CVE-2019-10939

The CVE-2019-10939 issue affects Siemens TIM 3V-IE, TIM 3V-IE Advanced, TIM 3V-IE DNP3, TIM 4R-IE, and TIM 4R-IE DNP3 (SIPLUS NET variants) with open debug port exposure under the condition that the device IP is 192.168.1.2. The root cause is an open debug port that can be accessed by a network-a...

CVE-2019-10939

A vulnerability has been identified in TIM 3V-IE incl. SIPLUS NET variants All versions V2.8, TIM 3V-IE Advanced incl. SIPLUS NET variants All versions V2.8, TIM 3V-IE DNP3 incl. SIPLUS NET variants All versions V3.3, TIM 4R-IE incl. SIPLUS NET variants All versions V2.8, TIM 4R-IE DNP3 incl...

Siemens TIM 3V-IE and 4R-IE Family Devices

1. EXECUTIVE SUMMARY CVSS v3 9.0 ATTENTION: Exploitable remotely Vendor: Siemens Equipment: TIM 3V-IE and 4R-IE Family Devices Vulnerability: Active Debug Code 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an unauthenticated attacker with network access to gain full...

BTFS: xss on bittorrent.com

hi team i realized xss bug on headers.php. https://www.bittorrent.com/scripts/site/headers.php?=1586521900793&callback= https://www.bittorrent.com/scripts/social/gettweet.php?=1586521900791&callback= its works on IE browsers. Impact fix them...

Microsoft Patches 26 Critical Bugs in Big March Update

Microsoft tackled 115 bug fixes as part of its March Patch Tuesday update – 26 rated critical and 88 rated medium severity. The bugs patched span its product catalog, from Azure DevOps to Windows 10. This month’s haul is notable in its quantity and that there are only a few stand-out bugs causing...

CVE-2019-14031

Buffer overflow can occur while parsing RSN IE containing list of PMK IDs which are more than the buffer size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdrag...

Buffer overflow

Buffer overflow can occur while parsing RSN IE containing list of PMK IDs which are more than the buffer size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdrag...

CVE-2019-14031

Buffer overflow can occur while parsing RSN IE containing list of PMK IDs which are more than the buffer size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdrag...

CVE-2019-14031

CVE-2019-14031 describes a buffer overflow in Qualcomm Snapdragon devices when parsing RSN Information Elements that contain a list of PMK IDs longer than the allocated buffer. The issue affects a broad set of Snapdragon products (Auto, Compute, Connectivity, IoT, Mobile, etc.) across numerous So...

The vulnerability of the WirelessHART server implementation of IE/WSN-PA Link allows a attacker to perform cross-site scripting attacks.

The vulnerability of the WirelessHART server implementation of the IE/WSN-PA Link protocol is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

CVE-2020-0674: Internet Explorer Scripting Engine Memory Corruption Vulnerability

A remote code execution vulnerability exists in some versions of Internet Explorer. An attacker who is able to convince a user to visit a malicious or compromised website may be able to execute code on the affected system, with the same permissions as the user. The vulnerability affects IE 9 on...

Microsoft Patch Tuesday, February 2020 Edition

Microsoft today released updates to plug nearly 100 security holes in various versions of its Windows operating system and related software, including a zero-day vulnerability in Internet Explorer IE that is actively being exploited. Also, Adobe has issued a bevy of security updates for its vario...

February 2020 Patch Tuesday – 99 Vulns, 12 Critical, Patch for IE 0-Day, Exchange Vuln, Adobe Vulns

This month’s Microsoft Patch Tuesday addresses 99 vulnerabilities with 12 of them labeled as Critical. Of the 12 Critical vulns, 7 are for browser and scripting engines, 2 are for Remote Desktop Client, and the remaining 3 are for LNK files, Media Foundation, and Windows. The IE 0-day disclosed i...

Clario: Multiple Links Vulnerable to Reflected xss

Summary Multiple Links Vulnerable to Reflected xss in https://mackeeper.com/mk/de/ Steps to reproduce goto these links and xss will be triggered...

Oracle Linux 7 : kernel (ELSA-2020-0374)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-0374 advisory. - wireless mwifiex: Fix heap overflow in mmwifiexprocesstdlsactionframe Stanislaw Gruszka 1776156 1776157 CVE-2019-14901 Tenable has extracted the...

kernel: heap-based buffer overflow in mwifiex_process_country_ie() function in drivers/net/wireless/marvell/mwifiex/sta_ioctl.c

A heap-based buffer overflow was discovered in the Linux kernel's Marvell WiFi chip driver. The flaw could occur when the station attempts a connection negotiation during the handling of the remote devices country settings. This could allow the remote device to cause a denial of service system...

kernel: heap-based buffer overflow in mwifiex_process_country_ie() function in drivers/net/wireless/marvell/mwifiex/sta_ioctl.c

A heap-based buffer overflow was discovered in the Linux kernel's Marvell WiFi chip driver. The flaw could occur when the station attempts a connection negotiation during the handling of the remote devices country settings. This could allow the remote device to cause a denial of service system...

January 23, 2020—KB4534308 (OS Build 17134.1276)

None None...

CVE-2019-18652

CVE-2019-18652 affects WatchGuard XMT515 (firmware ≤ 12.1.3). A DOM/XSS vulnerability arises from insufficient validation of client-side data in the web application, allowing a remote attacker to cause the execution of JavaScript in a victim’s browser via a crafted link. Connected sources confirm...

The vulnerability of the `add_ie_rates` function in the Marvell WiFi kernel driver for Linux operating systems allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the addierates function in the Marvell WiFi kernel driver for Linux operating systems is related to writing beyond the buffer boundaries of memory. Exploiting this vulnerability allows a remote attacker to access confidential data, compromise its integrity, and cause service...