Stack overflow

PLCopen XML file parsing in Phoenix Contact PC Worx and PC Worx Express version 1.87 and earlier can lead to a stack-based overflow. Manipulated PC Worx projects could lead to a remote code execution due to insufficient input data validation...

CVE-2020-12497 Phoenix Contact Automation Worx <= 1.87: stack-based overflow

PLCopen XML file parsing in Phoenix Contact PC Worx and PC Worx Express version 1.87 and earlier can lead to a stack-based overflow. Manipulated PC Worx projects could lead to a remote code execution due to insufficient input data validation...

CVE-2020-12498 Phoenix Contact Automation Worx <= 1.87: out-of-bounds read remote code execution

mwe file parsing in Phoenix Contact PC Worx and PC Worx Express version 1.87 and earlier is vulnerable to out-of-bounds read remote code execution. Manipulated PC Worx projects could lead to a remote code execution due to insufficient input data validation...

CVE-2020-12498

Phoenix Contact PC Worx and PC Worx Express (v1.87 and earlier) are affected by CVE-2020-12498 due to insufficient input validation in MWE file parsing, causing an out-of-bounds read that can lead to remote code execution. Affected component: PC Worx/PC Worx Express parsing of MWE project files; ...

CVE-2020-12497

CVE-2020-12497 affects Phoenix Contact PC Worx and PC Worx Express up to version 1.87. The issue is a stack-based overflow in PLCopen XML file parsing caused by insufficient input validation, which could allow remote code execution when manipulated PC Worx projects are processed. Public sources c...

Memory Corruption Vulnerability in WPS Office 2019 for PC (CNVD-2020-44403)

WPS Office 2019 PC version is the software of Zhuhai Kingsoft Office Software Co. Ltd, which can realize a variety of functions commonly used in office software, such as text, tables, presentations and so on. WPS Office 2019 PC Edition suffers from a memory corruption vulnerability that can be...

Memory Corruption Vulnerability in WPS Office 2019 PC Version

WPS Office 2019 PC version is the software of Zhuhai Kingsoft Office Software Co. Ltd, which can realize the text, table, presentation and many other functions commonly used in office software. A memory corruption vulnerability exists in WPS Office 2019 PC Edition. An attacker can exploit this...

pc-canada.com Cross Site Scripting vulnerability OBB-1193186

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

UAF Vulnerability in WPS Office 2019 for PC (CNVD-2020-34099)

WPS Office 2019 PC version is the software of Zhuhai Kingsoft Office Software Co. Ltd, which can realize the text, table, presentation and many other functions commonly used in office software. WPS Office 2019 PC Edition suffers from a UAF vulnerability that can be exploited by an attacker to cau...

CVE-2020-1831

HUAWEI Mate 20 smartphones with versions earlier than 10.0.0.195SP31C00E74R3P8 have an improper authorization vulnerability. The digital balance function does not sufficiently restrict the using time of certain user, successful exploit could allow the user break the limit of digital balance...

Authorization

HUAWEI Mate 20 smartphones with versions earlier than 10.0.0.195SP31C00E74R3P8 have an improper authorization vulnerability. The digital balance function does not sufficiently restrict the using time of certain user, successful exploit could allow the user break the limit of digital balance...

CVE-2020-1831

HUAWEI Mate 20 smartphones with versions earlier than 10.0.0.195SP31C00E74R3P8 have an improper authorization vulnerability. The digital balance function does not sufficiently restrict the using time of certain user, successful exploit could allow the user break the limit of digital balance...

The vulnerability of the Siemens SIMATIC PCS 7, SIMATIC WinCC, and SIMATIC NET PC process control systems allows a intruder to trigger a service failure.

The vulnerability of the Siemens SIMATIC PCS 7, SIMATIC WinCC, and SIMATIC NET PC process control systems is related to an improper limitation on buffers for downloaded data. Exploiting this vulnerability can allow a malicious actor to cause service failures...

CVE-2020-7812

Ezhttptrans.ocx ActiveX Control in Kaoni ezHTTPTrans 1.0.0.70 and prior versions contain a vulnerability that could allow remote attacker to download arbitrary file by setting the arguments to the activex method. This can be leveraged for code execution by rebooting the victim’s PC...

Code injection

Ezhttptrans.ocx ActiveX Control in Kaoni ezHTTPTrans 1.0.0.70 and prior versions contain a vulnerability that could allow remote attacker to download arbitrary file by setting the arguments to the activex method. This can be leveraged for code execution by rebooting the victim’s PC...

Code Execution Vulnerability in the Backend of Daimi CMS

DAMI CMS is a PC building station and cell phone building station integrated all-in-one system. A code execution vulnerability exists in the background of Daimi CMS, which can be exploited by attackers to gain server privileges...

pc-music.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1160939 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

Thunderbolt Flaws Expose Millions of PCs to Hands-On Hacking

The so-called Thunderspy attack takes less than five minutes to pull off with physical access to a device, and it affects any PC manufactured before 2019...

Fake Zoom installers infect PCs with RevCode WebMonitor RAT

By Deeba Ahmed Zoom is being actively targeted by hackers in the past few weeks. Now, hackers are dropping fake Zoom installers with RevCode WebMonitor RAT. This is a post from HackRead.com Read the original post: Fake Zoom installers infect PCs with RevCode WebMonitor RAT...

CVE-2020-6861

A flawed protocol design in the Ledger Monero app before 1.5.1 for Ledger Nano and Ledger S devices allows a local attacker to extract the master spending key by sending crafted messages to this app selected on a PIN-entered Ledger connected to a host PC...