CVE-2016-7976

The PS Interpreter in Ghostscript 9.18 and 9.20 allows remote attackers to execute arbitrary code via crafted userparams...

CVE-2016-7976

The PS Interpreter in Ghostscript 9.18 and 9.20 allows remote attackers to execute arbitrary code via crafted userparams...

CVE-2016-7976

The PS Interpreter in Ghostscript 9.18 and 9.20 allows remote attackers to execute arbitrary code via crafted userparams...

CVE-2016-7976

CVE-2016-7976 concerns Ghostscript’s PS Interpreter. The initial document states that Ghostscript versions 9.18 and 9.20 are affected, and that a remote attacker can execute arbitrary code via crafted userparams. Connected sources reiterate the same CVE across multiple advisories and Nessus plugi...

CVE-2016-7976: Improper Input Validation

The PS Interpreter in Ghostscript 9.18 and 9.20 allows remote attackers to execute arbitrary code via crafted userparams...

The vulnerability of the PowerShell command interpreter for Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of PowerShell command interpreters on Windows operating systems is related to improper handling of executable files during the renaming process. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

[SECURITY] [DLA 1048-1] ghostscript security update

Package : ghostscript Version : 9.05dfsg-6.3+deb7u7 CVE ID : CVE-2017-7207 CVE-2017-9611 CVE-2017-9612 CVE-2017-9726 CVE-2017-9727 CVE-2017-9739 CVE-2017-9835 CVE-2017-11714 Debian Bug : 858350 869977 869907 869910 869913 869915 869916 869917 Several issues were found in Ghostscript, the GPL...

MAWK 1.3.3-17 - Local Buffer Overflow Exploit

Exploit for linux platform in category local exploits !/usr/bin/python Developed using Exploit Pack - http://exploitpack.com - Exploit Author: Juan Sacco at KPN Red Team - http://www.kpn.com Tested on: GNU/Linux - Kali 2017.1 Release Description: MAWK AWK Interpreter 1.3.3-17 and prior is prone t...

MAWK 1.3.3-17 Buffer Overflow

!/usr/bin/python Developed using Exploit Pack - http://exploitpack.com - Exploit Author: Juan Sacco at KPN Red Team - http://www.kpn.com Tested on: GNU/Linux - Kali 2017.1 Release Description: MAWK AWK Interpreter 1.3.3-17 and prior is prone to a stack-based buffer overflow vulnerability because...

MAWK 1.3.3-17 - Local Buffer Overflow

MAWK 1.3.3-17 - Local Buffer Overflow !/usr/bin/python Developed using Exploit Pack - http://exploitpack.com - Exploit Author: Juan Sacco at KPN Red Team - http://www.kpn.com Tested on: GNU/Linux - Kali 2017.1 Release Description: MAWK AWK Interpreter 1.3.3-17 and prior is prone to a stack-based...

MAWK 1.3.3-17 - Local Buffer Overflow

!/usr/bin/python Developed using Exploit Pack - http://exploitpack.com - Exploit Author: Juan Sacco at KPN Red Team - http://www.kpn.com Tested on: GNU/Linux - Kali 2017.1 Release Description: MAWK AWK Interpreter 1.3.3-17 and prior is prone to a stack-based buffer overflow vulnerability because...

The vulnerability of the PHP interpreter allows attackers to trigger a service failure for the central processor.

The vulnerability of the PHP interpreter is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause a failure in the central processor’s service by injecting long variables related to main/phpvariables.c...

CVE-2017-11144

In PHP before 5.6.31, 7.x before 7.0.21, and 7.1.x before 7.1.7, the openssl extension PEM sealing code did not check the return value of the OpenSSL sealing function, which could lead to a crash of the PHP interpreter, related to an interpretation conflict for a negative number in...

CVE-2017-11145

In PHP before 5.6.31, 7.x before 7.0.21, and 7.1.x before 7.1.7, an error in the date extension's timelibmeridian parsing code could be used by attackers able to supply date strings to leak information from the interpreter, related to ext/date/lib/parsedate.c out-of-bounds reads affecting the...

CVE-2017-11143

In PHP before 5.6.31, an invalid free in the WDDX deserialization of boolean parameters could be used by attackers able to inject XML for deserialization to crash the PHP interpreter, related to an invalid free for an empty boolean element in ext/wddx/wddx.c...

The vulnerability in the WIN32OLE methods ole_invoke and ole_query_interface of the Ruby interpreter allows a malicious actor to execute arbitrary code.

The vulnerability in the WIN32OLE methods oleinvoke and olequeryinterface of the Ruby interpreter arises due to incorrect checking of the returned value from these methods or functions. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the _cancel_eval method in the TclTkIp class of the Ruby interpreter allows a hacker to execute arbitrary code.

The vulnerability of the canceleval method in the TclTkIp class of the Ruby interpreter arises from an incorrect check of the returned value by the method or function. Exploiting this vulnerability could allow a malicious actor, operating remotely, to execute arbitrary code...

The vulnerability of the component implementation in ext/standard/var.c of the PHP interpreter allows a attacker to cause a service failure or exert other effects.

The vulnerability in the implementation of components in ext/standard/var.c of the PHP interpreter is related to the use of memory after it is freed. Exploiting this vulnerability may allow an attacker, operating remotely, to cause a service failure the use of a resource after it is freed or have...

PHP Information Disclosure Vulnerability (CNVD-2017-22595)

PHP PHP: Hypertext Preprocessor is an open source general-purpose computer scripting language maintained by the PHP Group and the open source community. A security vulnerability exists in PHP 5.6.31 and earlier, versions 7.x through 7.0.21, and 7.1.x through 7.1.7, which stems from a lack of boun...

PHP 'phar_parse_pharfile' Function DoS Vulnerability - Windows

PHP is prone to a denial of service DoS vulnerability. This VT has been deprecated and merged into the VT SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...