2459 matches found
PT-2023-1443 · Microsoft +1 · .Net Framework +2
Name of the Vulnerable Software and Affected Versions: Microsoft .NET Framework and .NET affected versions not specified Visual Studio affected versions not specified Description: The issue is related to insufficient protection of sensitive data during the implementation of debugging code in...
The vulnerability of the microprogramming software of Mitsubishi MELFA series SD/SQ and F industrial robots lies in the insufficient protection of operational data during code debugging. This allows attackers to circumvent security restrictions and gain unauthorized access to protected information.
The vulnerability of the microprogrammed software in Mitsubishi MELFA industrial robots of the SD/SQ and F series is related to insufficient protection of operational data during code debugging. Exploiting this vulnerability allows an attacker to bypass security restrictions and gain unauthorized...
Dell BIOS 安全漏洞
Dell BIOS is embedded software on a small memory chip on a computer motherboard from Dell, USA. A security vulnerability exists in Dell BIOS. An attacker could exploit this vulnerability to read system information through the debugging interface...
Exploit for SQL Injection in Wordpress
PoC exploit for...
The vulnerability of the Factory Interface Network Service (FINS) protocol implementation in the microcomputer-based programmable logic controllers OMRON CP1L-EL20DR-D allows a intruder to gain access to read, modify, or delete files, execute arbitrary code, or cause a service failure.
The vulnerability of the Factory Interface Network Service FINS protocol implementation in the microcomputer-based programmable logic controllers OMRON CP1L-EL20DR-D is related to insufficient protection of service data during code debugging. Exploiting this vulnerability can allow an attacker to...
Kerberos Ticket Inspecting
This module outputs the contents of a ccache/kirbi file and optionally when provided with the appropriate key decrypts and displays the encrypted content too. Can be used for inspecting tickets that aren't working as intended in an effort to debug them. Module Options msf use...
Mitsubishi Electric MELFA Robot Controllers 安全漏洞
Mitsubishi Electric MELFA Robot Controllers are high-precision robotic arm controllers from Mitsubishi Electric Japan. A security vulnerability exists in Mitsubishi Electric MELFA Robot Controllers, which stems from an authentication bypass vulnerability caused by active debugging code, which cou...
Divide By Zero in function adjust_skipcol
Description Divide By Zero in function adjustskipcol at move.c:1978 vim version git log commit 7193323b7796c05573f3aa89d422e848feb3a8dc HEAD - master, tag: v9.0.1223, origin/master, origin/HEAD POC ./vim -u NONE -i NONE -n -m -X -Z -e -s -S ./pocdbz01s.dat -c :qa! Floating point exception GDB gdb...
TerraLdr - A Payload Loader Designed With Advanced Evasion Features
TerraLdr: A Payload Loader Designed With Advanced Evasion Features Details: no crt functions imported syscall unhooking using KnownDllUnhook api hashing using Rotr32 hashing algo payload encryption using rc4 - payload is saved in .rsrc process injection - targetting 'SettingSyncHost.exe' ppid...
BitRAT Now Sharing Sensitive Bank Data as a Lure
Introduction In June of 2022 Qualys Threat Research Unit TRU wrote an in-depth report on Redline, a commercial off the shelf infostealer that spreads via fake cracked software hosted on Discord’s content delivery network. Since then, we have continued to track similar threats to identify their...
CVE-2022-45428
Some Dahua software products have a vulnerability of sensitive information leakage. After obtaining the permissions of administrators, by sending a specific crafted packet to the vulnerable interface, an attacker can obtain the debugging information...
Information disclosure
Some Dahua software products have a vulnerability of sensitive information leakage. After obtaining the permissions of administrators, by sending a specific crafted packet to the vulnerable interface, an attacker can obtain the debugging information...
CVE-2022-45428
The CVE-2022-45428 entry concerns sensitive information leakage in Dahua software. Affected: certain Dahua software products (no specific versions provided). Condition: an attacker with administrator permissions can trigger leakage by sending a crafted packet to a vulnerable interface to obtain d...
Dahua software products 安全漏洞
Dahua software products are a family of applications from the Chinese company Dahua. A security vulnerability exists in a number of Dahua software products that stems from the disclosure of sensitive information allowing an attacker with administrator privileges to obtain debugging information by...
PT-2022-6229 · Omron · Omron Cp1L-El20Dr-D
Name of the Vulnerable Software and Affected Versions: OMRON CP1L-EL20DR-D all versions Description: The issue is related to the implementation of the Factory Interface Network Service FINS protocol in the OMRON CP1L-EL20DR-D programmable logic controller's firmware, specifically due to...
CVE-2022-45428
Some Dahua software products have a vulnerability of sensitive information leakage. After obtaining the permissions of administrators, by sending a specific crafted packet to the vulnerable interface, an attacker can obtain the debugging information...
PT-2022-27510 · Dahua · Dahua Software Products
Name of the Vulnerable Software and Affected Versions: Dahua software products affected versions not specified Description: The issue concerns sensitive information leakage in some Dahua software products. An attacker, after obtaining administrator permissions, can send a crafted packet to a...
GuLoader Malware Utilizing New Techniques to Evade Security Software
Cybersecurity researchers have exposed a wide variety of techniques adopted by an advanced malware downloader called GuLoader to evade security software. "New shellcode anti-analysis technique attempts to thwart researchers and hostile environments by scanning entire process memory for any virtua...
CVE-2021-35954
fastrack Reflex 2.0 W307SREFLEXv90.89 Activity Tracker allows physically proximate attackers to dump the firmware, flash custom malicious firmware, and brick the device via the Serial Wire Debug SWD feature...
fastrack Reflex 安全漏洞
The fastrack Reflex is a smart wearable device from fastrack. A security vulnerability exists in fastrack Reflex version 2.0 W307SREFLEXv90.89, which stems from a vulnerability that could allow a physically proximate attacker to dump the firmware, flash customized malicious firmware, and brick th...