CVE-2016-0826

libcameraservice in mediaserver in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49H, and 6.x before 2016-03-01 does not require use of the ICameraService::dump method for a camera service dump, which allows attackers to gain privileges via a crafted application that directly dumps, as demonstrat...

CVE-2016-0831

The getDeviceIdForPhone function in internal/telephony/PhoneSubInfoController.java in Telephony in Android 5.x before 5.1.1 LMY49H and 6.x before 2016-03-01 does not check for the READPHONESTATE permission, which allows attackers to obtain sensitive information via a crafted application, aka...

CVE-2016-0830

CVE-2016-0830 affects Android 6.x Bluetooth; btif_config.c handling of configuration entries can cause memory corruption and a persistent daemon crash when many entries are triggered, leading to remote DoS. The issue is tied to internal bug 26071376. Remediation is upgrading to patch level March ...

CVE-2016-0824

The CVE-2016-0824 issue affects Android 6.x via the libmpeg2 component in libstagefright. The vulnerability arises in libmpeg2’s handling of crafted Bitstream data, enabling an information disclosure that could bypass a protection mechanism and grant Signature or SignatureOrSystem access. Affecte...

Two kind of vulnerabilities, you can make a billion Android phone is to obtain Root permissions-bug warning-the black bar safety net

Trend Micro reported that billions of Android device on the discovered vulnerabilities, an attacker by a simple operation to obtain root access. Currently on the market most of the smart devices are using the Qualcomm Snapdragon SoCs system chip, according to the company's official website...

peticaopublica.com.br XSS vulnerability

Vulnerable URL: http://www.peticaopublica.com.br/search.aspx?q=" autofocus onfocus="alert/XSSPOSED/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 148329 Google Pagerank| 6 VIP...

corporate.pchome.com.tw XSS vulnerability

Vulnerable URL: http://corporate.pchome.com.tw/aboutus/aboutus.php?lang=engid=13%22%3E%3Cscript%3Ealert%28/XSSPOSED/%29%3C/script%3E Details: Description| Value ---|--- Patched:| Yes, at 18.07.2017 Latest check for patch:| 18.07.2017 12:08 GMT Vulnerability type:| XSS Vulnerability status:|...

toysrus.com XSS vulnerability

Vulnerable URL: http://www.toysrus.com/search/index.jsp?kwCatId==asdlol%27confirm%27xssposed%27%27bb=asdlol%27confirm%27xssposed%27%27bb=asdlol%27%2Bconfirm%28%27XSSPOSED%27%29%2B%27bb=1 Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 21:36 GMT...

Oracle Linux 6 / 7 : libssh2 (ELSA-2016-0428)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2016-0428 advisory. - use secrects of the appropriate length in Diffie-Hellman CVE-2016-0787 Tenable has extracted the preceding description block directly from the Oracle Linu...

RHEL 6 : redhat-support-plugin-rhev (RHSA-2016:0426)

Updated redhat-support-plugin-rhev packages that fix a security flaw and a bug are now available. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are available for each...

Oracle: Security Advisory (ELSA-2016-0428)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CentOS Update for libssh2 CESA-2016:0428 centos6

Check the version of libssh2 SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882417";...

Oracle: Security Advisory (ELSA-2016-0373)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle: Security Advisory (ELSA-2016-0372)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

multitran.ru XSS vulnerability

Vulnerable URL: http://www.multitran.ru/c/m.exe?l1=1&l2;=2=xx"yy Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2843 Google Pagerank| 6 VIP website status:| Yes Check multitran.ru...

RHEL 6 / 7 : libssh2 (RHSA-2016:0428)

The remote Redhat Enterprise Linux 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2016:0428 advisory. The libssh2 packages provide a library that implements the SSHv2 protocol. A type confusion issue was found in the way libssh2 generated ephemera...

RHEL 6 : chromium-browser (RHSA-2016:0429)

Updated chromium-browser packages that fix multiple security issues are now available for Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severit...

RHEL 6 : rhev-hypervisor (RHSA-2016:0379) (DROWN)

An updated rhev-hypervisor package that fixes several security issues, bugs, and enhancements is now available. Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

CentOS Update for postgresql CESA-2016:0347 centos6

Check the version of postgresql SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882406";...

Threat Outbreak Alert RuleID21177: Email Messages Distributing Malicious Software on March 6, 2016

Medium Alert ID: 43870 First Published: 2016 March 7 15:16 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID21177 may contain the following files: Name | Siz...