Modern OSs for embedded systems

At Kaspersky Lab we analyze the technologies available on cybersecurity market and this time we decided to look at what OS developers are offering for embedded systems or, in other words, the internet of things. Our primary interest is how and to what degree these OSs can solve...

riot-compiler denial of service vulnerability

riot-compiler is a compiler for riot user interface library. A security vulnerability exists in the regex in riot-compiler version 2.3.21. An attacker can exploit this vulnerability to cause a denial of service...

CVE-2016-10527

The riot-compiler version version 2.3.21 has an issue in a regex Catastrophic Backtracking thats make it unusable under certain conditions...

Design/Logic Flaw

The riot-compiler version version 2.3.21 has an issue in a regex Catastrophic Backtracking thats make it unusable under certain conditions...

CVE-2016-10527

The riot-compiler version version 2.3.21 has an issue in a regex Catastrophic Backtracking thats make it unusable under certain conditions...

CVE-2016-10527

The riot-compiler project (version 2.3.21) contains a regex vulnerability causing a regular expression denial of service (catastrophic backtracking) under certain inputs. This affects riot-compiler’s ability to process some patterns efficiently, potentially impacting availability. The issue is do...

CVE-2016-10527

The riot-compiler version version 2.3.21 has an issue in a regex Catastrophic Backtracking thats make it unusable under certain conditions...

CVE-2017-8289

Stack-based buffer overflow in the ipv6addrfromstr function in sys/net/networklayer/ipv6/addr/ipv6addrfromstr.c in RIOT prior to 2017-04-25 allows local attackers, and potentially remote attackers, to cause a denial of service or possibly have unspecified other impact via a malformed IPv6 address...

CVE-2017-8289

Stack-based buffer overflow in the ipv6addrfromstr function in sys/net/networklayer/ipv6/addr/ipv6addrfromstr.c in RIOT prior to 2017-04-25 allows local attackers, and potentially remote attackers, to cause a denial of service or possibly have unspecified other impact via a malformed IPv6 address...

CVE-2017-8289

CVE-2017-8289 describes a stack-based buffer overflow in RIOT OS, specifically in the ipv6_addr_from_str.c module (ipv6_addr_from_str function). The vulnerability affects RIOT builds prior to 2017-04-25 and can allow a local attacker, and potentially remote attackers, to cause a denial of service...

Riot Games League Of Legends Insecure File Permissions Privilege Escalation

------------------------------------------------------------------------------------ Exploit Title: Riot Games League of Legends Insecure File Permissions Privilege Escalation Date: 03/06/16 Exploit Author: Cyril Vallicari i give credit also to Vincent Yiu he probably found this too Vendor...

Riot Games League of Legends - Insecure File Permissions Privilege Escalation

Exploit for windows platform in category local exploits ------------------------------------------------------------------------------------ Exploit Title: Riot Games League of Legends Insecure File Permissions Privilege Escalation Date: 03/06/16 Exploit Author: Cyril Vallicari i give credit also...

Riot Games League of Legends - Insecure File Permissions Privilege Escalation

------------------------------------------------------------------------------------ Exploit Title: Riot Games League of Legends Insecure File Permissions Privilege Escalation Date: 03/06/16 Exploit Author: Cyril Vallicari i give credit also to Vincent Yiu he probably found this too Vendor...

League Of Legends Screensaver File Permission Privilege Escalation

Exploit Title: League of Legends Screensaver Insecure File Permissions Privilege Escalation CVE-ID: NA Date: 13/04/2016 Exploit Author: Vincent Yiu Contact: [email protected] Vendor Homepage: http://www.leagueoflegends.com Software Link: screensaver.euw.leagueoflegends.com/enUS Version: MD5...

League of Legends Screensaver - Insecure File Permissions Privilege Escalation

Exploit for windows platform in category local exploits Exploit Title: League of Legends Screensaver Insecure File Permissions Privilege Escalation CVE-ID: NA Date: 13/04/2016 Exploit Author: Vincent Yiu Contact: email protected Vendor Homepage: http://www.leagueoflegends.com Software Link:...

League of Legends Screensaver - Unquoted Service Path Privilege Escalation

Exploit Title: League of Legends Screensaver Unquoted Service Paths Conditional Privilege Escalation. CVE-ID: NA Date: 13/04/2016 Exploit Author: Vincent Yiu Contact: [email protected] Vendor Homepage: http://www.leagueoflegends.com Software Link: screensaver.euw.leagueoflegends.com/enUS...

League Of Legends Screensaver Unquoted Service Path Privilege Escalation

Exploit Title: League of Legends Screensaver Unquoted Service Paths Conditional Privilege Escalation. CVE-ID: NA Date: 13/04/2016 Exploit Author: Vincent Yiu Contact: [email protected] Vendor Homepage: http://www.leagueoflegends.com Software Link: screensaver.euw.leagueoflegends.com/enUS...

League of Legends Screensaver - Insecure File Permissions Privilege Escalation

League of Legends Screensaver - Insecure File Permissions Privilege Escalation Exploit Title: League of Legends Screensaver Insecure File Permissions Privilege Escalation CVE-ID: NA Date: 13/04/2016 Exploit Author: Vincent Yiu Contact: [email protected] Vendor Homepage:...

League of Legends Screensaver - Insecure File Permissions Privilege Escalation

Exploit Title: League of Legends Screensaver Insecure File Permissions Privilege Escalation CVE-ID: NA Date: 13/04/2016 Exploit Author: Vincent Yiu Contact: [email protected] Vendor Homepage: http://www.leagueoflegends.com Software Link: screensaver.euw.leagueoflegends.com/enUS Version: MD5...

League of Legends Screensaver - Unquoted Service Path Privilege Escalation

League of Legends Screensaver - Unquoted Service Path Privilege Escalation Exploit Title: League of Legends Screensaver Unquoted Service Paths Conditional Privilege Escalation. CVE-ID: NA Date: 13/04/2016 Exploit Author: Vincent Yiu Contact: [email protected] Vendor Homepage:...