File Upload Vulnerability in Flash Flood Monitoring and Early Warning Distribution System of Siltronic Technology Co.

Siltronic Ltd. is an information service provider for disaster reduction and profitability. An arbitrary file upload vulnerability exists in the Flash Flood Detection and Early Warning Platform of Sicron Technology Limited, which allows an attacker to upload an aspx file to gain access to the...

June 15, 2021—KB5003703 (OS Build 17763.2028) Preview

None None...

June 15, 2021—KB5003698 (OS Build 18363.1645) Preview

None None...

Arbitrary File Read Vulnerability in Flash Flood Monitoring and Early Warning System of Chengdu Wanjiang Gangli Technology Co.

Founded in 2007, Chengdu Wanjiang Gangli Technology Co., Ltd. is positioned as a full chain service provider of water technology under the framework of artificial intelligence. There is an arbitrary file read vulnerability in the flash flood monitoring and warning system of Chengdu Wanjiang Gangl...

Catalog Traversal Vulnerability in Flash Flood Monitoring and Early Warning System of Beijing Puhua Zhishen Science and Technology Co.

Beijing Puhua Zhishen Technology Co., Ltd, business scope includes technology promotion, basic software services, application software services, etc. A directory traversal vulnerability exists in the flash flood monitoring and early warning system of Beijing Puhua Zhishen Technology Co. An attack...

User can redeem more tokens by artificially increasing the chi accrual

Handle shw Vulnerability details Impact A user can artificially increase the chi accrual after maturity by flash borrow on Compound, which affects the exchange rate used by the chi oracle. As a result, the user redeems more underlying tokens with the same amount of fyTokens since the accrual is...

PT-2021-24843

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.37 Description: A memory leak issue was discovered in the Linux Kernel, specifically in the atomisp object flash component. The actual impact and attack plausibility of this issue have not yet been proven...

PT-2021-28736

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.10 through v5.12.3 Description A memory leak issue was discovered in the media: atomisp object flash component. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

STMicroelectronics STM32L4 Access Control Error Vulnerability

The STMicroelectronics STM32L4 is a series of ultra-low power microcontrollers from STMicroelectronics, an Italian and French company. The STMicroelectronics STM32L4 suffers from an access control error vulnerability that stems from the fact that flash readout protection can be degraded from RDP...

PT-2021-28837

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.37 Description A memory leak issue was discovered in the Linux Kernel, specifically in the atomisp object flash component. The actual impact and attack plausibility of this issue have not yet been proven...

US Soldiers Exposed Nuclear Secrets on Digital Flash Ccards

Plus: A major hack in Japan, Citizen app run amok, and more of the week’s top security news...

Flash minting and burning can reduce the paid fees when purchasing a membership or opening a cost share request

Handle shw Vulnerability details Impact Users can pay fewer FSD tokens when purchasing a membership or opening a cost share request by flash minting and burning FSD tokens, which could significantly affect the FSD spot price. Proof of Concept The function getFSDPrice returns the current FSD price...

Rockwell Automation Micro800 and MicroLogix 1400

1. EXECUTIVE SUMMARY CVSS v3 6.1 ATTENTION: Exploitable remotely Vendor: Rockwell Automation Equipment: Micro800, MicroLogix 1400 Vulnerability: Channel Accessible by Non-endpoint 2. RISK EVALUATION Successful exploitation of this vulnerability may result in denial-of-service conditions, which...

There is a logic flaw vulnerability in the flash flood monitoring and early warning distribution system of Siltronic Ltd.

Siltronic Ltd. China disaster reduction and profitability information service provider. A logic flaw vulnerability exists in the flash flood monitoring and early warning distribution system of Siltronic Technologies Limited, which can be exploited by an attacker to log in to the system as an...

CVE-2020-27211

Nordic Semiconductor nRF52840 devices through 2020-10-19 have improper protection against physical side channels. The flash read-out protection APPROTECT can be bypassed by injecting a fault during the boot phase...

CVE-2020-27211

Nordic Semiconductor nRF52840 devices through 2020-10-19 have improper protection against physical side channels. The flash read-out protection APPROTECT can be bypassed by injecting a fault during the boot phase...

Design/Logic Flaw

Nordic Semiconductor nRF52840 devices through 2020-10-19 have improper protection against physical side channels. The flash read-out protection APPROTECT can be bypassed by injecting a fault during the boot phase...

CVE-2020-27208

The flash read-out protection RDP level is not enforced during the device initialization phase of the SoloKeys Solo 4.0.0 & Somu and the Nitrokey FIDO2 token. This allows an adversary to downgrade the RDP level and access secrets such as private ECC keys from SRAM via the debug interface...

CVE-2020-27212

STMicroelectronics STM32L4 devices through 2020-10-19 have incorrect access control. The flash read-out protection RDP can be degraded from RDP level 2 no access via debug interface to level 1 limited access via debug interface by injecting a fault during the boot phase...

Design/Logic Flaw

The flash read-out protection RDP level is not enforced during the device initialization phase of the SoloKeys Solo 4.0.0 & Somu and the Nitrokey FIDO2 token. This allows an adversary to downgrade the RDP level and access secrets such as private ECC keys from SRAM via the debug interface...