CVE-2020-8710

CVE-2020-8710 is a buffer overflow in the bootloader of Intel® Server Boards, Server Systems and Compute Modules (before version 2.45) that may allow a privileged local user to escalate privileges. The issue is documented in the Intel Intel® Server Boards, Server Systems and Compute Modules Advis...

CVE-2020-8721

CVE-2020-8721 describes improper input validation in Intel Server Boards, Server Systems and Compute Modules prior to firmware version 1.59, which may allow a privileged user to escalate privileges via local access. The issue affects Intel’s firmware for several server product families; the docum...

CVE-2020-8719

Buffer overflow in subsystem for some IntelR Server Boards, Server Systems and Compute Modules before version 1.59 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2020-8707

CVE-2020-8707 affects Intel Server Boards, Server Systems and Compute Modules. The issue is a buffer overflow in the daemon before version 1.59, which may allow an unauthenticated user to escalate privileges via adjacent access. Impact: potential privilege escalation. Affected products include In...

CVE-2020-8731

Incorrect execution-assigned permissions in the file system for some IntelR Server Boards, Server Systems and Compute Modules before version 1.59 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2020-8731

CVE-2020-8731 affects Intel® Server Boards, Server Systems and Compute Modules prior to firmware version 1.59. The issue is described as incorrect execution-assigned permissions in the file system, which may allow an authenticated user to escalate privileges via local access. Intel’s advisory (In...

CVE-2020-8730

CVE-2020-8730 affects Intel® Server Boards, Server Systems and Compute Modules. The issue is a heap-based overflow in firmware prior to version 1.59, which may allow an authenticated user to potentially escalate privileges via local access. Intel’s advisory confirms affected families (R1000WT/R20...

CVE-2020-8730

Heap-based overflow for some IntelR Server Boards, Server Systems and Compute Modules before version 1.59 may allow an authenticated user to potentially enable escalation of privilege via local access...

Intel® Server Boards, Server Systems and Compute Modules Advisory

Summary: Potential security vulnerabilities in some Intel® Server Boards, Server Systems and Compute Modules may allow escalation of privilege or denial of service. Intel is releasing firmware updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2020-8708...

Ubiquiti Networks AirOS Cross-Site Scripting Vulnerability

Ubiquiti Networks AirOS is a suite of operating systems for Ubiquiti network devices from Ubiquiti Networks. A cross-site scripting vulnerability exists in Ubiquiti Networks AirMax AirOS TI, XW, and XM boards using firmware version 6.2.0 and earlier. An attacker could exploit the vulnerability to...

Ubiquiti Networks AirOS Cross-Site Request Forgery Vulnerability

Ubiquiti Networks AirOS is a suite of operating systems for Ubiquiti network devices from Ubiquiti Networks. A cross-site request forgery vulnerability exists in Ubiquiti Networks AirMax AirOS TI, XW, and XM boards using firmware version 6.2.0 and earlier. An attacker could exploit this...

Third Party Risk Management and the Cloud

Security awareness and preparation are getting more widespread. Corporate boards and C-suite executives are taking Third-Party Risk Management TPRM more seriously as they see what has happened to other enterprises in the not-so-distant past. I am speaking primarily of the top-level enterprises, b...

Intel® Active System Console Advisory

Summary: A potential security vulnerability in Intel® Active System Console for Intel® Server Boards and Systems may allow an escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2019-11120 Description: Insufficie...

[SECURITY] Fedora 30 Update: cyrus-imapd-3.0.13-1.fc30

The Cyrus IMAP Internet Message Access Protocol server provides access to personal mail, system-wide bulletin boards, news-feeds, calendar and contac ts through the IMAP, JMAP, NNTP, CalDAV and CardDAV protocols. The Cyrus IMAP server is a scalable enterprise groupware system designed for use fro...

Ubiquiti Inc.: RCE in AirOS 6.2.0 Devices with CSRF bypass

There are certain end-points containing functionalities that are vulnerable to command injection. It is possible to craft an input string that passes the filter check but still contains commands, resulting in remote code execution. These vulnerabilities can be also can be also paired with other e...

FANUC 18-MB Control System

Binary data 764771.prm...

CVE-2019-13991

Embedded systems based on Arduino before Rev3 allow remote attackers to send data to LEDs directly connected to GPIO pins via a laser, because of LED photosensitivity...

CVE-2018-12204

Improper memory initialization in Platform Sample/Silicon Reference firmware IntelR Server Board, IntelR Server System and IntelR Compute Module may allow privileged user to potentially enable an escalation of privilege via local access...

Rockstar Games: CSRF Vulnerability on post creation page /community/create-post.json

In this report the researcher demonstrated how to exploit a CSRF vulnerability on the impacted endpoint. This would allow a remote attacker to spam the community boards as other users. This attack only worked in Chrome browsers. A recent update to Chrome changed how cross-origin requests are...

Design/Logic Flaw

SHDesigns' Resident Download Manager provides firmware update capabilities for Rabbit 2000/3000 CPU boards, which according to the reporter may be used in some industrial control and embedded applications. The Resident Download Manager does not verify that the firmware is authentic before executi...