6807 matches found
Design/Logic Flaw
Lawrence Livermore National Laboratory msr-safe v1.1.0 is affected by: Incorrect Access Control. The impact is: An attacker could modify model specific registers. The component is: ioctl handling. The attack vector is: An attacker could exploit a bug in ioctl interface whitelist checking, in orde...
CVE-2019-1010066
CVE-2019-1010066 affects Lawrence Livermore National Laboratory’s msr-safe v1.1.0. The vulnerability is an Incorrect Access Control in the ioctl handling, enabling an attacker to write to model-specific registers via a bug in the ioctl whitelist checking. This would affect the ability to modify p...
CVE-2019-1010066
Lawrence Livermore National Laboratory msr-safe v1.1.0 is affected by: Incorrect Access Control. The impact is: An attacker could modify model specific registers. The component is: ioctl handling. The attack vector is: An attacker could exploit a bug in ioctl interface whitelist checking, in orde...
We need a safer systems programming language
In our first post in this series, we discussed the need for proactively addressing memory safety issues. Tools and guidance are demonstrably not preventing this class of vulnerabilities; memory safety issues have represented almost the same proportion of vulnerabilities assigned a CVE for over a...
CVE-2019-1010066: Improper Privilege Management
Lawrence Livermore National Laboratory msr-safe v1.1.0 is affected by: Incorrect Access Control. The impact is: An attacker could modify model specific registers. The component is: ioctl handling. The attack vector is: An attacker could exploit a bug in ioctl interface whitelist checking, in orde...
PT-2019-11457
Name of the Vulnerable Software and Affected Versions: Lawrence Livermore National Laboratory msr-safe version 1.1.0 Description: The issue is related to incorrect access control, allowing an attacker to modify model specific registers. This is due to a bug in the ioctl interface whitelist...
USN-4054-1 firefox vulnerabilities
A sandbox escape was discovered in Firefox. If a user were tricked in to installing a malicious language pack, an attacker could exploit this to gain additional privileges. CVE-2019-9811 Multiple security issues were discovered in Firefox. If a user were tricked in to opening a specially crafted...
Risks of Password Managers
Stuart Schechter writes about the security risks of using a password manager. It's a good piece, and nicely discusses the trade-offs around password managers: which one to choose, which passwords to store in it, and so on. My own Password Safe is mentioned. My particular choices about security an...
USN-3991-3 firefox regression
USN-3991-1 fixed vulnerabilities in Firefox, and USN-3991-2 fixed a subsequent regression. The update caused an additional regression that resulted in Firefox failing to load correctly after executing it in safe mode. This update fixes the problem. We apologize for the inconvenience. Original...
Salsa Tools - ShellReverse TCP/UDP/ICMP/DNS/SSL/BINDTCP and AV bypass, AMSI patched
Salsa Tools is a collection of three different tools that combined, allows you to get a reverse shell on steroids in any Windows environment without even needing PowerShell for it's execution. In order to avoid the latest detection techniques AMSI, most of the components were initially written on...
[SECURITY] Fedora 28 Update: qemu-2.11.2-5.fc28
QEMU is a generic and open source processor emulator which achieves a good emulation speed by using dynamic translation. QEMU has two operating modes: Full system emulation. In this mode, QEMU emulates a full system for example a PC, including a processor and various peripherials. It can be used ...
PT-2019-12448
Name of the Vulnerable Software and Affected Versions F-Secure SAFE for Windows versions prior to 17.6 F-Secure Internet Security versions prior to 17.6 F-Secure Anti-Virus versions prior to 17.6 F-Secure Client Security Standard and Premium versions prior to 14.10 F-Secure PSB Workstation Securi...
CVE-2019-12083: Out-of-bounds Read
The Rust Programming Language Standard Library 1.34.x before 1.34.2 contains a stabilized method which, if overridden, can violate Rust's safety guarantees and cause memory unsafety. If the Error::typeid method is overridden then any type can be safely cast to any other type, causing memory safet...
Rockwell Automation ArmorStart Safe 284D 480V 0.5HP 284D-FVD1P4S-10 Motor Starter
Binary data 753228.prm...
Rockwell Automation ArmorStart Safe 280G 0.5-2.5A 280G-F12S-10B Motor Starter
Binary data 753276.prm...
Rockwell Automation ArmorStart Safe 1000G 10HP 1000G-FVD17P0x-20 Motor Starter
Binary data 753291.prm...
Rockwell Automation ArmorStart Safe 281G 1.1-5.5A 281G-F12S-10C Motor Starter
Binary data 753283.prm...
Rockwell Automation ArmorStart Safe 284G 1HP 284G-FVD2P3S-10 Motor Starter
Binary data 753286.prm...