Intel® Management Engine 11.x issue - US

Lenovo Security Advisory: LEN-21032 Potential Impact: Elevation of Privilege Severity: High Scope of Impact: Industry-wide CVE Identifier: CVE-2018-3627 Summary Description: Intel performed a security review of their Intel® Management Engine ME 11.x firmware, and identified a security vulnerabili...

WL-330NUL vulnerable to remote command execution

Overview WL-330NUL provided by ASUS Japan Inc. is a portable wireless LAN router. WL-330NUL contains a remote command execution vulnerability. TAIZO TSUKAMOTO of GLOBAL SECURITY EXPERTS Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security...

PT-2014-06: Arbitrary File Upload in Solar-Log

The specialists of the Positive Research center have detected an Arbitrary File Upload vulnerability in Solar-Log. Default web server component allows an attacker to upload files to an arbitrary path, including system file path, without authentication or fixed solarlog:solarlog credential is used...

Cisco Linksys WRT54GC vulnerable to buffer overflow

Overview Cisco Linksys WRT54GC provided by Cisco Systems contains a buffer overflow vulnerability. Cisco Linksys WRT54GC provided by Cisco Systems is a network router. Cisco Linksys WRT54GC contains a buffer overflow vulnerability. Yuji Ukai of Fourteenforty Research Institute, Inc. reported this...

[Full-disclosure] Canon Multi Function Devices vulnerable to FTP bounce attack

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Indiana University Security Advisory: Canon Multi Function Devices vulnerable to FTP bounce attack. Advisory ID: 20080229 Canon MFD FTP bounce attack Advisory revisions: 02-29-2008 0500 UTC 1.0 Initial Public Release Credit/acknowledgement:...

ecl-channel.adv

ECL Security R&D Privilege escalation vulnerabilities in W-Channel embedded linux +----------------------------------------------------------------+ Type: Local Impact: Critical Affected versions: all versions below v1.54 Product description: -------------------+ Read...

[ECL] WCI TC-IDE embedded linux vulnerabilities

ECL Security R&D Privilege escalation vulnerabilities in W-Channel embedded linux +----------------------------------------------------------------+ Type: Local Impact: Critical Affected versions: all versions below v1.54 Product description: -------------------+ Read...