PT-2022-32561

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v4.7 through v5.18.5 Description The issue is related to a refcount leak in the gic populate ppi partitions function. It was introduced in version v4.7 and fixed in version v5.18.6. The actual impact and attack plausibili...

PT-2022-32562

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.4 through v5.18.5 Description The issue concerns error handling in gic populate ppi partitions. It was introduced in version v5.4 and fixed in version v5.18.6. The actual impact and attack plausibility have not yet bee...

PT-2022-33021

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.4 through v5.4.199 Description The issue concerns error handling in gic populate ppi partitions. It was introduced in version v5.4 and fixed in version v5.4.200. The actual impact and attack plausibility have not yet...

The Link Between AWM Proxy & the Glupteba Botnet

On December 7, 2021, Google announced it was suing two Russian men allegedly responsible for operating the Glupteba botnet, a global malware menace that has infected millions of computers over the past decade. That same day, AWM Proxy -- a 14-year-old anonymity service that rents hacked PCs to...

Hackers Using PrivateLoader PPI Service to Distribute New NetDooka Malware

A pay-per-install PPI malware service known as PrivateLoader has been spotted distributing a "fairly sophisticated" framework called NetDooka, granting attackers complete control over the infected devices. "The framework is distributed via a pay-per-install PPI service and contains multiple parts...

Websites Hosting Cracks Spread Malware, Adware

We investigated pay-per-install PPI websites spreading multiple malware and adware, including CopperStealer and LNKR...

free-ppi-checking-service.metzgerloy.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-585483 Description| Value ---|--- Affected Website:| free-ppi-checking-service.metzgerloy.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3...

FreeBSD : wireshark -- multiple vulnerabilities (42c2c422-df55-11e5-b2bd-002590263bf5)

Wireshark development team reports : The following vulnerabilities have been fixed : - wnpa-sec-2015-31 NBAP dissector crashes. Bug 11602, Bug 11835, Bug 11841 - wnpa-sec-2015-37 NLM dissector crash. - wnpa-sec-2015-39 BER dissector crash. - wnpa-sec-2015-40 Zlib decompression crash. Bug 11548 -...

DEBIAN-CVE-2015-8741

The dissectppi function in epan/dissectors/packet-ppi.c in the PPI dissector in Wireshark 2.0.x before 2.0.1 does not initialize a packet-header data structure, which allows remote attackers to cause a denial of service application crash via a crafted packet...

CVE-2015-8741

The dissectppi function in epan/dissectors/packet-ppi.c in the PPI dissector in Wireshark 2.0.x before 2.0.1 does not initialize a packet-header data structure, which allows remote attackers to cause a denial of service application crash via a crafted packet...

CVE-2015-8741

The dissectppi function in epan/dissectors/packet-ppi.c in the PPI dissector in Wireshark 2.0.x before 2.0.1 does not initialize a packet-header data structure, which allows remote attackers to cause a denial of service application crash via a crafted packet...

Design/Logic Flaw

The dissectppi function in epan/dissectors/packet-ppi.c in the PPI dissector in Wireshark 2.0.x before 2.0.1 does not initialize a packet-header data structure, which allows remote attackers to cause a denial of service application crash via a crafted packet...

UBUNTU-CVE-2015-8741

The dissectppi function in epan/dissectors/packet-ppi.c in the PPI dissector in Wireshark 2.0.x before 2.0.1 does not initialize a packet-header data structure, which allows remote attackers to cause a denial of service application crash via a crafted packet...

CVE-2015-8741

The dissectppi function in epan/dissectors/packet-ppi.c in the PPI dissector in Wireshark 2.0.x before 2.0.1 does not initialize a packet-header data structure, which allows remote attackers to cause a denial of service application crash via a crafted packet...

CVE-2015-8741

The dissectppi function in epan/dissectors/packet-ppi.c in the PPI dissector in Wireshark 2.0.x before 2.0.1 does not initialize a packet-header data structure, which allows remote attackers to cause a denial of service application crash via a crafted packet...

CVE-2015-8741

CVE-2015-8741 affects Wireshark 2.0.x before 2.0.1; the PPI dissector (epan/dissectors/packet-ppi.c) does not initialize a packet-header data structure, enabling remote attackers to cause a Denial of Service (application crash) via crafted packets. This is part of a broader set of DoS issues acro...

CVE-2015-8741

The dissectppi function in epan/dissectors/packet-ppi.c in the PPI dissector in Wireshark 2.0.x before 2.0.1 does not initialize a packet-header data structure, which allows remote attackers to cause a denial of service application crash via a crafted packet...

Wireshark PPI Parser Denial of Service Vulnerability

Wireshark is the most popular network protocol parser. In Wireshark version 2.0.x prior to 2.0.1, the function dissectppi within epan/dissectors/packet-ppi.c in the PPI parser does not initialize the packet header data structure, and a remote attacker can cause a denial of service application cra...

PT-2016-3989

Name of the Vulnerable Software and Affected Versions Wireshark versions 2.0.0 through 2.0.1 Description The issue is related to the dissect ppi function in the PPI dissector, which does not initialize a packet-header data structure. This allows remote attackers to cause a denial of service,...