294 matches found
Mitsubishi Electric MELSEC-Q and MELSEC-L Input Validation Error Vulnerability
The Mitsubishi Electric MELSEC-Q Series is a MELSEC-Q series of programmable logic controllers from Mitsubishi Electric Japan. The Mitsubishi Electric MELSEC-Q and MELSEC-L have an input validation error vulnerability that originates from an integer overflow or wrap-around vulnerability in the CP...
SupremeBot and Mario cross the finish line together
Researchers have reported how popular game installers like Super Mario Games are being used to deliver malware. The malicious components include cryptominers, the SupremeBot mining client, and the open-source Umbral stealer. The game installers route offers some very distinct advantages to the...
Fixed rewards may also be cut
Lines of code Vulnerability details Impact Fixed rewards may change when packed. Proof of Concept In LotterySetup.packFixedRewards function packFixedRewardsuint256 memory rewards private view returns uint256 packed if rewards.length != selectionSize || rewards0 != 0 revert InvalidFixedRewardSetup...
SUSE CVE-2005-2919
libclamav/fsg.c in Clam AntiVirus ClamAV before 0.87 allows remote attackers to cause a denial of service infinite loop via a crafted FSG packed executable...
SUSE CVE-2005-2920
Buffer overflow in libclamav/upx.c in Clam AntiVirus ClamAV before 0.87 allows remote attackers to execute arbitrary code via a crafted UPX packed executable...
SUSE CVE-2006-4018
Heap-based buffer overflow in the pefromupx function in libclamav/upx.c in Clam AntiVirus ClamAV 0.81 through 0.88.3 allows remote attackers to execute arbitrary code via a crafted UPX packed file containing sections with large rsize values...
SUSE CVE-2007-6335
Integer overflow in libclamav in ClamAV before 0.92 allows remote attackers to execute arbitrary code via a crafted MEW packed PE file, which triggers a heap-based buffer overflow...
SUSE CVE-2008-0318
Integer overflow in the cliscanpe function in libclamav in ClamAV before 0.92.1, as used in clamd, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted Petite packed PE file, which triggers a heap-based buffer overflow...
SUSE CVE-2013-2020
Integer underflow in the cliscanpe function in pe.c in ClamAV before 0.97.8 allows remote attackers to cause a denial of service crash via a skewed offset larger than the size of the PE section in a UPX packed executable, which triggers an out-of-bounds read...
SUSE CVE-2015-2222
ClamAV before 0.98.7 allows remote attackers to cause a denial of service crash via a crafted petite packed file...
SUSE CVE-2015-8683
The putcontig8bitCIELab function in tifgetimage.c in LibTIFF 4.0.6 allows remote attackers to cause a denial of service out-of-bounds read via a packed TIFF image...
SUSE CVE-2016-9296
A null pointer dereference bug affects the 16.02 and many old versions of p7zip. A lack of null pointer check for the variable folders.PackPositions in function CInArchive::ReadAndDecodePackedStreams in CPP/7zip/Archive/7z/7zIn.cpp, as used in the 7z.so library and in 7z applications, will cause ...
SUSE CVE-2019-1789
ClamAV versions prior to 0.101.2 are susceptible to a denial of service DoS vulnerability. An out-of-bounds heap read condition may occur when scanning PE files. An example is Windows EXE and DLL files that have been packed using Aspack as a result of inadequate bound-checking...
OPENSUSE-SU-2023:0031-1 Security update for upx
upx was updated to fix the following issues: - CVE-2023-23457: Fixed a segmentation fault when processing malicious elf files boo1207122 Update to release 4.0.1 Fix crash when a linux/armeb LZMA-packed binary unpacks itself. Resolve 'CantPackException: bad ElfXXShdrs' with staticly-linked program...
PT-2022-36787 · Apache · Apache Commons Imaging
Name of the Vulnerable Software and Affected Versions: Apache Commons Imaging affected versions not specified Description: A security exception occurs in the java.desktop/java.awt.image.DataBufferInt and java.desktop/java.awt.image.Raster.createPackedRaster functions, which are called by the...
Backdoor.Win32.Winshell.5_0 MVID-2022-0633 Hardcoded Credential
Discovery / credits: Malvuln John Page aka hyp3rlinx c 2022 Original source: https://malvuln.com/advisory/5bc5f72d19019a2fa3b75896e82ae1e5.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Winshell.50 Vulnerability: Weak Hardcoded Credentials Description: The...
Threat Roundup for August 26 to September 2
Today, Talos is publishing a glimpse into the most prevalent threats we've observed between Aug. 26 and Sept. 2. As with previous roundups, this post isn't meant to be an in-depth analysis. Instead, this post will summarize the threats we've observed by highlighting key behavioral characteristics...
Is Your New Car a Threat to National Security?
Putting sensor-packed Chinese cars on Western roads could be a privacy issue. Just ask Tesla...
A Decade-Long Chinese Espionage Campaign Targets Southeast Asia and Australia
A previously undocumented Chinese-speaking advanced persistent threat APT actor dubbed Aoqin Dragon has been linked to a string of espionage-oriented attacks aimed at government, education, and telecom entities chiefly in Southeast Asia and Australia dating as far back as 2013. "Aoqin Dragon seek...
