CVE-2019-6522

Moxa IKS and EDS fails to properly check array bounds which may allow an attacker to read device memory on arbitrary addresses, and may allow an attacker to retrieve sensitive data or cause device reboot...

CVE-2019-6551

Pangea Communications Internet FAX ATA all Versions 3.1.8 and prior allow an attacker to bypass user authentication using a specially crafted URL to cause the device to reboot, which may be used to cause a continual denial-of-service condition...

Moxa IKS and EDS Out-of-Bounds Read Vulnerability

Moxa IKS and EDS is a series of industrial switches introduced by Moxa. An out-of-bounds read vulnerability exists in the Moxa IKS and EDS series. The vulnerability stems from a program failing to properly validate array boundaries. An attacker could use this vulnerability to read device memory a...

The vulnerability of the Routing Protocols Daemon (RPD) implementation in the JunOS operating system allows a hacker to induce a service failure.

The vulnerability of the Routing Protocols Daemon RPD implementation in the JunOS operating system is related to errors in packet processing for the PIM Join protocol. Exploiting this vulnerability can allow an attacker to trigger a device reboot and a service failure...

CVE-2019-3910

Crestron AM-100 before firmware version 1.6.0.2 contains an authentication bypass in the web interface's return.cgi script. Unauthenticated remote users can use the bypass to access some administrator functionality such as configuring update sources and rebooting the device...

The vulnerability of the per-VLAN errdisable function in the Cisco IOS XE operating system allows a hacker to trigger a service failure.

The vulnerability of the per-VLAN errdisable function in the Cisco IOS XE operating system arises from the simultaneous execution using shared resources with incorrect synchronization “Race Condition”. Exploiting this vulnerability can allow a malicious actor to trigger a device reboot and a...

The vulnerability of the NAT mechanism in the Cisco IOS XE operating system, which allows a hacker to trigger a service failure.

The vulnerability of the Cisco IOS XE operating system’s NAT mechanism is related to errors in processing SIP packets. Exploiting this vulnerability allows a malicious actor to trigger a device reboot and a service failure by sending specially crafted SIP packets to port 5060...

The vulnerability of the user web interface of the Cisco IOS XE operating system allows a hacker to trigger a service failure.

The vulnerability of the user-facing web interface of the Cisco IOS XE operating system is due to the repeated release of memory. Exploiting this vulnerability allows a malicious actor to trigger a device reboot and a service failure through specially crafted HTTP requests...

The vulnerability of Cisco IOS and Cisco IOS XE operating systems that use TACACS+ client authentication allows attackers to induce a service failure.

The vulnerability of Cisco IOS and Cisco IOS XE operating systems that use TACACS+ client authentication is related to errors in processing TACACS+ response packets. Exploiting this vulnerability can allow a malicious actor to trigger a device reboot and a service failure...

CVE-2018-14853

A NULL pointer dereference in dhdprottxdatawriteflush in drivers/net/wireless/bcmdhd4358/dhdmsgbuf.c in the bcmdhd4358 Wi-Fi driver on the Samsung Galaxy S6 SM-G920F G920FXXU5EQH7 allows an attacker who has obtained code execution on the Wi-Fi chip to cause the device to reboot. The Samsung ID is...

CVE-2018-14853

A NULL pointer dereference in dhdprottxdatawriteflush in drivers/net/wireless/bcmdhd4358/dhdmsgbuf.c in the bcmdhd4358 Wi-Fi driver on the Samsung Galaxy S6 SM-G920F G920FXXU5EQH7 allows an attacker who has obtained code execution on the Wi-Fi chip to cause the device to reboot. The Samsung ID is...

CVE-2018-14853

The CVE-2018-14853 issue affects the Samsung Galaxy S6 (SM-G920F, firmware G920FXXU5EQH7) and specifically the bcmdhd4358 Wi‑Fi driver. A NULL pointer dereference in dhd_prot_txdata_write_flush (drivers/net/wireless/bcmdhd4358/dhd_msgbuf.c) can be triggered by an attacker who has code execution o...

CVE-2018-5919

CVE-2018-5919 affects the Qualcomm QCACLD-2.0 WLAN host driver in Android CAF/Linux kernels (Android for MSM, QRD Android). The issue is a use-after-free in the WLAN host driver that can cause the device to reboot. Public remediation references include a CodeAurora patch (commit 81a80c9973833f7cd...

CVE-2018-5919

In all android releasesAndroid for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, a use after free issue in WLAN host driver can lead to device reboot...

CVE-2018-5919

In all android releasesAndroid for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, a use after free issue in WLAN host driver can lead to device reboot...

Double free

In all android releasesAndroid for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, a use after free issue in WLAN host driver can lead to device reboot...

Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Apple Iphone_Os

CVE-2018-4407-IOS CVE ? Common Vulnerabilities and Exposu...

Intelbras NPLUG Cross-Site Request Forgery Vulnerability

Intelbras NPLUG is a wireless relay device from Intelbras Poland. A cross-site request forgery vulnerability exists in the web interface in the Intelbras NPLUG version 1.0.0.14 wireless relay device. A remote attacker can use this vulnerability to modify the wireless SSID, reboot the device, edit...

CVE-2018-12456

Intelbras NPLUG 1.0.0.14 wireless repeater devices have no CSRF token protection in the web interface, allowing attackers to perform actions such as changing the wireless SSID, rebooting the device, editing access control lists, or activating remote access...

Watch Out! This New Web Exploit Can Crash and Restart Your iPhone

It's 2018, and just a few lines of code can crash and restart any iPhone or iPad and can cause a Mac computer to freeze. Sabri Haddouche, a security researcher at encrypted instant messaging app Wire, revealed a proof-of-concept PoC web page containing an exploit that uses only a few lines of...