8305 matches found
Out-of-bounds
hw/pci/pci.c in QEMU 4.2.0 allows guest OS users to trigger an out-of-bounds access by providing an address near the end of the PCI configuration space...
D-Link DIR-615 T1 20.10 - CAPTCHA Bypass
Exploit Title: D-Link DIR-615 T1 20.10 - CAPTCHA Bypass Date: 2019-10-12 Exploit Author: huzaifa hussain Vendor Homepage: https://in.dlink.com/ Version: DIR-615 T1 ver:20.10 Tested on: D-LINK ROUTER "MODEL NO: DIR-615" with "FIRMWARE VERSION:20.10" & "HARDWARE VERSION:T1 CVE: CVE-2019-17525 D-LIN...
D-Link DIR-615 T1 20.10 - CAPTCHA Bypass Vulnerability
Exploit for hardware platform in category web applications Exploit Title: D-Link DIR-615 T1 20.10 - CAPTCHA Bypass Exploit Author: huzaifa hussain Vendor Homepage: https://in.dlink.com/ Version: DIR-615 T1 ver:20.10 Tested on: D-LINK ROUTER "MODEL NO: DIR-615" with "FIRMWARE VERSION:20.10" &...
CVE-2020-3220
A vulnerability in the hardware crypto driver of Cisco IOS XE Software for Cisco 4300 Series Integrated Services Routers and Cisco Catalyst 9800-L Wireless Controllers could allow an unauthenticated, remote attacker to disconnect legitimate IPsec VPN sessions to an affected device. The...
CVE-2020-3220
The CVE-2020-3220 issue affects Cisco IOS XE Software on Cisco 4300 Series ISRs and Cisco Catalyst 9800-L Wireless Controllers, where the hardware crypto driver fails to properly verify ESP packet authenticity. This can allow an unauthenticated, remote attacker to perform a man-in-the-middle tamp...
Missing Linux Kernel mitigations for hardware vulnerabilities (sysfs interface not available)
The remote host is missing all known mitigations on Linux Kernel side for the referenced hardware vulnerabilities. Note: The sysfs interface to read the migitation status from the Linux Kernel is not available. Based on this it is assumed that no Linux Kernel mitigations are available and that th...
Missing Linux Kernel mitigations for 'iTLB multihit' hardware vulnerabilities
The remote host is missing one or more known mitigations on Linux Kernel side for the referenced SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-onl...
Detection of Linux Kernel mitigation status for hardware vulnerabilities
Checks the Linux Kernel mitigation status for hardware CPU vulnerabilities. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
QEMU Buffer Overflow Vulnerability (CNVD-2020-31087)
QEMU Quick Emulator is a set of simulation processor software by French software developer Fabrice Bellard. The software is fast, cross-platform and other characteristics. A buffer overflow vulnerability exists in the es1370transferaudio file in hw/audio/es1370.c in QEMU version 4.2.0. The...
CVE-2020-13361
CVE-2020-13361 affects QEMU: es1370_transfer_audio in hw/audio/es1370.c does not properly validate the frame count, allowing guest OS users to trigger an out-of-bounds access during an es1370_write() on QEMU 5.0.0 and earlier. The issue is documented across multiple advisories and vendor response...
Bluetooth Vulnerability: BIAS
This is new research on a Bluetooth vulnerability called BIAS that allows someone to impersonate a trusted device: Abstract: Bluetooth BR/EDR is a pervasive technology for wireless communication used by billions of devices. The Bluetooth standard includes a legacy authentication procedure and a...
The vulnerability of the emulation software for hardware devices on various platforms, QEMU, allows a hacker to trigger a service failure.
The vulnerability of software for emulating hardware on various platforms under QEMU is related to deficiencies in the handling of zero pointer assignments. Exploiting this vulnerability can allow an attacker to cause a system failure...
CVE-2019-7246
An issue was discovered in atillk64.sys in AMD ATI Diagnostics Hardware Abstraction Sys/Overclocking Utility 5.11.9.0. The vulnerable driver exposes a wrmsr instruction and does not properly filter the Model Specific Register MSR. Allowing arbitrary MSR writes can lead to Ring-0 code execution an...
CVE-2019-7246
The CVE-2019-7246 entry concerns the AMD ATI Diagnostics Hardware Abstraction Sys/Overclocking Utility driver atillk64.sys (version 5.11.9.0). The vulnerability arises from improper filtering of Model Specific Registers (MSR) and exposure of a wrmsr instruction, allowing arbitrary MSR writes that...
CVE-2019-7246
An issue was discovered in atillk64.sys in AMD ATI Diagnostics Hardware Abstraction Sys/Overclocking Utility 5.11.9.0. The vulnerable driver exposes a wrmsr instruction and does not properly filter the Model Specific Register MSR. Allowing arbitrary MSR writes can lead to Ring-0 code execution an...
Cryptocurrency Hardware Wallets Can Get Hacked Too
New research shows vulnerabilities in popular cold-storage options that would have revealed their PINs...
Secured-core PCs help customers stay ahead of advanced data theft
Researchers at the Eindhoven University of Technology recently revealed information around "Thunderspy," an attack that relies on leveraging direct memory access DMA functionality to compromise devices. An attacker with physical access to a system can use Thunderspy to read and copy data even fro...
7 New Flaws Affect All Thunderbolt-equipped Computers Sold in the Last 9 Years
A cybersecurity researcher today uncovers a set of 7 new unpatchable hardware vulnerabilities that affect all desktops and laptops sold in the past 9 years with Thunderbolt, or Thunderbolt-compatible USB-C ports. Collectively dubbed 'ThunderSpy,' the vulnerabilities can be exploited in 9 realisti...
7 New Flaws Affect All Thunderbolt-equipped Computers Sold in the Last 9 Years
A cybersecurity researcher today uncovers a set of 7 new unpatchable hardware vulnerabilities that affect all desktops and laptops sold in the past 9 years with Thunderbolt, or Thunderbolt-compatible USB-C ports. Collectively dubbed 'ThunderSpy,' the vulnerabilities can be exploited in 9 realisti...