UBUNTU-CVE-2016-6607

XSS issues were discovered in phpMyAdmin. This affects Zoom search specially crafted column content can be used to trigger an XSS attack; GIS editor certain fields in the graphical GIS editor are not properly escaped and can be used to trigger an XSS attack; Relation view; the following...

Android GPS Component Denial of Service Vulnerability (CNVD-2016-12023)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA, with GPS as one of the global positioning components. A denial-of-service vulnerability exists in the GPS component in versions of Android prior to 2016-12-05, which stems from th...

CVE-2016-5341

The GPS component in Android before 2016-12-05 allows man-in-the-middle attackers to cause a denial of service GPS signal-acquisition delay via an incorrect xtra.bin or xtra2.bin file on a spoofed Qualcomm gpsonextra.net or izatcloud.net host, aka internal bug 31470303 and external bug 211602 and...

CVE-2016-5341: Improper Access Control

The GPS component in Android before 2016-12-05 allows man-in-the-middle attackers to cause a denial of service GPS signal-acquisition delay via an incorrect xtra.bin or xtra2.bin file on a spoofed Qualcomm gpsonextra.net or izatcloud.net host, aka internal bug 31470303 and external bug 211602 and...

PT-2016-3145

Name of the Vulnerable Software and Affected Versions Android versions prior to 2016-12-05 Description The issue is related to the GPS component and is caused by insufficient access control. It allows remote attackers to cause a denial of service, specifically a GPS signal-acquisition delay, by...

Downloads Resources over HTTP

Overview Affected versions of fis-parser-sass-bin insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code...

Downloads Resources over HTTP

Overview Affected versions of dwebp-bin insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on...

Downloads Resources over HTTP

Overview Affected versions of scalajs-standalone-bin insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code...

PT-2016-5310

Name of the Vulnerable Software and Affected Versions IBM Spectrum Scale versions 4.1.1.x through 4.1.1.7 IBM Spectrum Scale versions 4.2.x through 4.2.0.3 General Parallel File System GPFS versions 3.5.x through 3.5.0.31 General Parallel File System GPFS versions 4.1.x through 4.1.1.7 Descriptio...

PT-2016-5309

Name of the Vulnerable Software and Affected Versions IBM Spectrum Scale versions 4.1.1.x through 4.1.1.7 IBM Spectrum Scale versions 4.2.x through 4.2.0.3 General Parallel File System GPFS versions 3.5.x through 3.5.0.31 General Parallel File System GPFS versions 4.1.x through 4.1.1.7 Descriptio...

NETGEAR JNR1010 ADSL Router - (Authenticated) Remote File Disclosure

NETGEAR JNR1010 ADSL Router - Authenticated Remote File Disclosure !/bin/sh NETGEAR ADSL ROUTER JNR1010 1.0.0.16 Authenticated Remote File Disclosure Hardware Version: JNR1010 Firmware Version: 1.0.0.16 GUI Language Version: 1.0.0.16 Copyright 2016 c Todor Donev https://www.ethical-hacker.org/...

PT-2016-3222

Name of the Vulnerable Software and Affected Versions dnaLIMS version 4-2015s13 Description The issue concerns an improperly protected administrative web shell, allowing unauthenticated command execution. This can be exploited through cgi-bin/dna/sysAdmin.cgi using specially crafted POST requests...

PT-2016-7553

Name of the Vulnerable Software and Affected Versions Memcached affected versions not specified Description The issue is related to multiple integer overflows in the process bin update function, which processes multiple commands of the Memcached binary protocol. This can lead to a heap overflow a...

PT-2016-7554

Name of the Vulnerable Software and Affected Versions Memcached affected versions not specified Description The issue is related to an integer overflow in the process bin sasl auth function, which handles authentication commands for the Memcached binary protocol. This overflow can lead to a heap...

UBUNTU-CVE-2016-8705

Multiple integer overflows in processbinupdate function in Memcached, which is responsible for processing multiple commands of Memcached binary protocol, can be abused to cause heap overflow and lead to remote code execution...

Remote Code Execution Vulnerability in Memcached Update

Memcached is a high-performance distributed in-memory object caching system for dynamic Web applications to reduce database load. A remote code execution vulnerability exists in Memcached Update. processbinupdate function handling multiple commands of the Memcached binary protocol can lead to a...

From the byte overflows to arbitrary code execution-Linux stack exploit-vulnerability warning-the black bar safety net

One byte overflow called off-by-one, once a period of time, the off-by-one is considered to be not utilized, but later research found on the heap even if only one byte overflow can lead to arbitrary code execution. At the same time the heap of the off-by-one using also appear in the domestic and...

Unauthorized Access Vulnerability in D-Link DWR-932B LET Router WPS System

The D-Link DWR-932B LET is a wireless router. An unauthorized access vulnerability exists in the WPS system of the D-Link DWR-932B LET router. Since the WPS system PIN is hardcoded into the /bin/appmgr program, an attacker can exploit the vulnerability to use the PIN to access the wireless networ...

Unauthorized Information Disclosure Vulnerability in AVTECH Devices

AVTECH, founded in 1996, is one of the world's leading CCTV manufacturers. The main products are surveillance equipment, network cameras, network video recorders and so on. An unauthorized information disclosure vulnerability exists in AVTECH devices. Due to the cgi-bin/ directory is not set with...

CVE-2016-5348

The GPS component in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-10-01, and 7.0 before 2016-10-01 allows man-in-the-middle attackers to cause a denial of service memory consumption, and device hang or reboot via a large xtra.bin or xtra2.bin file on a spoofed...