ExportDumper

ExportDumper A small tool I made to dump the export table of PE files. The primary use case was intended for use within DLL proxying. Usage .\ExportDump dllpath e.g. .\ExportDump C:\Windows\System32\version.dll Dumping all 17 exported functions from C:\windows\system32\version.dll. + Dumping done...

Astra Linux – Vulnerability in Nasm

In libnasm.a of Netwide Assembler NASM 2.14.xx, asm/pragma.c allows for a NULL pointer dereferencing in processpragma, searchpragmalist, and nasmsetlimit when "%pragma limit" is mishandled...

Akamai Cache Detection

Sends a HEAD request with a Pragma header value of "akamai-x-cache-on" and looks for an akamai-specific response header value. !/usr/bin/env python3 -- coding: utf-8 -- """Sends a HEAD request with a Pragma header value of "akamai-x-cache-on" and looks for an akamai-specific respon.""" import re...

Siemens SIMATIC S7-1500 Improper Check for Unusual or Exceptional Conditions (CVE-2019-19646)

pragma.c in SQLite through 3.30.1 mishandles NOT NULL in an integritycheck PRAGMA command in certain cases of generated columns. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc...

EUVD-2008-0166

Malware in sbrugna...

EUVD-2006-2422

Malware in sbrugna...

EUVD-2000-0704

Malware in sbrugna...

EUVD-2001-1244

Malware in sbrugna...

EUVD-2019-5488

Malware in sbrugna...

EUVD-2005-1971

Malware in sbrugna...

shaderc:glslc_fuzzer: Container-overflow in std::__1::basic_string<char, std::__1::char_traits<char>, glslang::pool_allocato

Project: https://github.com/google/shaderc.git Detailed Report: https://oss-fuzz.com/testcase?key=4916925462806528 Project: shaderc Fuzzing Engine: afl Fuzz Target: glslcfuzzer Job Type: aflasanshaderc Platform Id: linux Crash Type: Container-overflow READ 1 Crash Address: 0x525000bd1ac0 Crash...

pragma.c in SQLite through 3.30.1 mishandles NOT NULL in an integrity_check PRAGMA command in certain cases of generated columns.

...

ABB eSOMS Unauthorized Access

The vulnerability of the ABB eSOMS production process management software is related to errors in the Cache-Control and Pragma headers of HTTP responses. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

SUSE CVE-2019-14248

In libnasm.a in Netwide Assembler NASM 2.14.xx, asm/pragma.c allows a NULL pointer dereference in processpragma, searchpragmalist, and nasmsetlimit when "%pragma limit" is mishandled...

Integer overflow in AdaptativeFee

Lines of code Vulnerability details Impact You have to take into account that when using a pragma lower than 0.8.X there is no compiler protection against any overflow. The method AdaptiveFee.exp is vulnerable to an integer overflows. Proof of Concept Using the following recipe: x = uint256.Max g...

Contracts calls to main ENS services will fail. Plus, ETHRegistrarController#withdraw() with future upgrades will revert

Lines of code Vulnerability details This is a classic Code4rena issue. The transfer call has a hard coded gas budget whenever this affect another part of the EVM will be very harmful for those usage which will make the system and its users at risk. There is two parts of this issue; when the calle...

Wrong pragma

Lines of code Vulnerability details Impact Use a buggy version of solidity with immutable. Proof of Concept The contract use immutable, and this solidity version defined in the pragma has some issues with them, as you can see here. Recommended Mitigation Steps Use at least 0.8.9 --- The text was...

Zetetic Sqlcipher resource management error vulnerability

Zetetic Sqlcipher is a SqlLite-based database from Zetetic USA. The database provides a SqlLite-like access API while adding numerous security elements. A resource management error vulnerability exists in Zetetic SQLCipher versions 4.x through 4.4.1, which stems from sqlciphercodecpragma and...

SQLite integrity_check Command Full Control

The vulnerability of the integritycheck command in the PRAGMA implementation of the SQLite database management system is related to insufficient checks for unusual or exceptional states. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain full control over the...

CVE-2019-19000 eSOMS Cachecontrol (Pragma) HTTP Header

For ABB eSOMS 4.0 to 6.0.3, the Cache-Control and Pragma HTTP headers have not been properly configured within the application response. This can potentially allow browsers and proxies to cache sensitive information...