October 11, 2016 — KB3194798 (OS Build 14393.321)

None None...

UBUNTU-CVE-2014-9863

Integer underflow in the diag driver in the Qualcomm components in Android before 2016-08-05 on Nexus 5 and 7 2013 devices allows attackers to gain privileges or obtain sensitive information via a crafted application, aka Android internal bug 28768146 and Qualcomm internal bug CR549470...

setroubleshoot security update

CentOS Errata and Security Advisory CESA-2016:1293 An update for setroubleshoot and setroubleshoot-plugins is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base scor...

Important: Red Hat Security Advisory: setroubleshoot and setroubleshoot-plugins security update

An update for setroubleshoot and setroubleshoot-plugins is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

(Pwn2Own) Microsoft Windows Diagnostics Hub Standard Collector Directory Traversal Privilege Escalation Vulnerability

This vulnerability allows local attackers to execute arbitrary code on vulnerable installations of Microsoft Windows Diagnostics Hub Standard Collector. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specif...

setroubleshoot security update

CentOS Errata and Security Advisory CESA-2016:1267 An update for setroubleshoot and setroubleshoot-plugins is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base scor...

CVE-2016-3231

The Standard Collector service in Windows Diagnostics Hub mishandles library loading, which allows local users to gain privileges via a crafted application, aka "Windows Diagnostics Hub Elevation of Privilege Vulnerability."...

Privilege escalation

The Standard Collector service in Windows Diagnostics Hub mishandles library loading, which allows local users to gain privileges via a crafted application, aka "Windows Diagnostics Hub Elevation of Privilege Vulnerability."...

CVE-2016-3231

The Standard Collector service in Windows Diagnostics Hub mishandles library loading, which allows local users to gain privileges via a crafted application, aka "Windows Diagnostics Hub Elevation of Privilege Vulnerability."...

CVE-2016-3231

The CVE-2016-3231 issue affects the Windows Diagnostics Hub Standard Collector Service, where improper handling of the agent DLL path enables local privilege escalation via arbitrary DLL loading. The root cause is unsafe library loading due to not properly sanitizing the input path, allowing an a...

CVE-2016-3231: Undefined Security Weakness

The Standard Collector service in Windows Diagnostics Hub mishandles library loading, which allows local users to gain privileges via a crafted application, aka "Windows Diagnostics Hub Elevation of Privilege Vulnerability."...

Windows Diagnostics Hub Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when the Windows Diagnostics Hub Standard Collector Service fails to properly sanitize input, leading to an unsecure library-loading behavior. An attacker who successfully exploited this vulnerability could run arbitrary code with elevated system...

PT-2016-5418

Name of the Vulnerable Software and Affected Versions Windows Diagnostics Hub affected versions not specified Description The issue is related to the mishandling of library loading by the Standard Collector service in Windows Diagnostics Hub, allowing local users to gain privileges via a crafted...

Microsoft Windows Diagnostics Hub Elevation of Privilege (MS16-078: CVE-2016-3231)

A directory traversal vulnerability exists in Microsoft windows within the Diagnostics Hub component that could allow a privielege escalation. The root cause is that the Diagnostic Hup standard collector service fails to validate a safe path to the agent dll which may be abused to force the...

Mitsubishi Hybrid SUV Hack Puts Drivers At Risk, Says Researcher

Security experts are warning owners of Mitsubishi Outlander Plug-In Hybrid Electric Vehicles that their cars can be hacked via the automobile’s on-board WiFi network used for remote control of key car features. The hybrid electronic vehicle, which is slated to be sold here in the U.S. starting th...

[SECURITY] Fedora 23 Update: xstream-1.4.9-1.fc23

XStream is a simple library to serialize objects to XML and back again. A high level facade is supplied that simplifies common use cases. Custom objects can be serialized without need for specifying mappings. Speed and low memory footprint are a crucial part of the design, making it suitable for...

Lemur Vehicle Monitors BlueDriver Security Bypass Vulnerability

Lemur Vehicle Monitors BlueDriver is a product that scans aftermarket automotive equipment as well as vehicle performance information through an OBD-II port connected to the Vehicle. Lemur Vehicle Monitors BlueDriver handles Bluetooth connections without requiring a PIN code, allowing a remote...

OBD2-ELM327. Car Diagnostics - Corrupted files, Dynamic Code Loading, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application OBD2-ELM327. Car Diagnostics published at the 'play' market has multiple vulnerabilities...

Car Diagnostics Pro VAG OBD 11 - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Car Diagnostics Pro VAG OBD 11 published at the 'play' market has multiple vulnerabilities...

USB Host Diagnostics - External URLs, Native code usage, Possible privilege escalation vulnerabilities

HackApp vulnerability scanner discovered that application USB Host Diagnostics published at the 'play' market has multiple vulnerabilities...