CloudMe Sync 1.10.9 Buffer Overflow
This Metasploit module exploits a stack-based buffer overflow vulnerability in the CloudMe Sync version 1.10.9 client application. This Metasploit module has been tested successfully on Windows 7 SP1...
View ArticleDisk Savvy Enterprise 10.4.18 Buffer Ovreflow
This Metasploit module exploits a stack-based buffer overflow vulnerability in Disk Savvy Enterprise version 10.4.18, caused by improper bounds checking of the request sent to the built-in server. This...
View ArticleDoorkeeper 4.2.5 Cross Site Scripting
Doorkeeper versions 2.1.0 through 4.2.5 suffer from a persistent cross site scripting vulnerability.MD5 | 04fdf3a39608ada0033339b959076c6bDownloadSoftware:---------Doorkeeper...
View ArticleCMS Made Simple 2.1.6 Remote Code Execution
CMS Made Simple version 2.1.6 suffers from a remote code execution vulnerability during install time.MD5 | 374dbe5800d06fa2269f4be2af82aedbDownload# Exploit Title: CMS Made Simple 2.1.6 - Remote Code...
View ArticleAsterisk 15.2.0 chan_pjsip SUBSCRIBE Stack Corruption
Asterisk running chan_pjsip suffers from a SUBSCRIBE message stack corruption vulnerability. Vulnerable versions include 15.2.0, 13.19.0, 14.7.5, and 13.11.2.MD5 |...
View ArticleAsterisk 15.2.0 chan_pjsip SDP fmtp Denial Of Service
Asterisk version 15.2.0 running chan_pjsip suffers from an SDP message related denial of service vulnerability.MD5 | 873b23fd0ed9845d55e6420887487decDownload# Segmentation fault occurs in asterisk with...
View ArticleAsterisk 15.2.0 chan_pjsip SDP Media Format Denial Of Service
Asterisk running chan_pjsip suffers from an SDP message related denial of service vulnerability. Versions affected include 13.10.0, 15.1.3, 15.1.4, 15.1.5, and 15.2.0.MD5 |...
View ArticleAsterisk 15.2.0 chan_pjsip INVITE Denial Of Service
Asterisk running chan_pjsip suffers from an INVITE message denial of service vulnerability. Versions affected include Versions affected include 15.2.0, 15.1.0, 15.0.0, 13.19.0, 13.11.2, and 14.7.5.MD5...
View ArticleAdvance Loan Management System 2.4.2 Database Disclosure
Advance Loan Management System version 2.4.2 suffers from a database backup disclosure vulnerability.MD5 |...
View ArticleMicrosoft Edge Chakra JIT CallRegExSymbolFunction Return Check Fail
Microsoft Edge Chakra JIT fails to check the return type in CallRegExSymbolFunction.MD5 | b730434f94ef176ac17055fa8c62695cDownloadMicrosoft Edge: Chakra: JIT: CallRegExSymbolFunction doesn't check the...
View ArticleChrome V8 TranslatedState::MaterializeCapturedObjectAt Caching Bug
Chrome V8 suffers from a TranslatedState::MaterializeCapturedObjectAt caching bug.MD5 | 674af9848d79bb89d0a7a0de3e4d7028DownloadChrome: V8: TranslatedState::MaterializeCapturedObjectAt caching bug...
View ArticleChrome V8 PropertyArray Integer Overflow
Chrome V8 suffers from an integer overflow vulnerability with PropertyArray.MD5 | a744b96818e7fa9056019e277794d0ceDownloadChrome: V8: Integer overflow with PropertyArray There's a snippet of the...
View ArticleTransmission Torrent Parsing Integer Overflows
Torrent file parsing in libtransmission suffers from overflow vulnerabilities.MD5 | 04af27b8c3d0769c9ab52678f28df4a4Downloadtransmission: various integer overflow parsing torrent files I took a look at...
View ArticleSony Playstation 4 4.55 FW - Local Kernel
EDB-ID: 44177Author: qwertyoruiopPublished: 2018-02-26CVE: N/A Type: LocalPlatform: BSDAliases: N/AAdvisory/Source: LinkTags: N/AVulnerable App: N/A { function malloc(sz) { var backing = new...
View ArticleChrome V8 - 'PropertyArray' Integer Overflow
EDB-ID: 44179Author: Google Security ResearchPublished: 2018-02-27CVE: N/A Type: DosPlatform: MultipleAliases: N/AAdvisory/Source: LinkTags: Integer OverflowVulnerable App: N/A Here's a snippet of the...
View ArticleChrome V8 - 'TranslatedState::MaterializeCapturedObjectAt' Type Confusion
EDB-ID: 44180Author: Google Security ResearchPublished: 2018-02-27CVE: N/A Type: DosPlatform: MultipleAliases: N/AAdvisory/Source: LinkTags: Type ConfusionVulnerable App: N/A Here'a snippet of...
View Articletransmission - Integer Overflows Parsing Torrent Files
EDB-ID: 44178Author: Google Security ResearchPublished: 2018-02-27CVE: N/A Type: DosPlatform: MultipleAliases: N/AAdvisory/Source: LinkTags: N/AVulnerable App: N/A #define tr_new(struct_type,...
View ArticleAsterisk chan_pjsip 15.2.0 - 'SDP' Denial of Service
EDB-ID: 44182Author: EnableSecurityPublished: 2018-02-27CVE: N/A Type: DosPlatform: LinuxAliases: N/AAdvisory/Source: LinkTags: Denial of Service (DoS)Vulnerable App: # Segmentation fault occurs in...
View ArticleAsterisk chan_pjsip 15.2.0 - 'INVITE' Denial of Service
EDB-ID: 44181Author: EnableSecurityPublished: 2018-02-27CVE: CVE-2018-7286 Type: DosPlatform: LinuxAliases: N/AAdvisory/Source: LinkTags: Denial of Service (DoS)Vulnerable App: # Crash occurs when...
View ArticleAsterisk chan_pjsip 15.2.0 - 'SDP fmtp' Denial of Service
EDB-ID: 44183Author: EnableSecurityPublished: 2018-02-27CVE: N/A Type: DosPlatform: LinuxAliases: N/AAdvisory/Source: LinkTags: Denial of Service (DoS)Vulnerable App: # Segmentation fault occurs in...
View Article