Design/Logic Flaw

Use-after-free vulnerability in the vmxnet3iobar0write function in hw/net/vmxnet3.c in QEMU aka Quick Emulator allows local guest OS administrators to cause a denial of service QEMU instance crash by leveraging failure to check if the device is active...

QEMU pcnet_receive 堆缓冲区溢出漏洞(CVE-2015-7504)

目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： https://lists.gnu.org/archive/html/qemu-devel/2015-11/msg06342.html pcnet是虚拟化软件QEMU中实现AMD PCNET网卡功能模拟的组件，相关的代码实现位于/hw/net/pcnet.c中。 在qemu软件中使用pcnet网卡，需要如下的命令行进行配置： qemu-system-x8664 centos-6.5-x64.img -m 1024 - net nic,model=pcnet -net user...

Rowhammer Hardware Exploit Poses Threat DRAM Memory in Many Laptops, PCs

Software, from web apps, to operating systems to firmware, has been abused and exploited every which way from Sunday for decades by both researchers and attackers. Now, it is hardware’s turn in the spotlight, as researchers have published details of a new method for exploiting a problem with some...

Intel InBusiness eMail Station 1.4.87 Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/1844/info A buffer overflow exists in the Intel InBusiness eMail Station, a dedicated email device. When attempting to establish a connection, the username submitted to the device is not properly filtered for length. By...

Building Knight Rider Mode - Jalousien Remote Concert

Document Title: =============== Building Knight Rider Mode - Jalousien Remote Concert References: =========== Download: http://www.vulnerability-lab.com/resources/videos/359.wmv View: http://www.youtube.com/watch?v=bxjTgUaF40w Release Date: ============= 2011-12-15 Vulnerability Laboratory ID...

CVE-2001-1291

The CVE-2001-1291 entry concerns the telnet server on 3Com PS40 SuperStack II hardware that does not delay or disconnect after incorrect username/password attempts, enabling easier brute‑force access. Connected PT-2001-2418 notes affected versions are not specified, and there is no documented fix...

3Com TelnetD

I noticed that there are infinity retries and no delay enabled at 3Com hardware, so I wrote this little Telnetcracker for this problem. I send it to 3Com, but I think they weren't bothered much about that. They sended me a notice to provide hardware serial and my name etc. ....strange... = This...

Hardware Exploit - Gets network Down

Subject: Allegro-Software-RomPager/2.10 vulnerable to Dos Attack Risk: Serious! Timescape / Advisory TS002 ------------------------------------------- Allegro-Software-RomPager is an http server which is used in network hardware like switches to provide a web interface to remotely configure your...