Linux Distros Unpatched Vulnerability : CVE-2017-18251

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in ImageMagick 7.0.7. A memory leak vulnerability was found in the function ReadPCDImage in coders/pcd.c, which allow remote attackers t...

Linux Distros Unpatched Vulnerability : CVE-2017-15225

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bfddwarf2cleanupdebuginfo in dwarf2.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.29, allows remote attackers to caus...

Linux Distros Unpatched Vulnerability : CVE-2017-9953

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - There is an invalid free in Image::printIFDStructure that leads to a Segmentation fault in Exiv2 0.26. A crafted input will lead to a remote denial of service...

CVE-2025-21606 Local Privilege Escalation via Exposed XPC Method Due to Client Verification Failure in stats

stats is a macOS system monitor in for the menu bar. The Stats application is vulnerable to a local privilege escalation due to the insecure implementation of its XPC service. The application registers a Mach service under the name eu.exelban.Stats.SMC.Helper. The associated binary,...

Linux Kernel ksmbd TCP Connection Memory Exhaustion Denial-of-Service Vulnerability

This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of the Linux Kernel. Authentication is not required to exploit this vulnerability. However, only systems with ksmbd enabled are vulnerable. The specific flaw exists within the handling of...

CVE-2024-49554

Adobe Media Encoder is affected by CVE-2024-49554: a NULL pointer dereference in versions 25.0, 24.6.3 and earlier can crash the application, causing a denial of service when a user opens a crafted file. Exploitation requires user interaction. The issue is acknowledged in APSB24-93; remediation i...

CVE-2024-47580 Multiple vulnerabilities in SAP NetWeaver AS for JAVA(Adobe Document Services)

An attacker authenticated as an administrator can use an exposed webservice to create a PDF with an embedded attachment. By specifying the file to be an internal server file and subsequently downloading the generated PDF, the attacker can read any file on the server with no effect on integrity or...

Tenda i9 Denial of Service Vulnerability

The Tenda i9 is a ceiling-mountable wireless access point from China's Tenda. A denial of service vulnerability exists in the Tenda i9 that stems from a null pointer dereference in the websReadEvent function of file /goform/GetIPTV. An attacker could exploit the vulnerability to cause a denial of...

The vulnerability of the handleFileRequest function in the src/main/java/com/feihong/ldap/HTTPServer.java file, a tool for exploiting vulnerabilities in Java Naming and Directory Interface (JNDI) via JNDIExploit, is related to a flaw in the pathname restriction mechanism. This vulnerability allows an attacker to disclose sensitive information that should be protected.

The vulnerability of the handleFileRequest function in src/main/java/com/feihong/ldap/HTTPServer.java of the JNDI exploitation tool is related to vulnerabilities in pathname restrictions. Exploiting this vulnerability can allow an attacker to disclose sensitive information...

CVE-2023-0203

NVIDIA ConnectX-5, ConnectX-6, and ConnectX6-DX contain a vulnerability in the NIC firmware, where an unprivileged user can exploit insufficient granularity of access control, which may lead to denial of service...

SUSE CVE-2015-8619

The Human Monitor Interface support in QEMU allows remote attackers to cause a denial of service out-of-bounds write and application crash...

SUSE CVE-2018-2794

Vulnerability in the Java SE, JRockit component of Oracle Java SE subcomponent: Security. Supported versions that are affected are Java SE: 6u181, 7u171, 8u162, 10 and JRockit: R28.3.17. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Java...

CVE-2022-3627

LibTIFF 4.4.0 has an out-of-bounds write in TIFFmemcpy in libtiff/tifunix.c:346 when called from extractImageSection, tools/tiffcrop.c:6860, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit...

PT-2022-14582 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-11 through Android-12L Description: The issue is related to improper input validation in the shouldAllowFgsWhileInUsePermissionLocked function of ActiveServices.java. This could allow starting a foreground service fro...

AWebServer GhostBuilding 18 - Denial of Service Exploit

Exploit Title: AWebServer GhostBuilding 18 - Denial of Service DoS Exploit Author: Andres Ramos Invertebrado Vendor Homepage: http://sylkat-tools.rf.gd/awebserver.htm Software Link: https://play.google.com/store/apps/details?id=com.sylkat.apache&hl=en Version: AWebServer GhostBuilding 18 Tested o...

Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware

log4j-vulnerable-app-cve-2021-44228-terraform A Terraform to d...

Denial Of Service(DoS)

libtiff.so is vulnerable to denial of service. An attacker is able to send a malicious input to the "invertImage" function in the component "tiffcrop" to crash the application...

Daniel Kamil Kozar tsMuxer buffer overflow vulnerability (CNVD-2021-49065)

tsMuxer is a transport stream multiplexing and TS encapsulation tool. A buffer overflow vulnerability exists in tsMuxer version 2.6.16. An attacker can exploit this vulnerability via specially crafted files to cause a denial of service...

iDailyDiary 4.30 - Denial of Service Exploit

Exploit Title: iDailyDiary 4.30 - Denial of Service PoC Exploit Author: Ismael Nava Vendor Homepage: https://www.splinterware.com/index.html Software Link: https://www.splinterware.com/download/iddfree.exe Version: 4.30 Tested on: Windows 10 Home x64 STEPS Open the program iDailyDiary Create a Ne...

Gopherus

This is an offensive tool for exploiting various vulnerabilities in servers. The tool is called Gopherus and is designed to generate payloads for exploiting Server-Side Request Forgery SSRF vulnerabilities in various services, including MySQL, PostgreSQL, FastCGI, Memcached, Redis, Zabbix, and...