Lucene search
+L

2599 matches found

Gitee
Gitee
added 2019/12/21 10:55 a.m.7 views

Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Microsoft

CVE-2017-11882 43b 原脚本来自于 https://github.com/embedi/CVE-2017-11882 109b 原脚本来自于 https://github.com/unamer/CVE-2017-11882/ (膜一波,现在unamer的代码已经可以执行shellcode了) CVE-2017-11882: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ MITRE CVE-2017-11882: https://vulners.com/cve/CVE-2017-118...

9.3CVSS7AI score0.99945EPSS
SaveExploits33
BDU FSTEC
BDU FSTEC
added 2019/12/09 12:0 a.m.9 views

The vulnerability of the V8 component in the Google Chrome browser allows attackers to disclose protected information.

The vulnerability of the V8 component in the Google Chrome browser is related to reading beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose sensitive information using a specially created PDF file...

7.1CVSS7.3AI score0.00833EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/12/03 12:0 a.m.6 views

The vulnerability of the Firefox browser arises from an operation that goes beyond the buffer in memory, allowing a hacker to execute arbitrary code.

The vulnerability of the Firefox browser arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS8.3AI score0.01835EPSS
SaveExploits0References7Affected Software2
BDU FSTEC
BDU FSTEC
added 2019/12/03 12:0 a.m.7 views

The vulnerability of the Firefox browser arises from an operation that goes beyond the buffer in memory, allowing a hacker to execute arbitrary code.

The vulnerability of the Firefox browser arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS8.3AI score0.01438EPSS
SaveExploits0References7Affected Software3
ICS
ICS
added 2019/12/03 12:0 a.m.172 views

Moxa AWK-3121

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low skill level to exploit/public exploits available Vendor: Moxa Equipment: AWK-3121 Vulnerabilities: Cleartext Transmission of Sensitive Information, Improper Access Control, Sensitive Cookie without ‘HTTPONLY’ Flag, Improper...

10CVSS9.8AI score0.39287EPSS
SaveExploits13References5
BDU FSTEC
BDU FSTEC
added 2019/11/11 12:0 a.m.8 views

The vulnerability of the VideoLAN VLC media player lies in the fact that operations are performed outside the buffer in memory, allowing an attacker to execute arbitrary code or cause a service failure.

The vulnerability of the VideoLAN VLC media player lies in the fact that the operation data is stored outside of the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause a service failure by using a specially created .3GP file...

6.8CVSS8.4AI score0.13337EPSS
SaveExploits0References7Affected Software3
BDU FSTEC
BDU FSTEC
added 2019/11/11 12:0 a.m.10 views

The vulnerability of the Dirac and Schrodinger codecs in the VideoLAN VLC media player software allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the Dirac and Schrodinger codecs in the VideoLAN VLC media player software lies in the fact that the operation results are stored outside of the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause system failures...

10CVSS7.6AI score0.02373EPSS
SaveExploits0References5Affected Software2
Tenable Nessus
Tenable Nessus
added 2019/11/08 12:0 a.m.24 views

Rockwellautomation 1766-l32bxba Improper Restriction of Operations within the Bounds of a Memory Buffer

A Buffer Overflow issue was discovered in Rockwell Automation Allen-Bradley MicroLogix 1400 Controllers, Series B and C Versions 21.002 and earlier. The stack-based buffer overflow vulnerability has been identified, which may allow remote code execution. File data ot500213.nasl...

7.5CVSS5.8AI score0.07145EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2019/11/08 12:0 a.m.23 views

Rockwellautomation Rslinx Improper Restriction of Operations within the Bounds of a Memory Buffer

A vulnerability was found in Rockwell Automation RSLinx Classic versions 4.10.00 and prior. An input validation issue in a .dll file of RSLinx Classic where the data in a Forward Open service request is passed to a fixed size buffer, allowing an attacker to exploit a stack-based buffer overflow...

7.5CVSS4.5AI score0.50031EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2019/11/08 12:0 a.m.29 views

Rockwell_automation Softlogix Improper Restriction of Operations within the Bounds of a Memory Buffer

An issue was discovered in Rockwell Automation Logix5000 Programmable Automation Controller FRN 16.00 through 21.00 excluding all firmware versions prior to FRN 16.00, which are not affected. By sending malformed common industrial protocol CIP packet, an attacker may be able to overflow a...

