483 matches found
CVE-2020-19513
CVE-2020-19513 describes a buffer overflow in FinalWire Ltd AIDA64 Engineer 6.00.5100 that allows an attacker to achieve arbitrary code execution by supplying a crafted input that overwrites the SEH handler. The vulnerability is local (attack vector: LOCAL) with a LOW exploit complexity and no us...
CVE-2020-19513: Out-of-bounds Write
Buffer overflow in FinalWire Ltd AIDA64 Engineer 6.00.5100 allows attackers to execute arbitrary code by creating a crafted input that will overwrite the SEH handler...
FinalWire AIDA64 Engineer Buffer Error Vulnerability
Finalwire FinalWire AIDA64 Engineer is a hardware detection engine from the Hungarian company FinalWire Finalwire. The engine has diagnostic features and overclocking support, and supports real-time monitoring of transmitted voltage, temperature, and fan speed readings, among other things. A buff...
Yandex Employee Caught Selling Access to Users' Email Inboxes
Russian Dutch-domiciled search engine, ride-hailing and email service provider Yandex on Friday disclosed a data breach that compromised 4,887 email accounts of its users. The company blamed the incident on an unnamed employee who had been providing unauthorized access to the users' mailboxes for...
CVE-2020-25234: Use of Hard-coded Cryptographic Key
A vulnerability has been identified in LOGO! 8 BM incl. SIPLUS variants All versions V8.3, LOGO! Soft Comfort All versions V8.3. The LOGO! program files generated and used by the affected components offer the possibility to save user-defined functions UDF in a password protected way. This...
An Engineer Gets 9 Years for Stealing $10M From Microsoft
The defendant tried—and failed—to use bitcoin to cover his tracks...
Advance Your Career: Life as a Rapid7 Belfast Software Engineer
At Rapid7, we believe that by hiring a diverse team with different levels of experience and varying backgrounds, we can ChallengeConvention as OneMoose, push the boundaries of our thinking, and pursue our goals of continuous innovation to achieve secure advancement for all. As we continue to buil...
Adobe Reader < 2017.011.30180 / 2020.001.30010 / 2020.013.20064 Multiple Vulnerabilities (APSB20-67)
The version of Adobe Reader installed on the remote Windows host is a version prior to 2017.011.30180, 2020.001.30010, or 2020.013.20064. It is, therefore, affected by multiple vulnerabilities. - Acrobat Reader DC versions 2020.012.20048 and earlier, 2020.001.30005 and earlier and 2017.011.30175...
The Unsinkable Maddie Stone, Google’s Bug-Hunting Badass
The Project Zero reverse engineer shuts down some of the world's most dangerous exploits—along with antiquated hacker stereotypes...
305 CVEs and Counting: Bug-Hunting Stories From a Security Engineer
Larry Cashdollar, senior security response engineer at Akamai, has been finding CVEs since the 1990s, around when MITRE was first being established. Since then, he’s found 305 CVEs – as well as various security findings, such an IoT bricking malware called Silex, and cybercriminals targeting poor...
Programmer Hacks Pregnancy Test to Play Doom
By Waqas A hardware and software reverse engineer managed to run Doom's fully functional game on a pregnancy test. This is a post from HackRead.com Read the original post: Programmer Hacks Pregnancy Test to Play Doom...
Phoenix Contact PLCnext Engineer Path Traversal Vulnerability
Phoenix Contact PLCnext Engineer is a suite of engineering software platforms for automation controllers from Phoenix Contact, Germany. A path traversal vulnerability exists in PHOENIX CONTACT PLCnext Engineer version 2020.3.1 and earlier. The vulnerability stems from a failure of a networked...
CVE-2020-12499
In PHOENIX CONTACT PLCnext Engineer version 2020.3.1 and earlier an improper path sanitation vulnerability exists on import of project files...
CVE-2020-12499
In PHOENIX CONTACT PLCnext Engineer version 2020.3.1 and earlier an improper path sanitation vulnerability exists on import of project files...
Path traversal
In PHOENIX CONTACT PLCnext Engineer version 2020.3.1 and earlier an improper path sanitation vulnerability exists on import of project files...
CVE-2020-12499 PHOENIX CONTACT PLCnext Engineer version 2020.3.1 and earlier: Improper path sanitation vulnerability.
In PHOENIX CONTACT PLCnext Engineer version 2020.3.1 and earlier an improper path sanitation vulnerability exists on import of project files...
CVE-2020-12499
CVE-2020-12499 affects PHOENIX CONTACT PLCnext Engineer up to version 2020.3.1 and earlier. The vulnerability stems from improper path sanitation during import of project files, resulting in a path traversal issue that could allow access to locations outside restricted directories. Public sources...
PT-2020-13144
Name of the Vulnerable Software and Affected Versions PLCnext Engineer versions 2020.3.1 and earlier Description An improper path sanitation issue exists when importing project files, which can lead to potential security issues. Recommendations For versions 2020.3.1 and earlier, at the moment,...
CVE-2020-12499: Improper Limitation of a Pathname to a Restricted Directory
In PHOENIX CONTACT PLCnext Engineer version 2020.3.1 and earlier an improper path sanitation vulnerability exists on import of project files...