198 matches found
wolfSSL 3.10.2 - x509 Certificate Text Parsing Off-by-One
TALOS-2017-0293 WOLFSSL LIBRARY X509 CERTIFICATE TEXT PARSING CODE EXECUTION VULNERABILITY MAY 8, 2017 CVE-2017-2800 SUMMARY An exploitable off-by-one write vulnerability exists in the x509 certificate parsing functionality of wolfSSL library versions up to 3.10.2. A specially crafted x509...
Windows Botnet Spreading Mirai Variant
A Chinese-speaking attacker is spreading a Mirai variant from a repurposed Windows-based botnet. Researchers at Kaspersky Lab published a report today, and said the code was written by an experienced developer who also built in the capability to spread the IoT malware to Linux machines under...
TEW-654TR router vulnerability analysis and mining-vulnerability warning-the black bar safety net
Read the complete devttys0 predecessors of”exploiting embedded systems”series. Analysis under the relevant firmware router model: TEW-654TR firmware download address: http://download.trendnet.com/TEW-654TR/firmware/ 0×01 environment settings ! !/ bin/bash INPUT="$1" LEN=$echo-n "$INPUT" | wc-c...
PT-2017-04: Security Restrictions Bypass in Kaspersky Embedded Systems Security
The specialists of the Positive Research center have detected a Security Restrictions Bypass vulnerability in Kaspersky Embedded Systems Security. Vulnerability in the Application Control component of Kaspersky Embedded Systems Security allows attackers to gain privileges and execute arbitrary...
In-Flight Entertainment System Flaws Put Passenger Data at Risk
A simple tap on an in-flight entertainment system touchscreen kicked off an intellectual exercise that resulted in the discovery of a number of firmware vulnerabilities in embedded systems used by at least 13 airlines. The vulnerabilities in the Panasonic Avionics IFE firmware could allow a local...
[SECURITY] Fedora 23 Update: dropbear-2016.74-1.fc23
Dropbear is a relatively small SSH server and client. It's particularly use ful for "embedded"-type Linux or other Unix systems, such as wireless routers...
[SECURITY] [DLA 561-1] uclibc security update
Package : uclibc Version : 0.9.32-1+deb7u1 CVE ID : CVE-2016-2224 CVE-2016-2225 CVE-2016-6264 Several vulnerabilities have been discovered in uClibc, an implementation of the standard C library that is much smaller than glibc, which makes it useful for embedded systems. CVE-2016-2224 Fix possible...
DLA-561-1 uclibc - security update
Bulletin has no description...
Exploit for Out-of-bounds Write in Gnu Glibc
CVE-2015-0235-workaround aka GHOST glibc vulnerability A shar...
DARPA Working on Provably Secure Embedded Software
DARPA is the birthplace of the network that eventually became today’s Internet, and the agency has spent the decades since it released that baby out into the world trying to find new ways defend it. That task has grown ever more complex and difficult, and now DARPA is working on a new kind of...
seL4 Secure Microkernel Made Open Source
General Dynamics C4 Systems and Australia’s Information and Communications Technology Research Centre NICTA today open sourced the code-base of a secure microkernel project known as seL4. Touted as “the most trustworthy general purpose microkernel in the world,” seL4 has previously been adapted b...
No-IP Dynamic Update Client (DUC) 2.1.9 - Local IP Address Stack Overflow
No description provided by source. !/usr/bin/env python Title: No-IP Dynamic Update Client DUC 2.1.9 local IPaddress stack overflow Author: Alberto Ortega @a0rtega [email protected] Date: May 11 2013 vulnerability discovered Background: No-IP is probably the most used Dynamic DNS provider...
20-Year Old Vulnerability Patched in Compression Algorithm
A 20-year old vulnerability in the Lempel-Ziv-Oberhumer LZO compression algorithm – used in some Android phones, the Linux kernel, and even Mars Rovers – was finally patched this week. Code stemming from the algorithm’s library function has existed in the wild for two decades, but was recycled ov...
20-Year Old Vulnerability in LZO Compression Algorithm Went to Planet Mars
A 20 year old critical subtle integer overflow vulnerability has been discovered in Lempel-Ziv-Oberhumer LZO, an extremely efficient data compression algorithm that focuses on decompression speed, which is almost five times faster than zlib and bzip compression algorithms. Lempel-Ziv-Oberhumer LZ...
CyaSSL多个安全漏洞
Bugtraq ID:66780 CyaSSL是针对嵌入系统开发人员的小型的便携嵌入式SSL编程库。 CyaSSL 2.9.4之前版本在实现上存在空指针间接引用、越界内存读取、X.509未知证书等多个安全漏洞，这些漏洞可被恶意利用导致内存破坏、任意代码执行等。 0 CyaSSL 2.9.4 目前厂商已经发布了升级补丁以修复漏洞，请下载使用： http://www.yassl.com/yaSSL/Products-cyassl.html...
[ODA] Online Web Based Disassembler
ODA stands for Online DisAssembler. ODA is a general purpose machine code disassembler that supports a myriad of machine architectures. Built on the shoulders of libbfd and libopcodes part of binutils, ODA allows you to explore an executable by dissecting its sections, strings, symbols, raw hex,...
[SECURITY] Fedora 20 Update: dropbear-2013.59-1.fc20
Dropbear is a relatively small SSH server and client. Dropbear is particularly useful for "embedded"-type Linux or other Unix systems, such as wireless routers...
Fedora Update for dropbear FEDORA-2013-18593
Check for the Version of dropbear OpenVAS Vulnerability Test Fedora Update for dropbear FEDORA-2013-18593 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...
qconn-exec NSE Script
Attempts to identify whether a listening QNX QCONN daemon allows unauthenticated users to execute arbitrary operating system commands. QNX is a commercial Unix-like real-time operating system, aimed primarily at the embedded systems market. The QCONN daemon is a service provider that provides...
No-IP Dynamic Update Client (DUC) 2.1.9 - Local IP Address Stack Overflow
No-IP Dynamic Update Client DUC 2.1.9 - Local IP Address Stack Overflow !/usr/bin/env python Title: No-IP Dynamic Update Client DUC 2.1.9 local IPaddress stack overflow Author: Alberto Ortega @a0rtega [email protected] Date: May 11 2013 vulnerability discovered Background: No-IP is probably the...