Updated ghostscript packages fix security vulnerability

The settextdistance function in devices/vector/gdevpdts.c in the pdfwrite component in Artifex Ghostscript through 9.22 does not prevent overflows in text-positioning calculation, which allows remote attackers to cause a denial of service application crash or possibly have unspecified other impac...

The vulnerability of the microprogramming software of the General Electric D60 Line Distance Relay allows a intruder to execute arbitrary code.

The vulnerability of the microprogramming software of the General Electric D60 Line Distance Relay device is caused by buffer overflow. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code using the SSH protocol from a remote location...

Ghostscript Arbitrary Code Execution Vulnerability

Artifex Ghostscript is the United States Artifex Software, Inc. of an open source PostScript a page description language used in the electronic industry and desktop publishing and programming languages parser, which can display Postscript files and print on non-Postscript printer. pdfwrite is one...

ALPINE-CVE-2018-10194

The settextdistance function in devices/vector/gdevpdts.c in the pdfwrite component in Artifex Ghostscript through 9.22 does not prevent overflows in text-positioning calculation, which allows remote attackers to cause a denial of service application crash or possibly have unspecified other impac...

UBUNTU-CVE-2018-10194

The settextdistance function in devices/vector/gdevpdts.c in the pdfwrite component in Artifex Ghostscript through 9.22 does not prevent overflows in text-positioning calculation, which allows remote attackers to cause a denial of service application crash or possibly have unspecified other impac...

General Electric D60 Line Distance Relay Buffer Overflow Vulnerability (CNVD-2018-03478)

General Electric Company is an electrical equipment, appliance and electronic equipment manufacturing company. A buffer overflow vulnerability exists in the General Electric D60 Line Distance Relay, which can be exploited by an attacker to execute arbitrary code in the context of an affected...

General Electric D60 Line Distance Relay Buffer Overflow Vulnerability

General Electric Company is an electrical equipment, appliance and electronic equipment manufacturing company. A buffer overflow vulnerability exists in the General Electric D60 Line Distance Relay, which can be exploited by an attacker to execute arbitrary code in the context of an affected...

Stack overflow

A Stack-based Buffer Overflow issue was discovered in GE D60 Line Distance Relay devices running firmware Version 7.11 and prior. Multiple stack-based buffer overflow vulnerabilities have been identified, which may allow remote code execution...

CVE-2018-5475

A Stack-based Buffer Overflow issue was discovered in GE D60 Line Distance Relay devices running firmware Version 7.11 and prior. Multiple stack-based buffer overflow vulnerabilities have been identified, which may allow remote code execution...

CVE-2018-5473

An Improper Restriction of Operations within the Bounds of a Memory Buffer issue was discovered in GE D60 Line Distance Relay devices running firmware Version 7.11 and prior. The SSH functions of the device are vulnerable to buffer overflow conditions that may allow a remote attacker to execute...

CVE-2018-5475

A Stack-based Buffer Overflow issue was discovered in GE D60 Line Distance Relay devices running firmware Version 7.11 and prior. Multiple stack-based buffer overflow vulnerabilities have been identified, which may allow remote code execution...

CVE-2018-5473

The CVE-2018-5473 entry concerns GE D60 Line Distance Relay devices with firmware version 7.11 and earlier. The issue is a buffer overflow in SSH functions that could allow a remote attacker to execute arbitrary code on the device. The connected ICS advisory confirms the vulnerability class (buff...

CVE-2018-5475

The CVE-2018-5475 issue affects GE D60 Line Distance Relay devices running firmware version 7.11 and earlier. The vulnerability is described as a stack-based buffer overflow that could allow remote code execution. Related sources (ICS-CERT NCCIC advisory ICSA-18-046-02) confirm the impact and sta...

GE D60 Line Distance Relay

CVSS v3 9.8 ATTENTION: Remotely exploitable/low skill level to exploit. Vendor: GE Equipment: D60 Line Distance Relay Vulnerabilities: Stack-based Buffer Overflow, Improper Restriction of Operations within the Bounds of a Memory Buffer AFFECTED PRODUCTS The following versions of the D60 Line...

Heart Size: Yet Another Biometric

Turns out that heart size doesn't change throughout your adult life, and you can use low-level Doppler radar to scan the size -- even at a distance -- as a biometric. Research paper to be available soon...

Adobe ColdFusion arbitrary command execution flaws vulnerability 0day(CVE–2017–11283, CVE–2017–11284)early warning-vulnerability warning-the black bar safety net

Adobe ColdFusion in 2017 9 November 12 released a network security update in refer to the previous version, there is a serious deserialization flaws vulnerability bug（CVE-2017-11283, CVE-2017-11284, and may incur long-distance code to fulfill. When applying the Flex integration-do on Remote Adobe...

Struts2 new flaws vulnerability bug（S2-052 presents the use case, and face the vulnerability flaws of the enterprise-the race against time-vulnerability warning-the black bar safety net

Prior to the black bar safety net it S2-052）vulnerabilities done in a special thematic report, I believe we also have understand! Recently from the Cisco Talos experimental study of the analysis chamber and NVISO laboratory for the research staff also found that there was an attacker of real use ...

Described in the CTF game found Python deserialization BUG vulnerability flaws-vulnerability warning-the black bar safety net

In the first few days, I had the privilege to join the ToorConCTF（https://twitter.com/toorconctf in addition this event the process of my first time in Python in the invention the sequence of the flaws. In our competition process, there are two provocative touch to be able to perhaps receive the...

Clustering and Dimensionality Reduction: Understanding the “Magic” Behind Machine Learning

These days we hear about machine learning and artificial intelligence AI in all aspects of life. We see machines that learn and imitate the human brain in order to automate human processes. There are autonomous cars that learn the road conditions to drive, personal assistants we can converse with...

CVE-2017-1000371

The offset2lib patch as used by the Linux Kernel contains a vulnerability, if RLIMITSTACK is set to RLIMINFINITY and 1 Gigabyte of memory is allocated the maximum under the 1/4 restriction then the stack will be grown down to 0x80000000, and as the PIE binary is mapped above 0x80000000 the minimu...