Design/Logic Flaw

QEMU aka Quick Emulator built to use 'addressspacetranslate' to map an address to a MemoryRegionSection is vulnerable to an OOB r/w access issue. It could occur while doing pcidmaread/write calls. Affects QEMU versions = 1.6.0 and = 2.3.1. A privileged user inside guest could use this flaw to cra...

CVE-2015-8817

QEMU aka Quick Emulator built to use 'addressspacetranslate' to map an address to a MemoryRegionSection is vulnerable to an OOB r/w access issue. It could occur while doing pcidmaread/write calls. Affects QEMU versions = 1.6.0 and = 2.3.1. A privileged user inside guest could use this flaw to cra...

CVE-2015-8743

CVE-2015-8743 affects QEMU with NE2000 device emulation. The flaw is an out-of-bounds read/write in ioport r/w operations, exploitable by a privileged (CAP_SYS_RAWIO) user to leak or corrupt QEMU memory. Public fixes exist (e.g., vendor security updates, notably in SUSE/OpenSUSE advisories) that ...

CVE-2015-8817

QEMU aka Quick Emulator built to use 'addressspacetranslate' to map an address to a MemoryRegionSection is vulnerable to an OOB r/w access issue. It could occur while doing pcidmaread/write calls. Affects QEMU versions = 1.6.0 and = 2.3.1. A privileged user inside guest could use this flaw to cra...

CVE-2015-8743

QEMU aka Quick Emulator built with the NE2000 device emulation support is vulnerable to an OOB r/w access issue. It could occur while performing 'ioport' r/w operations. A privileged CAPSYSRAWIO user/process could use this flaw to leak or corrupt QEMU memory bytes...

TP-Link Archer CR-700 Cross Site Scripting

Exploit Title: TP-Link Archer CR-700 XSS vulnerability Google Dork: N/A Date: 09/07/2016 Exploit Author: Ayushman Dutta Vendor Homepage: http://www.tp-link.us/ Software Link: N/A Version: 1.0.6 REQUIRED Tested on: Linux CVE : N/A Exploit Information:...

TP-Link Archer CR-700 - Cross-Site Scripting

Exploit Title: TP-Link Archer CR-700 XSS vulnerability Google Dork: N/A Date: 09/07/2016 Exploit Author: Ayushman Dutta Vendor Homepage: http://www.tp-link.us/ Software Link: N/A Version: 1.0.6 REQUIRED Tested on: Linux CVE : N/A Exploit Information:...

CVE-2016-6644

EMC Documentum D2 4.5 before patch 15 and 4.6 before patch 03 allows remote attackers to read arbitrary Docbase documents by leveraging knowledge of an robjectid value...

Threat Outbreak Alert RuleID24413: Email Messages Distributing Malicious Software on August 29, 2016

Medium Alert ID: 48649 First Published: 2016 August 29 15:41 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID24413 may contain the following files: Name |...

Fedora 22 : 2:qemu (2016-ea3002b577)

CVE-2016-4002: net: buffer overflow in MIPSnet bz 1326083 - CVE-2016-4952 scsi: pvscsi: out-of-bounds access issue - CVE-2016-5106: scsi: megasas: out-of-bounds write bz 1339581 - CVE-2016-5105: scsi: megasas: stack information leakage bz 1339585 - CVE-2016-5107: scsi: megasas: out-of-bounds read...

CVE-2016-4821

I-O DATA DEVICE ETX-R devices allow remote attackers to cause a denial of service web-server crash via unspecified vectors...

CVE-2016-4820

Cross-site request forgery CSRF vulnerability on I-O DATA DEVICE ETX-R devices allows remote attackers to hijack the authentication of arbitrary users...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability on I-O DATA DEVICE ETX-R devices allows remote attackers to hijack the authentication of arbitrary users...

CVE-2016-4821

CVE-2016-4821 affects I-O DATA DEVICE ETX-R wired routers. The DoS vulnerability allows a remote unauthenticated attacker to cause the web server to terminate abnormally, via unspecified vectors. Public sources (JVN/JVNDB) describe the impact as a remote DoS on the device’s web server and note wo...

CVE-2016-4820

CVE-2016-4820 is a cross-site request forgery (CSRF) vulnerability in I-O DATA DEVICE ETX-R routers (CWE-352). The ETX-R web management interface can be abused by a logged-in user viewing a malicious page, allowing an attacker to perform unintended actions in the user’s authenticated session. Roo...

I-O DATA DEVICE ETX-R Cross-Site Request Forgery Vulnerability

The I-O DATA DEVICE ETX-R is a router product from I-O DATA DEVICE Japan. The I-O DATA DEVICE ETX-R suffers from a cross-site request forgery vulnerability that allows remote attackers to construct malicious URIs, trick users into parsing them, and can perform malicious actions in the context of...

CVE-2016-4820: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability on I-O DATA DEVICE ETX-R devices allows remote attackers to hijack the authentication of arbitrary users...

CVE-2016-4821: Undefined Security Weakness

I-O DATA DEVICE ETX-R devices allow remote attackers to cause a denial of service web-server crash via unspecified vectors...

SUSE SLED12 / SLES12 Security Update : qemu (SUSE-SU-2016:1560-1)

qemu was updated to fix 37 security issues. These security issues were fixed : - CVE-2016-4439: Avoid OOB access in 53C9X emulation bsc980711 - CVE-2016-4441: Avoid OOB access in 53C9X emulation bsc980723 - CVE-2016-4952: Avoid OOB access in Vmware PV SCSI emulation bsc981266 - CVE-2015-8817: Avo...

ETX-R vulnerable to cross-site request forgery

Overview ETX-R provided by I-O DATA DEVICE, INC. is a wired LAN router. ETX-R contains a cross-site request forgery vulnerability CWE-352. Junichi MURAKAMI of FFRI, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning...