CVE-2017-9719

CVE-2017-9719 affects Android for MSM, Firefox OS for MSM, and QRD Android builds using CAF Linux kernel with the MDSS HDMI CEC kernel driver. The issue is a buffer overflow in HDMI CEC parsing when the frame size is out of range, potentially enabling local code execution with high impact on conf...

CVE-2017-9719: Improper Restriction of Operations within the Bounds of a Memory Buffer

In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in the kernel driver MDSS, a buffer overflow can occur in HDMI CEC parsing if frame size is out of range...

PT-2017-19133

Name of the Vulnerable Software and Affected Versions Android for MSM versions affected versions not specified Firefox OS for MSM versions affected versions not specified QRD Android versions affected versions not specified Description A buffer overflow issue exists in the kernel driver MDSS,...

Airtame HDMI dongle session fixation vulnerability

The AIRTAME HDMI dongle is a wireless access point product for connecting, sharing and split-screen TVs or monitors. A security vulnerability exists in the /bin/login.php file of the Web Panel in the Airtame HDMI dongle using firmware versions prior to 3.0. The vulnerability can be exploited by a...

CVE-2017-15304

/bin/login.php in the Web Panel on the Airtame HDMI dongle with firmware before 3.0 allows an attacker to set his own session id via a "Cookie: PHPSESSID=" header. This can be used to achieve persistent access to the admin panel even after an admin password change...

Default credentials

/bin/login.php in the Web Panel on the Airtame HDMI dongle with firmware before 3.0 allows an attacker to set his own session id via a "Cookie: PHPSESSID=" header. This can be used to achieve persistent access to the admin panel even after an admin password change...

CVE-2017-15304

CVE-2017-15304 affects Airtame HDMI dongle Web Panel. The /bin/login.php vulnerability in firmware before 3.0 lets an attacker set a session id via a Cookie: PHPSESSID header, enabling persistent admin access even after a password change. Impact: unauthorized admin session persistence. Affected: ...

PT-2017-13981

Name of the Vulnerable Software and Affected Versions Airtame HDMI dongle versions prior to 3.0 Description The issue allows an attacker to set their own session ID via a "Cookie: PHPSESSID=" header in the /bin/login.php file of the Web Panel. This can be used to achieve persistent access to the...

CVE-2017-15304: Session Fixation

/bin/login.php in the Web Panel on the Airtame HDMI dongle with firmware before 3.0 allows an attacker to set his own session id via a "Cookie: PHPSESSID=" header. This can be used to achieve persistent access to the admin panel even after an admin password change...

Design/Logic Flaw

AIRTAME HDMI dongle with firmware before 2.2.0 allows unauthenticated access to a big part of the management interface. It is possible to extract all information including the Wi-Fi password, reboot, or force a software update at an arbitrary time...

CVE-2017-7450

AIRTAME HDMI dongle with firmware before 2.2.0 allows unauthenticated access to a big part of the management interface. It is possible to extract all information including the Wi-Fi password, reboot, or force a software update at an arbitrary time...

CVE-2017-7450

AIRTAME HDMI dongle with firmware before 2.2.0 allows unauthenticated access to a big part of the management interface. It is possible to extract all information including the Wi-Fi password, reboot, or force a software update at an arbitrary time...

CVE-2017-7450

The CVE-2017-7450 issue affects the AIRTAME HDMI dongle prior to firmware 2.2.0. The vulnerability allows unauthenticated access to a large portion of the device’s management interface, enabling an attacker to extract sensitive information (including the Wi‑Fi password), reboot the device, or for...

PT-2017-3090

Name of the Vulnerable Software and Affected Versions AIRTAME HDMI dongle versions prior to 2.2.0 Description The issue is related to insufficient access control in the AIRTAME HDMI dongle's firmware, allowing unauthenticated access to a significant part of the management interface. This can lead...

CVE-2017-7450: Improper Authentication

AIRTAME HDMI dongle with firmware before 2.2.0 allows unauthenticated access to a big part of the management interface. It is possible to extract all information including the Wi-Fi password, reboot, or force a software update at an arbitrary time...

Raspberry Pi 3 — New $35 MicroComputer with Built-in Wi-Fi and Bluetooth

While celebrating its computer's fourth birthday, the Raspberry Pi Foundation has launched a brand new Raspberry Pi today. Great news for all Micro-computing fans – A new, powerful Raspberry Pi 3 Model B in town. Months after introducing just $5 Raspberry Pi Zero, Raspberry Pi Foundation has...

openSUSE Security Update : the Linux Kernel (openSUSE-2015-879)

The Linux Kernel was updated to 4.1.13 and fixes the following issues : Security issues fixed : - CVE-2015-8104: The KVM subsystem in the Linux kernel allowed guest OS users to cause a denial of service host OS panic or hang by triggering many DB aka Debug exceptions, related to svm.c. -...

Google’s $85 Chromebit Lets You Turn Any Monitor or TV into a Computer

Google and Asus are finally ready to release their new micro Chrome OS computer called the Chromebit — that retails at a great price, just $85. That is quite cheap for what is essentially a portable computer that you can take anywhere in your pocket. Also Read: CHIP — The World's First $9 Compute...

Google $100 ChromeBit Turns Any TV Into a Computer

Imagine — reaching into your pocket — and pulling out a computer! Google has made it possible to put your whole computer into your pocket by introducing a whole new kind of Chrome device — a tiny stick that plugs into HDMI port of any display. Dubbed ChromeBit, a fully featured computer-on-a-stic...

SuSE 11.3 Security Update : Linux Kernel (SAT Patch Numbers 10412 / 10415 / 10416)

The SUSE Linux Enterprise 11 SP3 kernel has been updated to receive various security and bugfixes. New features enabled : - The Ceph and rbd remote network block device drivers are now enabled and supported, to serve as client for SUSE Enterprise Storage 1.0. FATE318328 - Support to selected Bay...