Showing 1 - 10 of 10

Files Date: 2017-11-25 to 2017-11-26

Linux mincore() Kernel Heap Page Disclosure: Posted Nov 25, 2017; Authored by Jann Horn, Google Security Research; Linux mincore() discloses uninitialized kernel heap pages. When __walk_page_range() is used on a VM_HUGETLB VMA, callbacks from the mm_walk structure are only invoked for present pages. However, do_mincore() assumes that it will always get callbacks for all pages in the range passed to walk_page_range(), and when this assumption is violated, sys_mincore() copies uninitialized memory from the page allocator to userspace.; tags | exploit, kernel; systems | linux; SHA-256 | 61d7e638f72f1ff725aa52efa074d8cca09a3c845e1725489d85845af7ce7c09; Download | Favorite | View

Microsoft Windows win32kfull!GreUpdateSpriteInternal Kernel Stack Memory Disclosure: Posted Nov 25, 2017; Authored by Google Security Research, mjurczyk; On Windows 10 32-bit version 1709, a kernel stack memory disclosure was discovered in win32kfull!GreUpdateSpriteInternal.; tags | advisory, kernel; systems | windows; SHA-256 | 311cb2fdcf45820b4bf355d49b361e30e088454da5c387727d873126a4419ea2; Download | Favorite | View

Microsoft Windows win32kbase!NtQueryCompositionInputQueueAndTransform Kernel Stack Memory Disclosure: Posted Nov 25, 2017; Authored by Google Security Research, mjurczyk; The win32k!NtQueryCompositionInputQueueAndTransform system call may disclose portions of uninitialized kernel stack memory to user-mode clients on Windows 10.; tags | advisory, kernel; systems | windows; SHA-256 | 2767071039e2aa61b519b9c307d3d818e894164055448140c5338e42bea14511; Download | Favorite | View

Microsoft Edge Chakra JIT Incorrect Function Declaration Scope: Posted Nov 25, 2017; Authored by Google Security Research, lokihardt; Microsoft Edge Chakra JIT suffers from an incorrect function declaration scope.; tags | exploit; advisories | CVE-2017-11870; SHA-256 | 747b70cd2c766255cc31286d6f576d8686314f74c6bb84aec68875dd42590077; Download | Favorite | View

Microsoft Edge Chakra JIT Inline::InlineCallApplyTarget_Shared Failed Return: Posted Nov 25, 2017; Authored by Google Security Research, lokihardt; Microsoft Edge Chakra JIT Inline::InlineCallApplyTarget_Shared does not return the return instruction.; tags | exploit; advisories | CVE-2017-11841; SHA-256 | 70cace84bd9e2fa3381d1d38bcfd0743b83971ff7366be4881f9e6a185240aa3; Download | Favorite | View

Microsoft Edge Chakra JIT GlobOpt::OptTagChecks Property Consideration: Posted Nov 25, 2017; Authored by Google Security Research, lokihardt; Microsoft Edge Chakra JIT GlobOpt::OptTagChecks must consider IsLoopPrePass properly.; tags | exploit; advisories | CVE-2017-11840; SHA-256 | c96d94c8ca1ba7e89b1679856d3c4dc0c0774a75988d7d6d433e82e6c26d83a1; Download | Favorite | View

Microsoft Edge Chakra JIT BailOutOnTaggedValue Bailouts: Posted Nov 25, 2017; Authored by Google Security Research, lokihardt; Microsoft Edge Chakra JIT BailOutOnTaggedValue bailouts can be generated for constant values.; tags | exploit; advisories | CVE-2017-11839; SHA-256 | 07f0bd4f708fff233ac927cdb624650e28f9e7aced8b7cd40fa1755a2c57d631; Download | Favorite | View

WebKit WebCore::FormSubmission::create Use-After-Free: Posted Nov 25, 2017; Authored by Ivan Fratric, Google Security Research; WebKit suffers from a use-after-free vulnerability in WebCore::FormSubmission::create.; tags | exploit; advisories | CVE-2017-13791; SHA-256 | c2e26605ef8814643236d5f9d97cb4faad8aeb808f52594ca616c0d971826d8a; Download | Favorite | View

WebKit WebCore::RenderObject::previousSibling Use-After-Free: Posted Nov 25, 2017; Authored by Ivan Fratric, Google Security Research; WebKit suffers from a use-after-free vulnerability in WebCore::RenderObject::previousSibling.; tags | exploit; advisories | CVE-2017-13798; SHA-256 | 8a278fe1a01bed0f7b17ac6fcc4317b1168ac683975a217d23d0e3a903eea3ea; Download | Favorite | View

AIEngine 1.8.2: Posted Nov 25, 2017; Authored by Luis Campo Giralte | Site bitbucket.org; AIEngine is a packet inspection engine with capabilities of learning without any human intervention. It helps network/security professionals to identify traffic and develop signatures for use them on NIDS, Firewalls, Traffic classifiers and so on.; Changes: Fixed issue with HTTP Payloads. Added anomaly for long emails on SMTP. Various other updates.; tags | tool; systems | unix; SHA-256 | c435425f47c7dd9a01dc1ba6b6a6bc4ee6c1243aba56dfa47e960a5699405827; Download | Favorite | View

Page 1 of 1 Back 1 Next

Top Authors In Last 30 Days