Buffer overflow

A buffer overflow in the MLoadDefaults function in mmisc.c in id Tech 1 aka Doom engine allows arbitrary code execution via an unsafe usage of fscanf, because it does not limit the number of characters to be read in a format argument...

CVE-2020-15007

The CVE-2020-15007 entry concerns id Tech 1 (Doom engine). A buffer overflow in M_LoadDefaults (m_misc.c) arises from an unsafe fscanf usage that does not limit the number of characters read, enabling arbitrary code execution. Documented impact indicates code execution is possible, driven by the ...

CVE-2020-15007

A buffer overflow in the MLoadDefaults function in mmisc.c in id Tech 1 aka Doom engine allows arbitrary code execution via an unsafe usage of fscanf, because it does not limit the number of characters to be read in a format argument...

CVE-2020-15007

A buffer overflow in the MLoadDefaults function in mmisc.c in id Tech 1 aka Doom engine allows arbitrary code execution via an unsafe usage of fscanf, because it does not limit the number of characters to be read in a format argument...

CVE-2020-15007

A buffer overflow in the MLoadDefaults function in mmisc.c in id Tech 1 aka Doom engine allows arbitrary code execution via an unsafe usage of fscanf, because it does not limit the number of characters to be read in a format argument...

PT-2020-14115

Name of the Vulnerable Software and Affected Versions id Tech 1 aka Doom engine affected versions not specified Description A buffer overflow in the M LoadDefaults function in m misc.c allows arbitrary code execution via an unsafe usage of fscanf, because it does not limit the number of character...

CVE-2020-15007: Buffer Copy without Checking Size of Input

A buffer overflow in the MLoadDefaults function in mmisc.c in id Tech 1 aka Doom engine allows arbitrary code execution via an unsafe usage of fscanf, because it does not limit the number of characters to be read in a format argument...

Memory Corruption Vulnerability Exists in Extreme Office 2019 For Windows at Beijing Haiteng Times Technology Co Ltd (CNVD-2020-44380)

Extreme Office is an independently controlled office learning software developed by Beijing Haiteng Times Technology Co. A memory corruption vulnerability exists in Extreme Office 2019 For Windows by Beijing Haiteng Times Technology Co. which can be exploited by attackers to cause a denial of...

Over 100 New Chrome Browser Extensions Caught Spying On Users

Google recently removed 106 more extensions from its Chrome Web Store after they were found illegally collecting sensitive user data as part of a "massive global surveillance campaign" targeting oil and gas, finance, and healthcare sectors. Awake Security, which disclosed the findings late last...

CVE-2020-9332

ftusbbus2.sys in FabulaTech USB for Remote Desktop through 2020-02-19 allows privilege escalation via crafted IoCtl code related to a USB HID device...

CVE-2020-0532

Improper input validation in subsystem for IntelR AMT versions before 11.8.77, 11.12.77, 11.22.77 and 12.0.64 may allow an unauthenticated user to potentially enable denial of service or information disclosure via adjacent access...

How Big Tech Leveraged Agile Principles to Build Empires

By Waqas We all know who the big 5 tech firms are. Apple, Amazon, Alphabet, Facebook, and Google are... This is a post from HackRead.com Read the original post: How Big Tech Leveraged Agile Principles to Build Empires...

SQL Injection Vulnerability in the Lede Tongcheng Coupon System of Ziou Network Technology Service Center in Dingtao District, Heze City (CNVD-2020-32563)

LOTUS Coupon System is a WeChat-based e-coupon operation and distribution system for merchants in the same city. There is a SQL injection vulnerability in the LeDe Same City Coupon System of Ziou Network Technology Service Center in Dingtao District, Heze City, which can be exploited by attackers...

Going dark: encryption and law enforcement

UPDATE, 05/22/2020: In the advent of the EARN IT Act, the debate on government subversion of encryption has reignited. Given that the material conditions of the technology have not changed, and the arguments given in favor of the bill are not novel, we've decided to republish the following blog...

Busting the Myths of Remote Workforce Security

This is part of our ongoing conversation about the worldwide challenges of working remotely. To stay up-to-date on the latest insights, refer to our live page for COVID-19: Cybersecurity Community Resources. I’ve attended a bunch of executive CISO roundtables over the past few weeks all focused o...

RevenueWire to pay $6.7 million to settle FTC charges

What can you do as a scammer when no legitimate payment provider wants to process your payments anymore? Or, what if you are growing sick and tired of these same payment providers reimbursing disgruntled customers who claim that your products didn't fix computers, like—you know—you said they woul...

NewIntelTechMedia License Issues Vulnerabilities

NewIntelTechMedia NETM is a cryptocurrency.A security vulnerability exists in the 'NETM' function in NETM's smart contract implementation, which stems from the fact that the function does not check the identity of the caller. An attacker could use the vulnerability to modify the owner of the smar...

Report: Microsoft’s GitHub Account Gets Hacked

Hackers have broken into Microsoft’s GitHub account and stolen 500 GB of data from the tech giant’s own private repositories on the developer platform, according to published reports. A group that calls itself Shiny Hunters claims it stole and then leaked the data, which did not appear to include...

Tech Support Scam Uses Child Porn Warning

A new email scam is making the rounds, warning recipients that someone using their Internet address has been caught viewing child pornography. The message claims to have been sent from Microsoft Support, and says the recipient's Windows license will be suspended unless they call an "MS Support"...

SQL Injection Vulnerability in Website Building System of Ningbo Hi-Tech Zone Zhongyu Network Co.

Ningbo Hi-Tech Zone Zhongyu Network Co., Ltd. is a branding and website design service organization. A SQL injection vulnerability exists in the website building system of Ningbo Hi-Tech Zone Zhongyu Network Co. The vulnerability can be exploited by attackers to obtain sensitive information from...