188 matches found
CVE-2022-28041
stbimage.h v2.27 was discovered to contain an integer overflow via the function stbijpegdecodeblockprogdc. This vulnerability allows attackers to cause a Denial of Service DoS via unspecified vectors...
PT-2022-7206
Name of the Vulnerable Software and Affected Versions STB version 2.27 Description The issue is related to an integer shift of invalid size in the stbi jpeg decode block prog ac component. This can allow a remote attacker to access confidential data, compromise its integrity, and cause a denial o...
Rockwell Automation Micrologix Improper Access Control (CVE-2017-14466)
An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of Allen Bradley Micrologix 1400 Series B FRN 21.2 and before. A specially crafted packet can cause a read or write operation resulting in disclosure of sensitive information,...
PT-2021-26942
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.83 Description The issue is related to a potential refcount underflow in bpf prog. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...
PT-2021-28332
Name of the Vulnerable Software and Affected Versions: re2 affected versions not specified Description: The issue is related to a stack-buffer-overflow read, which occurs in the re2::DFA::InlinedSearchLoop function. This function is part of the re2::DFA::Search and re2::Prog::SearchDFA calls...
PT-2020-21887
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash caused by the use of an uninitialized value. The crash occurs in the following functions: stbi jpeg huff decode, stbi jpeg...
PT-2020-21854
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash caused by a use-of-uninitialized-value error. The crash occurs in the stbi jpeg decode block prog ac function, which is...
CVE-2018-7247
An issue was discovered in pixHtmlViewer in prog/htmlviewer.c in Leptonica before 1.75.3. Unsanitized input rootname can overflow a buffer, leading potentially to arbitrary code execution or possibly unspecified other impact...
Rockwell Automation Micrologix 1400 <= 21.2 Exploitable Access Control
Binary data 720215.prm...
PT-2018-6336
Name of the Vulnerable Software and Affected Versions: Synology Photo Station versions prior to 6.8.3-3463 Synology Photo Station versions prior to 6.3-2971 Description: The issue is related to improper input validation in the SYNOPHOTO Flickr MultiUpload function. This allows remote authenticate...
CVE-2018-7441
Leptonica through 1.75.3 uses hardcoded /tmp pathnames, which might allow local users to overwrite arbitrary files or have unspecified other impact by creating files in advance or winning a race condition, as demonstrated by /tmp/junksplitimage.ps in prog/splitimage2pdf.c...
CVE-2018-7441: Concurrent Execution using Shared Resource with Improper Synchronization
Leptonica through 1.75.3 uses hardcoded /tmp pathnames, which might allow local users to overwrite arbitrary files or have unspecified other impact by creating files in advance or winning a race condition, as demonstrated by /tmp/junksplitimage.ps in prog/splitimage2pdf.c...
CVE-2018-7247: Improper Restriction of Operations within the Bounds of a Memory Buffer
An issue was discovered in pixHtmlViewer in prog/htmlviewer.c in Leptonica before 1.75.3. Unsanitized input rootname can overflow a buffer, leading potentially to arbitrary code execution or possibly unspecified other impact...
CVE-2017-12079
Files or directories accessible to external parties vulnerability in picasa.php in Synology Photo Station before 6.8.1-3458 and before 6.3-2970 allows remote attackers to obtain arbitrary files via progid field...
re2: Use-of-uninitialized-value in re2::Prog::Optimize
Project: https://code.googlesource.com/re2 Detailed report: https://oss-fuzz.com/testcase?key=6666938535116800 Project: re2 Fuzzer: libFuzzerre2fuzzer Fuzz target binary: re2fuzzer Job Type: libfuzzermsanre2 Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...
Updated sendmail packages fix CVE-2014-3956
Updated sendmail packages fix security vulnerability: Sendmail before 8.14.9 does not properly closing file descriptors before executing programs. This bug could enable local users to interfere with an open SMTP connection if they can execute their own program for mail delivery e.g., via procmail...
Prog Finder DLL Hijacking Exploit ( avrt.dll )
Exploit for windows platform in category local exploits ============================================ Prog Finder DLL Hijacking Exploit avrt.dll ============================================ || || | || o,7 || . o7 || 4||| ow, : / /...
SystemTap Version Detection
This script detects the installed version of SystemTap and sets the result in KB. OpenVAS Vulnerability Test $Id: secpodsystemtapdetect.nasl 7823 2017-11-20 08:54:04Z cfischer $ SystemTap Version Detection Authors: Antu Sanadi Copyright: Copyright c 2009 SecPod, http://www.secpod.com This program...
DeepBurner 1.9.0.228 - Stack Buffer Overflow (SEH) (PoC)
//DeepBurner 1.9.0.228 Stack Buffer Overflow SEH overwrite //prog name burner.c include include char file = 0x3C, 0x44, 0x65, 0x65, 0x70, 0x42, 0x75, 0x72, 0x6E, 0x65, 0x72, 0x5F, 0x72, 0x65, 0x63, 0x6F, 0x72, 0x64, 0x20, 0x76, 0x65, 0x72, 0x3D, 0x22, 0x31, 0x2E, 0x38, 0x2E, 0x30, 0x2E, 0x32, 0x3...
