PT-2020-5909

Name of the Vulnerable Software and Affected Versions: Phoenix Contact PC Worx and PC Worx Express version 1.87 and earlier Description: The issue is related to mwe file parsing in Phoenix Contact PC Worx and PC Worx Express, which is vulnerable to out-of-bounds read remote code execution. This i...

CVE-2020-12498: Stack-based Buffer Overflow

mwe file parsing in Phoenix Contact PC Worx and PC Worx Express version 1.87 and earlier is vulnerable to out-of-bounds read remote code execution. Manipulated PC Worx projects could lead to a remote code execution due to insufficient input data validation...

Memory Corruption Vulnerability in WPS Office 2019 for PC (CNVD-2020-44403)

WPS Office 2019 PC version is the software of Zhuhai Kingsoft Office Software Co. Ltd, which can realize a variety of functions commonly used in office software, such as text, tables, presentations and so on. WPS Office 2019 PC Edition suffers from a memory corruption vulnerability that can be...

Memory Corruption Vulnerability in WPS Office 2019 PC Version

WPS Office 2019 PC version is the software of Zhuhai Kingsoft Office Software Co. Ltd, which can realize the text, table, presentation and many other functions commonly used in office software. A memory corruption vulnerability exists in WPS Office 2019 PC Edition. An attacker can exploit this...

pc-canada.com Cross Site Scripting vulnerability OBB-1193186

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

UAF Vulnerability in WPS Office 2019 for PC (CNVD-2020-34099)

WPS Office 2019 PC version is the software of Zhuhai Kingsoft Office Software Co. Ltd, which can realize the text, table, presentation and many other functions commonly used in office software. WPS Office 2019 PC Edition suffers from a UAF vulnerability that can be exploited by an attacker to cau...

CVE-2020-1831

HUAWEI Mate 20 smartphones with versions earlier than 10.0.0.195SP31C00E74R3P8 have an improper authorization vulnerability. The digital balance function does not sufficiently restrict the using time of certain user, successful exploit could allow the user break the limit of digital balance...

Authorization

HUAWEI Mate 20 smartphones with versions earlier than 10.0.0.195SP31C00E74R3P8 have an improper authorization vulnerability. The digital balance function does not sufficiently restrict the using time of certain user, successful exploit could allow the user break the limit of digital balance...

CVE-2020-1831

HUAWEI Mate 20 smartphones with versions earlier than 10.0.0.195SP31C00E74R3P8 have an improper authorization vulnerability. The digital balance function does not sufficiently restrict the using time of certain user, successful exploit could allow the user break the limit of digital balance...

The vulnerability of the Siemens SIMATIC PCS 7, SIMATIC WinCC, and SIMATIC NET PC process control systems allows a intruder to trigger a service failure.

The vulnerability of the Siemens SIMATIC PCS 7, SIMATIC WinCC, and SIMATIC NET PC process control systems is related to an improper limitation on buffers for downloaded data. Exploiting this vulnerability can allow a malicious actor to cause service failures...

CVE-2020-1831: Incorrect Authorization

HUAWEI Mate 20 smartphones with versions earlier than 10.0.0.195SP31C00E74R3P8 have an improper authorization vulnerability. The digital balance function does not sufficiently restrict the using time of certain user, successful exploit could allow the user break the limit of digital balance...

CVE-2020-7812

Ezhttptrans.ocx ActiveX Control in Kaoni ezHTTPTrans 1.0.0.70 and prior versions contain a vulnerability that could allow remote attacker to download arbitrary file by setting the arguments to the activex method. This can be leveraged for code execution by rebooting the victim’s PC...

Code injection

Ezhttptrans.ocx ActiveX Control in Kaoni ezHTTPTrans 1.0.0.70 and prior versions contain a vulnerability that could allow remote attacker to download arbitrary file by setting the arguments to the activex method. This can be leveraged for code execution by rebooting the victim’s PC...

Code Execution Vulnerability in the Backend of Daimi CMS

DAMI CMS is a PC building station and cell phone building station integrated all-in-one system. A code execution vulnerability exists in the background of Daimi CMS, which can be exploited by attackers to gain server privileges...

pc-music.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1160939 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

Thunderbolt Flaws Expose Millions of PCs to Hands-On Hacking

The so-called Thunderspy attack takes less than five minutes to pull off with physical access to a device, and it affects any PC manufactured before 2019...

Fake Zoom installers infect PCs with RevCode WebMonitor RAT

By Deeba Ahmed Zoom is being actively targeted by hackers in the past few weeks. Now, hackers are dropping fake Zoom installers with RevCode WebMonitor RAT. This is a post from HackRead.com Read the original post: Fake Zoom installers infect PCs with RevCode WebMonitor RAT...

CVE-2020-6861

A flawed protocol design in the Ledger Monero app before 1.5.1 for Ledger Nano and Ledger S devices allows a local attacker to extract the master spending key by sending crafted messages to this app selected on a PIN-entered Ledger connected to a host PC...

CVE-2020-6861

A flawed protocol design in the Ledger Monero app before 1.5.1 for Ledger Nano and Ledger S devices allows a local attacker to extract the master spending key by sending crafted messages to this app selected on a PIN-entered Ledger connected to a host PC...

Malware can extract data from air-gapped PC through power supply

By Sudais Asif One of the most secure system arrangements today consists of air-gapped PCs.... This is a post from HackRead.com Read the original post: Malware can extract data from air-gapped PC through power supply...