2822 matches found
CVE-2018-1000221
pkgconf version 1.5.0 to 1.5.2 contains a Buffer Overflow vulnerability in dequote that can result in dequote function returns 1-byte allocation if initial length is 0, leading to buffer overflow. This attack appear to be exploitable via specially crafted .pc file. This vulnerability appears to...
CVE-2018-1000221
pkgconf version 1.5.0 to 1.5.2 contains a Buffer Overflow vulnerability in dequote that can result in dequote function returns 1-byte allocation if initial length is 0, leading to buffer overflow. This attack appear to be exploitable via specially crafted .pc file. This vulnerability appears to...
CVE-2018-1000221
pkgconf version 1.5.0 to 1.5.2 contains a Buffer Overflow vulnerability in dequote that can result in dequote function returns 1-byte allocation if initial length is 0, leading to buffer overflow. This attack appear to be exploitable via specially crafted .pc file. This vulnerability appears to...
CVE-2018-1000221
Affected software: pkgconf up to version 1.5.2. Vulnerability: buffer overflow in dequote() when initial length is 0, potentially leading to overflow through a specially crafted .pc file. Impact/Severity: reported as high/critical in CVSS terms (C/H/I/H/A/H per provided metrics). Status/Fix: vuln...
CVE-2018-1000221
pkgconf version 1.5.0 to 1.5.2 contains a Buffer Overflow vulnerability in dequote that can result in dequote function returns 1-byte allocation if initial length is 0, leading to buffer overflow. This attack appear to be exploitable via specially crafted .pc file. This vulnerability appears to...
CVE-2018-1000221
pkgconf version 1.5.0 to 1.5.2 contains a Buffer Overflow vulnerability in dequote that can result in dequote function returns 1-byte allocation if initial length is 0, leading to buffer overflow. This attack appear to be exploitable via specially crafted .pc file. This vulnerability appears to...
CVE-2018-1000221: Improper Restriction of Operations within the Bounds of a Memory Buffer
pkgconf version 1.5.0 to 1.5.2 contains a Buffer Overflow vulnerability in dequote that can result in dequote function returns 1-byte allocation if initial length is 0, leading to buffer overflow. This attack appear to be exploitable via specially crafted .pc file. This vulnerability appears to...
PT-2018-9389
Name of the Vulnerable Software and Affected Versions pkgconf versions 1.5.0 through 1.5.2 Description The issue is related to a Buffer Overflow in the dequote function, which can return a 1-byte allocation if the initial length is 0, leading to a buffer overflow. This can be exploited via a...
Microsoft Cortana Flaw Allows Web Browsing on Locked PCs
As voice assistants like Alexa and Google Home gain traction in the smart-home market, they have also been under increased speculation around how they approach privacy. Now, researchers say they have discovered a newly-disclosed flaw in Microsoft’s Cortana assistant for Windows 10 machines that...
Steam Bans Developer After Outcry Over Cryptomining, Scam Items
The popular Steam online gaming platform has pulled a simple, 2D game from its library, after it was found to be consuming an unusual amount of processing power on gamers’ machines. Steam owner Valve booted the game, “Abstractism,” after players lodged complaints about the game chewing up process...
pc-outfitters.com XSS vulnerability
Open Bug Bounty ID: OBB-655084 Description| Value ---|--- Affected Website:| pc-outfitters.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Intel Smart Sound Tech Vulnerable to Three High-Severity Bugs
Intel issued three fixes for bugs that could allow a local attacker to execute code on Intel Core and Atom processor-based PCs. The vulnerabilities are tied to versions of its own Intel Smart Sound Technology, used to boost audio processing for tasks such as voice commands and interactions with...
PEPPERL+FUCHS VisuNet RM, VisuNet PC, and Box Thin Client
1. EXECUTIVE SUMMARY CVSS v3 7.5 Vendor: PEPPERL+FUCHS Equipment: VisuNet RM, VisuNet PC, Box Thin Client BTC Vulnerability: Improper Authentication 2. RISK EVALUATION Successful exploitation of this vulnerability could allow attackers to intercept sensitive communications, establish a...
Beware! Fortnite Cheat Hijacks Gamers' PCs to Intercept HTTPS Traffic
If you are looking for Fortnite v-bucks generator, aimbot or any other game cheats—then beware—you might end up installing malware on your PC! Web-based game-streaming platform Rainway is reporting that tens of thousands of Fortnite players have inadvertently infected their systems with a piece o...
The MIPS buffer overflow vulnerability practice-vulnerability warning-the black bar safety net
This practice from the learn-decrypt router vulnerability notes, and summaries. Mainly used to review and consolidate the entire process, the entire process is not very smooth, the main problem in the point that the overflow function of the address determination. This write your own exploit code ...
Microsoft Windows: Turn off handwriting recognition error reporting
This test checks the setting for policy OpenVAS Vulnerability Test $Id: winhandwritingerrorsharing.nasl 11337 2018-09-11 14:23:53Z emoss $ Check value for Turn off handwriting recognition error reporting Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH,...
Qualys Cloud Platform (VM, SCA, PC) 8.14 New Features
This new release of the Qualys Cloud Platform VM, SCA, PC, version 8.14, includes several new feature improvements across the apps such as Wallix AdminBastion support, EC2 scan improvements, VM reporting improvements, ESX/ESXi PC support for vCenter, PC STIG Report, and expanded technology suppor...
Input validation
Incomplete Cleanup vulnerability in ECOS Secure Boot Stick aka SBS 5.6.5 allows an attacker to compromise authentication and encryption keys via a compromised host PC after a reset...
