7873 matches found
Cellular networks under fire from Soft Cell attacks
We place a lot of trust in our mobile experience, given they’re one of the most constant companions we have. Huge reams of data, tied to a device we always carry with us, with said device frequently offering additional built-in app functionality. An astonishing wealth of information, for anyone...
CVE-2019-12363
An CSRF issue was discovered in the JN-Jones MyBB-2FA plugin through 2014-11-05 for MyBB. An attacker can forge a request to an installed mybb2fa plugin to control its state via usercp.php?action=mybb2fa&do=deactivate or usercp.php?action=mybb2fa&do=activate. A deactivate operation lowers the...
The vulnerability of the Storage Service component in Windows operating systems allows attackers to exploit their privileges.
The vulnerability of the Storage Service component in Windows operating systems is related to errors in file operation processing. Exploiting this vulnerability can allow attackers to increase their privileges...
The vulnerability of the SetJobFileSecurityByName function in the Windows operating system’s task scheduler allows a malicious actor to escalate their privileges.
The vulnerability of the SetJobFileSecurityByName function in the Windows Task Scheduler operating system is related to deficiencies in file operation checks. Exploiting this vulnerability can allow an attacker to increase their privileges...
Foxit PhantomPDF Calculate Memory Misreference Vulnerability
Foxit Reader and Foxit PhantomPDF are both Chinese Foxit Foxit company a PDF document reader. A memory misreference vulnerability exists in the handling of the Calculate operation in Foxit PhantomPDF 9.5.0.20723 and earlier versions. The vulnerability stems from a failure to verify the existence ...
Foxit PhantomPDF Button Calculate Remote Code Execution Vulnerability
Foxit PhantomPDF is a multifunctional PDF editor. A remote code execution vulnerability exists in the handling of Calculate operations in Foxit PhantomPDF 9.5.0.20723 and earlier versions. The vulnerability stems from a failure to validate the existence of an object before performing an operation...
CVE-2019-13309
ImageMagick 7.0.8-50 Q16 has memory leaks at AcquireMagickMemory because of mishandling the NoSuchImage error in CLIListOperatorImages in MagickWand/operation.c...
CVE-2019-13309
ImageMagick 7.0.8-50 Q16 has memory leaks at AcquireMagickMemory because of mishandling the NoSuchImage error in CLIListOperatorImages in MagickWand/operation.c...
PT-2019-13245 · Imagemagick +4 · Imagemagick +4
Name of the Vulnerable Software and Affected Versions: ImageMagick version 7.0.8-50 Q16 Description: The issue is related to memory leaks due to the mishandling of the NoSuchImage error in CLIListOperatorImages in MagickWand/operation.c. This occurs at AcquireMagickMemory. Recommendations: For...
CVE-2017-11580
Blipcare Wifi blood pressure monitor BP700 10.1 devices allow memory corruption that results in Denial of Service. When connected to the "Blip" open wireless connection provided by the device, if a large string is sent as a part of the HTTP request in any part of the HTTP headers, the device coul...
Memory corruption
Blipcare Wifi blood pressure monitor BP700 10.1 devices allow memory corruption that results in Denial of Service. When connected to the "Blip" open wireless connection provided by the device, if a large string is sent as a part of the HTTP request in any part of the HTTP headers, the device coul...
CVE-2017-11580
Blipcare Wifi blood pressure monitor BP700 10.1 devices allow memory corruption that results in Denial of Service. When connected to the "Blip" open wireless connection provided by the device, if a large string is sent as a part of the HTTP request in any part of the HTTP headers, the device coul...
CVE-2017-8415
An issue was discovered on D-Link DCS-1100 and DCS-1130 devices. The device has a custom telnet daemon as a part of the busybox and retrieves the password from the shadow file using the function getspnam at address 0x00053894. Then performs a crypt operation on the password retrieved from the use...
On Isogenies Verifiable Delay Functions (VDF)
This continues the post frompart 1. In the previous post we discussed about Verifiable Delay Functions. Here is a quick summary of what we discussed in the first part: We covered the definition of Verifiable Delay Functions VDF. We have seen a short history of how this idea slowly developed. We...
June 27, 2019 — KB4502584 Cumulative Update for .NET Framework 3.5, 4.8 for Windows 10, version 1903 and Windows Server 1903 RTM
None None...
UBUNTU-CVE-2019-12977
ImageMagick 7.0.8-34 has a "use of uninitialized value" vulnerability in the WriteJP2Image function in coders/jp2.c...
ViceLeaker Operation: mobile espionage targeting Middle East
In May 2018, we discovered a campaign targeting dozens of mobile Android devices belonging to Israeli citizens. Kaspersky spyware sensors caught the signal of an attack from the device of one of the victims; and a hash of the APK involved Android application was tagged in our sample feed for...
CVE-2017-15694
When an Apache Geode server versions 1.0.0 to 1.8.0 is operating in secure mode, a user with write permissions for specific data regions can modify internal cluster metadata. A malicious user could modify this data in a way that affects the operation of the cluster...