2822 matches found
PT-2021-5668
Name of the Vulnerable Software and Affected Versions Trend Micro Security Consumer 2021 family of products Description A link following denial-of-service issue could allow an attacker to abuse the PC Health Checkup feature to create symlinks, enabling modification of files and potentially leadin...
Command execution vulnerability in TamronOS IPTV/VOD system (CNVD-2021-49564)
TamronOS IPTV/VOD system is a set of Linux kernel-based development of broadband operators, hotels, schools, live on-demand all-in-one solution, the system provides a variety of clients Android set-top box, TV, PC on-demand, cell phone on-demand to facilitate user access through different devices...
Lenovo Computer Manager has a binary vulnerability
Lenovo PC Manager is a computer security software launched by Lenovo Group, developed by Lenovo PC core software team, focusing on the health and network security of Lenovo devices, with pop-up blocking, garbage cleaning, virus checking, optimization and acceleration. A binary vulnerability exist...
CVE-2021-33542: Access of Uninitialized Pointer
Phoenix Contact Classic Automation Worx Software Suite in Version 1.87 and below is affected by a remote code execution vulnerability. Manipulated PC Worx or Config+ projects could lead to a remote code execution when unallocated memory is freed because of incompletely initialized data. The...
Design/Logic Flaw
Huawei LTE USB Dongle products have an improper permission assignment vulnerability. An attacker can locally access and log in to a PC to induce a user to install a specially crafted application. After successfully exploiting this vulnerability, the attacker can perform unauthenticated operations...
CVE-2021-22382
Huawei LTE USB Dongle products have an improper permission assignment vulnerability. An attacker can locally access and log in to a PC to induce a user to install a specially crafted application. After successfully exploiting this vulnerability, the attacker can perform unauthenticated operations...
What A Funny App I Got Here!
When you hear the word "malware", the first thing that might come to your mind is a PC or laptop. You think about some weird advertising pop-ups or unrecognized processes running in the background...
Code Execution Vulnerability in Rice CMS
Dami CMS DamiCMS is a PC station building and cell phone station building integrated all-in-one system. DamiCMS suffers from a code execution vulnerability that can be exploited by attackers to execute code and gain server privileges...
XSS Vulnerability in Hutchinson Cloud PC Client
HeCaiYun is China Mobile's personal online disk, providing personal cloud storage services for all users. There is an XSS vulnerability in the PC client of HeCaiYun, which can be exploited by attackers to obtain user cookie information...
Intel Plugs 29 Holes in CPUs, Bluetooth, Security
Intel has unleashed 29 security advisories to plug up some serious bugs in the BIOS firmware for Intel processors, as well as in its Bluetooth products, Active Management Technology tools, the NUC Mini PC line, and, ironically, in its own security library. Details about the advisories can be foun...
qemu:qemu-fuzz-i386-target-generic-fuzz-pc-i440fx: Heap-use-after-free in op_pci_write
Detailed Report: https://oss-fuzz.com/testcase?key=6459521053622272 Project: qemu Fuzzing Engine: libFuzzer Fuzz Target: qemu-fuzz-i386-target-generic-fuzz-pc-i440fx Job Type: libfuzzerasanqemu Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address: 0x7f8a00a788b8 Crash State:...
CVE-2020-18166
Unrestricted File Upload in LAOBANCMS v2.0 allows remote attackers to upload arbitrary files by attaching a file with a ".jpg.php" extension to the component "admin/wenjian.php?wj=../templets/pc"...
LAOBANCMS 代码问题漏洞
LAOBANCMS is a content management system based on PHP and MySQL. LAOBANCMS v2.0 version of the existence of arbitrary file upload vulnerability, the vulnerability stems from the unrestricted file upload allows remote attackers can exploit the vulnerability to upload arbitrary files, the method is...
CVE-2020-18166: Unrestricted Upload of File with Dangerous Type
Unrestricted File Upload in LAOBANCMS v2.0 allows remote attackers to upload arbitrary files by attaching a file with a ".jpg.php" extension to the component "admin/wenjian.php?wj=../templets/pc"...
WhatsApp is reportedly working on web version without connected phone
By Waqas Apparently, WhatsApp is working on a Universal Windows Platform that would let you use the app on a PC without using your smartphone. This is a post from HackRead.com Read the original post: WhatsApp is reportedly working on web version without connected phone...
CVE-2021-3464
A DLL search path vulnerability was reported in Lenovo PCManager, prior to version 3.0.400.3252, that could allow privilege escalation...
pcstore.com.tw Cross Site Scripting vulnerability OBB-1961598
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Affected Website:| pcstore.com.tw ---|--- Open Bug Bounty...
Binary vulnerability in jpeg file parsing in Lovecraft Universal Connections PC version
The official version of Lovecraft Universal Player is a universal video and audio playback tool created by Lovecraft. Love Qiyi universal player belongs to the universal player, can support most of the mainstream media formats. It also supports the functions of watching pictures, skinning,...
OpenSSL Vulnerabilities Sep 2020 - Feb 2021
Summary Symantec Network and Information Security NIS products using affected versions of OpenSSL may be susceptible to multiple vulnerabilities. A remote attacker may be able to decrypt encrypted communication from an SSL/TLS connection, downgrade a newly established SSL/TLS connection to SSLv2,...