Car Backdoor Maker: CBM

Car Backdoor Maker For the first time, a hardware backdoor tool is presented having several advanced features, such as: remote control via SMS commands, automated launch of attack payloads at a GPS location or when a specific car status is reached; and a configuration interface that allows users ...

pc-upgrade.com XSS vulnerability

Vulnerable URL: http://pc-upgrade.com/productsDisplay.asp?keywords=%3Csvg/onload=alert/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 29.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP...

Hack Brief: Dangerous ‘Fireball’ Adware Infects a Quarter Billion PCs

A widespread adware infection hides the ability to inflict far worse than spammy browser tweaks. The post Hack Brief: Dangerous 'Fireball' Adware Infects a Quarter Billion PCs appeared first on WIRED...

Intel NUC Information Disclosure Vulnerability

The Intel NUC is a miniature PC from Intel. A local information disclosure vulnerability exists in Intel NUC. An attacker with physical access could exploit this vulnerability to obtain sensitive information, leading to further attacks...

Intel NUC and Compute Stick DCI Local Information Disclosure Vulnerability (CNVD-2017-10730)

Intel NUC is Intel's Intel micro PC, which is equivalent to a small desktop, convenient for you to work, study and play in any room. A local information disclosure vulnerability exists in Intel NUC and Compute Stick DCI. An attacker with physical access could exploit the vulnerability to obtain...

CVE-2017-6865

CVE-2017-6865 is a DoS vulnerability in Siemens PROFINET DCP handling affecting multiple Siemens products (WinCC, STEP 7/TIA Portal, PCS 7, WinAC/WinCC flexible, SCT, SINEMA, SINUMERIK, etc.). The root cause is improper input validation, where specially crafted PROFINET DCP broadcast packets on a...

CVE-2017-6865: Improper Input Validation

A vulnerability has been identified in Primary Setup Tool PST All versions V4.2 HF1, SIMATIC Automation Tool All versions V3.0, SIMATIC NET PC-Software All versions V14 SP1, SIMATIC PCS 7 V8.1 All versions, SIMATIC PCS 7 V8.2 All versions V8.2 SP1, SIMATIC STEP 7 TIA Portal V13 All versions V13...

Siemens devices using the PROFINET Discovery and Configuration Protocol (Update G)

CVSS v3 6.5 ATTENTION: Exploitable from an adjacent network/low skill level to exploit. Vendor: Siemens Equipment: Devices using the PROFINET Discovery and Configuration Protocol DCP Vulnerability: Denial of Service UPDATE INFORMATION This updated advisory is a follow-up to the updated advisory...

PT-2017-3766

Name of the Vulnerable Software and Affected Versions: SIMATIC Automation Tool versions prior to V3.0 SIMATIC NET PC-Software versions prior to V14 SP1 SIMATIC PCS 7 V8.1 all versions SIMATIC PCS 7 V8.2 versions prior to V8.2 SP1 SIMATIC STEP 7 TIA Portal V13 versions prior to V13 SP2 SIMATIC STE...

pc-seriennummer.de XSS vulnerability

Vulnerable URL: http://www.pc-seriennummer.de/php/captchamain.php Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 7673805 VIP website status:| No Check pc-seriennummer.de SSL...

pcservice.nl XSS vulnerability

Vulnerable URL: https://www.pcservice.nl/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1711570 VIP website status:| No Check pcservice.nl SSL connection:| Grade: A- Coordinated...

Microsoft Windows taskschd.msc Privilege Escalation Vulnerability

Microsoft Windows taskschd.msc local SYSTEM privilege escalation exploit. Microsoft Windows 'taskschd.msc' Local SYSTEM Privilege Escalation Todor Donev https://www.ethical-hacker.org/ https://www.facebook.com/ethicalhackerorg Disclaimer: This or previous programs is for Educational purpose ONLY...

Heap overflow

Heap-based buffer overflow in QEMU, when built with the Q35-chipset-based PC system emulator...

CVE-2015-8666

Heap-based buffer overflow in QEMU, when built with the Q35-chipset-based PC system emulator...

DEBIAN-CVE-2015-8666

Heap-based buffer overflow in QEMU, when built with the Q35-chipset-based PC system emulator...

CVE-2015-8666

CVE-2015-8666 : Heap-based buffer overflow in QEMU when built with the Q35-chipset PC system emulator. Affects QEMU’s VM migration path; Debian security advisory and Debian LTS note the issue among a broader set of QEMU vulnerabilities and indicate a security update is available (Jessie fixed in ...

CVE-2015-8666

Heap-based buffer overflow in QEMU, when built with the Q35-chipset-based PC system emulator...

CVE-2015-8666: Out-of-bounds Write

Heap-based buffer overflow in QEMU, when built with the Q35-chipset-based PC system emulator...

CVE-2016-8274

CVE-2016-8274 refers to a DLL hijacking vulnerability in Huawei HiSuite PC client software, specifically version 4.0.5.300_OVE. The root cause is insufficient verification of loaded system DLL files, which can allow an attacker to cause the system to load a malicious DLL and execute arbitrary cod...

CVE-2016-8273: Improper Input Validation

Huawei PC client software HiSuite 4.0.5.300OVE uses insecure HTTP for upgrade software package download and does not check the integrity of the software package before installing; an attacker can launch an MITM attack to interrupt or replace the downloaded software package and further compromise...