26490 matches found
swftools 代码问题漏洞
SWFTools is a collection of utilities to work with Adobe Flash files SWF files. SWFTools suffers from a null pointer dereference vulnerability that can be exploited by an attacker to cause a denial of service...
swftools 缓冲区错误漏洞
SWFTools is a collection of utilities to work with Adobe Flash files SWF files. SWFTools suffers from a heap buffer overflow vulnerability that can be exploited by an attacker to cause code execution...
Swftools 代码问题漏洞
SWFTools is a collection of utilities to work with Adobe Flash files SWF files. SWFTools suffers from a null pointer dereference vulnerability that can be exploited by an attacker to cause a denial of service...
Swftools 代码问题漏洞
SWFTools is a suite of open source software tools for creating and manipulating SWF files. a null pointer dereference vulnerability exists in the callcode function in SWFTools code.c. An attacker could exploit this vulnerability to cause a denial of service...
swftools 缓冲区错误漏洞
SWFTools is a collection of utilities that work with Adobe Flash files SWF files. SWFTools has a heap buffer overflow vulnerability that can be exploited by attackers to cause code execution...
PlayStation: size_t-to-int vulnerability in exFAT leads to memory corruption via malformed USB flash drives
Summary A heap-based buffer overflow can be triggered by a malformed exFAT USB flash drive. Vulnerability The vulnerability is in Sony's exFAT implementation where there is an integer truncation from 64bit to 32bit on a size variable that is used to allocate the up-case table: c int...
Vault: Swaps at parity with swap fee = withdrawal fee
Handle hickuphh3 Vulnerability details Impact The vault treats all assets to be of the same price. Given that one can also deposit and withdraw in the same transaction, this offers users the ability to swap available funds held in the vault at parity, with the withdrawal protection fee 0.1%...
September 14, 2021—KB5005573 (OS Build 14393.4651) - EXPIRED
None None...
September 14, 2021—KB5005613 (Monthly Rollup)
None None...
September 14, 2021—KB5005607 (Security-only update)
None None...
September 14, 2021—KB5005623 (Monthly Rollup)
None None...
CVE-2021-1928
Buffer over read could occur due to incorrect check of buffer size while flashing emmc devices in Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking...
Flash Player Buffer Overflow Info Disclosure
The vulnerability of the Adobe Flash Player software relates to reading data beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information...
Why the Raspberry Pi isn’t suitable for IoT
Let’s start by praising the Raspberry Pi: it has brought cheap computing to many, has inspired and enabled education and undoubtedly been a huge benefit. I use my own Pi daily, and we have often used its flexibility to perform hardware testing, from accessing UART to reading flash memory. So why ...
September 1, 2021—KB5005101 (OS Builds 19041.1202, 19042.1202, and 19043.1202) Preview
None None...
Cream Finance DeFi Platform Rooked For $29M
Cream Finance is the latest decentralized finance DeFi platform for cryptocurrency trading to take a major financial hit at the hands of hackers, losing nearly $19 million in an attack this week on its “flash loan” feature. The attacker was able to steal nearly $29 million before being discovered...
SQL Injection Vulnerability in Flash Flood Monitoring and Early Warning Distribution System of Sichuang Software Co.
Siltronic Software Ltd. is a technology-based enterprise dedicated to the cause of disaster prevention and mitigation in China. A SQL injection vulnerability exists in the Flash Flood Monitoring and Early Warning Distribution System of Siltronic Software Limited, which can be exploited by attacke...
LockFile Ransomware Bypasses Protection Using Intermittent File Encryption
A new ransomware family that emerged last month comes with its own bag of tricks to bypass ransomware protection by leveraging a novel technique called "intermittent encryption." Called LockFile, the operators of the ransomware have been found exploiting recently disclosed flaws such as ProxyShel...