CVE-2018-18584

In mspack/cab.h in libmspack before 0.8alpha and cabextract before 1.8, the CAB block input buffer is one byte too small for the maximal Quantum block, leading to an out-of-bounds write...

UBUNTU-CVE-2018-18584

In mspack/cab.h in libmspack before 0.8alpha and cabextract before 1.8, the CAB block input buffer is one byte too small for the maximal Quantum block, leading to an out-of-bounds write...

The vulnerability of the FTP server of the microprogramming software for Schneider Electric Modicon Quantum control devices arises from deficiencies in access control. This allows a intruder to execute arbitrary code, cause system failures, or upload malicious firmware.

The vulnerability of the microprogrammed logic controller Schneider Electric Modicon Quantum software is related to deficiencies in access control. Exploiting this vulnerability could allow an intruder to execute arbitrary code, cause malfunctions, or upload malicious firmware using a special FTP...

The vulnerability of FTP servers of microprogrammed logic controllers from Schneider Electric—Modicon Premium, Modicon Quantum, Modicon M340, and BMXNOR0200—allows attackers to select passwords.

The vulnerability of FTP servers of microprogrammed logic controllers from Schneider Electric, such as Modicon Premium, Modicon Quantum, Modicon M340, and BMXNOR0200, is related to errors in the implementation of cryptographic algorithms. Exploiting this vulnerability can allow an attacker to...

Quantum Computing and Cryptography

Quantum computing is a new way of computing -- one that could allow humankind to perform computations that are simply impossible using today's computing technologies. It allows for very fast searching, something that would break some of the encryption algorithms we use today. And it allows us to...

The vulnerability of the built-in web server of Schneider Electric’s Modicon Premium, Modicon Quantum PLC, Modicon M340, and Modicon BMXNOR0200 allows a perpetrator to bypass the authentication mechanism.

The vulnerability of Schneider Electric’s built-in web server controls—Modicon Premium, Modicon Quantum PLC, Modicon M340, and Modicon BMXNOR0200—is caused by errors in the authentication mechanism. Exploiting this vulnerability allows a malicious actor to bypass the authentication process using...

The vulnerability of the built-in web server of Schneider Electric’s Modicon Premium, Modicon Quantum PLC, Modicon M340, and Modicon BMXNOR0200 allows a perpetrator to execute arbitrary code.

The vulnerability of Schneider Electric Modicon BMXNOR0200 embedded web servers is related to an error in HTTP request analysis. Exploiting this vulnerability allows a remote attacker to execute arbitrary code on the web server using specially crafted HTTP requests...

The vulnerability of web-based services of microprogramming software for programmable logic controllers from Schneider Electric—Modicon Premium, Modicon Quantum, and Modicon M340—allows a intruder to trigger a service failure.

The vulnerability of web-based services for microprogramming software-controlled Schneider Electric Modicon Premium, Modicon Quantum, and Modicon M340 devices lies in the fact that the operation data is stored outside of the buffer in memory. Exploiting this vulnerability allows a malicious actor...

CVE-2018-16413

ImageMagick 7.0.8-11 Q16 has a heap-based buffer over-read in the MagickCore/quantum-private.h PushShortPixel function when called from the coders/psd.c ParseImageResourceBlocks function...

ImageMagick Buffer Overflow Vulnerability (CNVD-2019-29246)

ImageMagick is the United States ImageMagick Studio company's set of open source image processing software. A heap-based buffer overflow vulnerability exists in the 'PushShortPixel' function of the MagickCore/quantum-private.h file in ImageMagick version 7.0.8-11 Q16. An attacker could exploit th...

DEBIAN-CVE-2018-16413

ImageMagick 7.0.8-11 Q16 has a heap-based buffer over-read in the MagickCore/quantum-private.h PushShortPixel function when called from the coders/psd.c ParseImageResourceBlocks function...

CVE-2018-16413

ImageMagick 7.0.8-11 Q16 has a heap-based buffer over-read in the MagickCore/quantum-private.h PushShortPixel function when called from the coders/psd.c ParseImageResourceBlocks function...

CVE-2018-16413

ImageMagick 7.0.8-11 Q16 has a heap-based buffer over-read in the MagickCore/quantum-private.h PushShortPixel function when called from the coders/psd.c ParseImageResourceBlocks function...

CVE-2018-16413

ImageMagick 7.0.8-11 Q16 has a heap-based buffer over-read in the MagickCore/quantum-private.h PushShortPixel function when called from the coders/psd.c ParseImageResourceBlocks function...

GCHQ on Quantum Key Distribution

The UK's GCHQ delivers a brutally blunt assessment of quantum key distribution: QKD protocols address only the problem of agreeing keys for encrypting data. Ubiquitous on-demand modern services such as verifying identities and data integrity, establishing network sessions, providing access contro...

The vulnerability of FTP servers of microprogrammed software-controlled Schneider Electric Modicon Premium, Modicon Quantum, Modicon M340, and Modicon BMXNOR0200 allows a intruder to gain access to the devices.

The vulnerability of FTP servers of microprogrammed logic controllers from Schneider Electric—Modicon Premium, Modicon Quantum, Modicon M340, and Modicon BMXNOR0200—is related to the use of pre-installed credentials. Exploiting this vulnerability can allow a malicious actor to gain access to the...

Valve: Comment restriction in subsection "Workshop" of domain "steamcommunity.com" can be bypassed using IDOR

Summary - While testing Domain "steamcommunity.com", i found subsection "workshop" which has restriction to comment on workshop items of the game which i do now own in my account. This access control can be bypassed using IDOR and user can post comment though comment section is disabled on worksh...

Schneider Electric PLCs - Cross-Site Request Forgery Vulnerability

Exploit for windows platform in category web applications Exploit Title: Schneider Electric PLCs - Cross-Site Request Forgery Exploit Author: t4rkd3vilz Vendor Homepage: http://www.schneider-electric.com/ Tested on: Windows CVE: CVE-2013-0663 Version: Schneider Electric Quantum PLC: 140NOE77111,...

Schneider Electric PLCs Cross Site Request Forgery

Exploit Title: Schneider Electric PLCs - Cross-Site Request Forgery Date: 2018-05-12 Exploit Author: t4rkd3vilz Vendor Homepage: http://www.schneider-electric.com/ Tested on: Windows CVE: CVE-2013-0663 Version: Schneider Electric Quantum PLC: 140NOE77111, 140NOE77101, 140NWM10000 Modicon M340 PLC...

Schneider Electric PLCs - Cross-Site Request Forgery

Schneider Electric PLCs - Cross-Site Request Forgery Exploit Title: Schneider Electric PLCs - Cross-Site Request Forgery Date: 2018-05-12 Exploit Author: t4rkd3vilz Vendor Homepage: http://www.schneider-electric.com/ Tested on: Windows CVE: CVE-2013-0663 Version: Schneider Electric Quantum PLC:...