CVE-2019-5253

Huawei E5572-855 devices with firmware versions earlier than 8.0.1.3 (H335SP1C233) have an improper authentication vulnerability. The device does not perform sufficient authentication for certain operations, and a successful exploit could cause a reboot after a man-in-the-middle attack. Connected...

Snatch Ransomware Reboots Windows in Safe Mode to Bypass Antivirus

Cybersecurity researchers have spotted a new variant of the Snatch ransomware that first reboots infected Windows computers into Safe Mode and only then encrypts victims' files to avoid antivirus detection. Unlike traditional malware, the new Snatch ransomware chooses to run in Safe Mode because ...

Microsoft Windows Uninitialized Variable Local Privilege Elevation

This module exploits CVE-2019-1458, an arbitrary pointer dereference vulnerability within win32k which occurs due to an uninitalized variable, which allows user mode attackers to write a limited amount of controlled data to an attacker controlled address in kernel memory. By utilizing this...

Denial of Service Vulnerability in ZTE ZXR10 1800-2S Routers

The ZTE ZXR10 1800-2S Router is a multi-service intelligent router manufactured by ZTE Corporation. A denial of service vulnerability exists in the ZTE ZXR10 1800-2S router, which can be exploited by an attacker to reboot the device and cause a denial of service...

Denial of Service Vulnerability in ZTE ZXR10 1800-2S Router (CNVD-2020-01289)

The ZTE ZXR10 1800-2S Router is a multi-service intelligent router manufactured by ZTE Corporation. A denial of service vulnerability exists in the ZTE ZXR10 1800-2S router, which can be exploited by an attacker to reboot the device and cause HTTP and other services to refuse to respond...

Huawei E5572-855 Authorization Issues Vulnerability

The Huawei E5572-855 is a portable wireless router device from Huawei China. An authorization issue vulnerability exists in Huawei E5572-855 prior to version 8.0.1.3 H335SP1C233, which can be exploited by an attacker to cause a device reboot by performing a man-in-the-middle attack...

USN-4182-4 intel-microcode regression

USN-4182-2 provided updated Intel Processor Microcode. A regression was discovered that caused some Skylake processors to hang after a warm reboot. This update reverts the microcode for that specific processor family. We apologize for the inconvenience. Original advisory details: Stephan van...

USN-4182-3 intel-microcode regression

USN-4182-1 provided updated Intel Processor Microcode. A regression was discovered that caused some Skylake processors to hang after a warm reboot. This update reverts the microcode for that specific processor family. We apologize for the inconvenience. Original advisory details: Stephan van...

Security Advisory - Improper Authentication Vulnerability in Several Products

There is an improper authentication vulnerability in several products. The device does not perform a sufficient authentication when doing certain operation, successful exploit could allow an attacker to cause the device to reboot after launch a man in the middle attack. Vulnerability ID:...

Product update: Virtuozzo Automator 7.0 Update 2 Hotfix 8 (VA MN: 7.0.2-623, VA Agent: 7.0.2-341)

The hotfix for Virtuozzo Automator 7.0.2 provides stability fixes. Vulnerability id: PVA-37429 Need to return userbeancounters stats to VA agent. Vulnerability id: PVA-37434 Unable to reboot VE while changing its RAM/CPU live. Vulnerability id: PVA-37359, PVA-37415, PVA-37438 Other fixes...

Denial of Service Vulnerability in DIGI PortServer TS 1

DIGI's PortServer TS serial server provides a simple, reliable and cost-effective solution for connecting multiple serial devices over industry-standard Ethernet. Target applications include retail/point-of-sale, building control and point-of-care. A denial of service vulnerability exists in...

F5 BIG-IP Memory Disclosure Vulnerability

F5 BIG-IP is an application delivery platform from F5 USA that integrates network traffic management, application security management, load balancing and other functions. A memory leakage vulnerability exists in F5 BIG-IP, which can be exploited by an attacker to cause a memory leakage, leading t...

CVE-2019-18247

An attacker may use a specially crafted message to force Relion 650 series versions 1.3.0.5 and prior or Relion 670 series versions 1.2.3.18, 2.0.0.11, 2.1.0.1 and prior to reboot, which could cause a denial of service...

Denial of service

An attacker may use a specially crafted message to force Relion 650 series versions 1.3.0.5 and prior or Relion 670 series versions 1.2.3.18, 2.0.0.11, 2.1.0.1 and prior to reboot, which could cause a denial of service...

CVE-2019-18247

An attacker may use a specially crafted message to force Relion 650 series versions 1.3.0.5 and prior or Relion 670 series versions 1.2.3.18, 2.0.0.11, 2.1.0.1 and prior to reboot, which could cause a denial of service...

ABB Relion 650 and 670 Series Input Validation Error Vulnerability

The ABB Relion 670 Series and ABB Relion 650 Series are both transmission protection control devices from ABB Switzerland. An input validation error vulnerability exists in the ABB Relion 650 and 670 Series, which can be exploited by an attacker to reboot the device, resulting in a denial of...

ABB Relion 650 and 670 Series CVE-2019-18247 Denial Of Service Vulnerability

Description ABB Relion 650 and 670 Series are prone to a denial-of-service vulnerability. Attackers can exploit this issue to cause a device to reboot, denying service to legitimate users. The following versions of ABB Relion series are vulnerable: ABB Relion 650 series versions 1.3.0.5 and prior...

VMware WorkStation 12.5.3 - Virtual Machine Escape Exploit

VMware Escape Exploit VMware Escape Exploit before VMware WorkStation 12.5.3 Host Target: Win10 x64 Compiler: VS2013 Test on VMware 12.5.2 build-4638234 Known issues Failing to heap manipulation causes host process crash. About 50% successful rate Not quite elaborate because I'm not good at doing...

eMerge50P 5000P 4.6.07 - Remote Code Execution Exploit

Exploit for hardware platform in category web applications Exploit Title: eMerge50P 5000P 4.6.07 - Remote Code Execution Exploit Author: LiquidWorm Vendor Homepage: http://linear-solutions.com/nscfamily/e3-series/ Software Link: http://linear-solutions.com/nscfamily/e3-series/ Version: 4.6.07...

Siemens Desigo PX Devices

1. EXECUTIVE SUMMARY CVSS v3 5.3 ATTENTION : Exploitable remotely/low skill level to exploit Vendor : Siemens Equipment : Desigo PX Devices Vulnerability : External Control of Assumed-Immutable Web Parameter 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker...