Intel Firmware Vulnerability

Intel has released recommendations to address vulnerabilities in the firmware of the following Intel products: Management Engine, Server Platform Services, and Trusted Execution Engine. An attacker could exploit some of these vulnerabilities to take control of an affected system. US-CERT encourag...

CVE-2017-5707: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple buffer overflows in kernel in Intel Trusted Execution Engine Firmware 3.0 allow attacker with local access to the system to execute arbitrary code...

The AWS metadata service SSRF vulnerability analysis-vulnerability warning-the black bar safety net

One, Foreword Recently I was busy with a small project, to study how the Docker container executing untrusted Python code. According to the project requirements, I need to test more online code execution engine, research them on the various attacks of the reaction. In the research process, I foun...

FireEye Operating System Multiple Vulnerabilities

The remote host is running a version of FireEye Operating System FEOS that is missing a vendor-supplied security patch. It is, therefore, affected by multiple vulnerabilities : - A flaw exists in the Virtual Execution Engine VXE during the handling of file names that were previously flagged for t...

Multiple FireEye Product Virtual Execution Engine Memory Corruption Vulnerabilities

FireEye is a well-known American cybersecurity company. Multiple memory corruption vulnerabilities exist in the implementation of several FireEye products. A remote attacker could exploit this vulnerability to execute arbitrary commands in the context of an affected application...