CVE-2019-5998

Buffer overflow in PTP Picture Transfer Protocol of EOS series digital cameras EOS-1D X firmware version 2.1.0 and earlier, EOS-1D X MKII firmware version 1.1.6 and earlier, EOS-1D C firmware version 1.4.1 and earlier, EOS 5D MARK III firmware version 1.3.5 and earlier, EOS 5D MARK IV firmware...

CVE-2019-6000

CVE-2019-6000 is a Buffer Overflow in the PTP (Picture Transfer Protocol) SendHostInfo command affecting Canon EOS-series cameras. Several EOS models and PowerShot variants have vulnerable firmware versions (listed in the CVE description). The flaw allows an attacker on the same network segment t...

CVE-2019-5994

CVE-2019-5994 describes a buffer overflow in Canon’s PTP SendObjectInfo command affecting EOS-series cameras and related models (several EOS firmware versions). The issue arises from how PTP is implemented in the camera firmware, enabling a remote attacker on the same network segment to trigger t...

CVE-2019-5999

CVE-2019-5999 is a buffer overflow in Canon’s PTP BLERequest handling that affects multiple EOS DSLR/mirrorless models and PowerShot cameras. The vulnerability can be triggered by a remote attacker on the same network segment, potentially causing the device to become unresponsive or to execute ar...

CVE-2019-5995

CVE-2019-5995 affects Canon EOS-series cameras and other Canon models via missing authorization in firmware, enabling a silent malicious firmware update over USB or Wi‑Fi. Documented impact includes a silent malicious firmware update that can encrypt data and display ransom, with PoC demonstratio...

CVE-2019-6001

Buffer overflow in PTP Picture Transfer Protocol of EOS series digital cameras EOS-1D X firmware version 2.1.0 and earlier, EOS-1D X MKII firmware version 1.1.6 and earlier, EOS-1D C firmware version 1.4.1 and earlier, EOS 5D MARK III firmware version 1.3.5 and earlier, EOS 5D MARK IV firmware...

CVE-2019-6001

CVE-2019-6001 is a buffer overflow in Canon’s Picture Transfer Protocol (PTP) SetAdapterBatteryReport command affecting numerous EOS-family cameras (e.g., EOS-1D X, 5D series, 6D/7D, 70D, 80D, 750D/800D, and PowerShot models) with firmware versions listed as before or older. The root cause is an ...

CVE-2019-5998

CVE-2019-5998 is a buffer overflow in Canon EOS-series PTP (NotifyBtStatus) that can be triggered over USB or Wi‑Fi by an attacker on the same network, potentially causing a device to become unresponsive or to execute arbitrary code. The Canon advisory notes remediation for the EOS 80D with firmw...

Security Advisory 0040

Security Advisory 0040 PDF Date: April 16th, 2019 Last Updated: April 29th, 2019 Version: 1.1 Revision | Date | Changes ---|---|--- 1.0 | April 16th, 2019 | Initial Release 1.1 | April 29th, 2019 | Updated with CVE reference and mitigation for impacted versions The CVE-ID tracking this issue is...

Hackers Steal $19 Million From Bithumb Cryptocurrency Exchange

Hackers yesterday stole nearly $19 million worth of cryptocurrency from Bithumb, the South Korea-based popular cryptocurrency exchange admitted today. According to Primitive Ventures' Dovey Wan, who first broke the information on social media, hackers managed to compromise a number of Bithumb's h...

Hackers Steal $19 Million From Bithumb Cryptocurrency Exchange

Hackers yesterday stole nearly $19 million worth of cryptocurrency from Bithumb , the South Korea-based popular cryptocurrency exchange admitted today. According to Primitive Ventures' Dovey Wan, who first broke the information on social media, hackers managed to compromise a number of Bithumb's...

Security Advisory 0039

Security Advisory 0039 PDF Date: January 16th, 2019 Version: 1.0 Revision | Date | Changes ---|---|--- 1.0 | January 16th, 2019 | Initial Release The CVE-IDs tracking this issue are CVE-2018-16873, CVE-2018-16874 and CVE-2018-16875 Description This advisory is to document the impact of...

Arista EOS Detection (SNMP)

Binary data 700379.prm...

eos-solutions.com XSS vulnerability

Open Bug Bounty ID: OBB-693050 Description| Value ---|--- Affected Website:| eos-solutions.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidde...

Security Advisory 0038

Security Advisory 0038 . CSAF PDF Date: September 13th, 2018 Version: 1.0 Revision | Date | Changes ---|---|--- 1.0 | September 13th, 2018 | Initial Release The CVE-ID tracking this issue is CVE-2018-14008 CVSS v3: 6.5/10 AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Description This advisory is to documen...

Security Advisory 0037

Security Advisory 0037 . CSAF PDF Date: August 14th, 2018 Last Updated: March 25th, 2019 Version: 1.1 Revision | Date | Changes ---|---|--- 1.0 | August 14, 2018 | Initial Release 1.1 | March 25, 2019 | Updated with Remediated versions The CVE-ID tracking this issue is CVE-2018-5391 CVSS v2: 7.8...

Block.one: [FG-VD-18-126] Buffer Overflow Vulnerability in Latest EOS's EOSIO.WASMSDK Repository II

Hello Block.One / EOS Product Security Team, Good Afternoon. There exists a Memory Corruption vulnerability in the latest EOS WASMSDK Library. The PoC.wasm file is attached along with this report. Reproduction Steps: - 1 Fetch latest EOS WASMSDK repsository from...

Block.one: [FG-VD-18-125] Buffer Overflow Vulnerability in Latest EOS's EOSIO.WASMSDK Repository

Hello Block.One / EOS Product Security Team, Good Afternoon. There exists a Memory Corruption vulnerability in the latest EOS WASMSDK Library. The PoC.wasm file is attached along with this report. Reproduction Steps: - 1 Fetch latest EOS WASMSDK repsository from...

Security Advisory 0036

Security Advisory 0036 . CSAF PDF Date: August 6th, 2018 Version: 1.0 Revision | Date | Changes ---|---|--- 1.0 | August 6, 2018 | Initial Release Vulnerability assessment of CVE-2018-5390 for Arista Products CVSS v2: 7.1 AV:N/AC:M/Au:N/C:N/I:N/A:C On August 6th, 2018, information was released...

CVE-2018-14439

espritblock eos4j, an unofficial SDK for EOS, through 2018-07-12 mishandles floating-point numbers with more than four digits after the decimal point, which might allow attackers to trigger currency transfers of unintended amounts...