CVE-2018-10943

An issue was discovered on Barco ClickShare CSE-200 and CS-100 Base Units with firmware before 1.6.0.3. Sending an arbitrary unexpected string to TCP port 7100 respecting a certain frequency timing disconnects all clients and results in a crash of the Unit...

CVE-2018-13224

The sell function of a smart contract implementation for Virtual Energy Units VEU Contract Name: VEUTokenERC20, an Ethereum token, has an integer overflow in which "amount sellPrice" can be zero, consequently reducing a seller's assets...

Integer overflow

The sell function of a smart contract implementation for Virtual Energy Units VEU Contract Name: VEUTokenERC20, an Ethereum token, has an integer overflow in which "amount sellPrice" can be zero, consequently reducing a seller's assets...

CVE-2018-13224

The sell function of a smart contract implementation for Virtual Energy Units VEU Contract Name: VEUTokenERC20, an Ethereum token, has an integer overflow in which "amount sellPrice" can be zero, consequently reducing a seller's assets...

VEU_TokenERC20 Integer Overflow Vulnerability

Virtual Energy Units VEU is an ethereum-based digital currency. An integer overflow vulnerability exists in the 'sell' function in the implementation of VEU's smart contract contract name: VEUTokenERC20. An attacker could exploit this vulnerability to prevent the seller from obtaining the assets...

Active Directory Reconnaissance: ADRecon

ADRecon is a tool which extracts various artifacts as highlighted below out of an AD environment in a specially formatted Microsoft Excel report that includes summary views with metrics to facilitate analysis. The report can provide a holistic picture of the current state of the target AD...

GLitch: New 'Rowhammer' Attack Can Remotely Hijack Android Phones

For the very first time, security researchers have discovered an effective way to exploit a four-year-old hacking technique called Rowhammer to hijack an Android phone remotely. Dubbed GLitch, the proof-of-concept technique is a new addition to the Rowhammer attack series which leverages embedded...

Securing Our Connected Car Future with Panasonic

There are few more exciting frontiers of the Internet of Things IoT than connected cars. Gartner predicts that there will be 61 million vehicles with built-in connectivity on our roads by 2020. But as we drive ever closer to a future where autonomous vehicles are a commonplace sight, we must be...

DEBIAN-CVE-2018-1049

In systemd prior to 234 a race condition exists between .mount and .automount units such that automount requests from kernel may not be serviced by systemd resulting in kernel holding the mountpoint and any processes that try to use said mount will hang. A race condition like this may lead to...

How to assign VLANs to Targets created in PVS

This article explains the relationship between Networks and VLANs as it pertains to XenDesktop Hosting Units and PVS. The article also explains a workaround to be able to distribute Target Devices across desired VLANs The concept of VLAN IDs on the Hypervisor side is unknown to the XenDesktop...

MGASA-2018-0094 Updated systemd packages fix security vulnerability

In systemd prior to 234 a race exists between .mount and .automount units such that automount requests from kernel may not be serviced by systemd resulting in kernel holding the mountpoint and any processes that try to use said mount will hang. A race like this may lead to denial of service, unti...

The vulnerability in GoAhead’s embedded web server software for the COM-module of SICAM RTUs SM-2556 allows a intruder to execute arbitrary code.

The vulnerability of GoAhead’s embedded web server’s COM-module software for SICAM RTUs SM-2556 is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

CVE-2017-12737

An issue was discovered on Siemens SICAM RTUs SM-2556 COM Modules with the firmware variants ENOS00, ERAC00, ETA2, ETLS00, MODi00, and DNPi00. The integrated web server port 80/tcp of the affected devices could allow unauthenticated remote attackers to obtain sensitive device information over the...

SQL Injection Vulnerability in Fire Safety Cadastralized Management System for Social Units

The fire safety household management system of social units is a special software for fire management developed by the Public Security Fire Bureau and promoted by the provincial fire brigades to help the public security fire departments and units to better organize and carry out fire safety work,...

Design/Logic Flaw

The airbag detonation algorithm allows injury to passenger-car occupants via predictable Security Access SA data to the internal CAN bus or the OBD connector. This affects the airbag control units aka pyrotechnical control units or PCUs of unspecified passenger vehicles manufactured in 2014 or...

CVE-2017-14937

The CVE describes a vulnerability in airbag pyrotechnic control units (PCUs) affecting unspecified passenger vehicles (2014+ when ignition is on and speed

Open Source BitLocker Password Cracking Tool: BitCracker

BitCracker is the first open source BitLocker password cracking tool. BitLocker is a full-disk encryption feature available in recent Windows versions Vista, 7, 8.1 and 10 Pro and Enterprise. BitCracker is a mono-GPU password cracking tool for memory units encrypted with the password authenticati...

CVE-2017-5898

Integer overflow in the emulatedapdufromguest function in usb/dev-smartcard-reader.c in Quick Emulator Qemu, when built with the CCID Card device emulator support, allows local users to cause a denial of service application crash via a large Application Protocol Data Units APDU unit...

Alaris 8000/8015 PC units information disclosure vulnerability

The Alaris 8000 and 8015 PC units are both at the heart of the Alaris system from BD USA, providing a common user interface for programming IV infusions. An information disclosure vulnerability exists in the Alaris 8000 and 8015 PC units. An attacker could exploit the vulnerability to obtain...

openSUSE Security Update : systemd (openSUSE-2017-150)

This update for systemd fixes the following issues : This security issue was fixed : - CVE-2016-10156: Fix permissions set on permanent timer timestamp files, preventing local unprivileged users from escalating privileges bsc1020601. These non-security issues were fixed : - Fix permission set on...