Showing 26 - 31 of 31

Files Date: 2018-04-26 to 2018-04-27

Nintendo Switch / Nvidia Fusee Gelee Disclosure: Posted Apr 26, 2018; Authored by Katherine Temkin; This report documents Fusee Gelee, a coldboot vulnerability that allows full, unauthenticated arbitrary code execution from an early bootROM context via Tegra Recovery Mode (RCM) on NVIDIA's Tegra line of embedded processors. As this vulnerability allows arbitrary code execution on the Boot and Power Management Processor (BPMP) before any lock-outs take effect, this vulnerability compromises the entire root-of-trust for each processor, and allows exfiltration of secrets e.g. burned into device fuses.; tags | paper, arbitrary, root, code execution; SHA-256 | d79d1da54305f414bc22e5c26a2e8ce9356d75ad9764e394b007e0bae39f34e7; Download | Favorite | View

HRSALE The Ultimate HRM 1.0.2 CSV Injection: Posted Apr 26, 2018; Authored by 8bitsec; HRSALE The Ultimate HRM version 1.0.2 suffers from a CSV injection vulnerability.; tags | exploit; advisories | CVE-2018-10257; SHA-256 | 1687a963043763348cd13d727463d2d3beb849e67926c5d0b6a37617f97f7773; Download | Favorite | View

Blog Master Pro 1.0 CSV Injection: Posted Apr 26, 2018; Authored by 8bitsec; Blog Master Pro version 1.0 suffers from a CSV injection vulnerability.; tags | exploit; advisories | CVE-2018-10255; SHA-256 | f7fc3381ec61ed7adcf8a5a10586722b9f109264dc4e27d6d064e9358cb059a3; Download | Favorite | View

Shopy Point Of Sale 1.0 CSV Injection: Posted Apr 26, 2018; Authored by 8bitsec; Shopy Point of Sale version 1.0 suffers from a CSV injection vulnerability.; tags | exploit; advisories | CVE-2018-10258; SHA-256 | 4c55fa34c00e4e68b792885d5838562724f935c925a9e623d4b66cac5df78149; Download | Favorite | View

Dell EMC ECOM XML External Entity Injection: Posted Apr 26, 2018; Authored by Jakub Palaczynski | Site emc.com; The Dell EMC Common Object Manager (ECOM) component used in multiple Dell EMC products is affected by a XML External Entity (XXE) Injection vulnerability that may potentially be exploited by malicious users to compromise the affected system.; tags | advisory, xxe; SHA-256 | ca38cccc3045ff5a40c220fdf2a44b66a7339f491e382df921a3922abcedc6dd; Download | Favorite | View

Google Chrome V8 Arrow Function Scope Fixing Bug: Posted Apr 26, 2018; Authored by Google Security Research, lokihardt; Google Chrome V8 suffers from an arrow function scope fixing bug.; tags | exploit; SHA-256 | 24f3824206b56675fc861c6cdc7ec310f3cd9a072873f501aa8fd3d6295dfdca; Download | Favorite | View

Page 2 of 2 Back 1 2 Next

Top Authors In Last 30 Days