Schneider Electric Altivar ATV71HD18M3X337 Variable Speed Drive

Binary data 764168.prm...

Schneider Electric Altivar ATV61HD45N4S337 Variable Speed Drive

Binary data 764039.prm...

Schneider Electric Altivar ATV61HD75N4S337 Variable Speed Drive

Binary data 764049.prm...

Schneider Electric Altivar ATV71HU40M3Z Variable Speed Drive

Binary data 764259.prm...

Schneider Electric Altivar ATV 600 ATV630D55M3 Variable Speed Drive

Binary data 764331.prm...

Schneider Electric Altivar ATV930D37M3C Variable Speed Drive

Binary data 764312.prm...

Schneider Electric Altivar ATV71HU30N4Z Variable Speed Drive

Binary data 764253.prm...

Schneider Electric Altivar ATV71HD37M3X383 Variable Speed Drive

Binary data 764193.prm...

Schneider Electric Altivar ATV930U40M3 Variable Speed Drive

Binary data 764302.prm...

Schneider Electric Altivar ATV61HC16N4 Variable Speed Drive

Binary data 763956.prm...

Schneider Electric Altivar ATV71HD55N4383 Variable Speed Drive

Binary data 764211.prm...

Schneider Electric Altivar ATV61HU55N4Z Variable Speed Drive

Binary data 764090.prm...

Design/Logic Flaw

Remote code execution was discovered in Horde Groupware Webmail 5.2.22 and 5.2.17. Horde/Form/Type.php contains a vulnerable class that handles image upload in forms. When the HordeFormTypeimage method onSubmit is called on uploads, it invokes the functions getImage and getUpload, which uses...

CVE-2019-2247

Possibility of double free issue while running multiple instances of smp2p test because of proper protection is missing while using global variable in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice &...

Apple macOS < 10.14.5 / iOS < 12.3 JavaScriptCore - Loop-Invariant Code Motion (LICM) in DFG JIT Leaves Stack Variable Uninitialized

While fuzzing JavaScriptCore, I encountered the following modified and commented JavaScript program which crashes jsc from current HEAD and release: // Run with --useConcurrentJIT=false // Fill the stack with the return value of the provided function. function stacksprayf // This function will...

Schneider Electric Altivar Process ATV900 Series Variable Speed Drive Detection

Binary data 268.prm...

macOS < 10.14.5 / iOS < 12.3 JavaScriptCore - Loop-Invariant Code Motion (LICM) in DFG JIT

macOS 13.37; stackspray = ; for let v15 = 0; v15 100; v15++ function v19v23 // This weird loop form might be required to prevent loop unrolling... for let v30 = 0; v30 3; v30 = v30 + "asdf" // Generates the specific CFG necessary to trigger the bug. const v33 = Error != Error; if v33 else // Forc...

Schneider Electric Altivar 32 Variable Speed Drive Detection

Binary data 267.prm...

Apple macOS 10.14.5 iOS 12.3 JavaScriptCore - Loop-Invariant Code Motion (LICM) in DFG JIT Leaves Stack Variable Uninitialized

Apple macOS 10.14.5 iOS 12.3 JavaScriptCore - Loop-Invariant Code Motion LICM in DFG JIT Leaves Stack Variable Uninitialized While fuzzing JavaScriptCore, I encountered the following modified and commented JavaScript program which crashes jsc from current HEAD and release: // Run with...

CVE-2018-16156

In PaperStream IP TWAIN 1.42.0.5685 Service Update 7, the FJTWSVIC service running with SYSTEM privilege processes unauthenticated messages received over the FjtwMkicFjicube32 named pipe. One of these message processing functions attempts to dynamically load the UninOldIS.dll library and executes...