8473 matches found
irssi/theme-load-fuzz: Heap-buffer-overflow in theme_format_expand_abstract
Project: https://github.com/irssi/irssi.git Detailed report: https://oss-fuzz.com/testcase?key=5860683188011008 Project: irssi Fuzzer: aflirssitheme-load-fuzz Fuzz target binary: theme-load-fuzz Job Type: aflasanirssi Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...
irssi/theme-load-fuzz: Heap-buffer-overflow in theme_format_expand_abstract
Project: https://github.com/irssi/irssi.git Detailed report: https://oss-fuzz.com/testcase?key=5060418910289920 Project: irssi Fuzzer: aflirssitheme-load-fuzz Fuzz target binary: theme-load-fuzz Job Type: aflasanirssi Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...
VMware Virtual Appliance updates address side-channel analysis due to speculative execution
a. VMware Virtual Appliance Mitigations for Bounds-Check bypass Spectre-1, and Rogue data cache load issues Meltdown CPU data cache timing can be abused to efficiently leak information out of mis-speculated CPU execution, leading to at worst arbitrary virtual memory read vulnerabilities across...
web2py Arbitrary Code Execution Vulnerability
web2py is a set of open source Web framework written in Python , it supports the rapid development of database-driven Web-based applications . A security vulnerability exists in the 'secureload' function of the gluon/utils.py file in versions of web2py prior to 2.14.2, which stems from the...
WordPress Core - 'load-scripts.php' Denial of Service(CVE-2018-6389)
According to wordpress.com, the WordPress platform powers 29% of the worldwide internet websites. In this article I am going to explain how Denial of Service can easily be caused to almost any WordPress website online, and how you can patch your WordPress website in order to avoid this...
CVE-2018-6389 WordPress Parameter Resource Consumption Remote DoS
Yesterday Monday, February 5, 2018, a zero-day vulnerability in WordPress core was disclosed, which allows an attacker to perform a denial of service DoS attack against a vulnerable application. The vulnerability exists in the modules used to load JS and CSS files. These modules were designed to...
UBUNTU-CVE-2014-5282
Docker before 1.3 does not properly validate image IDs, which allows remote attackers to redirect to another image through the loading of untrusted images via 'docker load'...
DEBIAN-CVE-2014-5282
Docker before 1.3 does not properly validate image IDs, which allows remote attackers to redirect to another image through the loading of untrusted images via 'docker load'...
Exploit for Uncontrolled Resource Consumption in Wordpress
CVE-2018-6389 Wordpress Exploit CVE-2018-6389 Exploit Can Dow...
Exploit for Uncontrolled Resource Consumption in Wordpress
CVE-2018-6389 Wordpress Exploit CVE-2018-6389 Exploit Can Dow...
WordPress Core Load Script Denial of Service (CVE-2018-6389)
A Denial of Service vulnerability exists within WordPress Core Load Script. This vulnerability is due to the way WordPress handles large array loads. Successful exploitation could lead to a denial of service...
Unpatched DoS Flaw Could Help Anyone Take Down WordPress Websites
A simple yet serious application-level denial of service DoS vulnerability has been discovered in WordPress CMS platform that could allow anyone to take down most WordPress websites even with a single machine—without hitting with a massive amount of bandwidth, as required in network-level DDoS...
WordPress Core load-scripts.php Denial Of Service
import requests import sys import threading import random import re import argparse host='' headersuseragents= requestcounter=0 printedMsgs = def printMsgmsg: if msg not in printedMsgs: print "\n"+msg + " after %i requests" % requestcounter printedMsgs.appendmsg def useragentlist: global...
WordPress Core - 'load-scripts.php' Denial of Service
EDB Note: python doser.py -g...
VMSA-2018-0007:VMware Virtual Appliance updates address side-channel analysis due to speculative execution
VMSA-2018-0007.6 VMware Virtual Appliance updates address side-channel analysis due to speculative execution VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2018-0007.6 VMware Security Advisory Severity: Important VMware Security Advisory Synopsis: VMware Virtual Appliance...
WordPress Core - load-scripts.php Denial of Service
WordPress Core - load-scripts.php Denial of Service EDB Note: python doser.py -g...
Software Defined Radio Attack Tool: RFCrack
RFCrack is my personal RF test bench, it was developed for testing RF communications between any physical device that communicates over sub Ghz frequencies. IoT devices, Cars, Alarm Systems etc… Testing was done with the Yardstick One on OSX, but RFCrack should work fine in linux. Current support...
Huawei TripAdvisor Catwalk App Loads Arbitrary URL Vulnerability
TripAdvisor offers a wealth of travel planning and booking features, as well as powerful offline downloads and local services, making it a "must-have" tool for your outbound travel. A load arbitrary URL vulnerability exists in the Huawei TripAdvisor Catwalk application due to insufficient paramet...