CVE-2015-8099

CVE-2015-8099 affects F5 BIG-IP products (multiple modules) where software SYN cookies are configured on virtual servers. Under limited conditions, an invalid TCP segment can cause a DoS (High-Speed Bridge hang) in the data plane via virtual servers. The vulnerability impacts various BIG-IP relea...

Multiple F5 BIG-IP and BIG-IQ Denial of Service Vulnerabilities

F5 BIG-IP LTM, etc. are all products of F5 USA.LTM is a local traffic manager; BIG-IQ is a software-based cloud management solution.GTM is a wide-area traffic manager; WebAccelerator is an application gas pedal. A security vulnerability exists in several F5 BIG-IP and BIG-IQ products, which can b...

CVE-2015-8099: Improper Input Validation

F5 BIG-IP LTM, AFM, Analytics, APM, ASM, Link Controller, and PEM 11.3.x, 11.4.x before 11.4.1 HF10, 11.5.x before 11.5.4, 11.6.x before 11.6.1, and 12.x before 12.0.0 HF1; BIG-IP AAM 11.4.x before 11.4.1 HF10, 11.5.x before 11.5.4, 11.6.x before 11.6.1, and 12.x before 12.0.0 HF1; BIG-IP DNS 12....

PT-2016-3853

Name of the Vulnerable Software and Affected Versions F5 BIG-IP LTM, AFM, Analytics, APM, ASM, Link Controller, and PEM versions 11.3.x through 11.4.x before 11.4.1 HF10 F5 BIG-IP LTM, AFM, Analytics, APM, ASM, Link Controller, and PEM versions 11.5.x before 11.5.4 F5 BIG-IP LTM, AFM, Analytics,...

Through the ELF dynamic loading of the structure ROP chain Return-to-dl-resolve-the vulnerability warning-the black bar safety net

Play CTF game stick have know that PWN type of vulnerability topic will generally provide an executable program, and provide program run dynamically link the libc library. By the libc. so you can get the library function of the offset address, combined with the leak GOT the table in the libc...

PT-2018-3363

Name of the Vulnerable Software and Affected Versions: FreeRDP versions prior to 2.0.0-rc4 Description: The issue is related to a Heap-Based Buffer Overflow in the zgfx decompress segment function, which can cause memory corruption and potentially allow for remote code execution. The vulnerabilit...

The vulnerability of the Cisco IOS operating system, which allows a intruder to trigger a service failure

The vulnerability of the Wide Area Application Services Express implementation of the Cisco IOS operating system is related to resource management errors. Exploiting this vulnerability allows a malicious actor to trigger a service failure device reboot through a specially crafted TCP segment...

CVE-2016-1347

The Wide Area Application Services WAAS Express implementation in Cisco IOS 15.1 through 15.5 allows remote attackers to cause a denial of service device reload via a crafted TCP segment, aka Bug ID CSCuq59708...

CVE-2016-1347

The Wide Area Application Services WAAS Express implementation in Cisco IOS 15.1 through 15.5 allows remote attackers to cause a denial of service device reload via a crafted TCP segment, aka Bug ID CSCuq59708...

CVE-2016-1347: Undefined Security Weakness

The Wide Area Application Services WAAS Express implementation in Cisco IOS 15.1 through 15.5 allows remote attackers to cause a denial of service device reload via a crafted TCP segment, aka Bug ID CSCuq59708...

PT-2016-1575

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 15.1 through 15.5 Description The vulnerability in the Wide Area Application Services WAAS Express implementation allows remote attackers to cause a denial of service device reload via a crafted TCP segment. This is due to...

xen: hypervisor memory corruption due to x86 emulator flaw (xsa123)

It was found that the Xen hypervisor x86 CPU emulator implementation did not correctly handle certain instructions with segment overrides, potentially resulting in a memory corruption. A malicious guest user could use this flaw to read arbitrary data relating to other guests, cause a denial of...

Apple iOS dyld arbitrary code execution vulnerability (CNVD-2015-08185)

Apple iOS is an operating system developed by Apple for use in cell phones and more. A segment checksum vulnerability exists in the Apple iOS dyld handling, which allows an attacker to exploit the vulnerability to execute arbitrary code with system privileges...

CVE-2015-7079

dyld in Apple iOS before 9.2 and tvOS before 9.1 mishandles segment validation, which allows attackers to execute arbitrary code in a privileged context via a crafted app...

CVE-2015-7072

dyld in Apple iOS before 9.2, tvOS before 9.1, and watchOS before 2.1 mishandles segment validation, which allows attackers to execute arbitrary code in a privileged context via a crafted app...

CVE-2015-7079

dyld in Apple iOS before 9.2 and tvOS before 9.1 mishandles segment validation, which allows attackers to execute arbitrary code in a privileged context via a crafted app...

CVE-2015-7072: Improper Input Validation

dyld in Apple iOS before 9.2, tvOS before 9.1, and watchOS before 2.1 mishandles segment validation, which allows attackers to execute arbitrary code in a privileged context via a crafted app...

PT-2015-3126

Name of the Vulnerable Software and Affected Versions dyld in Apple iOS versions prior to 9.2 dyld in Apple tvOS versions prior to 9.1 dyld in Apple watchOS versions prior to 2.1 Description The issue exists due to insufficient input validation in the dyld component of the iOS operating system...

PT-2015-3130

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 9.2 Apple tvOS versions prior to 9.1 Description The issue exists due to insufficient input validation in the dyld component of the iOS operating system. This can be exploited by a remote attacker using a specially...

PT-2015-7774

Name of the Vulnerable Software and Affected Versions LibRaw versions prior to 0.17.1 Description The issue is related to an array index error in the smal decode segment function, which can be exploited by context-dependent attackers to cause memory errors and potentially execute arbitrary code...