CVE-2017-16739

An issue was discovered in WECON Technology LEVI Studio HMI Editor v1.8.29 and prior. Specially-crafted malicious files may be able to cause stack-based buffer overflow vulnerabilities, which may allow remote code execution...

Heap overflow

An issue was discovered in WECON Technology LEVI Studio HMI Editor v1.8.29 and prior. A specially-crafted malicious file may be able to cause a heap-based buffer overflow vulnerability when opened by a user...

Stack overflow

An issue was discovered in WECON Technology LEVI Studio HMI Editor v1.8.29 and prior. Specially-crafted malicious files may be able to cause stack-based buffer overflow vulnerabilities, which may allow remote code execution...

CVE-2017-16737

The CVE-2017-16737 issue affects WECON LeviStudio HMI Editor (v1.8.29 and earlier). A heap-based buffer overflow occurs when a specially crafted General FigureFile XML attribute is processed after a user opens a malicious file, enabling arbitrary code execution in the process context. ZDI confirm...

CVE-2017-16739

The CVE-2017-16739 issue affects Wecon LeviStudio HMI Editor (LEVI Studio HMI Editor) v1.8.29 and earlier. Several connected advisories describe stack-based buffer overflow vulnerabilities in LeviStudioU/LEVI Studio Editor project handling (e.g., overly long XML attributes like MulStatus szFilena...

CVE-2017-16739

An issue was discovered in WECON Technology LEVI Studio HMI Editor v1.8.29 and prior. Specially-crafted malicious files may be able to cause stack-based buffer overflow vulnerabilities, which may allow remote code execution...

CVE-2017-16737

An issue was discovered in WECON Technology LEVI Studio HMI Editor v1.8.29 and prior. A specially-crafted malicious file may be able to cause a heap-based buffer overflow vulnerability when opened by a user...

SQL Injection Vulnerability in Dispnews.asp Page of Website Construction System of Jingmen Xinnet Technology Development Co.

Jingmen City, Xin network technology development limited company is a network brand marketing and enterprise management information technology professional service providers. There is a SQL injection vulnerability in the dispnews.asp page of the website construction system of Jingmen Xinnet...

Intel Management Engine Active Management Technology (AMT) Remote Access Enabled

Binary data intelamtremotedetect.nbin...

SQL injection vulnerability in the pro_content.php page of Xuchang Chunqiu Network Technology Co.

Xuchang Chunqiu Network Technology Co., Ltd. is a one-stop IT service company dedicated to website construction, network promotion, keyword optimization, 400 phone, talent network, software development and application, service outsourcing and many other businesses in one. A SQL injection...

SQL Injection Vulnerability in Yitianlian's Website Building System

Shenzhen Yitianlian Technology Co., Ltd. is a network operator providing professional network marketing services for enterprises. A SQL injection vulnerability exists in the Yitianlian Technology website builder system. Allow attackers to exploit the vulnerability to obtain sensitive information ...

Securing the Three Families of IoT

Securing the Internet of Things is difficult. One reason is the Internet of things consists of three different groups of technology. Each group has radically different architectural constraints. Securing each group requires a distinct approach. IoT 0.9 The primitive group contains all legacy...

The Second Question(s) Today’s CEOs Should Ask (& Know the Answers To)

In a previous blog, we discussed Commander’s Intent for CEOs and introduced 10 questions CEOs should be asking their teams. In this blog series, I am going to take a deeper dive into each question and break them down one at a time. We will discuss why CEOs should care about each question and the...

About the security content of macOS High Sierra 10.13.2 Supplemental Update - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. For more information about security, se...

Inner Mongolia Baijiaxin Technology Co., Ltd. network station building system multiple parameters exist SQL injection vulnerability

Inner Mongolia Baijiaxin Technology Co., Ltd. is an information technology service company integrating website construction, software research and development, software implementation, system integration, network engineering, information technology consulting and IT outsourcing services. There is...

technologylounge.com.au XSS vulnerability

Open Bug Bounty ID: OBB-459290 Description| Value ---|--- Affected Website:| technologylounge.com.au Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Edward Snowden’s Haven app turns your laptop into a security system

By Asad Gilani Most sensitive users of technology, especially those in journalism and This is a post from HackRead.com Read the original post: Edward Snowdens Haven app turns your laptop into a security system...

TippingPoint Threat Intelligence and Zero-Day Coverage – Week of December 18, 2017

In the 2000 movie High Fidelity, the concept of making lists is a dominant focus. What are your top five favorite records? Top five side one, track ones? Top five dream jobs? In the movie, Rob Gordon, portrayed by John Cusack, decides to categorize his top five most memorable breakups in order to...

CVE-2017-6167

In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, PEM and WebSafe software version 13.0.0 and 12.1.0 - 12.1.2, race conditions in iControl REST may lead to commands being executed with different privilege levels than expected...

Buffer overflow

WTF/wtf/FastBitVector.h in WebKit, as distributed in Safari Technology Preview Release 46, allows remote attackers to cause a denial of service buffer overflow or possibly have unspecified other impact because it calls the FastBitVectorWordOwner::resizeSlow function in WTF/wtf/FastBitVector.cpp f...