26491 matches found
Operation Dianxun Cyberespionage Campaign Targeting Telecommunication Companies
ARCHIVED STORY Operation Diànxùn: Cyberespionage Campaign Targeting Telecommunication Companies By Thomas Roccia · MAR 16, 2021 In this report the McAfee Advanced Threat Research ATR Strategic Intelligence team details an espionage campaign, targeting telecommunication companies, dubbed Operation...
CVE-2021-27208
When booting a Zync-7000 SOC device from nand flash memory, the nand driver in the ROM does not validate the inputs when reading in any parameters in the nand’s parameter page. IF a field read in from the parameter page is too large, this causes a buffer overflow that could lead to arbitrary code...
Buffer overflow
When booting a Zync-7000 SOC device from nand flash memory, the nand driver in the ROM does not validate the inputs when reading in any parameters in the nand’s parameter page. IF a field read in from the parameter page is too large, this causes a buffer overflow that could lead to arbitrary code...
CVE-2021-27208
When booting a Zync-7000 SOC device from nand flash memory, the nand driver in the ROM does not validate the inputs when reading in any parameters in the nand’s parameter page. IF a field read in from the parameter page is too large, this causes a buffer overflow that could lead to arbitrary code...
March 15, 2021—KB5001568 (OS Build 17763.1821) Out-of-band
None None...
March 15, 2021—KB5001567 (OS Builds 19041.868 and 19042.868) Out-of-band
None None...
March 9, 2021—KB5000853 (Security-only update)
None None...
March 9, 2021—KB5000840 (Security-only update)
None None...
March 9, 2021—KB5000822 (OS Build 17763.1817)
None None...
March 9, 2021—KB5000808 (OS Build 18363.1440)
None None...
March 9, 2021—KB5000847 (Monthly Rollup)
None None...
March 9, 2021—KB5000848 (Monthly Rollup)
None None...
March 9, 2021—KB5000807 (OS Build 10240.18874)
None None...
March 9, 2021—KB5000803 (OS Build 14393.4283) - EXPIRED
None None...
March 9, 2021—KB5000802 (OS Builds 19041.867 and 19042.867)
None None...
Shining a Light on SolarCity: Practical Exploitation of the X2e IoT Device (Part Two)
In this post, we continue our analysis of the SolarCity ConnectPort X2e Zigbee device referred to throughout as X2e device. In Part One, we discussed the X2e at a high level, performed initial network-based attacks, then discussed the hardware techniques used to gain a remote shell on the X2e...
Adobe Flash Player Memory Use After Free
The vulnerability of the Adobe Flash Player Desktop Runtime, FlashPlayer for Google Chrome, as well as Adobe FlashPlayer for Microsoft Edge and Internet Explorer, is related to the use of memory after it is released. Exploiting this vulnerability can allow a malicious actor to bypass security...
February 16, 2021-KB4601383 (OS Build 17763.1790) Preview
None None...
Ad Adobe Flash DoS
The vulnerability of the software for manipulating Adobe Flash FLV files, flvmeta, arises due to the execution of an operation beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to cause a service failure using a specially crafted file...