Marcin Kozlowski

The issue allows a remote attacker to obtain sensitive information via a directory traversal attack. This can be achieved by exploiting the `csvServer.php` endpoint with a specially crafted `dir` parameter containing a `..` sequence. The estimated number of potentially affected devices worldwide is not available. There is no information about real-world incidents where this issue was exploited.

An issue in Automatic Systems SOC FL9600 allows a remote attacker to obtain sensitive information because there is an automatic systems super admin account with a hardcoded password, specifically `astech`. The attacker can exploit this via the admin login credentials.

تحتوي الدالة `aqc111 rx fixup()` في نواة لينكس على عدة حالات وصول خارج النطاق يمكن أن يتسبب فيها جهاز USB معيب أو ضار. تشمل هذه المشكلات احتمال خروج مصفوفة البيانات الوصفية عن الحدود، مما يؤدي إلى عمليات قراءة خارج الحدود وانعكاس ترتيب البايتات في أنظمة big-endian. بالإضافة إلى ذلك، قد تتداخل حزمة مع مصفوفة البيانات الوصفية، مما يتسبب في حدوث انعكاسات لاحقة لترتيب البايتات تؤدي إلى إتلاف البيانات في SKB (مخزن مؤقت للمقبس) مستنسخ تمت معالجته بالفعل بواسطة مكدس الشبكة. علاوة على ذلك، يمكن إنشاء حزمة SKB بذيل يمتد إلى ما هو أبعد بكثير من نهايتها، مما يؤدي إلى معاملة بيانات الكومة خارج النطاق كجزء من بيانات SKB. وقد يؤثر ذلك على سرية وسلامة وتوافر المعلومات المحمية.

The issue is related to a missing bounds check in the `ihevcd parse pps` function of `ihevcd parse headers.c`, which could lead to a possible out of bounds write. This might result in remote code execution without requiring additional execution privileges. User interaction is necessary for exploitation.

A remote code execution issue in the Android system's Bluetooth component is related to buffer overflow errors in dynamic memory. This can allow a remote attacker to cause a buffer overflow and execute arbitrary code on the device.

Name of the Vulnerable Software and Affected Versions: Microsoft Windows versions prior to Windows XP SP3 Microsoft Message Queuing (MSMQ) service in Microsoft Windows 2000 Server SP4 Microsoft Message Queuing (MSMQ) service in Microsoft Windows 2000 Professional SP4 Microsoft Message Queuing (MSMQ) service in Microsoft Windows XP SP2 Description: A stack-based buffer overflow issue exists in the Microsoft Message Queuing (MSMQ) service, allowing attackers to execute arbitrary code via a long string in an opnum 0x06 RPC call to port 2103. This issue is remotely exploitable on Windows 2000 Server. The vulnerability occurs when the Message Queuing Service incorrectly validates input strings before passing them to a buffer. An attacker could exploit this by constructing a specially crafted MSMQ message, potentially allowing remote code execution on Microsoft Windows 2000 and local elevation of privilege on Windows XP. Recommendations: For Microsoft Windows 2000 Server SP4, consider disabling the MSMQ service until a patch is available. For Microsoft Windows 2000 Professional SP4, restrict access to the MSMQ service to minimize the risk of exploitation. For Microsoft Windows XP SP2, avoid using the MSMQ service in a local scenario until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.