CVE-2019-11480

The pc-kernel snap build process hardcoded the --allow-insecure-repositories and --allow-unauthenticated apt options when creating the build chroot environment. This could allow an attacker who is able to perform a MITM attack between the build environment and the Ubuntu archive to install a...

CVE-2019-11480

The CVE concerns the pc-kernel snap build process, where the build chroot is created with hardcoded --allow-insecure-repositories and --allow-unauthenticated apt options. This design enables a MITM attacker on the path between the build environment and the Ubuntu archive to insert a malicious pac...

CVE-2019-11480 Ubuntu kernel snap build process could use unauthenticated sources

The pc-kernel snap build process hardcoded the --allow-insecure-repositories and --allow-unauthenticated apt options when creating the build chroot environment. This could allow an attacker who is able to perform a MITM attack between the build environment and the Ubuntu archive to install a...

Buffer Overflows

PC/SC Lite is vulnerable to buffer overflow in the way the pcscd daemon. It is due to a resource manager that coordinates communications with smart card readers and smart cards connected to the system, handled client requests. A local user could create a specially-crafted request that would cause...

Denial Of Service (DoS)

PC/SC Lite is vulnerable to Denial Of Service DoS.It is possible due to the way the pcscd daemon coordinates communications with smart card readers and smart cards connected to the system, handled client requests. A local user could create a specially-crafted request that would cause the pcscd...

You can't open the "Devices" menu in PC Settings in Windows 8.1 or Windows Server 2012 R2

You can't open the "Devices" menu in PC Settings in Windows 8.1 or Windows Server 2012 R2 This article describes an issue that occurs when you try to open the Devices menu in PC Settings in Windows 8.1, Windows RT 8.1, or Windows Server 2012 R2. An update is available to fix this issue. Before yo...

Command Execution Vulnerability in Yimin Trader Zhiying PC Version

Yimin Trader Smart Profit for PC is a computerized securities finance tool. Yimin Trader Zhiying PC Edition has a command execution vulnerability that can be exploited by attackers to execute malicious code...

DLL Hijacking Vulnerability in IceAssistant PC Version

Ice Assistant is a professional Apple cell phone management assistant. There is a DLL hijacking vulnerability in IceAssistant PC version, which can be exploited by attackers to execute malicious DLL files...

Code Execution Vulnerability in IS Voice PC Client

IS Voice was once a voice online group chat tool designed and developed specifically for Chinese players, and is now an entertainment community platform that integrates video performances, Karaoke entertainment, and social interaction. A code execution vulnerability exists in the IS Voice PC...

CVE-2020-10939

Insecure, default path permissions in PHOENIX CONTACT PC WORX SRT through 1.14 allow for local privilege escalation...

CVE-2020-10939

Insecure, default path permissions in PHOENIX CONTACT PC WORX SRT through 1.14 allow for local privilege escalation...

Privilege escalation

Insecure, default path permissions in PHOENIX CONTACT PC WORX SRT through 1.14 allow for local privilege escalation...

CVE-2020-10939

CVE-2020-10939 affects PHOENIX CONTACT PC WORX SRT up to v1.14. Insecure default path permissions enable local privilege escalation. Documented by multiple sources (NVD entry, Red Hat advisory, CNVD, PRION, etc.). Root cause: insecure default path privileges. Impact: local privilege escalation; C...

CVE-2020-10939

Insecure, default path permissions in PHOENIX CONTACT PC WORX SRT through 1.14 allow for local privilege escalation...

CVE-2020-7478

A CWE-22: Improper Limitation of a Pathname to a Restricted Directory exists in IGSS Versions 14 and prior using the service: IGSSupdate, which could allow a remote unauthenticated attacker to read arbitrary files from the IGSS server PC on an unrestricted or shared network when the IGSS Update...

Design/Logic Flaw

A CWE-22: Improper Limitation of a Pathname to a Restricted Directory exists in IGSS Versions 14 and prior using the service: IGSSupdate, which could allow a remote unauthenticated attacker to read arbitrary files from the IGSS server PC on an unrestricted or shared network when the IGSS Update...

5 Best Android Emulators for PC

By Uzair Amir Some times, third-party Android emulators can help to solve several issues and then there is no shortage of Android emulators, which could be hard for you to pick up the best one. This is a post from HackRead.com Read the original post: 5 Best Android Emulators for PC...

computer-pc-shop.de Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1116590 Security Researcher error404 Helped patch 533 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting computer-pc-shop.de websit...

Friend’s girlfriend sextortion scam infects PCs with Raccoon malware

By Deeba Ahmed Hackers are using supposed nude photos of a friend's girlfriend in the latest sextortion scam - Here's what's happening... This is a post from HackRead.com Read the original post: Friend's girlfriend sextortion scam infects PCs with Raccoon malware...

CVE-2019-19282

A vulnerability has been identified in OpenPCS 7 V8.1 All versions, OpenPCS 7 V8.2 All versions, OpenPCS 7 V9.0 All versions V9.0 Upd3, SIMATIC BATCH V8.1 All versions, SIMATIC BATCH V8.2 All versions V8.2 Upd12, SIMATIC BATCH V9.0 All versions V9.0 SP1 Upd5, SIMATIC NET PC Software V14 All...