CVE-2017-17818

In Netwide Assembler NASM 2.14rc0, there is a heap-based buffer over-read that will cause a remote denial of service attack, related to a while loop in pastetokens in asm/preproc.c...

CVE-2017-17818

In Netwide Assembler NASM 2.14rc0, there is a heap-based buffer over-read that will cause a remote denial of service attack, related to a while loop in pastetokens in asm/preproc.c...

Microsoft Windows jscript!NameTbl::GetValDef Use-After-Free Exploit

Exploit for windows platform in category dos / poc Windows: use-after-free in jscript!NameTbl::GetValDef CVE-2017-11903 There is a use-after-free vulnerability in jscript.dll. This issue could potentially be exploited through multiple vectors: - An attacker on the local network could exploit this...

Kaspersky AntiVirus - ExeCryptor Parsing Memory Corruption

Source: https://code.google.com/p/google-security-research/issues/detail?id=525 Fuzzing packed executables found the attached crash, it might be usable as an information leak as part of another bug, so filing as a low-risk bug. If I had to guess, I would say this is the ExeCryptor unpacker...

UBUNTU-CVE-2014-2580

The netback driver in Xen, when using certain Linux versions that do not allow sleeping in softirq context, allows local guest administrators to cause a denial of service "scheduling while atomic" error and host crash via a malformed packet, which causes a mutex to be taken when trying to disable...

Adobe Flash Player 11.3 Font Parsing Code Execution

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 "Adobe Flash Player 11.3 Font Parsing...

Apple Safari多个拒绝服务及欺骗漏洞

BUGTRAQ ID: 28891 Safari是苹果家族操作系统默认所捆绑的WEB浏览器。 Safari在处理畸形恶意的JavaScript时存在漏洞，用户访问包含有恶意代码的网页时会导致浏览器崩溃。 在通过document.write写入到同一页面时，无限的while循环可能导致Safari出现以下错误崩溃： Access violation when writing to 0FDFFFEE 如果使用safari打开了file://类链接的话，浏览器可能出现以下错误崩溃： Access violation when reading 00000004...