1442 matches found
PT-2020-21895
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash type of UNKNOWN WRITE. The crash state involves several functions, including CFF::parsed cs op t::set skip, CFF::parsed cs...
PT-2020-3923
Name of the Vulnerable Software and Affected Versions: CAMS for HIS CENTUM CS 3000 versions R3.08.10 through R3.09.50 CENTUM VP versions R4.01.00 through R6.07.00 B/M9000CS versions R5.04.01 through R5.05.01 B/M9000 VP versions R6.01.01 through R8.03.01 Description: The issue allows a remote...
PT-2020-21898
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash caused by a global buffer overflow write. The crash occurs in the OT::VarData::get scalars and OT::VariationStore::get...
csmonitor.com Cross Site Scripting vulnerability OBB-1227634
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Product update: Virtuozzo Hybrid Server 7.0 Update 14 Hotfix 1 (7.0.14-257)
The Hotfix 1 for Virtuozzo Hybrid Server 7.0 Update 14 provides stability and usability bug fixes. Vulnerability id: PSBM-105022 Unable to live-migrate VMs with dirty bitmaps on Virtuozzo Storage. Vulnerability id: PSBM-104631, PSBM-104632 CS journals to be placed on SSDs are now properly handled...
PT-2020-22325
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash type of "Use-of-uninitialized-value". The crash state includes functions such as ARM post printer, fill insn, and cs disasm...
CS Money: [cs.money] Open Redirect Leads to Account Takeover
Summary: I found an open redirect on https://cs.money domain, using this payload https://cs.money///google.com we can redirect into any domain that we want, you can see the request and response from this image below : ███ Steps To Reproduce: The final payload is having an account takeover as the...
CVE-2020-2912
Vulnerability CVE-2020-2912 affects Oracle PeopleSoft Enterprise CS Campus Community, specifically the Self-Service component in PeopleSoft 9.2. The issue allows a low-privilege attacker with network access over HTTP to read confidential data from the Self-Service area, with the vulnerability des...
CVE-2020-2912: Undefined Security Weakness
Vulnerability in the PeopleSoft Enterprise CS Campus Community product of Oracle PeopleSoft component: Self-Service. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise CS...
CVE-2019-10553
Multiple Read overflows due to improper length checks while decoding authentication in Cs domain/RAU Reject and TC cmd in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in...
CVE-2019-10553: Out-of-bounds Read
Multiple Read overflows due to improper length checks while decoding authentication in Cs domain/RAU Reject and TC cmd in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in...
ABD - Course Materials For Advanced Binary Deobfuscation
Advanced Binary Deobfuscation This repository contains the course materials of Advanced Binary Deobfuscation at the Global Cybersecurity Camp GCC Tokyo in 2020. Course Abstract Reverse engineering is not easy, especially if a binary code is obfuscated. Once obfuscation performed, the binary would...
CVE-2015-5626
CVE-2015-5626 describes a stack-based buffer overflow affecting Yokogawa CENTUM CS 1000/3000, CENTUM VP, ProSafe-RS, Exaopc/Exaquantum/Batch, Exapilot, Exaplog, Exasmoc, Exarqe, Field Wireless OPC Server, PRM, STARDOM VDS/OPC Server for Windows, FAST/TOOLS, B/M9000CS/VP, and FieldMate. A crafted ...
CVE-2015-5627
CVE-2015-5627 is a stack-based buffer overflow affecting Yokogawa CENTUM CS 1000/3000, CENTUM VP, ProSafe-RS, Exaopc/Exaquantum/Batch, Exapilot/Exaplog/Exasmoc/Exarqe, Field Wireless OPC Server, PRM, STARDOM VDS/OPC Server, FAST/TOOLS, B/M9000CS/VP, and FieldMate (various older revisions). The ro...
CVE-2015-5627: Out-of-bounds Write
Stack-based buffer overflow in Yokogawa CENTUM CS 1000 R3.08.70 and earlier, CENTUM CS 3000 R3.09.50 and earlier, CENTUM CS 3000 Entry R3.09.50 and earlier, CENTUM VP R5.04.20 and earlier, CENTUM VP Entry R5.04.20 and earlier, ProSafe-RS R3.02.10 and earlier, Exaopc R3.72.00 and earlier, Exaquant...
PT-2020-3889
Name of the Vulnerable Software and Affected Versions: Yokogawa CENTUM CS 1000 versions R3.08.70 and earlier Yokogawa CENTUM CS 3000 versions R3.09.50 and earlier Yokogawa CENTUM CS 3000 Entry versions R3.09.50 and earlier Yokogawa CENTUM VP versions R5.04.20 and earlier Yokogawa CENTUM VP Entry...
CVE-2015-5626: Out-of-bounds Write
Stack-based buffer overflow in Yokogawa CENTUM CS 1000 R3.08.70 and earlier, CENTUM CS 3000 R3.09.50 and earlier, CENTUM CS 3000 Entry R3.09.50 and earlier, CENTUM VP R5.04.20 and earlier, CENTUM VP Entry R5.04.20 and earlier, ProSafe-RS R3.02.10 and earlier, Exaopc R3.72.00 and earlier, Exaquant...
CVE-2015-5628: Out-of-bounds Write
Stack-based buffer overflow in Yokogawa CENTUM CS 1000 R3.08.70 and earlier, CENTUM CS 3000 R3.09.50 and earlier, CENTUM CS 3000 Entry R3.09.50 and earlier, CENTUM VP R5.04.20 and earlier, CENTUM VP Entry R5.04.20 and earlier, ProSafe-RS R3.02.10 and earlier, Exaopc R3.72.00 and earlier, Exaquant...
