Android Setup Wizard elevation of privilege vulnerability (CNVD-2016-02039)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handset Alliance OHA.Setup Wizard is one of the installation wizard components. An elevation of privilege vulnerability exists in Android's Setup Wizard. An attacker can use this vulnerability to bypass...

Unable to access the Store on the Mobile device if XenMobile is behind firewall

When trying device enrollment in MDM+MAM mode, user was unable to reach the Store...

CVE-2014-7207

A certain Debian patch to the IPv6 implementation in the Linux kernel 3.2.x through 3.2.63 does not properly validate arguments in ipv6selectident function calls, which allows local users to cause a denial of service NULL pointer dereference and system crash by leveraging 1 tun or 2 macvtap devic...

Cisco Unified Interaction Manager Web Interface Authorization Bypass Vulnerability

A vulnerability in the Cisco Unified Interaction Manager web interface could allow an authenticated, remote attacker to view, modify, and delete data without proper authorization. The vulnerability is due to insufficient validation of user-supplied data against the application authorization contr...

Cisco WebEx Meeting Center GET Parameter Vulnerability

A vulnerability in Cisco WebEx Meeting Center could allow an unauthenticated, remote attacker to view sensitive information that is transmitted in GET parameters or perform SQL injection. The vulnerability is due to the inclusion of sensitive information in the URL as GET parameters. An attacker...

CVE-2015-4080

CVE-2015-4080 affects the Kankun Smart Socket device and its mobile app. The vulnerability stems from a hardcoded AES-256 key used to encrypt communications, enabling remote attackers on the local network to sniff traffic and potentially encrypt messages to gain access to the device. Public sourc...

QEMU Denial of Service Vulnerability (CNVD-2015-02254)

QEMU is an open source emulator software. QEMU suffers from a denial of service vulnerability that allows a local HVM user to cause a denial of service by disabling memory or I/O PCI Express for decoding devices, and accessing the device to trigger a response to an unsupported request...

Multiple ASUS RT Router Cross-Site Request Forgery Vulnerabilities

ASUS RT Series Routers is a wireless router device. A cross-site request forgery vulnerability exists in multiple ASUS RT Routers and can be exploited by an attacker to perform certain unauthorized actions and gain access to affected devices...

Huawei WS318 Predictive Random Number Generator Vulnerability

The Huawei WS318 is a wireless router. A vulnerability in the Huawei WS318 predictive random number generator allows remote attackers to launch a brute force attack to crack passwords and gain access to the device...

LinkedIn Boosts Security With New Session Alert and Privacy Control Tools

With a need to give more controls in users’ hands, LinkedIn has introduced a few new security features that the company says will help users of the social network for professionals keep their accounts and data more secure. SESSION ALERTS Just like Google, Facebook, Yahoo and other online services...

PT-2014-2598 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel versions 2.6.x through 3.x Description: The issue is a stack-based buffer overflow in the acdb ioctl function in audio acdb.c in the acdb audio driver. This allows attackers to gain privileges via an application that leverages...

Easy FTP Pro v4.2 iOS - Command Inject Vulnerabilities

Document Title: =============== Easy FTP Pro v4.2 iOS - Command Inject Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1291 Release Date: ============= 2014-08-06 Vulnerability Laboratory ID VL-ID: ==================================== 129...

kernel: block: floppy: privilege escalation via FDRAWCMD floppy ioctl command

A flaw was found in the way the Linux kernel's floppy driver handled user space provided data in certain error code paths while processing FDRAWCMD IOCTL commands. A local user with write access to /dev/fdX could use this flaw to free using the kfree function arbitrary kernel memory. CVE-2014-173...

Cisco Unified Communications Manager CDR Management Vulnerability

A vulnerability in Call Detail Records CDR Management of Cisco Unified Communications Manager Cisco Unified CM could allow an authenticated, remote attacker to acquire sensitive information. The vulnerability is due to extraneous information included in the web page. An attacker could exploit thi...

Cisco Secure ACS Portal Session Management Vulnerability

A vulnerability in the portal interface of Cisco Secure Access Control System ACS could allow an authenticated, remote attacker to access the portal with the access capabilities of another user. The vulnerability is due to insufficient session management in the portal. An attacker could exploit...

Syrian Electronic Army's own website got hacked by Turkish hacker

Oops.. Hackers got Hacked! The Syrian Electronic Army, who has hacked hundreds of High Profile targets in 2013-14, today they got hacked by a Turkish hacker. Turkguvenligi, a Turkish hacker told The Hacker News that he hacked and defaced the official website of the hacking group SEA sea.sy and...

CVE-2013-6123

Multiple array index errors in drivers/media/video/msm/server/msmcamserver.c in the MSM camera driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center QuIC Android contributions for MSM devices and other products, allow attackers to gain privileges by leveraging camera device-node...

Code injection

Multiple array index errors in drivers/media/video/msm/server/msmcamserver.c in the MSM camera driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center QuIC Android contributions for MSM devices and other products, allow attackers to gain privileges by leveraging camera device-node...

Song Exporter v2.1.1 RS iOS文件包含漏洞

Song Exporter可以将你iOS设备的歌曲通过WiFi传输到同一局域网内任何电脑上的实用工具，让你无需iTunes也能方便的将音乐备份到电脑上。 本地文件包含Web漏洞允许远程攻击者未经授权包含本地文件的请求或系统特定的路径命令，控制网页应用程序或设备。 0 Song Exporter 2.1.1 目前厂商暂无提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： https://itunes.apple.com/us/app/song-exporter-pro/id421646421 Proof of Concept PoC:...

Memory corruption

Memory leak in the kvmsetmemoryregion function in virt/kvm/kvmmain.c in the Linux kernel before 3.9 allows local users to cause a denial of service memory consumption by leveraging certain device access to trigger movement of memory slots...