4172 matches found
The vulnerability of the Wireshark Network Protocol Analyzer software allows a remote attacker to compromise the accessibility of protected information.
The vulnerability in the tvbrawtextadd function within the MEGACO dissector’s code, located in epan/dissectors/packet-megaco.c, allows malicious actors operating remotely to trigger a service failure hang by using an empty string...
The vulnerability of the Linux operating system, which allows a malicious individual to gain access to protected information
The function rawcmdcopyout in the file /drivers/block/floppy.c contains an error in the handling of permissions for accessing memory pointers during the execution of the system call FDRAWCMD. This allows a malicious individual to gain access to information stored in the dynamic memory of the...
The vulnerability of the Linux operating system, which allows a malicious individual to trigger a service failure or increase their privileges.
The Linux operating system contains a vulnerability related to errors in processing system calls. Exploiting this vulnerability allows for performing service failures or increasing privileges when executing the system call FDRAWCMD ioctl...
Adobe Flash - Overflow in Processing Raw 565 Textures
Adobe Flash - Overflow in Processing Raw 565 Textures Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=792 There is an overflow in the processing of raw 565 textures in ATF processing. To reproduce the issue, load the attach file '70' using LoadImage.swf as follows:...
Adobe Flash - Overflow in Processing Raw 565 Textures
Exploit for multiple platform in category dos / poc Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=792 There is an overflow in the processing of raw 565 textures in ATF processing. To reproduce the issue, load the attach file '70' using LoadImage.swf as follows:...
Adobe Flash - Overflow in Processing Raw 565 Textures
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=792 There is an overflow in the processing of raw 565 textures in ATF processing. To reproduce the issue, load the attach file '70' using LoadImage.swf as follows: LoadImage.swf?img=70 Proof of Concept:...
DEBIAN-CVE-2016-2140
The libvirt driver in OpenStack Compute Nova before 2015.1.4 kilo and 12.0.x before 12.0.3 liberty, when using raw storage and usecowimages is set to false, allows remote authenticated users to read arbitrary files via a crafted qcow2 header in an ephemeral or root disk...
CVE-2016-2140
The libvirt driver in OpenStack Compute Nova before 2015.1.4 kilo and 12.0.x before 12.0.3 liberty, when using raw storage and usecowimages is set to false, allows remote authenticated users to read arbitrary files via a crafted qcow2 header in an ephemeral or root disk...
Code injection
The libvirt driver in OpenStack Compute Nova before 2015.1.4 kilo and 12.0.x before 12.0.3 liberty, when using raw storage and usecowimages is set to false, allows remote authenticated users to read arbitrary files via a crafted qcow2 header in an ephemeral or root disk...
DEBIAN-CVE-2015-5158
Stack-based buffer overflow in hw/scsi/scsi-bus.c in QEMU, when built with SCSI-device emulation support, allows guest OS users with CAPSYSRAWIO permissions to cause a denial of service instance crash via an invalid opcode in a SCSI command descriptor block...
UBUNTU-CVE-2016-2140
The libvirt driver in OpenStack Compute Nova before 2015.1.4 kilo and 12.0.x before 12.0.3 liberty, when using raw storage and usecowimages is set to false, allows remote authenticated users to read arbitrary files via a crafted qcow2 header in an ephemeral or root disk...
PT-2016-5023
Name of the Vulnerable Software and Affected Versions OpenStack Compute Nova versions prior to 2015.1.4 kilo OpenStack Compute Nova versions 12.0.x prior to 12.0.3 liberty Description The issue allows remote authenticated users to read arbitrary files via a crafted qcow2 header in an ephemeral or...
CVE-2016-2140: Exposure of Sensitive Information to an Unauthorized Actor
The libvirt driver in OpenStack Compute Nova before 2015.1.4 kilo and 12.0.x before 12.0.3 liberty, when using raw storage and usecowimages is set to false, allows remote authenticated users to read arbitrary files via a crafted qcow2 header in an ephemeral or root disk...
DEBIAN-CVE-2016-1714
The 1 fwcfgwrite and 2 fwcfgread functions in hw/nvram/fwcfg.c in QEMU before 2.4, when built with the Firmware Configuration device emulation support, allow guest OS users with the CAPSYSRAWIO privilege to cause a denial of service out-of-bounds read or write access and process crash or possibly...
Lhasa lha decode_level3_header Heap Corruption Vulnerability
SUMMARY An exploitable integer underflow exists during calculation size for all headers in decodelevel3header function of Lhasa lha application. Smaller value of headerlen than LEVEL3HEADERLEN 32 cause during subtraction integer underflow and lead later to memory corruption via heap based buffer...
Internet Bug Bounty: Integer Overflow in php_raw_url_encode
https://bugs.php.net/bug.php?id=71798...
openstack-nova: Host data leak through resize/migration
An information-exposure flaw was found in the OpenStack Compute nova resize and migrate functionality. An authenticated user could write a malicious qcow header to an ephemeral or root disk, referencing a block device as a backing file. With a subsequent resize or migration, file system content o...
openstack-nova: Host data leak through resize/migration
An information-exposure flaw was found in the OpenStack Compute nova resize and migrate functionality. An authenticated user could write a malicious qcow header to an ephemeral or root disk, referencing a block device as a backing file. With a subsequent resize or migration, file system content o...
Winpayloads - Undetectable Windows Payload Generation
Undetectable Windows Payload Generation with extras Running on Python2.7 Getting Started git clone https://github.com/Charliedean/Winpayloads cd WinPayloads sudo ./setup.sh python WinPayloads.py Menu 1 Windows Reverse ShellStageless Shellter 2 Windows Reverse MeterpreterStaged Shellter, UacBypass...
Debian DSA-3434-1 : linux - security update
Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leak. - CVE-2015-7513 It was discovered that a local user permitted to use the x86 KVM subsystem could configure the PIT emulation to cause a denial of servic...