CVE-2019-6136

Technical details about CVE-2019-6136 (affected product, impact, and fix) are not provided in the connected documents. Monitor for updates from official sources.

PT-2019-17971 · Unknown +1 · Libiec61850 +1

Name of the Vulnerable Software and Affected Versions: libIEC61850 version 1.3.1 Description: A memory leak issue has been identified. The Memory malloc function in hal/memory/lib memory.c leaks memory when called from Asn1PrimitiveValue create in mms/asn1/asn1 ber primitive value.c. This issue i...

PT-2019-17974 · Libiec61850 +1 · Libiec61850 +1

Name of the Vulnerable Software and Affected Versions: libIEC61850 version 1.3.1 Description: The issue is related to memory leaks in the Memory malloc and Memory calloc functions located in hal/memory/lib memory.c, which are called from several files including mms/iso mms/common/mms value.c,...

CVE-2019-6138: Missing Release of Memory after Effective Lifetime

An issue has been found in libIEC61850 v1.3.1. Memorymalloc and Memorycalloc in hal/memory/libmemory.c have memory leaks when called from mms/isomms/common/mmsvalue.c, server/mmsmapping/mmsmapping.c, and server/mmsmapping/mmssv.c via common/stringutilities.c, as demonstrated by...

CVE-2019-6135: Missing Release of Memory after Effective Lifetime

An issue has been found in libIEC61850 v1.3.1. Memorymalloc in hal/memory/libmemory.c has a memory leak when called from Asn1PrimitiveValuecreate in mms/asn1/asn1berprimitivevalue.c, as demonstrated by goosepublisherexample.c and iec6185092LEexample.c...

MS17-010 EternalBlue SMB Remote Windows Kernel Pool Corruption for Win8+

EternalBlue exploit for Windows 8, Windows 10, and 2012 by sleepya The exploit might FAIL and CRASH a target system depended on what is overwritten The exploit support only x64 target Tested on: - Windows 2012 R2 x64 - Windows 8.1 x64 - Windows 10 Pro Build 10240 x64 - Windows 10 Enterprise...

CVE-2017-13209

In the ServiceManager::add function in the hardware service manager, there is an insecure permissions check based on the PID of the caller which could allow an application or service to replace a HAL service with its own service. This could lead to a local elevation of privilege enabling code...

CVE-2017-13209: Missing Authorization

In the ServiceManager::add function in the hardware service manager, there is an insecure permissions check based on the PID of the caller which could allow an application or service to replace a HAL service with its own service. This could lead to a local elevation of privilege enabling code...

Android - Hardware Service Manager Arbitrary Service Replacement due to getpidcon Exploit

Exploit for Android platform in category dos / poc This bug is similar to Jann Horn's issue https://bugs.chromium.org/p/project-zero/issues/detail?id=851 -- credit should go to him. The hardware service manager allows the registration of HAL services. These services are used by the vendor domain...

Android - Hardware Service Manager Arbitrary Service Replacement due to getpidcon

Android - Hardware Service Manager Arbitrary Service Replacement due to getpidcon This bug is similar to Jann Horn's issue https://bugs.chromium.org/p/project-zero/issues/detail?id=851 -- credit should go to him. The hardware service manager allows the registration of HAL services. These services...

Android - Hardware Service Manager Arbitrary Service Replacement due to getpidcon

This bug is similar to Jann Horn's issue https://bugs.chromium.org/p/project-zero/issues/detail?id=851 -- credit should go to him. The hardware service manager allows the registration of HAL services. These services are used by the vendor domain and other core processes, including systemserver,...

CVE-2017-0812: Out-of-bounds Read

An elevation of privilege vulnerability in the Android media framework audio hal. Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-62873231...

CVE-2017-0812

CVE-2017-0812 is an elevation-of-privilege vulnerability in Google's Android media framework (audio hal). Affected products: Android 7.0, 7.1.1, 7.1.2, and 8.0 (Android ID A-62873231). The issue is categorized as EoP in the Media framework component and is documented in the Android Security Bulle...

CVE-2017-0812

An elevation of privilege vulnerability in the Android media framework audio hal. Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-62873231...

PT-2017-3017

Name of the Vulnerable Software and Affected Versions Android versions 7.0, 7.1.1, 7.1.2, 8.0 Description The issue is related to an elevation of privilege vulnerability in the Android media framework, specifically in the audio hal. This vulnerability is associated with inadequate access control ...

Microsoft Windows 88.12012 R2 (x64) - EternalBlue SMB Remote Code Execution (MS17-010)

Microsoft Windows 88.12012 R2 x64 - EternalBlue SMB Remote Code Execution MS17-010 !/usr/bin/python from impacket import smb, ntlm from struct import pack import sys import socket ''' EternalBlue exploit for Windows 8 and 2012 by sleepya The exploit might FAIL and CRASH a target system depended o...

Microsoft Windows 8/8.1/2012 R2 (x64) - 'EternalBlue' SMB Remote Code Execution (MS17-010)

!/usr/bin/python from impacket import smb, ntlm from struct import pack import sys import socket ''' EternalBlue exploit for Windows 8 and 2012 by sleepya The exploit might FAIL and CRASH a target system depended on what is overwritten The exploit support only x64 target EDB Note: Shellcode - x64...

UBUNTU-CVE-2016-0809

Use-after-free vulnerability in the wificleanup function in bcmdhd/wifihal/wifihal.cpp in Wi-Fi in Android 6.x before 2016-02-01 allows attackers to gain privileges by leveraging access to the local physical environment during execution of a crafted application, aka internal bug 25753768...

The Windows kernel attack-vulnerability warning-the black bar safety net

This article summarizes the current windows kernel attacks of various attack techniques. Describes and demonstrates some of the common bypass windows kernel protection method, and a reverse three describes how to pass kernel defects found in similar bypass method. By the kernel attack and memory...

Vulnerabilities in the OpenSUSE operating system that allow malicious actors to compromise the confidentiality, integrity, and accessibility of protected information

Multiple vulnerabilities in the hal-gnome package of the OpenSUSE operating system can be exploited, and their exploitation may lead to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited by malicious individuals who have...