CVE-2018-7906

Some Huawei smart phones with software of Leland-AL00 8.0.0.114C636, Leland-AL00A 8.0.0.171C00 have a denial of service DoS vulnerability. An attacker can trick a user to install a malicious application to exploit this vulnerability. Due to insufficient verification of the parameter, successful...

CVE-2018-7906: Improper Input Validation

Some Huawei smart phones with software of Leland-AL00 8.0.0.114C636, Leland-AL00A 8.0.0.171C00 have a denial of service DoS vulnerability. An attacker can trick a user to install a malicious application to exploit this vulnerability. Due to insufficient verification of the parameter, successful...

chromium-browser: URL spoof in full screen mode

A missing check for popup window handling in Fullscreen in Google Chrome on macOS prior to 69.0.3497.81 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted HTML page...

KingCloud Antivirus v2.4.2.39 Personal Edition ZySandbox.sys Driver Has Denial of Service Vulnerability

KingCloud Antivirus is a next-generation artificial intelligence antivirus for personal end devices launched by Tatsunobuilder.ZySandbox.sys is a kernel-mode driver in KingCloud Personal Antivirus. A denial of service vulnerability exists in the ZySandbox.sys driver for KingCloud Antivirus...

KingCloud Antivirus v2.4.2.39 Personal Edition ZySandbox.sys Driver Has Denial of Service Vulnerability

KingCloud Antivirus is a next-generation artificial intelligence antivirus for personal end devices launched by Tatsunobuilder.ZySandbox.sys is a kernel-mode driver in KingCloud Personal Antivirus. A denial of service vulnerability exists in the ZySandbox.sys driver for KingCloud Antivirus...

KingCloud Antivirus v2.4.2.39 Personal Edition hookbody.sys driver has a denial of service vulnerability

KingCloud Antivirus is a next-generation artificial intelligence antivirus software for personal end devices launched by Tatsunobuilder. hookbody.sys is a kernel mode driver in KingCloud Personal Antivirus. A denial of service vulnerability exists in the hookbody.sys driver of KingCloud Antivirus...

Denial of Service Vulnerability in Multiple Huawei Phones (CNVD-2018-17698)

Huawei Leland-AL00 and Leland-AL00A are smartphone products of Huawei China. A denial of service vulnerability exists in multiple Huawei phones. Due to insufficient validation of parameters, an attacker can exploit this vulnerability by tricking a user into installing a malicious mobile...

Destroyer Standalone Antivirus SysGuard.sys Driver Has Denial of Service Vulnerability

Destroyer Standalone Antivirus is an antivirus program. A denial of service vulnerability exists in the Destroyer Standalone Antivirus SysGuard.sys driver. An attacker could cause a computer to blue screen by constructing packets...

Destroyer Standalone Antivirus SysGuard.sys Driver Has a Local Lift Vulnerability

Destroyer Standalone Antivirus is an antivirus program. A local elevation of privilege vulnerability exists in the Destroyer Standalone Antivirus SysGuard.sys driver. An attacker can achieve elevation of privilege by constructing packets that cause the computer to blue screen...

Script injection vulnerability in multiple Yamaha Corporation products (CNVD-2018-16849)

Yamaha Broadband VoIP Router RT57i and others are Yamaha Corporation router products. A script injection vulnerability exists in multiple Yamaha Corporation products, where an administrator with malicious intent could embed arbitrary scripts into an administrative screen in a scenario where...

Memory Corruption Vulnerability in Kewe's All-in-One Text Screen Configuration Software IOCS

Huangshi Kewei Automatic Control Co., Ltd. is an enterprise that develops, produces and sells embedded PLC, intelligent servo, human-machine interface and other series of industrial control products. A memory corruption vulnerability exists in IOCS, the Kewei Text All-in-One Screen Configuration...

August 30, 2018—KB4343884 (OS Build 14393.2457)

None None...

KismetMobileDashboard - Mobile UI For Kismet

Prerequisite: git-master level kismet. https://github.com/kismetwireless/kismet 1.Installation. git clone into the kismet git. "/home/whatever/kismet" wiPi@YoMama:/kismet cd /kismet wiPi@YoMama:git clone https://github.com/elkentaro/KismetMobileDashboard.git cd into kismetmobiledashboard sudo mak...

CVE-2018-15499

GEAR Software products that include GEARAspiWDM.sys, 2.2.5.0, allow local users to cause a denial of service Race Condition and BSoD on Windows by not checking that user-mode memory is available right before writing to it. A check is only performed at the beginning of a long subroutine...

PT-2018-13058

Name of the Vulnerable Software and Affected Versions GEAR Software products that include GEARAspiWDM.sys version 2.2.5.0 Description The issue allows local users to cause a denial of service, resulting in a Blue Screen of Death BSoD on Windows, due to a race condition. This occurs because the...

CVE-2018-15603: Improper Neutralization of Input During Web Page Generation

An issue was discovered in Victor CMS through 2018-05-10. There is XSS via the Author field of the "Leave a Comment" screen...

VDA BSOD With Message: SYSTEM_THREAD_EXCEPTION_NOT_HANDLED (CtxMcsWbc.sys)

Server VDAs from a machine catalog using the MCS I/O feature blue screen with message:SYSTEMTHREADEXCEPTIONNOTHANDLED CtxMcsWbc.sys...

Microsoft Windows: Audit Other Logon/Logoff Events

Audit Other Logon/Logoff Events determines whether Windows generates audit events for other logon or logoff events. These other logon or logoff events include: - A Remote Desktop session connects or disconnects. - A workstation is locked or unlocked. - A screen saver is invoked or dismissed. - A...

Touch Screen Keyboard / On Screen Keyboard Minimizes On Every Key Pressed On it.

Touch screen keyboard / On-screen keyboard minimizes on every key pressed on it only on published application. It works fine for published Desktop...

OpenEMR SQL Injection Vulnerability (CNVD-2018-17195)

OpenEMR is an open source medical management system maintained by the OpenEMR community. The system can be used for medical practice management, electronic medical records, prescription writing and medical billing requests. A SQL injection vulnerability exists in the...