r4xis

3 exploits Active since Jan 2018
CVE-2018-6323 EXPLOITDB HIGH python WORKING POC
GNU Binutils - Integer Overflow in elf_object_p
The elf_object_p function in elfcode.h in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29.1, has an unsigned integer overflow because bfd_size_type multiplication is not used. A crafted ELF file allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact.
CVSS 7.8
CVE-2018-7254 EXPLOITDB HIGH python WORKING POC
WavPack 5.1.0 - Denial of Service via Malicious CAF File
The ParseCaffHeaderConfig function of the cli/caff.c file of WavPack 5.1.0 allows a remote attacker to cause a denial-of-service (global buffer over-read), or possibly trigger a buffer overflow or incorrect memory allocation, via a maliciously crafted CAF file.
CVSS 7.8
CVE-2018-8002 EXPLOITDB HIGH text WORKING POC
PoDoFo 0.9.5 - Denial of Service via Infinite Loop in PdfParserObject
In PoDoFo 0.9.5, there exists an infinite loop vulnerability in PdfParserObject::ParseFileComplete() in PdfParserObject.cpp which may result in stack overflow. Remote attackers could leverage this vulnerability to cause a denial-of-service or possibly unspecified other impact via a crafted pdf file.
CVSS 8.8