CVE-2015-2800

The user authentication module in Huawei Campus switches S5700, S5300, S6300, and S6700 with software before V200R001SPH012 and S7700, S9300, and S9700 with software before V200R001SPH015 allows remote attackers to cause a denial of service device restart via vectors involving authentication, whi...

The vulnerability in the Chakra JavaScript engine of the Microsoft Edge browser allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability in the Chakra JavaScript engine of Microsoft Edge arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause a service failure memory corruption by using a specially crafted...

XAMPP v5.6.30 Local Buffer Overflow Exploit

XAMPP v5.6.30 Local Buffer Overflow Exploit Usage Info 1- Run Xampp Control Panel xampp-control.exe 2- Click Config Editor 3- Select A Name With 257 Character Or up to 257 characters 4- Click Save 5- If You Click The Each Button The Softwar Will Crash Title : XAMPP v5.6.30 Local Buffer Overflow...

WebKit: UXSS through HTMLObjectElement::updateWidget(CVE-2017-2493)

When an object element loads a JavaScript URLe.g., javascript:alert1, it checks whether it violate the Same Origin Policy or not. Here's some snippets of the logic. void HTMLObjectElement::updateWidgetCreatePlugins createPlugins ... String url = this-url; ... if !allowedToLoadFrameURLurl return;...

FreeBSD : miniupnpc -- integer signedness error (da1d5d2e-3eca-11e7-8861-0018fe623f2b)

Tintinweb reports : An integer signedness error was found in miniupnp's miniwget allowing an unauthenticated remote entity typically located on the local network segment to trigger a heap corruption or an access violation in miniupnp's http response parser when processing a specially crafted...

The vulnerability of the console-based graphic editor ImageMagick, which allows a hacker to trigger a service failure

The vulnerability of the ReadEXRImage function in the exr.c file of the ImageMagick console graphics editor is caused by the execution of an operation outside the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to cause a service failure loss of access to...

PostgreSQL Multiple Information Disclosure Vulnerabilities (May 2017) - Linux

PostgreSQL is prone to multiple information disclosure vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

QuickZip V4. 60 buffer overflow vulnerability details-vulnerability warning-the black bar safety net

This article will provide the reader a detailed description QuickZip v4. 60 buffer overflow vulnerability knowledge. Due to the vulnerabilities in 2010 appeared, so it's designed only for 32-bit Windows XP. So, I decided to try it in 64-bit Windows 7 reproduce the vulnerability, it would be a fun...

Microsoft Win32k Elevation of Privilege (CVE-2017-0246)

An elevation of privilege vulnerability exists in Microsoft Windows. The vulnerability is caused when the Windows kernel-mode fails to properly handle objects in memory. Successful exploitation would lead to write access violation...

miniupnpc -- integer signedness error

Tintinweb reports: An integer signedness error was found in miniupnp's miniwget allowing an unauthenticated remote entity typically located on the local network segment to trigger a heap corruption or an access violation in miniupnp's http response parser when processing a specially crafted...

Debian DLA-928-1 : libsndfile security update

Multiple vulnerabilities were found in libsndfile, a popular library for reading/writing audio files. CVE-2017-7585 In libsndfile before 1.0.28, an error in the 'flacbuffercopy' function flac.c can be exploited to cause a stack-based buffer overflow via a specially crafted FLAC file. CVE-2017-758...

CVE-2017-7721

IrfanView version 4.44 32bit with FPX Plugin before 4.45 has an Access Violation and crash in processing a FlashPix .FPX file...

Design/Logic Flaw

IrfanView version 4.44 32bit with FPX Plugin before 4.45 has an Access Violation and crash in processing a FlashPix .FPX file...

CVE-2017-7721

Affected software: IrfanView 4.44 (32-bit) with FPX Plugin prior to 4.45. Vulnerability: improper processing of FlashPix (.FPX) files leads to denial of service via an access violation/crash, potentially enabling remote triggering through crafted FPX content. Root cause: described as faulty handl...

CVE-2017-7721

IrfanView version 4.44 32bit with FPX Plugin before 4.45 has an Access Violation and crash in processing a FlashPix .FPX file...

FreeBSD : libsndfile -- multiple vulnerabilities (5a97805e-93ef-4dcb-8d5e-dbcac263bfc2)

NVD reports : In libsndfile before 1.0.28, an error in the 'flacbuffercopy' function flac.c can be exploited to cause a stack-based buffer overflow via a specially crafted FLAC file. In libsndfile before 1.0.28, an error in the 'headerread' function common.c when handling ID3 tags can be exploite...

CVE-2017-4969

The Cloud Controller in Cloud Foundry cf-release versions prior to v255 allows authenticated developer users to exceed memory and disk quotas for tasks...

Code injection

In libsndfile before 1.0.28, an error in the "flacbuffercopy" function flac.c can be exploited to cause a segmentation violation with write memory access via a specially crafted FLAC file during a resample attempt, a similar issue to CVE-2017-7585...

Code injection

In libsndfile before 1.0.28, an error in the "flacbuffercopy" function flac.c can be exploited to cause a segmentation violation with read memory access via a specially crafted FLAC file during a resample attempt, a similar issue to CVE-2017-7585...

CVE-2017-7741

In libsndfile before 1.0.28, an error in the "flacbuffercopy" function flac.c can be exploited to cause a segmentation violation with write memory access via a specially crafted FLAC file during a resample attempt, a similar issue to CVE-2017-7585...