7.5CVSS2.8AI score0.10494EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2019/11/08 12:0 a.m.25 views

Siemens Simatic Improper Restriction of Operations within the Bounds of a Memory Buffer

Siemens SIMATIC S7-1200 PLCs 2.x and 3.x allow remote attackers to cause a denial of service defect-mode transition and control outage via crafted packets to TCP port 102 aka the ISO-TSAP port. File data ot500131.nasl...

7.8CVSS4.8AI score0.02392EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
added 2019/11/08 12:0 a.m.25 views

Yokogawa Centum Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in BKCLogSvr.exe in Yokogawa CENTUM CS 3000 R3.09.50 and earlier allows remote attackers to execute arbitrary code via crafted UDP packets. File data ot500149.nasl...

9.3CVSS7.1AI score0.25359EPSS
SaveExploits4References4
Tenable Nessus
Tenable Nessus
added 2019/11/08 12:0 a.m.25 views

Schneider-electric Modicon Improper Restriction of Operations within the Bounds of a Memory Buffer

A CWE-501: Trust Boundary Violation vulnerability on connection to the Controller exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum and Modicon Premium which could cause unauthorized access by conducting a brute force attack on Modbus protocol to the controller. File data...

5CVSS3.9AI score0.29575EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
added 2019/11/08 12:0 a.m.21 views

Schneider-electric Concept Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple stack-based buffer overflows in ModbusDrv.exe in Schneider Electric Modbus Serial Driver 1.10 through 3.2 allow remote attackers to execute arbitrary code via a large buffer-size value in a Modbus Application Header. File data ot500029.nasl...

9.3CVSS6.3AI score0.22293EPSS
SaveExploits10References6
Tenable Nessus
Tenable Nessus
added 2019/11/08 12:0 a.m.19 views

Honeywellprocess Enterprise Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in the HMIWeb Browser HSCDSPRenderDLL ActiveX control in Honeywell Process Solutions HPS Experion R2xx, R30x, R31x, and R400.x; Honeywell Building Solutions HBS Enterprise Building Manager R400 and R410.1; and Honeywell Environmental Combustion and Controls ECC Symmetr...

7.5CVSS4.9AI score0.04083EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2019/11/08 12:0 a.m.38 views

Windriver Vxworks Improper Restriction of Operations within the Bounds of a Memory Buffer

Wind River VxWorks 6.9 and vx7 has a Buffer Overflow in the IPv4 component. There is an IPNET security vulnerability: Stack overflow in the parsing of IPv4 packets’ IP options. File data ot500279.nasl...

7.5CVSS4AI score0.26629EPSS
SaveExploits0References9
Tenable Nessus
Tenable Nessus
added 2019/11/08 12:0 a.m.32 views

Windriver Vxworks Improper Restriction of Operations within the Bounds of a Memory Buffer

Wind River VxWorks 6.6 through 6.9 has a Buffer Overflow in the DHCP client component. There is an IPNET security vulnerability: Heap overflow in DHCP Offer/ACK parsing inside ipdhcpc. File data ot500061.nasl...

5.8CVSS2.8AI score0.84177EPSS
SaveExploits0References9
Tenable Nessus
Tenable Nessus
added 2019/11/08 12:0 a.m.20 views

Rockwellautomation Rslinx Improper Restriction of Operations within the Bounds of a Memory Buffer

Rockwell Automation RSLinx Classic Versions 4.00.01 and prior. This vulnerability may allow a remote, unauthenticated threat actor to intentionally send a malformed CIP packet to Port 44818, causing the RSLinx Classic application to terminate. The user will need to manually restart the software t...

5CVSS3.3AI score0.04495EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
added 2019/11/08 12:0 a.m.45 views

Windriver Vxworks Improper Restriction of Operations within the Bounds of a Memory Buffer

Wind River VxWorks has a Buffer Overflow in the TCP component issue 1 of 4. This is a IPNET security vulnerability: TCP Urgent Pointer = 0 that leads to an integer underflow. File data ot500065.nasl...

7.5CVSS2.6AI score0.7525EPSS
SaveExploits5References11
Tenable Nessus
Tenable Nessus
added 2019/11/08 12:0 a.m.25 views

Rockwellautomation Ab Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow on Rockwell Automation Allen-Bradley MicroLogix 1100 devices A through 15.000 and B before 15.002 allows remote attackers to execute arbitrary code via a crafted web request. File data ot500167.nasl...

10CVSS7.1AI score0.06619EPSS
SaveExploits0References3
Rows per page
Query Builder