CVE-2020-0574

Improper configuration in block design for IntelR MAXR 10 FPGA all versions may allow an authenticated user to potentially enable escalation of privilege and information disclosure via physical access...

Design/Logic Flaw

Improper configuration in block design for IntelR MAXR 10 FPGA all versions may allow an authenticated user to potentially enable escalation of privilege and information disclosure via physical access...

CVE-2020-0574

CVE-2020-0574 : A misconfiguration in the block design of Intel® MAX® 10 FPGA (all versions) may allow an authenticated user to escalate privileges and disclose information via physical access. The issue is documented by Intel (Intel® MAX® 10 FPGA Advisory) with a CVSS v3.1 base score of 5.9 (MED...

CVE-2020-0574

Improper configuration in block design for IntelR MAXR 10 FPGA all versions may allow an authenticated user to potentially enable escalation of privilege and information disclosure via physical access...

Intel® MAX® 10 FPGA Advisory

This advisory contains CVEs in Altera products and has been transferred to Altera for support. The updated advisory can be found at the link below: https://www.altera.com/product-security/advisory-archive/intel-sa-00349.html...

Intel Releases Security Updates

Intel has released security updates to address vulnerabilities in multiple products. An authenticated attacker with local access could exploit some of these vulnerabilities to gain escalation of privileges. The Cybersecurity and Infrastructure Security Agency CISA encourages users and...

Extended-SSRF-Search - Smart SSRF Scanner Using Different Methods Like Parameter Brute Forcing In Post And Get...

This tool search for SSRF using predefined settings in different parts of a request path, host, headers, post and get parameters. First step Rename example.app-settings.conf to app-settings.conf and adjust settings. The most important setting is the callback url. I recommend to use burp...

SUSE-SU-2020:14287-1 Security update for java-1_7_1-ibm

This update for java-171-ibm fixes the following issues: Java was updated to 7.1 Service Refresh 4 Fix Pack 60 bsc1162972, bsc1160968. Security issues fixed: - CVE-2020-2583: Fixed a serialization vulnerability in BeanContextSupport bsc1162972. - CVE-2020-2593: Fixed an incorrect check in...

USN-4286-1 linux, linux-aws, linux-kvm, linux-raspi2, linux-snapdragon vulnerabilities

It was discovered that the Linux kernel did not properly clear data structures on context switches for certain Intel graphics processors. A local attacker could use this to expose sensitive information. CVE-2019-14615 It was discovered that a race condition existed in the Softmac USB Prism54 devi...

OpenJDK: Incomplete enforcement of maxDatagramSockets limit in DatagramChannelImpl (Networking, 8231795)

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: Networking. Supported versions that are affected are Java SE: 7u241 and 8u231; Java SE Embedded: 8u231. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols...

OpenJDK: Incomplete enforcement of maxDatagramSockets limit in DatagramChannelImpl (Networking, 8231795)

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: Networking. Supported versions that are affected are Java SE: 7u241 and 8u231; Java SE Embedded: 8u231. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols...

OpenJDK: Incomplete enforcement of maxDatagramSockets limit in DatagramChannelImpl (Networking, 8231795)

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: Networking. Supported versions that are affected are Java SE: 7u241 and 8u231; Java SE Embedded: 8u231. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols...

Siemens OZW Web Server

1. EXECUTIVE SUMMARY CVSS v3 5.3 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Siemens Equipment: OZW web server Vulnerability: Information disclosure 2. RISK EVALUATION Successful exploitation of this vulnerability could allow unauthenticated users to access project files...

CVE-2019-19823

A certain router administration interface that includes Realtek APMIB 0.11f for Boa 0.94.14rc21 stores cleartext administrative passwords in flash memory and in a file. This affects TOTOLINK A3002RU through 2.0.0, A702R through 2.1.3, N301RT through 2.1.6, N302R through 3.4.0, N300RT through 3.4....

Code injection

A certain router administration interface that includes Realtek APMIB 0.11f for Boa 0.94.14rc21 allows remote attackers to retrieve the configuration, including sensitive data usernames and passwords. This affects TOTOLINK A3002RU through 2.0.0, A702R through 2.1.3, N301RT through 2.1.6, N302R...

OpenJDK: Incomplete enforcement of maxDatagramSockets limit in DatagramChannelImpl (Networking, 8231795)

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: Networking. Supported versions that are affected are Java SE: 7u241 and 8u231; Java SE Embedded: 8u231. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols...

Realtek SDK Information Disclosure / Code Execution

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ MULTIPLE VULNERABILITIES IN SEVERAL SERIES OF REALTEK SDK BASED ROUTERS TOTOLINK AND MANY OTHER Blazej Adamczyk br0x [email protected] https://sploit.tech/ ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 11.12.2019 1 Sensitive data...

FBI unlocks iPhone 11 Pro Max using Graykey raising privacy concerns

By Sudais Asif In the past, Apple has repeatedly refused to unlock the iPhone for the FBI pleasing its fan base however the FBI does not need Apple anymore... This is a post from HackRead.com Read the original post: FBI unlocks iPhone 11 Pro Max using Graykey raising privacy concerns...

max-ingatlan.hu Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1051953 Security Researcher raviakp1004 Helped patch 771 vulnerabilities Received 4 Coordinated Disclosure badges Received 6 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting max-ingatlan.hu website...

ASUS ZenFone 3s Max Access Control Error Vulnerability (CNVD-2020-14791)

The ASUS ZenFone 3s Max is a smartphone from Asus ASUS of Taiwan, China. An access control error vulnerability exists in ASUS ZenFone 3s Max. The vulnerability stems from a network system or product not properly restricting access to resources from unauthorized roles. An attacker could exploit th...