The vulnerability of the Android operating system, allowing a hacker to execute arbitrary code

The vulnerability of the Qualcomm Camera operating system’s driver is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to enhance their privileges and execute arbitrary code within the kernel context, through a local malicious application...

Microsoft Windows GDI Elevation of Privilege (MS17-013: CVE-2017-0025)

An elevation of privilege vulnerability exists in Windows Graphics Device Interface GDI. The vulnerability is caused when the Windows Graphics Device Interface fails to properly handle objects in memory. A remote attacker can exploit this vulnerability by running a specially crafted application...

Google Android Kernel Component Information Disclosure Vulnerability (CNVD-2016-12192)

Android on Nexus 5X is an open source operating system based on Linux developed by Google and the Open Handset Alliance OHA for the Nexus 5X and other smart devices. kernel is one of the kernels used in it. An information disclosure vulnerability exists in the kernel component of Android. The...

CVE-2016-9567

The mDNIe system service on Samsung Mobile S7 devices with M6.0 software does not properly restrict setmDNIeScreenCurtain API calls, enabling attackers to control a device's screen. This can be exploited via a crafted application to eavesdrop after phone shutdown or record a conversation. The...

WordPress Answer My Question Plugin <= 1.3 - SQL Injection

This plugin is prone to an SQL injection vulnerability. It allows an attacker to modify data, compromise the access and application or exploit hidden vulnerabilities in the underlying database. Solution There is no solution...

Microsoft Windows Bowser.sys Information Disclosure Vulnerability

Microsoft Windows is a series of operating systems released by the American company Microsoft. An information disclosure vulnerability exists in the kernel mode driver for Microsoft Windows Bowser.sys. An attacker can exploit this vulnerability to disclose sensitive information with the help of a...

UBUNTU-CVE-2016-3885

debuggerd/debuggerd.cpp in Debuggerd in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-09-01, and 7.0 before 2016-09-01 mishandles the interaction between PTRACEATTACH operations and thread exits, which allows attackers to gain privileges via a crafted application, aka internal b...

The vulnerability of the Windows operating system allows a perpetrator to bypass the Secure Kernel Mode protection mechanism and obtain confidential information.

The vulnerability of the Windows operating system is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor, operating locally, to bypass the security mechanisms of Secure Kernel Mode and obtain confidential information through a specially creat...

The vulnerability of the Android operating system, which allows a hacker to increase their privileges

The vulnerability of the Android operating system’s video driver kernel is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to enhance their privileges through a specially created application...

Android Qualcomm component lifting vulnerability (CNVD-2016-04858)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA in the U.S. Qualcomm is one of the Qualcomm components used in Qualcomm devices. A privilege-lifting vulnerability exists in the Qualcomm component in versions of Android prior to...

CVE-2016-3764

media/libmediaplayerservice/MetadataRetrieverClient.cpp in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 allows attackers to obtain sensitive pointer information via a crafted application, aka internal bug 28377502...

Android MediaTek Wi-Fi Driver Information Disclosure Vulnerability

Android on Android One is a Linux-based open source operating system for Android One smartphone developed by Google and the Open Handset Alliance OHA in the U.S. MediaTek Wi-Fi driver is one of the components of MediaTek Wi-Fi driver. MediaTek Wi-Fi driver is a wireless card driver component...

The vulnerability of the Android operating system, which allows a hacker to increase their privileges

The vulnerability of the include/core/SkPostConfig.h function in the Skia graphics library of the Systemserver operating system in Android is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to enhance their privileges including crashing the...

Vulnerabilities of iOS and Mac OS X operating systems, which allow attackers to gain access to the protected information in the memory structure

The vulnerability of the IOHIDFamily component in iOS and Mac OS X operating systems is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to gain access to the protected memory structure through a specially created application...

The vulnerability of the iOS operating system allows a hacker to execute arbitrary code in a privileged context.

The vulnerability of the dyld component in the iOS operating system exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in a privileged context using a specially created application...

The vulnerability of the Windows operating system, which allows a hacker to increase their privileges

The vulnerability of the Windows operating system application implementation is related to the incorrect use of retry points. Exploiting this vulnerability allows a local attacker to enhance their privileges through a specially created application...

WordPress Web Dorado Spider Event Calendar Plugin 1.4.9 - SQL Injection

This Web Dorado Spider Event Calendar plugin is prone to an SQL injection. This vulnerability allows an attacker to modify data, compromise the access and application or exploit hidden vulnerabilities in the underlying database. Solution Upgrade the plugin...

Magic Photo Storage Website admin/add_templates.php _config[site_path] Parameter Remote File Inclusion

No description provided by source. source: http://www.securityfocus.com/bid/21965/info Magic Photo Storage Website is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the...

MyBulletinBoard RC4 member.php Multiple Parameter SQL Injection

No description provided by source. source: http://www.securityfocus.com/bid/14553/info MyBulletinBoard is prone to multiple SQL injection vulnerability. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. Successful...

ezContents 2.0.3 search.php GLOBALS[language_home] Parameter Remote File Inclusion

No description provided by source. source: http://www.securityfocus.com/bid/19776/info ezContents is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker can exploit these issues to include an arbitrary remote fi...