NSA Software Reverse Engineering Framework: Ghidra

Ghidra is a software reverse engineering SRE framework created and maintained by the National Security Agency Research Directorate. This framework includes a suite of full-featured, high-end software analysis tools that enable users to analyze compiled code on a variety of platforms including...

PT-2019-19711

Name of the Vulnerable Software and Affected Versions Druide Antidote RX, HD versions 8 before 8.05.2287 Druide Antidote RX, HD versions 9 before 9.5.3937 Druide Antidote RX, HD versions 10 before 10.1.2147 Description The issue allows remote attackers to steal NTLM hashes or perform SMB relay...

CVE-2019-9565: Undefined Security Weakness

Druide Antidote RX, HD, 8 before 8.05.2287, 9 before 9.5.3937 and 10 before 10.1.2147 allows remote attackers to steal NTLM hashes or perform SMB relay attacks upon a direct launch of the product, or upon an indirect launch via an integration such as Chrome, Firefox, Word, Outlook, etc. This occu...

Plug-in Signature Bypass Vulnerability in Multiple Huawei Products

Huawei HiRouter-CD20 and WS5200-10 are both home router products released by Huawei China. A plug-in signature bypass security vulnerability exists in several Huawei products. An attacker can build a malicious plug-in by tampering with a legitimate plug-in. When the attacker induces the user to...

Microsoft Windows: Store RunAs credentials (RM Service)

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winrmservrunascred.nasl 11363 2018-09-12 13:46:05Z emoss $ Check value for Disallow WinRM from storing RunAs credentials Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This...

FreeBSD : chromium -- vulnerability (36ff7a74-47b1-11e8-a7d6-54e1ad544088)

Google Chrome Releases reports : 62 security fixes in this release : - 826626 Critical CVE-2018-6085: Use after free in Disk Cache. Reported by Ned Williamson on 2018-03-28 - 827492 Critical CVE-2018-6086: Use after free in Disk Cache. Reported by Ned Williamson on 2018-03-30 - 813876 High...

The Firmware Analysis and Comparison Tool: FACT

The Firmware Analysis and Comparison Tool formerly known as Fraunhofer’s Firmware Analysis Framework FAF is intended to automate most of the firmware analysis process. It unpacks arbitrary firmware files and processes several analysis. Additionally, it can compare several images or single files...

CVE-2017-17789

In GIMP 2.8.22, there is a heap-based buffer overflow in readchanneldata in plug-ins/common/file-psp.c...

CVE-2017-17789

In GIMP 2.8.22, there is a heap-based buffer overflow in readchanneldata in plug-ins/common/file-psp.c...

CVE-2017-17787

In GIMP 2.8.22, there is a heap-based buffer over-read in readcreatorblock in plug-ins/common/file-psp.c...

CVE-2017-17786

In GIMP 2.8.22, there is a heap-based buffer over-read in ReadImage in plug-ins/common/file-tga.c related to bgr2rgb.part.1 via an unexpected bits-per-pixel value for an RGBA image...

PT-2017-3727

Name of the Vulnerable Software and Affected Versions: GIMP version 2.8.22 Description: The issue is related to a heap-based buffer over-read in the load image function in plug-ins/common/file-gbr.c of the GIMP graphic editor, specifically in the gbr import parser. This is caused by mishandling o...

CVE-2017-17786: Out-of-bounds Read

In GIMP 2.8.22, there is a heap-based buffer over-read in ReadImage in plug-ins/common/file-tga.c related to bgr2rgb.part.1 via an unexpected bits-per-pixel value for an RGBA image...

PT-2017-3730

Name of the Vulnerable Software and Affected Versions: GIMP version 2.8.22 Description: The issue is related to a heap-based buffer over-read in the read creator block function, located in plug-ins/common/file-psp.c. This can potentially allow a remote attacker to cause a denial of service,...

PT-2017-3732

Name of the Vulnerable Software and Affected Versions: GIMP version 2.8.22 Description: The issue is related to a heap-based buffer overflow in the read channel data function, located in plug-ins/common/file-psp.c, which can be exploited by a remote attacker to cause a denial of service or execut...

GStreamer plug-ins: User-assisted execution of arbitrary code

Background The GStreamer plug-ins provide decoders to the GStreamer open source media framework. Description Multiple vulnerabilities have been discovered in various GStreamer plug-ins. Please review the CVE identifiers referenced below for details. Impact A remote attacker could entice a user or...

GLSA-201705-10 : GStreamer plug-ins: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-201705-10 GStreamer plug-ins: User-assisted execution of arbitrary code Multiple vulnerabilities have been discovered in various GStreamer plug-ins. Please review the CVE identifiers referenced below for details. Impact : A remote...

[SECURITY] Fedora 26 Update: gstreamer1-plugins-bad-free-1.12.0-1.fc26

GStreamer is a streaming media framework, based on graphs of elements which operate on media data. This package contains plug-ins that aren't tested well enough, or the code is not of good enough quality...

EulerOS 2.0 SP2 : gstreamer1-plugins-bad-free (EulerOS-SA-2017-1007)

According to the versions of the gstreamer1-plugins-bad-free package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An integer overflow flaw, leading to a heap-based buffer overflow, was found in GStreamer's VMware VMnc video file format...

[SECURITY] Fedora 25 Update: python-sleekxmpp-1.3.2-1.fc25

SleekXMPP is a flexible XMPP library for python that allows you to create clients, components or servers for the XMPP protocol. Plug-ins can be create to cover every current or future XEP...