CVE-2016-0831

The getDeviceIdForPhone function in internal/telephony/PhoneSubInfoController.java in Telephony in Android 5.x before 5.1.1 LMY49H and 6.x before 2016-03-01 does not check for the READPHONESTATE permission, which allows attackers to obtain sensitive information via a crafted application, aka...

CVE-2016-0818

The caching functionality in the TrustManagerImpl class in TrustManagerImpl.java in Conscrypt in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49H, and 6.x before 2016-03-01 mishandles the distinction between an intermediate CA and a trusted root CA, which allows man-in-the-middle attackers to...

CVE-2016-0826

libcameraservice in mediaserver in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49H, and 6.x before 2016-03-01 does not require use of the ICameraService::dump method for a camera service dump, which allows attackers to gain privileges via a crafted application that directly dumps, as demonstrat...

Two kind of vulnerabilities, you can make a billion Android phone is to obtain Root permissions-bug warning-the black bar safety net

Trend Micro reported that billions of Android device on the discovered vulnerabilities, an attacker by a simple operation to obtain root access. Currently on the market most of the smart devices are using the Qualcomm Snapdragon SoCs system chip, according to the company's official website...

bursadabugun.com XSS vulnerability

Vulnerable URL: http://www.bursadabugun.com/arama/?qkeyword=%3Cscript%3Ealert%28/XSSPOSED/%29%3C/script%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 10322 Google Pagerank| 5 V...

doska.kg XSS vulnerability

Vulnerable URL: http://doska.kg/find/?find=%27%3E%3Cscript%3Ealert%28/XSSPOSED/%29%3C/script%3E=0=0 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google...

campingworld.com XSS vulnerability

Vulnerable URL: http://www.campingworld.com/?zipcode=spam404%22%20autofocus%20onfocus=prompt%28/XSSPOSED/%29// Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 17068 Google Pagerank| 5 VIP website status:| Yes Che...

Oracle: Security Advisory (ELSA-2016-0371)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle: Security Advisory (ELSA-2016-0373)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle Linux 5 : nss (ELSA-2016-0371)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2016-0371 advisory. - Actually apply the fix for CVE-2016-1950 from NSS 3.19.2.3 ... Tenable has extracted the preceding description block directly from the Oracle Linux security...

Mageia: Security Advisory (MGASA-2016-0104)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RHEL 5 : nss (RHSA-2016:0371)

Updated nss packages that fix one security issue are now available for Red Hat Enterprise Linux 5. Red Hat Product Security has rated this update as having Critical security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available from th...

CentOS 5 : nss (CESA-2016:0371)

Updated nss packages that fix one security issue are now available for Red Hat Enterprise Linux 5. Red Hat Product Security has rated this update as having Critical security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available from th...

caducee.net XSS vulnerability

Vulnerable URL: http://www.caducee.net/actualite-medicale/result.php Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 323875 Google Pagerank| 5 VIP website status:| No Check...

Mageia: Security Advisory (MGASA-2016-0096)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Threat Outbreak Alert RuleID21518: Email Messages Distributing Malicious Software on March 5, 2016

Medium Alert ID: 43878 First Published: 2016 March 7 14:49 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID21518 may contain the following files: Name | Siz...

Threat Outbreak Alert RuleID21526: Email Messages Distributing Malicious Software on March 5, 2016

Medium Alert ID: 43882 First Published: 2016 March 7 14:46 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID21526 may contain the following files: Name | Siz...

Threat Outbreak Alert RuleID21527: Email Messages Distributing Malicious Software on March 5, 2016

Medium Alert ID: 43881 First Published: 2016 March 7 14:46 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID21527 may contain the following files: Name | Siz...

joomla 插件Shape 5 MP3 Player v2.0 helper.php 参数fileurl 本地文件包含漏洞

No description provided by source...

[SECURITY] Fedora 22 Update: exiv2-0.24-5.fc22

A command line utility to access image metadata, allowing one to: print the Exif metadata of Jpeg images as summary info, interpreted value s, or the plain data for each tag print the Iptc metadata of Jpeg images print the Jpeg comment of Jpeg images set, add and delete Exif and Iptc metadata of...