490 matches found
Design/Logic Flaw
Gigadevice GD32F130 devices allow physical attackers to escalate their debug interface permissions via fault injection into inter-IC bonding wires which have insufficient physical protection...
CVE-2020-13468
Gigadevice GD32F130 devices allow physical attackers to escalate their debug interface permissions via fault injection into inter-IC bonding wires which have insufficient physical protection...
ic-berlin.de Cross Site Scripting vulnerability OBB-1251993
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
ic-s.be Cross Site Scripting vulnerability OBB-1240933
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
cubx-http-server (=0.4.2), karma-extjs-jasmine-tester (>=1.0.0 <=1.1.3) +5 more potentially affected by CVE-2019-10775 via ecstatic (>=3.1.1 <=3.3.0)
ecstatic NPM version =3.1.1, =1.0.0, =0.1.0, =0.0.1, =0.1.0, =0.1.0, =0.1.0, =0.2.1 Source cves: CVE-2019-10775 Source advisory: OSV:GHSA-9Q64-MPXX-87FG...
Reverse Engineering Tesla Hardware
TL;DR How does the Tesla Model S update its firmware? What did we find when reverse engineering the display and instrument cluster? Here’s the result of a couple of weeks work, working on a real vehicle that mostly worked after we had finished. Part 1: analysing the hardware, complete with a 14...
CVE-2019-2047
In UpdateLoadElement of ic.cc, there is a possible out-of-bounds write due to type confusion. This could lead to remote code execution in the proxy auto-config with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-7.0...
Rockwell Automation 1771-IC General Purpose Discrete I/O
Binary data 753394.prm...
PT-2018-3069 · Freeware +1 · Faad2 +1
Name of the Vulnerable Software and Affected Versions: Freeware Advanced Audio Decoder 2 FAAD2 version 2.8.8 Description: A NULL pointer dereference was discovered in the ic predict function of libfaad/ic predict.c, which can cause a segmentation fault and application crash, leading to denial of...
Google Android PMIC Buffer Overflow Vulnerability
Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA, of which PMIC is a power management component. A buffer overflow vulnerability exists in PMIC in Android, which stems from a failure to validate the size of user input before...
ic-resources.com XSS vulnerability
Open Bug Bounty ID: OBB-668268 Description| Value ---|--- Affected Website:| ic-resources.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
ic-resources.com XSS vulnerability
Open Bug Bounty ID: OBB-663625 Description| Value ---|--- Affected Website:| ic-resources.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
ic-energo.com XSS vulnerability
Open Bug Bounty ID: OBB-625989 Description| Value ---|--- Affected Website:| ic-energo.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
ic-energo.eu XSS vulnerability
Open Bug Bounty ID: OBB-625988 Description| Value ---|--- Affected Website:| ic-energo.eu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
EDIMAX IC-3140W, IC-5150W and IC-6220DC Buffer Overflow Vulnerability
EDIMAX IC-3140W, IC-5150W and IC-6220DC are all different series of network camera products from EDIMAX. A stack buffer overflow vulnerability exists in the EDIMAX IC-3140W 3.06 and earlier, IC-5150W 3.09 and earlier, and IC-6220DC 3.06 and earlier, which stems from a program failing to properly...
CVE-2018-8072
An issue was discovered on EDIMAX IC-3140W through 3.06, IC-5150W through 3.09, and IC-6220DC through 3.06 devices. The ipcamcgi binary contains a stack-based buffer overflow that is possible to trigger from a remote unauthenticated /camera-cgi/public/getsysyeminfo.cgi?action=VALUEHERE HTTP...
ICGrocery 1.1 - key SQL Injection
ICGrocery 1.1 - key SQL Injection Exploit Title: Grocery Store Supermarket Script 1.1 - SQL Injection Dork: N/A Date: 13.09.2017 Vendor Homepage: http://www.icloudcenter.com/ Software Link: http://www.icloudcenter.com/grocery-store-supermarket-script.htm Demo:...
JVN#16136413: Installers of Sony PaSoRi related software may insecurely load Dynamic Link Libraries
PaSoRi provided by Sony Corporation is contactless IC card reader/writer. Installers of PaSoRi driver and other related software for Windows contain an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Impact Arbitrary code may be executed with t...
Sharp RW-4040 driver installer for Windows untrusted search path vulnerability
Sharp RW-4040 driver installer for Windows is a Windows-based driver installer for IC card readers from Sharp Japan. An untrusted search path vulnerability exists in Sharp RW-4040 driver installer for Windows 7 version 2.27. An attacker can exploit this vulnerability to gain privileges with a...
ic-direct.com XSS vulnerability
Vulnerable URL: http://www.ic-direct.com/icdirect/search/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1496558 VIP website status:| No Check ic-direct.com SSL connection:| Grade:...