CVE-2018-3928

CVE-2018-3928 affects Yi Home Camera 27US (firmware 1.8.7.0D). The flaw resides in the firmware update path where a specially crafted UDP packet sequence can alter settings and trigger a denial-of-service condition, potentially enabling remote code execution through the update mechanism per Talos...

[SECURITY] [DSA 3928-2] firefox-esr security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3928-2 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff August 16, 2017 https://www.debian.org/security/faq -...

Debian DSA-3928-1 : firefox-esr - security update

Several security issues have been found in the Mozilla Firefox web browser: Multiple memory safety errors, use-after-frees, buffer overflows and other implementation errors may lead to the execution of arbitrary code, denial of service, bypass of the same-origin policy or incorrect enforcement of...

Debian: Security Advisory (DSA-3928-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2009-3928

CVE-2009-3928 entry is rejected/not used and does not represent an active vulnerability.

CVE-2014-3928

CVE-2014-3928 affects Cougar-LG web applications (Perl-based looking-glass/router-portal) where sensitive credentials are stored under the web root with insufficient access control. This allows remote attackers to obtain credentials. NVD lists CVSS v3.0 base score 9.8 (CRITICAL) with AV:N/AC:L/PR...

CVE-2016-3928

The MediaTek video driver in Android before 2016-10-05 allows attackers to gain privileges via a crafted application, aka Android internal bug 30019362 and MediaTek internal bug ALPS02829384...

CVE-2016-3928

CVE-2016-3928 concerns the MediaTek video driver in Android prior to the 2016-10-05 patch level. The issue is an elevation of privilege: a local, crafted application could gain elevated privileges. The entry explicitly notes Android internal bug 30019362 and MediaTek internal bug ALPS02829384. No...

Cisco EPC 3928 XSS / DoS / Command Execution

Title: Cisco EPC 3928 Multiple Vulnerabilities Vendor: http://www.cisco.com/ Vulnerable Versions: Cisco Model EPC3928 DOCSIS 3.0 8x4 Wireless Residential Gateway CVE References: CVE-2015-6401 / CVE-2015-6402 / CVE-2016-1328 / CVE-2016-1336 / CVE-2016-1337 Author: Patryk Bogdan from Secorda securi...

Cisco EPC 3928 - Multiple Vulnerabilities

Exploit for asp platform in category web applications Title: Cisco EPC 3928 Multiple Vulnerabilities Vendor: http://www.cisco.com/ Vulnerable Versions: Cisco Model EPC3928 DOCSIS 3.0 8x4 Wireless Residential Gateway CVE References: CVE-2015-6401 / CVE-2015-6402 / CVE-2016-1328 / CVE-2016-1336 /...

Chasys Draw IES - Buffer Overflow

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...

openSUSE Security Update : chromium / v8 (openSUSE-2012-107)

Chromium update to version 18.0.1022 fixes several security issues %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-107. The text description of this plugin is C SUSE LLC...

CVE-2013-3928

CVE-2013-3928 : A stack-based buffer overflow exists in the ReadFile function of flt_BMP.dll used by Chasys Draw IES (BMP parsing). The flaw allows remote attackers to trigger arbitrary code execution by supplying a specially crafted BMP file (affecting versions prior to 4.11.02). Confirmed affec...

WMNews index.php base_datapath Parameter PHP Code Execution - Ver2 (CVE-2006-3928)

A code execution vulnerability has been reported in WMNews. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

CVE-2013-3928

creationtimestamp| type| source ---|---|--- 2013-08-15 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/27609 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/fileformat/chasysdrawiesbmpbof.rb 2025-02-06...

Chasys Draw IES - Local Buffer Overflow (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 "Chasys Draw IES...

Chasys Draw IES Buffer Overflow

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 "Chasys Draw IES...

Apple iOS < 5.1 Multiple Vulnerabilities

Binary data appleios51check.nbin...

Apple Safari Webkit Multiple Vulnerabilities - March12 (Windows)

The host is installed with Apple Safari web browser and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbapplesafariwebkitmultvulnmar12win.nasl 5888 2017-04-07 09:01:53Z teissa $ Apple Safari Webkit Multiple Vulnerabilities - March12 Windows Authors: Rachana Shetty Copyrigh...

Apple Safari Webkit Multiple Vulnerabilities (Mar 2012) - Windows

Apple Safari web browser is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apple:safari";...