SUSE-SU-2016:1764-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP1 Realtime kernel was updated to 3.12.58 to receive various security and bugfixes. The following security bugs were fixed: - CVE-2015-7566: The treoattach function in drivers/usb/serial/visor.c in the Linux kernel allowed physically proximate attackers to cause a...

Unauthorized Access Vulnerability in Nport 5110 Devices of Mosaic Technology (Shanghai) Co.

The MOXA Nport 5110 is a serial communication server. An unauthorized access warrant vulnerability exists in the MOXA Nport 5110 device, which could be exploited by an attacker to obtain sensitive information about the device...

SUSE-SU-2016:1038-1 Security update for Linux Kernel Live Patch 6

This update for the Linux Kernel 3.12.44-52.10.1 fixes the following issues: - CVE-2016-2384: A malicious USB device could cause a kernel crash in the alsa usb-audio driver. bsc967773 - CVE-2015-8812: A flaw was found in the CXGB3 kernel driver when the network was considered congested. The kerne...

Safety warning: a affect 1. 3 billion Apple users, the exploit code-exploit warning-the black bar safety net

! Recently, security researchers released a tweet that referred to Apple device vulnerabilities as well as about the vulnerability of the program code. Bug-fix is not ideal In the last week the media exposure of the Apple device system, a critical Vulnerability, CVE-2 0 1 6-1 7 5 7, you can use...

eWON all Device 弱口令

参考链接: http://ewon.biz/sites/default/files/aug-004-0-en-ewongettingstarted.pdf...

MGASA-2015-0439 Updated kernel-linus packages fixes security vulnerability

This update of kernel-linus provides the upstream 4.1.12 longterm kernel and fixes at least the following security issue: Moein Ghasemzadeh discovered that the USB WhiteHEAT serial driver contained hardcoded attributes about the USB devices. An attacker could construct a fake WhiteHEAT USB device...

[SECURITY] [DLA 325-1] linux-2.6 security update

Package : linux-2.6 Version : 2.6.32-48squeeze16 CVE ID : CVE-2015-2925 CVE-2015-5257 CVE-2015-7613 This update fixes the CVEs described below. CVE-2015-2925 Jann Horn discovered that when a subdirectory of a filesystem was bind-mounted into a chroot or mount namespace, a user that should be...

Apple iOS Game Center Information Disclosure Vulnerability

Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. A security vulnerability in Apple iOS Game Center's handling of gamer emails allows malicious apps to access sensitive gamer information...

Heart drop of blood away? 2 0 million equipment is still under threat-vulnerability warning-the black bar safety net

Heart drop of blood is already a thing of the past? NO! A lapse of more than a year after the infamous the heart of the blood security vulnerabilities and not completely disappeared, still the 2 0 million of network devices present a security threat. According to Shodan, the search results displa...

Multiple Huawei ME906 Products Information Disclosure Vulnerability

Huawei ME906 is a mobile internet module with M.2 which supports LTE, WCDMA, EVDO and GSM. Several Huawei ME906 products contain hashes of root accounts and passwords, allowing attackers to exploit vulnerabilities that can be cracked to obtain ROOT account password information...

The vulnerability of the microprogramming software used in Cisco TelePresence TC conference call control devices allows intruders to inject arbitrary HTTP headers.

The vulnerability of the microprogramming software used in Cisco TelePresence TC devices exists due to insufficient verification of input data. Exploiting this vulnerability allows a malicious actor to inject arbitrary HTTP headers using a specially crafted URL...

GE Healthcare Discovery NM 750b Trust Management Vulnerability

The GE Healthcare Discovery NM 750b is a high-end molecular breast imaging device from General Electric GE for the healthcare industry. A security vulnerability exists in the GE Healthcare Discovery NM 750b that stems from the use of '2getin' as a password for the Telnet and FTP insite accounts. ...

Many Drug Pumps Open to Variety of Security Flaws

In April, a security researcher disclosed a litany of severe vulnerabilities in the PCA3 drug-infusion pump manufactured by a company named Hospira. He went so far as to call the pump “the least secure IP enabled device I’ve ever touched in my life.” As it turns out, those same vulnerabilities...

Cisco IOS/IOS XE Software Denial of Service Vulnerability

Cisco IOS is the interconnected Internet operating system used on most Cisco Systems routers and network switches. A denial-of-service vulnerability exists in Cisco IOS/IOS XE Software that allows attackers to launch denial-of-service attacks and deny service to legitimate users...

Community Health Systems APT Data Breach Medical Espionage

At first blush, the Community Health Systems data breach by Chinese hackers seems to be an anomaly. State-sponsored attackers generally target intellectual property for the purposes of military or economic gain; stealing healthcare credentials and personal patient records seems incongruous. But...

DVR Infected with Bitcoin Mining Malware

Johannes Ullrich of the SANS Institute claims to have found malware infecting digital video recorders DVR predominately used to record footage captured by surveillance camera systems. Oddly enough, Ullrich claims that one of the two binaries of malware implicated in this attack scheme appears to ...

Heap overflow

Heap-based buffer overflow in the wdmincallback function in drivers/usb/class/cdc-wdm.c in the Linux kernel before 3.8.4 allows physically proximate attackers to cause a denial of service system crash or possibly execute arbitrary code via a crafted cdc-wdm USB device...

Group Claims Hack of Vodafone Sure Signal Puts Customers At Risk

A hardware hacking group is claiming to have found a way to turn Vodafone’s Sure Signal Femtocell base stations into hacking devices that can siphon off subscribers’ phone data and then use it to make calls on their account. The analysis of the Sure Signal product was published on Wednesday by a...

New iPhone Jailbreak Makes Short Work of World's 'Most Secure' OS

It wasn’t long ago – just a month in fact – that Apple’s iOS mobile operating system was being called the ‘Most secure’ OS. Period.’ A few weeks later, and the security of that OS has fallen again to the talents of Comex, an as-yet-unnamed mobile device hacker whose work is attracting kudos from...

Clear iSpot / Clearspot 2.0.0.0 Cross Site Request Forgery

Trustwave's SpiderLabs Security Advisory TWSL2010-008: Clear iSpot/Clearspot CSRF Vulnerabilities https://www.trustwave.com/spiderlabs/advisories/TWSL2010-008.txt Published: 2010-12-10 Version: 1.0 Vendor: Clear http://www.clear.com Products: iSpot / ClearSpot 4G http://www.clear.com/devices...