23806 matches found
The vulnerability of the SecureBackDoor driver in the microprogramming software of Lenovo laptops allows a hacker to inject malicious code into the SPI flash memory.
The vulnerability of the SecureBackDoor driver in Lenovo notebook BIOS microprograms lies in the ability to alter the protection zone of the microprogram by editing the NVRAM variable. Exploiting this vulnerability allows a hacker to inject malicious code into the SPI flash memory...
Clever Cryptocurrency Theft
Beanstalk Farms is a decentralized finance project that has a majority stake governance system: basically people have proportional votes based on the amount of currency they own. A clever hacker used a "flash loan" feature of another decentralized finance project to borrow enough of the currency ...
New Lenovo UEFI Firmware Vulnerabilities Affect Millions of Laptops
Three high-impact Unified Extensible Firmware Interface UEFI security vulnerabilities have been discovered impacting various Lenovo consumer laptop models, enabling malicious actors to deploy and execute firmware implants on the affected devices. Tracked as CVE-2021-3970, CVE-2021-3971, and...
Adobe Flash Player Use-After-Free Vulnerability
Use-after-free vulnerability in Adobe Flash Player allows remote attackers to execute code...
Adobe Flash Player Use-After-Free Vulnerability
Use-after-free vulnerability in the DisplayObject class in the ActionScript 3 AS3 implementation in Adobe Flash Player allows remote attackers to execute code or cause a denial-of-service DoS...
Adobe Flash Player Remote Code Execution Vulnerability
Unspecified vulnerability in Adobe Flash Player allows remote attackers to execute code...
Adobe Flash Player Heap-Based Buffer Overflow Vulnerability
Heap-based buffer overflow vulnerability in Adobe Flash Player allows remote attackers to execute code...
Adobe Flash Player Stack-Based Buffer Overflow Vulnerability
Stack-based buffer overflow in Adobe Flash Player allows attackers to execute code remotely...
Adobe Flash Player Use-After-Free Vulnerability
Use-after-free vulnerability in the BitmapData class in the ActionScript 3 AS3 implementation in Adobe Flash Player allows remote attackers to execute code or cause a denial-of-service DoS...
Design/Logic Flaw
An Out-Of-Bounds Read Vulnerability in Autodesk FBX Review version 1.5.2 and prior may lead to code execution through maliciously crafted ActionScript Byte Code 'ABC' files or information disclosure. ABC files are created by the Flash compiler and contain executable code. This vulnerability in...
UniV3LpVault flash loans can become unavailable if a user didn't utilized the full limit
Lines of code Vulnerability details Impact If a user didn't utilized the whole amount on the first call, the flashFocusCall can fail for second and subsequent runs when params.asset is a token that use approval race protection. Placing severity to medium as flashFocusCall reverts in this case, an...
Lessons in IoT Hacking: How to Dead-Bug a BGA Flash Memory Chip
Dead-bugging — what is that, you ask? The concept comes from the idea that a memory chip, once it’s flipped over so you can attach wires to it, looks a little like a dead bug on its back. So why would we do this for the purposes of IoT hacking? The typical reason is if you want to extract the...
FIN7 Hackers Leveraging Password Reuse and Software Supply Chain Attacks
The notorious cybercrime group known as FIN7 has diversified its initial access vectors to incorporate software supply chain compromise and the use of stolen credentials, new research has revealed. "Data theft extortion or ransomware deployment following FIN7-attributed activity at multiple...
Function getPastDelegate may return incorrect values
Lines of code Vulnerability details Impact By calling delegate function of HolyPaladinToken contract two or more times in a single block including a transaction so it is possible to flash loan assets and pass them to more and more accounts, users can add elements to the delegateCheckpoints array...
GE General Electric Renewable Energy MDS Radios 安全漏洞
GE General Electric Renewable Energy MDS Radios is a family of industrial wireless solutions from General Electric GE. A security vulnerability exists in the GE General Electric Renewable Energy MDS iNET/iNET II/SD/TD220/TD220MAX Radios that originates from storing credentials in plaintext on the...
PT-2022-3900 · General Electric · Inet +1
Name of the Vulnerable Software and Affected Versions: General Electric Renewable Energy iNET versions prior to 8.3.0 General Electric Renewable Energy iNET II versions prior to 8.3.0 Description: The issue is related to the storage of passwords in cleartext. This allows an attacker to view the...
'Purple Fox' Hackers Spotted Using New Variant of FatalRAT in Recent Malware Attacks
The operators of the Purple Fox malware have retooled their malware arsenal with a new variant of a remote access trojan called FatalRAT, while also simultaneously upgrading their evasion mechanisms to bypass security software. "Users' machines are targeted via trojanized software packages...
VulnCheck KEV: CVE-2012-2034
Adobe Flash Player contains a memory corruption vulnerability that allows for remote code execution or denial-of-service DoS...