LibRaw: Stack-based buffer overflow in quicktake_100_load_raw() function in internal/dcraw_common.cpp

LibRaw is vulnerable to stack-based buffer overflow in internal/dcrawcommon.cpp:quicktake100loadraw function when processing specially-crafted RAW data. An attacker could potentially use this flaw to cause an arbitrary code execution or denial of service...

LibRaw: NULL pointer dereference in leaf_hdr_load_raw() function in internal/dcraw_common.cpp

A NULL pointer dereference vulnerability in internal/dcrawcommon.cpp:leafhdrloadraw function was found in LibRaw. A user can cause a denial of service when processing specially-crafted RAW data...

CVE-2018-5806

A NULL pointer dereference vulnerability in internal/dcrawcommon.cpp:leafhdrloadraw function was found in LibRaw. A user can cause a denial of service when processing specially-crafted RAW data...

Vulchain Scanner: 5 basic principles

New Year holidays in Russia lasts 10 days this year! Isn't it an excellent opportunity to start a new project? So, I decided to make my own active network vulnerability scanner - Vulchain. Why? Well, first of all, it's fun. You can make the architecture from scratch, see the difficulties invisibl...

White House Approves New Rules for Sharing of Raw Intelligence Data

President Obama last week approved a change in the way the National Security Agency shares raw signals intelligence data with the rest of the U.S. intelligence community, a shift that privacy experts worry will erode the civil liberties of Americans. An unclassified document released by the Offic...

Lhasa lha decode_level3_header Heap Corruption Vulnerability

SUMMARY An exploitable integer underflow exists during calculation size for all headers in decodelevel3header function of Lhasa lha application. Smaller value of headerlen than LEVEL3HEADERLEN 32 cause during subtraction integer underflow and lead later to memory corruption via heap based buffer...

OS X 10.10 Bluetooth TransferACLPacketToHW - Crash

No description provided by source. include include include include include include struct BluetoothCall uint64t args7; uint64t sizes7; uint64t index; ; int mainvoid / Finding vuln service / ioservicet service = IOServiceGetMatchingServicekIOMasterPortDefault,...

Cuckoo Sandbox v1.1 - Automated Malware Analysis

Cuckoo Sandbox is a malware analysis system. It simply means that you can throw any suspicious file at it and in a matter of seconds Cuckoo will provide you back some detailed results outlining what such file did when executed inside an isolated environment. Cuckoo generates a handful of differen...

Fedora Update for php-pecl-xhprof FEDORA-2013-18049

Check for the Version of php-pecl-xhprof OpenVAS Vulnerability Test Fedora Update for php-pecl-xhprof FEDORA-2013-18049 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modif...

Fedora Update for php-pecl-xhprof FEDORA-2013-18094

Check for the Version of php-pecl-xhprof OpenVAS Vulnerability Test Fedora Update for php-pecl-xhprof FEDORA-2013-18094 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modif...

[SECURITY] Fedora 20 Update: php-pecl-xhprof-0.9.4-1.fc20

XHProf is a function-level hierarchical profiler for PHP. This package provides the raw data collection component, implemented in C as a PHP extension. The HTML based navigational interface is provided in the "xhprof" package...

[SECURITY] Fedora 18 Update: php-pecl-xhprof-0.9.4-1.fc18

XHProf is a function-level hierarchical profiler for PHP. This package provides the raw data collection component, implemented in C as a PHP extension. The HTML based navigational interface is provided in the "xhprof" package...

[SECURITY] Fedora 19 Update: php-pecl-xhprof-0.9.4-1.fc19

XHProf is a function-level hierarchical profiler for PHP. This package provides the raw data collection component, implemented in C as a PHP extension. The HTML based navigational interface is provided in the "xhprof" package...

flash-plugin: arbitrary code exec via integer overflow in copyRawDataTo method in Matrix3D class

Integer overflow in the copyRawDataTo method in the Matrix3D class in Adobe Flash Player before 11.4.402.265 allows remote attackers to execute arbitrary code via malformed arguments...

CVE-2011-2951

Buffer overflow in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.5, RealPlayer SP 1.0 through 1.1.5, and Mac RealPlayer 12.0.0.1569 allows remote attackers to execute arbitrary code via a crafted rawdataframe field in an AAC file...

openSUSE 10 Security Update : xterm (xterm-5902)

XTerm evaluated various ANSI Escape sequences so that command execution was possible if an attacker could pipe raw data to an xterm. CVE-2008-2383 It is usually not recommended to display raw data on an xterm. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...

createdirectory2sysdba.sql

--note windows adds 0D 0A to end as cTRL LF --WINDOWS VERSION 10.1 DECLARE fi UTLFILE.FILETYPE; bu RAW32767; bu2 varchar232767; bu3 varchar232767; BEGIN...

FirstClass Desktop 7.1 (latest) Buffer Overflow Exploit

Exploit for unknown platform in category local exploits ======================================================= FirstClass Desktop 7.1 latest Buffer Overflow Exploit ======================================================= / ++++++++++++++++++++++++++++++++++++++++++++++++++++ FirstClass Desktop 7...