23892 matches found
PlayStation: size_t-to-int vulnerability in exFAT leads to memory corruption via malformed USB flash drives
Summary A heap-based buffer overflow can be triggered by a malformed exFAT USB flash drive. Vulnerability The vulnerability is in Sony's exFAT implementation where there is an integer truncation from 64bit to 32bit on a size variable that is used to allocate the up-case table: c int...
Vault: Swaps at parity with swap fee = withdrawal fee
Handle hickuphh3 Vulnerability details Impact The vault treats all assets to be of the same price. Given that one can also deposit and withdraw in the same transaction, this offers users the ability to swap available funds held in the vault at parity, with the withdrawal protection fee 0.1%...
September 14, 2021—KB5005607 (Security-only update)
None None...
September 14, 2021—KB5005573 (OS Build 14393.4651) - EXPIRED
None None...
September 14, 2021—KB5005613 (Monthly Rollup)
None None...
September 14, 2021—KB5005623 (Monthly Rollup)
None None...
The vulnerability of the Flash Player software, which relates to reading data beyond the buffer in memory, allows attackers to disclose protected information.
The vulnerability of the Adobe Flash Player software relates to reading data beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information...
Why the Raspberry Pi isn’t suitable for IoT
Let’s start by praising the Raspberry Pi: it has brought cheap computing to many, has inspired and enabled education and undoubtedly been a huge benefit. I use my own Pi daily, and we have often used its flexibility to perform hardware testing, from accessing UART to reading flash memory. So why ...
September 1, 2021—KB5005101 (OS Builds 19041.1202, 19042.1202, and 19043.1202) Preview
None None...
Cream Finance DeFi Platform Rooked For $29M
Cream Finance is the latest decentralized finance DeFi platform for cryptocurrency trading to take a major financial hit at the hands of hackers, losing nearly $19 million in an attack this week on its “flash loan” feature. The attacker was able to steal nearly $29 million before being discovered...
SQL Injection Vulnerability in Flash Flood Monitoring and Early Warning Distribution System of Sichuang Software Co.
Siltronic Software Ltd. is a technology-based enterprise dedicated to the cause of disaster prevention and mitigation in China. A SQL injection vulnerability exists in the Flash Flood Monitoring and Early Warning Distribution System of Siltronic Software Limited, which can be exploited by attacke...
LockFile Ransomware Bypasses Protection Using Intermittent File Encryption
A new ransomware family that emerged last month comes with its own bag of tricks to bypass ransomware protection by leveraging a novel technique called "intermittent encryption." Called LockFile, the operators of the ransomware have been found exploiting recently disclosed flaws such as ProxyShel...
August 26, 2021—KB5005103 (OS Build 18363.1766) Preview
None None...
August 26, 2021—KB5005102 (OS Build 17763.2145) Preview
None None...
Unauthorized Access Vulnerability in Flash Flood Monitoring and Early Warning Distribution System of Siltronic Software Ltd.
Siltronic Software Ltd. is a technology-based enterprise dedicated to the cause of disaster prevention and mitigation in China. An unauthorized access vulnerability exists in the Flash Flood Monitoring and Early Warning Distribution System of Siltronic Software Limited, which can be exploited by...
August 10, 2021—KB5005043 (OS Build 14393.4583) - EXPIRED
None None...
August 10, 2021—KB5005094 (Security-only update)
None None...
August 10, 2021—KB5005099 (Monthly Rollup)
None None...