465 matches found
Internet Bug Bounty: ZeroMQ libzmq remote code execution
Bug report and exploit: https://github.com/zeromq/libzmq/issues/3351 Fix by me: https://github.com/zeromq/libzmq/pull/3353 My motive for full disclosure is as follows: Is it true that it is not safe to use ZeroMQ over the internet because it will crash? Earlier versions of the ZeroMQ library befo...
PT-2019-1509
Name of the Vulnerable Software and Affected Versions ZeroMQ libzmq versions 4.2.x through 4.3.0 Description The issue is caused by an integer overflow in the ZeroMQ libzmq library, which can be exploited by a remote attacker to execute arbitrary code. Specifically, a v2 decoder t::size ready...
Nameles - Open Source Entropy Based Invalid Traffic Detection And Pre-Bid Filtering
Nameles provides an easy to deploy, scalable IVT detection and filtering solution that is proven to detect at a high level of accuracy ad fraud and other types of invalid traffic such as web scraping. For a high level overview you might want to check out the website If you have any questions or...
Open Source Invalid Traffic Detection: Nameles
Nameles provides an easy to deploy, scalable IVT detection and filtering solution that is proven to detect at a high level of accuracy ad fraud and other types of invalid traffic such as web scraping. Comprehensive Detection Detects display, video and in-app based ad fraud, web scraping and other...
tcpdump Integer Overflow Vulnerability
tcpdump is a set of sniffing tools developed by the Tcpdump team that runs under the command line. The tool allows users to intercept and display TCP/IP and other packets sent or received over a network connection to that computer. An integer overflow vulnerability exists in the zmtp1printframe...
Man-in-the-Middle (MitM)
libzmq aka ZeroMQ is vulnerable to man-in-the-middle MitM attacks. To accept a connection as client or server, streamengine.cpp does not properly validate that the protection mechanism set on the socket matches that of the other party...
Integer overflow
The ZeroMQ parser in tcpdump before 4.9.0 has an integer overflow in print-zeromq.c:zmtp1printframe...
CVE-2016-7938
The ZeroMQ parser in tcpdump before 4.9.0 has an integer overflow in print-zeromq.c:zmtp1printframe...
DEBIAN-CVE-2016-7938
The ZeroMQ parser in tcpdump before 4.9.0 has an integer overflow in print-zeromq.c:zmtp1printframe...
CVE-2016-7938
The ZeroMQ parser in tcpdump before 4.9.0 has an integer overflow in print-zeromq.c:zmtp1printframe...
CVE-2016-7938
The ZeroMQ parser in tcpdump before 4.9.0 has an integer overflow in print-zeromq.c:zmtp1printframe...
CVE-2016-7938
CVE-2016-7938 affects tcpdump prior to 4.9.0, where the ZeroMQ parser contains an integer overflow in print-zeromq.c:zmtp1_print_frame(). The issue enables remote exploitation via crafted network traffic, with potential arbitrary code execution on the affected host. The vulnerability is addressed...
CVE-2016-7938
The ZeroMQ parser in tcpdump before 4.9.0 has an integer overflow in print-zeromq.c:zmtp1printframe...
CVE-2016-7938
The ZeroMQ parser in tcpdump before 4.9.0 has an integer overflow in print-zeromq.c:zmtp1printframe...
CVE-2016-7938
The ZeroMQ parser in tcpdump before 4.9.0 has an integer overflow in print-zeromq.c:zmtp1printframe...
CVE-2016-7938: Integer Overflow or Wraparound
The ZeroMQ parser in tcpdump before 4.9.0 has an integer overflow in print-zeromq.c:zmtp1printframe...
[SECURITY] Fedora 24 Update: fedmsg-0.18.2-1.fc24
Python API used around Fedora Infrastructure to send and receive messages w ith zeromq. Includes some CLI tools...
CVE-2016-7938
The ZeroMQ parser in tcpdump before 4.9.0 has an integer overflow in print-zeromq.c:zmtp1printframe...
PT-2017-9429
Name of the Vulnerable Software and Affected Versions tcpdump versions prior to 4.9.0 Description The issue concerns an integer overflow in the ZeroMQ parser, specifically in the zmtp1 print frame function within print-zeromq.c. This problem affects tcpdump. Recommendations For versions prior to...