制的 AMD x86-64 CPU（8 核心），其 Orbis OS 基于 FreeBSD（v9.0），并包含部分 NetBSD 代码。 它还集成了大量开源软件，例如 Mono VM 和 WebKit。 PS4 互联网浏览器： PS4 使用的互联网浏览器实际上基于开源 WebKit 项目构建。 WebKit 是一个开源布局引擎，为 iOS、Wii U、3DS、PS Vita 和 PS4 的浏览器渲染网页。...

CVE-2021-32762

Redis is an open source, in-memory database that persists on disk. The redis-cli command line tool and redis-sentinel service may be vulnerable to integer overflow when parsing specially crafted large multi-bulk network replies. This is a result of a vulnerability in the underlying hiredis librar...

CVE-2021-32762 Integer overflow that can lead to heap overflow in redis-cli, redis-sentinel on some platforms

Redis is an open source, in-memory database that persists on disk. The redis-cli command line tool and redis-sentinel service may be vulnerable to integer overflow when parsing specially crafted large multi-bulk network replies. This is a result of a vulnerability in the underlying hiredis librar...

Denial Of Service (DoS)

redis is vulnerable to denial of service. A heap overflow was found in when using a heap allocator other than jemalloc or glibc's malloc allows an attacker to crash the application...

Redis Labs Redis Multiple Products Buffer Overflow Vulnerability

Redis Labs Redis is the United States Redis Labs, Inc. of a set of open-source use of ANSI C written to support the network , can be based on the memory can also be a persistent log-type , key-value Key-Value storage database , and provides a variety of languages API. A buffer overflow...

PT-2021-7834 · Redis +2 · Redis +2

Name of the Vulnerable Software and Affected Versions: Redis versions prior to 5.0.10 Redis versions prior to 6.0.9 Redis versions prior to 6.2.0 Description: A heap overflow issue was found in Redis when using a heap allocator other than jemalloc or glibc's malloc, leading to potential out of...

Redis Labs Redis 多款产品缓冲区错误漏洞

Redis Labs Redis is the United States Redis Labs, Inc. of a set of open-source use of ANSI C written to support the network , can be based on the memory can also be a persistent log-type , key-value Key-Value storage database , and provides a variety of languages API. A buffer overflow...

Microsoft Windows本地提权漏洞（CVE-2021-1732）

CVE-2021-1732: win32kfull xxxCreateWindowEx callback out-of-bounds Mar 25, 2021 • iamelli0t CVE-2021-1732 is a 0-Day vulnerability exploited by the BITTER APT organization in one operation which was disclosed in February this year123. This vulnerability exploits a user mode callback opportunity i...