CVE-2020-6861

A flawed protocol design in the Ledger Monero app before 1.5.1 for Ledger Nano and Ledger S devices allows a local attacker to extract the master spending key by sending crafted messages to this app selected on a PIN-entered Ledger connected to a host PC...

Malware can extract data from air-gapped PC through power supply

By Sudais Asif One of the most secure system arrangements today consists of air-gapped PCs.... This is a post from HackRead.com Read the original post: Malware can extract data from air-gapped PC through power supply...

Fedora: Security Advisory for dolphin-emu (FEDORA-2020-14cdf5fdf8)

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

A heap overflow vulnerability exists in the PC version of Beijing Aqiyi Technology Co.'s Aqiyi Watch PC version (CNVD-2020-31415)

Aiki Viewer for PC is a viewer tool from Aiki. Ltd. Aqiyi Viewer for PC suffers from a heap overflow vulnerability that can be exploited by an attacker to cause a software crash, and further exploitation can lead to arbitrary code execution...

UAF vulnerability exists in the PC version of Beijing Aqiyi Technology Co. Ltd.'s Aqiyi Watch (CNVD-2020-31412)

Aiki View for PC is a faster, lighter and more convenient tool for viewing images from Aiki. Ltd. There is a UAF vulnerability in Aqiyi Viewer for PC, which can be exploited by an attacker to cause the software to crash, and further exploitation can lead to arbitrary code execution...

Ltd. UAF Vulnerability Exists in Aiki Watch PC Version

Aiki Viewer for PC is a viewer tool from Aiki. Ltd. Aqiyi Viewing PC Version suffers from a UAF vulnerability, which can be exploited by an attacker to cause the software to crash, and further exploitation can lead to arbitrary code execution...

Moderate: Red Hat Security Advisory: samba security, bug fix, and enhancement update

An update for samba is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

Tencent App Store PC version suffers from DLL hijacking vulnerability

Tencent Application Treasure is an application acquisition platform created by Tencent Application Center. A DLL hijacking vulnerability exists in the PC version of Tencent App Store, which can be exploited by attackers to execute malicious code...

[SECURITY] Fedora 31 Update: dolphin-emu-5.0.11617-7.fc31

Dolphin is a Gamecube, Wii and Triforce the arcade machine based on the Gamecube emulator, which supports full HD video with several enhancements such as compatibility with all PC controllers, turbo speed, networked multiplaye r, and more. Most games run perfectly or with minor bugs...

[SECURITY] Fedora 32 Update: dolphin-emu-5.0.11819-5.fc32

Dolphin is a Gamecube, Wii and Triforce the arcade machine based on the Gamecube emulator, which supports full HD video with several enhancements such as compatibility with all PC controllers, turbo speed, networked multiplaye r, and more. Most games run perfectly or with minor bugs...

CVE-2019-20769

An issue was discovered in LG PC Suite for LG G3 and earlier aka LG PC Suite v5.3.27 and earlier. DLL Hijacking can occur via a Trojan horse DLL in the current working directory. The LG ID is LVE-MOT-190001 November 2019...

CVE-2019-20769

An issue was discovered in LG PC Suite for LG G3 and earlier aka LG PC Suite v5.3.27 and earlier. DLL Hijacking can occur via a Trojan horse DLL in the current working directory. The LG ID is LVE-MOT-190001 November 2019...

Code injection

An issue was discovered in LG PC Suite for LG G3 and earlier aka LG PC Suite v5.3.27 and earlier. DLL Hijacking can occur via a Trojan horse DLL in the current working directory. The LG ID is LVE-MOT-190001 November 2019...

CVE-2019-20769

An issue was discovered in LG PC Suite for LG G3 and earlier aka LG PC Suite v5.3.27 and earlier. DLL Hijacking can occur via a Trojan horse DLL in the current working directory. The LG ID is LVE-MOT-190001 November 2019...

CVE-2019-20769

LG PC Suite for LG G3 and earlier (LG PC Suite v5.3.27 and earlier) is affected by a DLL Hijacking flaw where a Trojan DLL in the current working directory can be loaded. LG ID: LVE-MOT-190001. Root cause and impact are described in CVE-2019-20769; no remediation details are provided in the suppl...

WeChat PC version suffers from dll hijacking vulnerability

WeChat for PC is a cross-platform communication tool. WeChat PC version suffers from a dll hijacking vulnerability, which can be exploited by attackers to load a malicious dll and execute arbitrary code...

Kudou Music for PC suffers from dll hijacking vulnerability

Kudou Music for PC is a music playback software Cool Dog Music for PC suffers from a dll hijacking vulnerability, which can be exploited by attackers to load a malicious dll and execute arbitrary code...

CVE-2019-11480

The pc-kernel snap build process hardcoded the --allow-insecure-repositories and --allow-unauthenticated apt options when creating the build chroot environment. This could allow an attacker who is able to perform a MITM attack between the build environment and the Ubuntu archive to install a...

CVE-2019-11480

The pc-kernel snap build process hardcoded the --allow-insecure-repositories and --allow-unauthenticated apt options when creating the build chroot environment. This could allow an attacker who is able to perform a MITM attack between the build environment and the Ubuntu archive to install a...

Hardcoded credentials

The pc-kernel snap build process hardcoded the --allow-insecure-repositories and --allow-unauthenticated apt options when creating the build chroot environment. This could allow an attacker who is able to perform a MITM attack between the build environment and the Ubuntu archive to install a...