526 matches found
CVE-2020-26762
A stack-based buffer-overflow exists in Edimax IP-Camera IC-3116W v3.06 and IC-3140W v3.07, which allows an unauthenticated, unauthorized attacker to perform remote-code-execution due to a crafted GET-Request. The overflow occurs in binary ipcamcgi due to a missing type check in function...
CVE-2020-26762
Edimax IP-Camera IC-3116W (v3.06) and IC-3140W (v3.07) are affected by a stack-based buffer overflow in ipcam_cgi due to a missing type check in doGetSysteminfo(), enabling unauthenticated remote-code-execution via a crafted GET request. The issue is fixed in IC-3116W v3.08. Affected product line...
Edimax Technology Ipcam Ic-3116w and Edimax Technology Ipcam Ic-3140w Buffer Error Vulnerability
Edimax Technology Ipcam Ic-3116w and Edimax Technology Ipcam Ic-3140w are both webcams from China-based Edimax Technology. A security vulnerability exists in the Edimax Technology IP-Camera IC-3116W v3.06 and IC-3140W v3.07, which is an overflow in the binary ipcam cgi due to the lack of a...
CVE-2020-26762: Out-of-bounds Write
A stack-based buffer-overflow exists in Edimax IP-Camera IC-3116W v3.06 and IC-3140W v3.07, which allows an unauthenticated, unauthorized attacker to perform remote-code-execution due to a crafted GET-Request. The overflow occurs in binary ipcamcgi due to a missing type check in function...
SAntivirus IC 10.0.21.61 - 'SAntivirusIC' Unquoted Service Path
Exploit Title: SAntivirus IC 10.0.21.61 - 'SAntivirusIC' Unquoted Service Path Discovery by: Mara Ramirez Discovery Date: 10-11-2020 Vendor Homepage: https://www.segurazo.com/download.html Software Links : https://www.segurazo.com/download.html Tested Version: 10.0.21.61 Vulnerability Type:...
SAntivirus IC 10.0.21.61 - (SAntivirusIC) Unquoted Service Path Vulnerability
Exploit Title: SAntivirus IC 10.0.21.61 - 'SAntivirusIC' Unquoted Service Path Discovery by: Mara Ramirez Vendor Homepage: https://www.segurazo.com/download.html Software Links : https://www.segurazo.com/download.html Tested Version: 10.0.21.61 Vulnerability Type: Unquoted Service Path Tested on...
ic-berlin.de Cross Site Scripting vulnerability OBB-1383850
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
CVE-2020-13468
Gigadevice GD32F130 devices allow physical attackers to escalate their debug interface permissions via fault injection into inter-IC bonding wires which have insufficient physical protection...
Design/Logic Flaw
Gigadevice GD32F130 devices allow physical attackers to escalate their debug interface permissions via fault injection into inter-IC bonding wires which have insufficient physical protection...
CVE-2020-13468
Gigadevice GD32F130 devices allow physical attackers to escalate their debug interface permissions via fault injection into inter-IC bonding wires which have insufficient physical protection...
ic-berlin.de Cross Site Scripting vulnerability OBB-1251993
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
ic-s.be Cross Site Scripting vulnerability OBB-1240933
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
cubx-http-server (0.4.2), karma-extjs-jasmine-tester (>=1.0.0, <=1.1.3) +5 more potentially affected by unknown CVE via ecstatic (>=3.1.1, <=3.3.0)
ecstatic NPM version =3.1.1, =1.0.0, =0.1.0, =0.0.1, =0.1.0, =0.1.0, =0.1.0, =0.2.1 Source cves: unknown CVE Source advisory: OSV:GHSA-9Q64-MPXX-87FG...
@instacarro/ic-model-admin (>=2.0.5, <=2.0.8), grommet-toolbox (>=0.1.3, <=0.2.12) +4 more potentially affected by CVE-2020-7605 via gulp-tape (>=0.0.3, <=1.0.0)
gulp-tape NPM version =0.0.3, =2.0.5, =0.1.3, =0.1.1, =0.1.5, =0.43.2 - sp-router-js 1.0.1 Source cves: CVE-2020-7605 Source advisory: SNYK:JS-GULPTAPE-560124...
Reverse Engineering Tesla Hardware
TL;DR How does the Tesla Model S update its firmware? What did we find when reverse engineering the display and instrument cluster? Here’s the result of a couple of weeks work, working on a real vehicle that mostly worked after we had finished. Part 1: analysing the hardware, complete with a 14...
CVE-2019-3750: Uncontrolled Search Path Element
Dell Command Update versions prior to 3.1 contain an Arbitrary File Deletion Vulnerability. A local authenticated malicious user with low privileges potentially could exploit this vulnerability to delete arbitrary files by creating a symlink from the "Temp\IC\ICDebugLog.txt" to any targeted file...
CVE-2019-2047
In UpdateLoadElement of ic.cc, there is a possible out-of-bounds write due to type confusion. This could lead to remote code execution in the proxy auto-config with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-7.0...
Rockwell Automation 1771-IC General Purpose Discrete I/O
Binary data 753394.prm...
PT-2018-3069 · Freeware +1 · Faad2 +1
Name of the Vulnerable Software and Affected Versions: Freeware Advanced Audio Decoder 2 FAAD2 version 2.8.8 Description: A NULL pointer dereference was discovered in the ic predict function of libfaad/ic predict.c, which can cause a segmentation fault and application crash, leading to denial of...
Google Android PMIC Buffer Overflow Vulnerability
Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA, of which PMIC is a power management component. A buffer overflow vulnerability exists in PMIC in Android, which stems from a failure to validate the size of user input before...