CVE-2020-25464

Heap buffer overflow at moddable/xs/sources/xsDebug.c in Moddable SDK before before 20200903. The top stack frame is only partially initialized because the stack overflowed while creating the frame. This leads to a crash in the code sending the stack frame to the debugger...

Moddable SDK Buffer Error Vulnerability

Moddable SDK is a set of software development kits SDKs for embedded software development for the Internet of Things from Moddable, Inc. in the United States. A buffer error vulnerability exists in versions prior to Moddable SDK 20200903, which stems from a moddable/xs/sources/xsDebug.c heap buff...

CVE-2020-0306: Undefined Security Weakness

In LLVM, there is a possible ineffective stack cookie placement due to stack frame double reservation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID:...

PT-2020-11659

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to ineffective stack cookie placement due to stack frame double reservation in LLVM. This could lead to local escalation of privilege with no additional execution privileges needed...

Windows/x86 - Null-Free WinExec Calc.exe Shellcode (195 bytes)

Title: Windows\x86 - Null-Free WinExec Calc.exe Shellcode 195 bytes Shellcode Author: Bobby Cooke Technique: PEB & Export Directory Table Tested On: Windows 10 Pro x86 10.0.18363 Build 18363 start: ; Create a new stack frame mov ebp, esp ; Set base stack pointer for new stack-frame sub esp, 0x20 ...

CVE-2019-15683

TurboVNC server code contains stack buffer overflow vulnerability in commit prior to cea98166008301e614e0d36776bf9435a536136e. This could possibly result into remote code execution, since stack frame is not protected with stack canary. This attack appear to be exploitable via network connectivity...

CVE-2019-11412

CVE-2019-11412 affects Artifex MuJS 1.0.5 where jscompile.c can trigger a denial of service due to an invalid stack-frame jump from a missing ENDTRY opcode call. The issue is described in the CVE entry; public remediation references indicate newer MuJS releases (e.g., MuJS 1.0.9) addressing the v...

CVE-2019-11412

An issue was discovered in Artifex MuJS 1.0.5. jscompile.c can cause a denial of service invalid stack-frame jump because it lacks an ENDTRY opcode call...

PT-2019-12297

Name of the Vulnerable Software and Affected Versions Artifex MuJS version 1.0.5 Description An issue in the jscompile.c file can cause a denial of service due to an invalid stack-frame jump because it lacks an ENDTRY opcode call. Recommendations For Artifex MuJS version 1.0.5, consider applying ...

CVE-2019-11412: Always-Incorrect Control Flow Implementation

An issue was discovered in Artifex MuJS 1.0.5. jscompile.c can cause a denial of service invalid stack-frame jump because it lacks an ENDTRY opcode call...

CVE-2018-14876

An issue was discovered in imagesavepng in image/image-png.cpp in Free Lossless Image Format FLIF 0.3. Attackers can trigger a longjmp that leads to an uninitialized stack frame after a libpng error concerning the IHDR image width...

Format string

An issue was discovered in imagesavepng in image/image-png.cpp in Free Lossless Image Format FLIF 0.3. Attackers can trigger a longjmp that leads to an uninitialized stack frame after a libpng error concerning the IHDR image width...

CVE-2018-14876

An issue was discovered in imagesavepng in image/image-png.cpp in Free Lossless Image Format FLIF 0.3. Attackers can trigger a longjmp that leads to an uninitialized stack frame after a libpng error concerning the IHDR image width...

CVE-2018-14876

An issue was discovered in imagesavepng in image/image-png.cpp in Free Lossless Image Format FLIF 0.3. Attackers can trigger a longjmp that leads to an uninitialized stack frame after a libpng error concerning the IHDR image width...

CVE-2018-14876

An issue was discovered in imagesavepng in image/image-png.cpp in Free Lossless Image Format FLIF 0.3. Attackers can trigger a longjmp that leads to an uninitialized stack frame after a libpng error concerning the IHDR image width...

CVE-2018-14876: Undefined Security Weakness

An issue was discovered in imagesavepng in image/image-png.cpp in Free Lossless Image Format FLIF 0.3. Attackers can trigger a longjmp that leads to an uninitialized stack frame after a libpng error concerning the IHDR image width...

PT-2018-12774

Name of the Vulnerable Software and Affected Versions FLIF version 0.3 Description An issue in the image save png function in image/image-png.cpp allows attackers to trigger a longjmp, resulting in an uninitialized stack frame after a libpng error related to the IHDR image width. Recommendations...

Microsoft Edge Chakra CFG Bypass By Overwriting JavaScript Bytecode Vulnerability

Chakra suffers from a CFG bypass by overwriting JavaScript bytecode. Chakra: CFG bypass by overwriting JavaScript bytecode Assume an attacker has the ability to overwrite Chakra's bytecode, either through a read/write primitive or through an overflow type vulnerability. Let's take a look at the...

Foscam IP Video Camera Stack Buffer Overflow Vulnerability

Foscam IP Video Camera is a wireless HD IP camera from Foscam China. A stack buffer overflow vulnerability exists in the web management interface in the Foscam IP Video Camera. An attacker can exploit this vulnerability by sending an HTTP request to the device to overwrite data on an arbitrary...

Microsoft Windows - 'win32k!NtGdiExtGetObjectW' Kernel Stack Memory Disclosure

/ Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1178 We have discovered that it is possible to disclose portions of uninitialized kernel stack memory in Windows 7-10 through the win32k!NtGdiExtGetObjectW system call accessible via a documented GetObject API function to user-mo...