The vulnerability of the kernel function kgsl_mem_entryDestroy in Qualcomm software allows a attacker to cause the system to abruptly terminate the execution of kernel code.

The vulnerability of the kernel function kgslmementrydestroy drivers/gpu/msm/kgsl.c in Qualcomm software is caused by synchronization errors when using shared resources. Exploiting this vulnerability can allow a remote attacker to cause the kernel code to terminate emergently...

macOS 10.13.x < 10.13.6 Security Update 2020-005 / 10.14.x < 10.14.6 Security Update 2020-005 / 10.15.x < 10.15.7

The remote host is running a version of macOS / Mac OS X that is 10.13.x prior to 10.13.6 Security Update 2020-005, 10.14.x prior to 10.14.6 Security Update 2020-005, or 10.15.x prior to 10.15.7. It is, therefore, affected by multiple vulnerabilities, as follows: - Processing a maliciously crafte...

samba: Crash after failed character conversion at log level 3 or above

A flaw was found in samba. When log levels are set at 3 or higher, the string obtained from the client, after a failed character conversion, is printed which could cause long-lived processes to terminate. The highest threat from this vulnerability is to system availability...

Apple Mac OS X Security Update (HT211849 - 01)

Apple Mac OS X is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

About the security content of macOS Catalina 10.15.7, Security Update 2020-005 High Sierra, Security Update 2020-005 Mojave

About the security content of macOS Catalina 10.15.7, Security Update 2020-005 High Sierra, Security Update 2020-005 Mojave This document describes the security content of macOS Catalina 10.15.7, Security Update 2020-005 High Sierra, Security Update 2020-005 Mojave. About Apple security updates F...

Apple iOS Memory Initialization Vulnerability

Apple iOS is an operating system for mobile devices developed by Apple Inc. in the United States. A security vulnerability exists in Apple iOS that stems from an out-of-bounds write issue resolved through improved boundary checking. An attacker could exploit the vulnerability to potentially cause...

CVE-2020-6318

A Remote Code Execution vulnerability exists in the SAP NetWeaver ABAP Server, up to release 7.40 and ABAP Platform release 7.40.Because of this, an attacker can exploit these products via Code Injection, and potentially enabling to take complete control of the products, including viewing,...

Exploit for Improper Null Termination in Php

Ladon POC Moudle CVE-2019-11043 PHP-FPM + Ngnix 漏洞简介 PHP-FPM 远程代码执行漏洞CVE-2019-11043 在长亭科技举办的 Real World CTF 中,国外安全研究员 Andrew Danau 在解决一道 CTF 题目时发现,向目标服务器 URL 发送 %0a 符号时,服务返回异常,疑似存在漏洞。 在使用一些有错误的Nginx配置的情况下,通过恶意构造的数据包,即可让PHP-FPM执行任意代码。 Example 和Ladon.exe放在同一目录,即可对C段或url.txt进行批量检测 bash Ladon...

CVE-2020-5778

A flaw exists in Trading Technologies Messaging 7.1.28.3 ttmd.exe due to improper validation of user-supplied data when processing a type 8 message sent to default TCP RequestPort 10200. An unauthenticated, remote attacker can exploit this issue, via a specially crafted message, to terminate...

CVE-2020-5779

A flaw in Trading Technologies Messaging 7.1.28.3 ttmd.exe relates to invalid parameter handling when calling strcpys with an invalid parameter i.e., a long src string parameter as a part of processing a type 4 message sent to default TCP RequestPort 10200. It's been observed that ttmd.exe...

Design/Logic Flaw

A flaw in Trading Technologies Messaging 7.1.28.3 ttmd.exe relates to invalid parameter handling when calling strcpys with an invalid parameter i.e., a long src string parameter as a part of processing a type 4 message sent to default TCP RequestPort 10200. It's been observed that ttmd.exe...

CVE-2020-5779

Affected software: Trading Technologies Messaging 7.1.28.3 (ttmd.exe) Vulnerability detail: A flaw in invalid parameter handling when calling strcpy_s() with an invalid parameter (long src string) while processing a type 4 message sent to the default TCP port 10200, leading to ttmd.exe terminatio...

CVE-2020-5779

A flaw in Trading Technologies Messaging 7.1.28.3 ttmd.exe relates to invalid parameter handling when calling strcpys with an invalid parameter i.e., a long src string parameter as a part of processing a type 4 message sent to default TCP RequestPort 10200. It's been observed that ttmd.exe...

Fedora 31 : golang-github-ulikunitz-xz (2020-deff052e7a)

The readUvarint function would run infinitely given specific input. The function is now terminating if more than 10 bytes of input have been read. Fixes issue 35 CVE-2020-16845. - Supports the check-ID None and fixes 'Checksum None is invalid' issue 27. Note that Tenable Network Security has...

CVE-2020-14483

A timeout during a TLS handshake can result in the connection failing to terminate. This can result in a Niagara thread hanging and requires a manual restart of Niagara Versions 4.6.96.28, 4.7.109.20, 4.7.110.32, 4.8.0.110 and Niagara Enterprise Security Versions 2.4.31, 2.4.45, 4.8.0.35 to corre...

ACTi NVR3 Standard Server Buffer Overflow Vulnerability

ACTi is a line of network cameras manufactured by ACTI. A buffer overflow vulnerability exists in the ActiveMediaServer.exe file in ACTi NVR3 Standard Server. A remote attacker can exploit this vulnerability to terminate the application with the help of a malformed payload...

Use-after-free

webkit2gtk is vulnerable to use-after-free. Due to a flaw in memory management, a remote attacker may be able to cause unexpected application termination or arbitrary code execution...

CVE-2020-15956

ActiveMediaServer.exe in ACTi NVR3 Standard Server 3.0.12.42 allows remote unauthenticated attackers to trigger a buffer overflow and application termination via a malformed payload...

Exploit for Classic Buffer Overflow in Acti Nvr

cve-2020-15956 ACTi NVR 2.3 Standard/Professional Server and A...

[SECURITY] [DSA 4739-1] webkit2gtk security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4739-1 [email protected] https://www.debian.org/security/ Alberto Garcia August 03, 2020 https://www.debian.org/security/faq -...