Schneider Electric Altivar ATV61HC13N4D387 Variable Speed Drive

Binary data 763953.prm...

Schneider Electric Altivar ATV61HC80Y Variable Speed Drive

Binary data 763991.prm...

Schneider Electric Altivar ATV71HD18M3X337 Variable Speed Drive

Binary data 764168.prm...

Schneider Electric Altivar ATV61HD75N4S337 Variable Speed Drive

Binary data 764049.prm...

Schneider Electric Altivar ATV71H075M3Z Variable Speed Drive

Binary data 764108.prm...

Schneider Electric Altivar ATV71HD55N4Z Variable Speed Drive

Binary data 764213.prm...

Schneider Electric Altivar ATV61HU40M3Z Variable Speed Drive

Binary data 764079.prm...

Schneider Electric Altivar ATV71HU40M3Z Variable Speed Drive

Binary data 764259.prm...

Schneider Electric Altivar ATV61HD11N4 Variable Speed Drive

Binary data 763996.prm...

Schneider Electric Altivar ATV61HD45M3XZ Variable Speed Drive

Binary data 764037.prm...

Design/Logic Flaw

Remote code execution was discovered in Horde Groupware Webmail 5.2.22 and 5.2.17. Horde/Form/Type.php contains a vulnerable class that handles image upload in forms. When the HordeFormTypeimage method onSubmit is called on uploads, it invokes the functions getImage and getUpload, which uses...

CVE-2019-2247

Possibility of double free issue while running multiple instances of smp2p test because of proper protection is missing while using global variable in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice &...

Apple macOS < 10.14.5 / iOS < 12.3 JavaScriptCore - Loop-Invariant Code Motion (LICM) in DFG JIT Leaves Stack Variable Uninitialized

While fuzzing JavaScriptCore, I encountered the following modified and commented JavaScript program which crashes jsc from current HEAD and release: // Run with --useConcurrentJIT=false // Fill the stack with the return value of the provided function. function stacksprayf // This function will...

Schneider Electric Altivar 32 Variable Speed Drive Detection

Binary data 267.prm...

Schneider Electric Altivar Process ATV900 Series Variable Speed Drive Detection

Binary data 268.prm...

macOS < 10.14.5 / iOS < 12.3 JavaScriptCore - Loop-Invariant Code Motion (LICM) in DFG JIT

macOS 13.37; stackspray = ; for let v15 = 0; v15 100; v15++ function v19v23 // This weird loop form might be required to prevent loop unrolling... for let v30 = 0; v30 3; v30 = v30 + "asdf" // Generates the specific CFG necessary to trigger the bug. const v33 = Error != Error; if v33 else // Forc...

Apple macOS 10.14.5 iOS 12.3 JavaScriptCore - Loop-Invariant Code Motion (LICM) in DFG JIT Leaves Stack Variable Uninitialized

Apple macOS 10.14.5 iOS 12.3 JavaScriptCore - Loop-Invariant Code Motion LICM in DFG JIT Leaves Stack Variable Uninitialized While fuzzing JavaScriptCore, I encountered the following modified and commented JavaScript program which crashes jsc from current HEAD and release: // Run with...

CVE-2018-16156

In PaperStream IP TWAIN 1.42.0.5685 Service Update 7, the FJTWSVIC service running with SYSTEM privilege processes unauthenticated messages received over the FjtwMkicFjicube32 named pipe. One of these message processing functions attempts to dynamically load the UninOldIS.dll library and executes...

CVE-2019-10139

During HE deployment via cockpit-ovirt, cockpit-ovirt generates an ansible variable file /var/lib/ovirt-hosted-engine-setup/cockpit/ansibleVarFileXXXXXX.var which contains the admin and the appliance passwords as plain-text. At the of the deployment procedure, these files are deleted...

CVE-2019-10139

CVE-2019-10139 affects cockpit-ovirt: during hosted engine deployment, cockpit-ovirt creates an ansibleVarFileXXXXXX.var containing admin and appliance passwords in plain text at /var/lib/ovirt-hosted-engine-setup/cockpit/. These files are deleted at the end of deployment, but during exposure the...