CVE-2017-8281

In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition can allow access to already freed memory while querying event status via DCI...

CVE-2017-8281: Exposure of Sensitive Information to an Unauthorized Actor

In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition can allow access to already freed memory while querying event status via DCI...

Intel® NUC and Intel® Compute Stick DCI Disable

Summary: Intel® NUC and Intel® Compute Stick systems based on 6th Gen Intel® Core™ processors do not have DCI debug capability properly locked for BIOS only access. This would allow an attacker with physical possession of the system to potentially enable DCI from outside the BIOS. Description:...

The vulnerability of the Android operating system, which allows a perpetrator to obtain confidential information or enhance their privileges

The vulnerability in the drivers/char/diag/diagdci.c file of Qualcomm’s Android operating system arises from a loss of integer precision. Exploiting this vulnerability can allow an attacker to increase their privileges or obtain confidential information through a specially created application...

Buffer Overflow Vulnerability in Automation DCISoft Handling of dci Files

Automation DCISoft is a specialized electronic drawing software. Automation DCISoft suffers from a buffer overflow vulnerability that could be exploited by an attacker to execute arbitrary code...

Code injection

The diag driver in the Qualcomm components in Android before 2016-08-05 on Nexus 5 devices does not ensure unique identifiers in a DCI client table, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28750155 and Qualcomm internal bug CR590721...

CVE-2014-9875: Undefined Security Weakness

drivers/char/diag/diagdci.c in the Qualcomm components in Android before 2016-08-05 on Nexus 7 2013 devices allows attackers to gain privileges via a crafted application that sends short DCI request packets, aka Android internal bug 28767589 and Qualcomm internal bug CR483310...

DCI-Taskeen 1.03 cat.php Multiple Parameter SQL Injection

No description provided by source. source: http://www.securityfocus.com/bid/16828/info DCI-Taskeen is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful...

DCI-Taskeen 1.03 basket.php Multiple Parameter SQL Injection

No description provided by source. source: http://www.securityfocus.com/bid/16828/info DCI-Taskeen is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful...

CVE-2009-3319

SQL injection vulnerability in poems.php in DCI-Designs Dawaween 1.03 allows remote attackers to execute arbitrary SQL commands via the id parameter in a sec list action, a different vector than CVE-2006-1018...

CVE-2009-3319

The provided data documents CVE-2009-3319 as affecting the DCI-Designs Dawaween 1.03 package, specifically the poems.php module. The vulnerability is an SQL injection that allows remote attackers to execute arbitrary SQL commands via the id parameter in a sec list action (a vector distinct from C...

CVE-2009-3319

SQL injection vulnerability in poems.php in DCI-Designs Dawaween 1.03 allows remote attackers to execute arbitrary SQL commands via the id parameter in a sec list action, a different vector than CVE-2006-1018...

CVE-2009-3319: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in poems.php in DCI-Designs Dawaween 1.03 allows remote attackers to execute arbitrary SQL commands via the id parameter in a sec list action, a different vector than CVE-2006-1018...

Sql injection

SQL injection vulnerability in poems.php in DCI-Designs Dawaween 1.03 allows remote attackers to execute arbitrary SQL commands via the id parameter in a diwan view action...

CVE-2006-1018

SQL injection vulnerability in poems.php in DCI-Designs Dawaween 1.03 allows remote attackers to execute arbitrary SQL commands via the id parameter in a diwan view action...

CVE-2006-1018: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in poems.php in DCI-Designs Dawaween 1.03 allows remote attackers to execute arbitrary SQL commands via the id parameter in a diwan view action...

CVE-2006-1018

The CVE-2006-1018 entry describes an SQL injection in poems.php of DCI-Designs Dawaween 1.03, exploitable via the id parameter in a diwan view action. Affected software: Dawaween 1.03 (poems.php). Root cause: unsanitized id parameter leading to arbitrary SQL execution. Impact per CVSS: Confidenti...

DCI-Taskeen103.txt

Hello Vulnerable: DCI-Taskeen v1.03 http://www.dci-designs.com Exploit : http://example.com/basket.php?action=addex&id=SQL http://example.com/basket.php?action=SQL http://example.com/basket.php?action=addr&id=SQL http://example.com/cat.php?do=cat&page=1&id=SQL http://example/cat.php?do=cat&page=S...

DCI-Designs Dawaween 1.03 - 'Poems.php' SQL Injection

source: https://www.securityfocus.com/bid/16909/info Dawaween is prone to an SQL-injection vulnerability because it fails to properly sanitize user-supplied input before using it in an SQL query. Successful exploits could allow a remote attacker to compromise the application, access or modify dat...

CVE-2006-0939

SQL injection vulnerability in DCI-Taskeen 1.03 allows remote attackers to execute arbitrary SQL commands via the 1 id or 2 action parameter to a basket.php, or 3 id or 4 page parameter to b cat.php...