3890 matches found
The vulnerability of the enterprise automation system 1C:Enterprise, which allows a malicious individual to cause service failures
The 1C:Enterprise system contains a vulnerability in the Fast Infoset decoder of the xml2.dll library, which is used for working with XML documents. A malicious individual can manipulate input data, causing the Fast Infoset decoder to become in the EIIINDEXMEDIUM state. This allows them to send a...
[SECURITY] Fedora 24 Update: nodejs-4.4.6-2.fc24
Node.js is a platform built on Chrome's JavaScript runtime for easily building fast, scalable network applications. Node.js uses an event-driven, non-blocking I/O model that makes it lightweight and efficient, perfect for data-intensive real-time applications that run across distributed devices...
Hyperoptic (Tilgin) Router HG23xx - Multiple Vulnerabilities
Hyperoptic Tilgin Router HG23xx - Multiple Vulnerabilities Hyperoptic Tilgin Router HG23xx Multiple XSS And CSRF Vulnerabilities Vendor: Hyperoptic Ltd. | Tilgin AB Product web page: http://www.hyperoptic.com http://www.tilgin.com Affected version: HG2330, HG2302 and HG2301 Summary: Tilgin's HG23...
Apple announces Encryption-focused New File System for macOS Sierra
Apple announced one huge change at WWDC 2016: The company is replacing the HFS+ file system on MacOS, iOS, tvOS and WatchOS with a new file system. The company has introduced its brand new file system called The Apple File System — or APFS for short — for iOS, OS X, tvOS, and WatchOS, making...
DEBIAN-CVE-2016-4441
The getcmd function in hw/scsi/esp.c in the 53C9X Fast SCSI Controller FSC support in QEMU does not properly check DMA length, which allows local guest OS administrators to cause a denial of service out-of-bounds write and QEMU process crash via unspecified vectors, involving an SCSI command...
CVE-2016-4439
The espregwrite function in hw/scsi/esp.c in the 53C9X Fast SCSI Controller FSC support in QEMU does not properly check command buffer length, which allows local guest OS administrators to cause a denial of service out-of-bounds write and QEMU process crash or potentially execute arbitrary code o...
CVE-2016-4441
CVE-2016-4441 affects QEMU’s 53C9X FSC emulation (esp.c) where get_cmd() can write out-of-bounds to the information transfer buffer due to DMA length not being checked. This local-privilege vulnerability can crash the QEMU process or allow potential arbitrary code execution via crafted SCSI comma...
UBUNTU-CVE-2016-4439
The espregwrite function in hw/scsi/esp.c in the 53C9X Fast SCSI Controller FSC support in QEMU does not properly check command buffer length, which allows local guest OS administrators to cause a denial of service out-of-bounds write and QEMU process crash or potentially execute arbitrary code o...
[SECURITY] Fedora 23 Update: imlib2-1.4.8-1.fc23
Imlib 2 is a library that does image file loading and saving as well as rendering, manipulation, arbitrary polygon support, etc. It does ALL of these operations FAST. Imlib2 also tries to be highly intelligent about doing them, so writing naive programs can be done easily, without sacrificing...
Access Point Impersonation Attacks: hostapd-wpe
hostapd-wpe – Wireless Pwnage Edition – hostapd-wpe is the replacement for FreeRADIUS-WPE . It implements IEEE 802.1x Authenticator and Authentication Server impersonation attacks to obtain client credentials, establish connectivity to the client, and launch other attacks where applicable...
[SECURITY] Fedora 23 Update: apache-commons-collections-3.2.2-3.fc23
The introduction of the Collections API by Sun in JDK 1.2 has been a boon to quick and effective Java programming. Ready access to powerful data structures has accelerated development by reducing the need for custom container classes around each core object. Most Java2 APIs are significantly easi...
Fast Car Parking - Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Fast Car Parking published at the 'play' market has multiple vulnerabilities...
Highway Rally: Fast Car Racing - Customized SSL, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Highway Rally: Fast Car Racing published at the 'play' market has multiple vulnerabilities...
Top Speed: Drag & Fast Racing - Base64 encoded String, Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Top Speed: Drag & Fast Racing published at the 'play' market has multiple vulnerabilities...
Turbo FAST - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities
HackApp vulnerability scanner discovered that application Turbo FAST published at the 'play' market has multiple vulnerabilities...
Fast Food Maker Cooking Games - Dangerous filesystem permissions, Insecure KeyStore vulnerabilities
HackApp vulnerability scanner discovered that application Fast Food Maker Cooking Games published at the 'play' market has multiple vulnerabilities...
Fast food restaurant - Dangerous filesystem permissions, Insecure KeyStore vulnerabilities
HackApp vulnerability scanner discovered that application Fast food restaurant published at the 'play' market has multiple vulnerabilities...
Fast Food Street Tycoon - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities
HackApp vulnerability scanner discovered that application Fast Food Street Tycoon published at the 'play' market has multiple vulnerabilities...
Fast like a Fox - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities
HackApp vulnerability scanner discovered that application Fast like a Fox published at the 'play' market has multiple vulnerabilities...
Fast Charging - Customized SSL, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Fast Charging published at the 'play' market has multiple vulnerabilities...