Beebug - A Tool For Checking Exploitability

beebug is a tool that can be used to verify if a program crash could be exploitable. This tool was presented the first time at r2con 2018 in Barcelona. Some implemented functionality are: Stack overflow on libc Crash on Program Counter Crash on branch Crash on write memory Heap vulnerabilities Re...

Denial Of Service (DoS)

QEMU is vulnerable to denial of service. A heap-based buffer overflow flaw was discovered in the way QEMU's AMD PC-Net II Ethernet Controller emulation received certain packets in loopback mode. A privileged user with the CAPSYSRAWIO capability inside a guest could use this flaw to crash the host...

[SECURITY] Fedora 28 Update: beep-1.3-26.fc28

Beep allows the user to control the PC speaker with precision, allowing different sounds to indicate different events. While it can be run quite happily on the command line, its intended place of residence is within shell/Perl scripts, notifying the user when something interesting occurs. Of...

[SECURITY] Fedora 29 Update: beep-1.3-26.fc29

Beep allows the user to control the PC speaker with precision, allowing different sounds to indicate different events. While it can be run quite happily on the command line, its intended place of residence is within shell/Perl scripts, notifying the user when something interesting occurs. Of...

CVE-2018-16183

An unquoted search path vulnerability in some pre-installed applications on Panasonic PC run on Windows 7 32bit, Windows 7 64bit, Windows 8 64bit, Windows 8.1 64bit, Windows 10 64bit delivered in or later than October 2009 allow local users to gain privileges via a Trojan horse executable file an...

Design/Logic Flaw

An unquoted search path vulnerability in some pre-installed applications on Panasonic PC run on Windows 7 32bit, Windows 7 64bit, Windows 8 64bit, Windows 8.1 64bit, Windows 10 64bit delivered in or later than October 2009 allow local users to gain privileges via a Trojan horse executable file an...

CVE-2018-16183

An unquoted search path vulnerability in some pre-installed applications on Panasonic PC run on Windows 7 32bit, Windows 7 64bit, Windows 8 64bit, Windows 8.1 64bit, Windows 10 64bit delivered in or later than October 2009 allow local users to gain privileges via a Trojan horse executable file an...

CVE-2018-16183

CVE-2018-16183 details an unquoted service path vulnerability in Panasonic PCs with pre-installed applications running Windows 7/8/8.1/10 (from Oct 2009 onward). The root cause is services started with unquoted file paths (CWE-428), which could allow local attackers to execute a Trojan horse exec...

pc-magazine.biz XSS vulnerability

Open Bug Bounty ID: OBB-703809 Description| Value ---|--- Affected Website:| pc-magazine.biz Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden...

CVE-2018-16160

SecureCore Standard Edition Version 2.x allows an attacker to bypass the product 's authentication to log in to a Windows PC...

CVE-2018-16160

SecureCore Standard Edition Version 2.x allows an attacker to bypass the product 's authentication to log in to a Windows PC...

Authentication flaw

SecureCore Standard Edition Version 2.x allows an attacker to bypass the product 's authentication to log in to a Windows PC...

CVE-2018-0690

An unvalidated software update vulnerability in Music Center for PC version 1.0.02 and earlier could allow a man-in-the-middle attacker to tamper with an update file and inject executable files...

CVE-2018-16160

SecureCore Standard Edition Version 2.x allows an attacker to bypass the product 's authentication to log in to a Windows PC...

CVE-2018-0690

CVE-2018-0690 affects Sony Music Center for PC prior to 1.0.02, where the software update process does not validate updates securely. This enables a man-in-the-middle attacker to tamper with an update file and inject executable files during the update, potentially leading to code execution on the...

CVE-2018-16160

CVE-2018-16160 affects SecureCore Standard Edition Version 2.x. An authentication bypass allows an attacker to log in to a Windows PC via a flaw in the product’s authentication mechanism (CWE-287). Affected product: SecureCore Standard Edition 2.x running on Windows (Windows 8/8.1 noted in JVN). ...

WeChat pc client software suffers from arbitrary code execution vulnerability

WeChat is a free application launched by Tencent to provide instant messaging services for smart terminals. The WeChat pc client software suffers from an arbitrary code execution vulnerability, which can be exploited by an attacker with the help of malware to execute arbitrary code DLL files on t...

qemu security update

12:2.9.0-17.el7 - i386: Remove generic SMT thread check Babu Moger Orabug: 28676425 - pc: Fix typo on PCCOMPAT212 Eduardo Habkost Orabug: 28676425 - i386: Enable TOPOEXT feature on AMD EPYC CPU Babu Moger Orabug: 28676425 - net: ignore packet size greater than INTMAX Jason Wang Orabug: 28762625...

JVN#21528670: SecureCore Standard Edition vulnerable to authentication bypass

SecureCore Standard Edition provided by Feitian Japan Co., Ltd. contains an authentication bypass vulnerability CWE-287. Impact An attacker may bypass the product's authentication and log in to a Windows PC. Solution Update the Software Update the software to the latest version according to the...

[SECURITY] Fedora 28 Update: dolphin-emu-5.0-25.fc28

Dolphin is a Gamecube, Wii and Triforce the arcade machine based on the Gamecube emulator, which supports full HD video with several enhancements such as compatibility with all PC controllers, turbo speed, networked multiplaye r, and more. Most games run perfectly or with minor bugs...