12311 matches found
Stack Overflow Vulnerability in Rexchip Microelectronics Corporation's Rexchip Microchip
Rexchip Microelectronics has a R&D team specializing in system-on-chip design and algorithm research, and provides professional chip solutions for high-end intelligent hardware, cell phone peripherals, tablet PCs, TV set-top boxes, industrial control, and many other fields. Rexchip Microelectroni...
Greening the Digital Economy
COVID-19 and related quarantine protocols have pushed the world even more online than it already was. Global energy consumption for all things digital has been increasing by about 9% per year between 2015 and 2020, and is tracking to be responsible for about 8% of greenhouse gas GHG emission by...
CVE-2019-17639
In Eclipse OpenJ9 prior to version 0.21 on Power platforms, calling the System.arraycopy method with a length longer than the length of the source or destination array can, in certain specially crafted code patterns, cause the current method to return prematurely with an undefined return value...
CVE-2019-17639
In Eclipse OpenJ9 prior to version 0.21 on Power platforms, calling the System.arraycopy method with a length longer than the length of the source or destination array can, in certain specially crafted code patterns, cause the current method to return prematurely with an undefined return value...
Design/Logic Flaw
In Eclipse OpenJ9 prior to version 0.21 on Power platforms, calling the System.arraycopy method with a length longer than the length of the source or destination array can, in certain specially crafted code patterns, cause the current method to return prematurely with an undefined return value...
CVE-2019-17639
In Eclipse OpenJ9 prior to version 0.21 on Power platforms, calling the System.arraycopy method with a length longer than the length of the source or destination array can, in certain specially crafted code patterns, cause the current method to return prematurely with an undefined return value...
CVE-2019-17639
CVE-2019-17639 affects Eclipse OpenJ9 on Power platforms, where calling System.arraycopy with a length longer than the source or destination can cause the current method to return prematurely with an undefined return value. The code may then use whatever is in the return register as if it matches...
Siemens SICAM MMU, SGU and T Cross-Site Scripting Vulnerabilities
SICAM T is a digital measurement sensor that allows the measurement of power in the non-electrical network in a single unit.ICAM-MMU Measurement and Monitoring Unit is a power monitoring unit that allows the measurement of power in the grid in a single unit.SICAM SGU Discontinued is a Smart Grid...
Siemens SICAM MMU, SGU and T Buffer Overflow Vulnerabilities
SICAM T is a digital measurement sensor that allows the measurement of power in the non-electrical network in a single unit.ICAM-MMU Measurement and Monitoring Unit is a power monitoring unit that allows the measurement of power in the grid in a single unit.SICAM SGU Discontinued is a Smart Grid...
CVE-2020-11951
An issue was discovered on Rittal PDU-3C002DEC through 5.17.10 and CMCIII-PU-9333E0FB through 3.17.10 devices. There is a Backdoor root account...
Kernel: ppc: kvm: conflicting use of HSTATE_HOST_R1 to store r1 state leads to host stack corruption
A flaw was found in the way the KVM hypervisor on the Power8 processor stores the r1 register state in the 'HSTATEHOSTR1' field on the Linux kernel stack. This flaw occurs while handling hypercalls in Transactional Memory TM suspend mode in the kvmppcsavetm and kvmppcrestoretm routines, leading t...
OSV-2020-589 UNKNOWN WRITE in perfetto::trace_processor::ProtoTraceParser::ParsePowerRails
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14018 Crash type: UNKNOWN WRITE Crash state: perfetto::traceprocessor::ProtoTraceParser::ParsePowerRails perfetto::traceprocessor::ProtoTraceParser::ParseTracePacket...
Eaton Intelligent Power Manager 1.6 - Directory Traversal
Exploit Title: Eaton Intelligent Power Manager 1.6 - Directory Traversal Date: 2018-09-29 Exploit Author: Emre ÖVÜNÇ Vendor Homepage: https://powerquality.eaton.com/ Software Link: https://powerquality.eaton.com/Support/Software-Drivers/default.asp?cx=-999 Version: v1.6 Tested on: Windows...
Hanzhong Qiyuan Power Network Co., Ltd. website building system has SQL injection vulnerability
Hanzhong Qiyuan Power Network Co., Ltd. is a high-tech Internet technology service provider. There is a SQL injection vulnerability in Hanzhong Qiyuan Power Network Co. Attackers can utilize the vulnerability to obtain sensitive database information...
Ripple20 Bugs Put Hundreds of Millions of IoT Devices at Risk
The so-called Ripple20 vulnerabilities affect equipment found in data centers, power grids, and more...
CVE-2020-7585
A vulnerability has been identified in SIMATIC PCS 7 V8.2 and earlier All versions, SIMATIC PCS 7 V9.0 All versions V9.0 SP3, SIMATIC PDM All versions V9.2, SIMATIC STEP 7 V5.X All versions V5.6 SP2 HF3, SINAMICS STARTER containing STEP 7 OEM version All versions V5.4 HF2. A DLL Hijacking...
Microsoft Windows Lockscreen Elevation of Privilege Vulnerability
Microsoft Windows is a set of operating systems for use on personal devices from the American company Microsoft. A power lifting vulnerability exists in Microsoft Windows Lockscreen, which arises from a program's inability to properly load a focused image from a secure location. An attacker can...
New Research: "Privacy Threats in Intimate Relationships"
I just published a new paper with Karen Levy of Cornell: "Privacy Threats in Intimate Relationships." Abstract: This article provides an overview of intimate threats: a class of privacy threats that can arise within our families, romantic partnerships, close friendships, and caregiving...
Regular Expression Denial Of Service (ReDoS)
url-regex is vulnerable to Regular Expression Denial of Service ReDoS. The attackers can send requests with very long strings to String.test to trigger an application crash by exhausting memory and high processing power...
