The vulnerability of the Windows UPnP Device Host service allows attackers to increase their privileges.

The vulnerability of the Windows UPnP Device Host service in the Windows operating system is related to operations that go beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to increase their privileges...

kernel: malicious USB devices can lead to multiple out-of-bounds write

An out-of-bounds write flaw was found in the Linux kernel’s HID drivers. An attacker, able to plug in a malicious USB device, can crash the system or read and write to memory with an incorrect address...

Arbitrary File Download Vulnerability in WiseStar Universal Collection Management System

Huixing Software Technology Co., Ltd. specializes in the development of software for the water industry. It has developed a series of management software for the water industry: Huixing Water Charge Management System, Huixing Water Business Management Information System, Huixing Water Expansion a...

Arbitrary File Deletion Vulnerability in WiseStar Universal Collection Management System

Huixing Software Technology Co., Ltd. specializes in the development of software for the water industry. It has developed a series of management software for the water industry: Huixing Water Charge Management System, Huixing Water Business Management Information System, Huixing Water Expansion a...

USN-4830-1: Okular vulnerability

It was discovered that Okular mishandled certain crafted archives during extraction. An attacker could use this vulnerability to write arbitrary files to the filesystem...

CVE-2021-26899

Windows UPnP Device Host Elevation of Privilege Vulnerability...

A flaw was found in grub2 in versions prior to 2.06. During USB device initialization descriptors are read with very little bounds checking and assumes the USB device is providing sane values. If properly exploited an attacker could trigger memory corruption leading to arbitrary code execution allowing a bypass of the Secure Boot mechanism. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

...

Lovecraft Universal Connections PC JPEG files have a parsing double release vulnerability

The official version of Lovecraft Universal Player is a universal video and audio playback tool created by Lovecraft. Love Qiyi universal player belongs to the universal player, can support most of the mainstream media formats. It also supports the functions of watching pictures, skinning,...

Binary vulnerability in jpeg file parsing in Lovecraft Universal Connections PC version

The official version of Lovecraft Universal Player is a universal video and audio playback tool created by Lovecraft. Love Qiyi universal player belongs to the universal player, can support most of the mainstream media formats. It also supports the functions of watching pictures, skinning,...

Binary vulnerability in BMP file parsing for PC version of Lovecraft Universal Connections

The official version of Lovecraft Universal Player is a universal video and audio playback tool created by Lovecraft. Love Qiyi universal player belongs to the universal player, can support most of the mainstream media formats. It also supports the functions of watching pictures, skinning,...

Microsoft Windows UPnP 安全漏洞

Microsoft Windows UPnP is a device proxy from Microsoft USA. Providing a proxy allows a Windows network connection to recognize the ZoneDirector's IP address. A security vulnerability exists in the Windows UPnP device host. The following products and versions are affected: Windows Server, version...

RubyGems: Bundler's RCE with response using Marshal

A vulnerability was found in Bundler's dependency API endpoint, which uses Marshal serialization. This could allow for remote code execution if a client receives a specially crafted response. The impact is increased risk from specifying an untrusted source or man-in-the-middle attack...

AZL-6462 CVE-2020-25647 affecting package grub2 for versions less than 2.06~rc1-7

A flaw was found in grub2 in versions prior to 2.06. During USB device initialization, descriptors are read with very little bounds checking and assumes the USB device is providing sane values. If properly exploited, an attacker could trigger memory corruption leading to arbitrary code execution...

DEBIAN-CVE-2020-25647

A flaw was found in grub2 in versions prior to 2.06. During USB device initialization, descriptors are read with very little bounds checking and assumes the USB device is providing sane values. If properly exploited, an attacker could trigger memory corruption leading to arbitrary code execution...

ALPINE-CVE-2020-25647

A flaw was found in grub2 in versions prior to 2.06. During USB device initialization, descriptors are read with very little bounds checking and assumes the USB device is providing sane values. If properly exploited, an attacker could trigger memory corruption leading to arbitrary code execution...

grub2 缓冲区错误漏洞

grub2 is a Linux system boot program from the GNU community. A buffer overflow vulnerability exists in grub2 versions prior to 2.06 in the grubusbdeviceinitialize function, which handles USB device initialization. No details of the vulnerability are provided at this time...

Post-Cyberattack, Universal Health Services Faces $67M in Losses

The cyberattack that hit Universal Health Services UHS in September has cost the healthcare service provider a whopping $67 million in damages, according to financial statements. A fourth-quarter earnings report last week from UHS highlighted the “significant incremental labor expense” needed to...

grub2: Out-of-bounds write in grub_usb_device_initialize()

A flaw was found in grub2. During USB device initialization, descriptors are read with very little bounds checking and assumes the USB device is providing sane values. If properly exploited, an attacker could trigger memory corruption leading to arbitrary code execution allowing a bypass of the...

grub2: Out-of-bounds write in grub_usb_device_initialize()

A flaw was found in grub2. During USB device initialization, descriptors are read with very little bounds checking and assumes the USB device is providing sane values. If properly exploited, an attacker could trigger memory corruption leading to arbitrary code execution allowing a bypass of the...

QEMU: assertion failure through usb_packet_unmap() in hw/usb/hcd-ehci.c

A reachable assertion vulnerability was found in the USB EHCI emulation code of QEMU. This issue occurs while processing USB requests due to missed handling of DMA memory map failure. This flaw allows a malicious privileged user within the guest to send bogus USB requests and crash the QEMU proce...