dav1d Integer Overflow / Out-Of-Bounds Write
March 18th, 2024 | π
https://www.ispeech.org/text.to.speechThere is an integer overflow in dav1d when decoding an AV1 video with large width/height. The integer overflow may result
March 18th, 2024 | π
https://www.ispeech.org/text.to.speechThere is an integer overflow in dav1d when decoding an AV1 video with large width/height. The integer overflow may result
March 15th, 2024 | π
iSpeech.org Discovery / credits: Malvuln (John Page aka hyp3rlinx) (c) 2024Original source: https://malvuln.com/advisory/19a14d0414aec62ef38378de2e8b259d.txtContact: malvuln13@gmail.comMedia: twitter.com/malvuln Threat: Backdoor.Win32.Emegrab.bVulnerability: Remote Stack Buffer
March 12th, 2024 | π
iSpeech.org # Exploit Title: TP-Link TL-WR740N - Buffer Overflow 'DOS'# Date: 8/12/2023# Exploit Author: Anish Feroz (ZEROXINN)# Vendor Homepage: http://www.tp-link.com#
March 6th, 2024 | π
iSpeech #!/usr/bin/python# Exploit Title: A-PDF All to MP3 Converter 2.0.0 - DEP Bypass with HeapCreate + HeapAlloc + some_memory_copy_function ROP
February 3rd, 2024 | π
iSpeech # Exploit Title: PCMan FTP Server 2.0 - 'pwd' Remote Buffer Overflow# Date: 09/25/2023# Exploit Author: Waqas Ahmed Faroouqi
February 1st, 2024 | π
TTS Demo Discovery / credits: Malvuln (John Page aka hyp3rlinx) (c) 2024Original source: https://malvuln.com/advisory/f2fd6a7b400782bb43499e722fb62cf4.txtContact: malvuln13@gmail.comMedia: twitter.com/malvuln Threat: Trojan.Win32 BankShotVulnerability: Remote
January 31st, 2024 | π
TTS Qualys Security Advisory CVE-2023-6246: Heap-based buffer overflow in the glibc's syslog() ========================================================================Contents======================================================================== SummaryAnalysisProof of conceptExploitationAcknowledgmentsTimeline ========================================================================Summary======================================================================== We discovered a
January 31st, 2024 | π
TTS Demo Vulnerability description]A buffer overflow existed in Sane v.1.2.1 via a crafted config file to the init_options() function.Vulnerability Type]Buffer
January 19th, 2024 | π
iSpeech Linux >=5.6: cred refcount overflow at ~39 GiB memory usage via io_uring (see also my related prior bug reports
January 9th, 2024 | π
iSpeech.org # Exploit Title: Gom Player 2.3.92.5362 - Buffer Overflow (PoC)# Discovered by: Yehia Elghaly (Mrvar0x)# Discovered Date: 04.01.2024# Vendor
December 9th, 2023 | π
iSpeechArm Mali CSF has a refcount overflow bugfix in r43p0 that was misclassified as a memory leak fix. Source link
December 4th, 2023 | π
iSpeech.org -- HNS-2023-04 - HN Security Advisory - https://security.humanativaspa.it/ * Title: Buffer overflow vulnerabilities with long path names in TinyDir*
October 27th, 2023 | π
https://www.ispeech.org # Exploit Title: XAMPP v3.3.0 β '.ini' Buffer Overflow (Unicode + SEH)# Date: 2023-10-26# Author: Talson (@Ripp3rdoc)# Software Link:
October 17th, 2023 | π
korean ttsXNSoft Nconvert version 7.136 is vulnerable to buffer overflow and denial of service conditions. Proof of concepts included. Source
Gloss