CVE-2018-1000654

GNU Libtasn1-4.13 libtasn1-4.13 version libtasn1-4.13, libtasn1-4.12 contains a DoS, specifically CPU usage will reach 100% when running asn1Paser against the POC due to an issue in asn1expandobjectidptree, after a long time, the program will be killed. This attack appears to be exploitable via...

IEC104 Client Utility

This module allows sending 104 commands. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'IEC104 Client Utility', 'Description' = %q This module allows sending 104 commands. , 'Author' = 'Michae...

CVE-2017-3226

Das U-Boot is a device bootloader that can read its configuration from an AES encrypted file. Devices that make use of Das U-Boot's AES-CBC encryption feature using environment encryption i.e., setting the configuration parameter CONFIGENVAES=y read environment variables from disk as the encrypte...

UBUNTU-CVE-2017-3226

Das U-Boot is a device bootloader that can read its configuration from an AES encrypted file. Devices that make use of Das U-Boot's AES-CBC encryption feature using environment encryption i.e., setting the configuration parameter CONFIGENVAES=y read environment variables from disk as the encrypte...

CVE-2017-3226

CVE-2017-3226 concerns Das U-Boot’s AES-CBC environment encryption (CONFIG_ENV_AES=y). A crafted two‑byte sequence in the encrypted environment data can trigger an error during environment variable parsing, which is improperly handled and leads to an immediate process termination with a debugging...

CVE-2016-6545

Session cookies are not used for maintaining valid sessions in iTrack Easy. The user's password is passed as a POST parameter over HTTPS using a base64 encoded passwd field on every request. In this implementation, sessions can only be terminated when the user changes the associated password...

Exploit for Out-of-bounds Write in Microsoft

Dissecting modern browser exploit: case study of CVE-2018-8174...

Microsoft Windows: Heap termination on corruption

Disabling heap termination on corruption can allow certain legacy plug-in applications to function without terminating Explorer immediately, although Explorer may still terminate unexpectedly later. C Microsoft Corporation 2015. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions mig...

CVE-2018-12889

An issue was discovered in CCN-lite 2.0.1. There is a heap-based buffer overflow in mkAddToRelayCacheRequest and in ccnlpopulatecache for an array lacking '\0' termination when reading a binary CCNx or NDN file. This can result in Heap Corruption. This was addressed by fixing the memory managemen...

Security Bulletin: Multiple Security Vulnerabilities fixed in IBM Security Privileged Identity Manager

Summary There are multiple security vulnerabilities that have been fixed in the IBM Security Privileged Identity Manager Product Vulnerability Details CVEID: CVE-2016-0366 DESCRIPTION: IBM Security Identity Manager Virtual Appliance could allow a remote attacker to obtain sensitive information du...

Security Bulletin: IBM® DB2® LUW contains a denial of service vulnerability in which a malformated DRDA message may cause the DB2 server to terminate abnormally (CVE-2016-0211)

Summary IBM DB2 LUW contains a denial of service vulnerability. A remote, authenticated DB2 user could exploit this vulnerability by issuing a specially-crafted DRDA message and cause DB2 server to terminate abnormally. Vulnerability Details CVEID: CVE-2016-0211 DESCRIPTION: IBM DB2 LUW contains ...

Security Bulletin: IBM® DB2® LUW contains a vulnerability in which an ALTER TABLE statement on identity column may cause the DB2 server to terminate abnormally. (CVE-2014-6209)

Summary IBM DB2 contains a denial of service vulnerability in which an ALTER TABLE statement on identity column may cause the DB2 server to terminate abnormally. Vulnerability Details CVE-ID: CVE-2014-6209 DESCRIPTION: IBM DB2 contains a denial of service vulnerability. A remote, authenticated DB...

Security Bulletin: IBM® DB2® LUW contains a vulnerability in which multiple ALTER TABLE statements may cause the DB2 server to terminate abnormally. (CVE-2014-6210)

Summary IBM DB2 contains a vulnerability in which multiple ALTER TABLE statements may cause the DB2 server to terminate abnormally. Vulnerability Details CVE ID: CVE-2014-6210 DESCRIPTION: IBM DB2 contains a denial of service vulnerability. A remote, authenticated DB2 user could exploit this...

Security Bulletin: IBM® DB2® LUW contains a vulnerability in which an ALTER TABLE statement may cause the DB2 server to terminate abnormally when AUTO_REVAL is set to IMMEDIATE . (CVE-2014-6159)

Summary IBM DB2 contains a vulnerability in which an ALTER TABLE statement may cause the DB2 server to terminate abnormally when AUTOREVAL is set to IMMEDIATE . This could result in a DB2 server crash; if so, the server would need to be restarted. Vulnerability Details CVE ID: CVE-2014-6159...

Security Bulletin: IBM® DB2® LUW contains a vulnerability in which an ALTER TABLE statement may cause the DB2 server to terminate abnormally. (CVE-2014-6097)

Summary IBM DB2 LUW contains a vulnerability in which an ALTER TABLE statement may cause the DB2 server to terminate abnormally. This could result in a DB2 server crash and require that the server be restarted Vulnerability Details CVE ID: CVE-2014-6097 DESCRIPTION: IBM DB2 V9.7 and V9.8 contain ...

Security Bulletin: A security vulnerability has been identified in IBM DB2 shipped with IBM Predictive Maintenance and Quality (CVE-2016-0215)

Summary IBM DB2 is shipped as a component of IBM Predictive Maintenance and Quality. Information about a security vulnerability affecting IBM DB2 has been published in a security bulletin. Vulnerability Details Please consult the Security Bulletin: Vulnerability in IBM DB2 LUW contains a denial o...

Security Bulletin: IBM MQ termination of a client application causes denial of service (CVE-2017-1235)

Summary Termination during an MQGET call of a client application running on a channel with SHARECNV=1, could cause a SIGSEGV and termination of the channel agent process. Vulnerability Details CVEID: CVE-2017-1235 DESCRIPTION: IBM MQ could allow an authenticated user to cause a premature...

CVE-2018-3852

An exploitable denial of service vulnerability exists in the Ocularis Recorder functionality of Ocularis 5.5.0.242. A specially crafted TCP packet can cause a process to terminate resulting in denial of service. An attacker can send a crafted TCP packet to trigger this vulnerability...

CVE-2018-3852

An exploitable denial of service vulnerability exists in the Ocularis Recorder functionality of Ocularis 5.5.0.242. A specially crafted TCP packet can cause a process to terminate resulting in denial of service. An attacker can send a crafted TCP packet to trigger this vulnerability...

Gentoo app-backup/burp package design vulnerability

The Gentoo app-backup/burp package is a network backup and recovery program from the Gentoo Foundation. A security vulnerability in the Gentoo app-backup/burp package prior to version 2.1.32 stems from the program setting ownership of the PID file directory to the burp account. A local attacker...