CVE-2017-7274

The rpkcs7parsecms function in libr/util/rpkcs7.c in radare2 1.3.0 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted PE file...

UBUNTU-CVE-2017-7274

The rpkcs7parsecms function in libr/util/rpkcs7.c in radare2 1.3.0 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted PE file...

Null pointer dereference

The rpkcs7parsecms function in libr/util/rpkcs7.c in radare2 1.3.0 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted PE file...

CVE-2017-7274

The rpkcs7parsecms function in libr/util/rpkcs7.c in radare2 1.3.0 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted PE file...

CVE-2017-7274

The rpkcs7parsecms function in libr/util/rpkcs7.c in radare2 1.3.0 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted PE file...

CVE-2017-7274

The rpkcs7parsecms function in libr/util/rpkcs7.c in radare2 1.3.0 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted PE file...

coren-pe.gov.br XSS vulnerability

Vulnerable URL: http://www.coren-pe.gov.br/novo/index.php?s=%22%3E%3Csvg/onload=prompt%27OPENBUGBOUNTY%27%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1259536 VIP website...

KLA10983 Privilege escalation vulnerability in Windows IIS

An improper sanitizing of a specially designed request was found in Microsoft IIS Server. By exploiting this vulnerability malicious users can gain privileges. This vulnerability can be exploited remotely via a specially designed URL. Original advisories MS17-016 CVE-2017-0055 Exploitation Public...

KLA10988 Information disclosure vulnerability in Windows DirectShow

An improper objects handling in memory was found in Windows DirectShow. By exploiting this vulnerability malicious users can obtain sensitive information. This vulnerability can be exploited remotely via a specially designed website. Original advisories MS17-021 CVE-2017-0042 Related products...

KLA10991 Privilege escalation vulnerability in Adobe Shockwave Player

An unspecified vulnerability was found in the Adobe Shockwave Player. By exploiting this vulnerability malicious users can gain privileges. This vulnerability can be exploited remotely via a DLL hijacking. Original advisories Adobe Security Bulletin Related products Adobe-Shockwave-Player CVE lis...

KLA10984 Privilege escalation vulnerabilities in Windows kernel

Multiple serious vulnerabilities have been found in Microsoft Windows kernel. Malicious users can exploit these vulnerabilities to gain privileges. Below is a complete list of vulnerabilities: 1. An improper check of a buffer length prior to copying memory to the buffer can be exploited remotely ...

Windows PE Binary Static Analysis Tool : BinSkim

Windows PE Binary Static Analysis Tool BinSkim is a binary static analysis tool that scans Windows Portable Executable PE files for security and correctness. Among the verifications performed by BinSkim are validations that the PE file has opted into all of the binary mitigations offered by the...

KLA10970 Multiple vulnerabilities in Mozilla Thunderbird

Multiple serious vulnerabilities have been found in Mozilla Thunderbird. Malicious users can exploit these vulnerabilities to obtain sensitive information, run arbitrary code and cause a denial of service. Below is a complete list of vulnerabilities 1. Memory curruption vulnerability in asm.js ca...

Simple Static Malware Analyzer: SSMA

Simple Static Malware Analyzer SSMA is a simple malware analyzer written in Python 3. Features: Analyze PE file’s header and sections number of sections, entropy of sections/PE file, suspicious section names, suspicious flags in the characteristics of the PE file, etc. Searches for possible...

Altap Salamander 2.5 PE Viewer Buffer Overflow (CVE-2007-3314)

A buffer overflow exists in Altap Salamander. A remote attacker could trigger this vulnerability by creating a malicious file and convincing a user to view the file with the Portable Executable Viewer plugin within a vulnerable version of Salamander. Successful exploitation would allow remote...

DETRAN-PE Mais Fácil - Customized SSL, Redefined SSL Common Names verifier, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application DETRAN-PE Mais Fácil published at the 'play' market has multiple vulnerabilities...

KLA10957 Multiple vulnerabilities in Oracle Java SE

Multiple serious vulnerabilities have been found in Oracle Java SE components. By exploiting these vulnerabilities malicious users can gain privileges and obtain sensitive information. These vulnerabilities can be exploited remotely by unauthenticater attacker having network access via multiple...

shellcode programming: in memory in the parsing API to address-vulnerability warning-the black bar safety net

For Windows all with position-independent code, PIC core feature is based on a real-time analysis the API function address. It is a very important task. Here I introduce two popular methods, the use of the import address table IAT, and export address table to EAT is by far the most stable method...

KLA10939 Arbitrary code execution vulnerability in Microsoft Office Word 2016 and Microsoft SharePoint Enterprise Server 2016

Memory corruption vulnerability was found in Microsoft Word 2016 and Microsoft SharePoint Enterprise Server 2016. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed document. Original advisories MS17-0...

Multiplatform Open Source Binary Analysis: BARF Project

BARF : A multiplatform open source Binary Analysis and Reverse engineering Framework The analysis of binary code is a crucial activity in many areas of the computer sciences and software engineering disciplines ranging from software security and program analysis to reverse engineering. Manual...