core security technologies core force vulnerabilities and exploits

(subscribe to this query)

Multiple buffer overflows in CORE FORCE prior to 0.95.172 allow local users to cause a denial of service (system crash) and possibly execute arbitrary code in the kernel context via crafted arguments to (1) IOCTL functions in the Firewall module or (2) SSDT hook handler functions...

Core Security Technologies Core Force

1 EDB exploit

CORE FORCE prior to 0.95.172 does not properly validate arguments to SSDT hook handler functions in the Registry module, which allows local users to cause a denial of service (system crash) and possibly execute arbitrary code in the kernel context via crafted arguments.

Core Security Technologies Core Force

Core Security Technologies Advisory - The administrative console of IBM WebSphere Application Server is vulnerable to Cross-Site Request Forgery (CSRF) attacks, which can be exploited by remote attackers to force a logged-in administrator to perform unwanted actions on the IBM We...

Core Security Technologies Advisory - A remote denial of service vulnerability has been found in Firebird SQL, which can be exploited by a remote attacker to force the server to close the socket where it is listening for incoming connections and to enter an infinite loop, by send...

Integer overflow in the TCP stream reassembly module (stream4) for Snort 2.0 and previous versions allows remote malicious users to execute arbitrary code via large sequence numbers in packets, which enable a heap-based buffer overflow.

Smoothwall Smoothwall 2.0 Beta 4 Sourcefire Snort 1.8 Sourcefire Snort 1.8.1 Sourcefire Snort 1.8.2 Sourcefire Snort 1.8.3 Sourcefire Snort 1.8.4 Sourcefire Snort 1.8.5 Sourcefire Snort 1.8.6 Sourcefire Snort 1.8.7 Sourcefire Snort 1.9 Sourcefire Snort 1.9.1

1 EDB exploit

Buffer overflow in the RPC preprocessor for Snort 1.8 and 1.9.x prior to 1.9.1 allows remote malicious users to execute arbitrary code via fragmented RPC packets.

Snort Snort 1.8.0 Snort Snort 1.8.1 Snort Snort 1.8.2 Snort Snort 1.8.3 Snort Snort 1.8.4 Snort Snort 1.8.5 Snort Snort 1.8.6 Snort Snort 1.8.7 Snort Snort 1.9.0

jQuery prior to 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Object.prototype.

Jquery Jquery Debian Debian Linux 8.0 Debian Debian Linux 9.0 Debian Debian Linux 10.0 Drupal Drupal Backdropcms Backdrop Fedoraproject Fedora 28 Fedoraproject Fedora 29 Fedoraproject Fedora 30 Opensuse Backports Sle 15.0 Opensuse Leap 15.1 Netapp Oncommand System Manager

395 Github repositories

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook