CVE-2015-5738: Exposure of Sensitive Information to an Unauthorized Actor

The RSA-CRT implementation in the Cavium Software Development Kit SDK 2.x, when used on OCTEON II CN6xxx Hardware on Linux to support TLS with Perfect Forward Secrecy PFS, makes it easier for remote attackers to obtain private RSA keys by conducting a Lenstra side-channel attack...

[SECURITY] Fedora 23 Update: kf5-solid-5.24.0-1.fc23

Solid provides the following features for application developers: - Hardware Discovery - Power Management - Network Management...

[SECURITY] Fedora 24 Update: kf5-solid-5.24.0-1.fc24

Solid provides the following features for application developers: - Hardware Discovery - Power Management - Network Management...

Edward Snowden Designs an iPhone Case to Detect & Block Wireless Snooping

We just cannot imagine our lives without smartphones, even for a short while, and NSA whistleblower Edward Snowden had not owned a smartphone since 2013 when he began leaking NSA documents that exposed the government's global surveillance program. Snowden fears that cellular signals of the...

Lorex ECO DVR LH162400 Firmware Security Bypass Vulnerability

Lorex ECO DVR LH162400 is a digital video recorder product from Lorex USA. A security bypass vulnerability exists in the Lorex ECO DVR LH162400 using firmware version 5.2.0-20141008. An attacker can exploit this vulnerability to bypass the authentication mechanism and gain access to the affected...

Incident Response Forensic Framework: nightHawk Response

Incident Response Forensic Framework Custom built application for asynchronus forensic data presentation on an ElasticSearch backend. This application is designed to ingest a Mandiant Redline “collections” file and give flexibility in search/stack and tagging. The application was born out of the...

Fedora 23 : kernel (2016-06f1572324)

The 4.5.5 stable update contains a number of important fixes across the tree. ---- The 4.5.4 stable update contains a number of important fixes across the tree. ---- The 4.5.3 stable rebase contains enhanced hardware support, additional features, and a number of important fixes across the tree...

Android MediaTek Hardware Sensor Driver Mobilization Vulnerability

Android on Android One is a Linux-based open source operating system for Android One smartphone developed by Google and the Open Handset Alliance OHA in the U.S. The MediaTek hardware sensor driver is a MediaTek-developed hardware sensor driver component used in the Android One. MediaTek hardware...

CVE-2016-3798: Undefined Security Weakness

The MediaTek hardware sensor driver in Android before 2016-07-05 on Android One devices allows attackers to gain privileges via a crafted application, aka Android internal bug 28174490 and MediaTek internal bug ALPS02703105...

PT-2016-2438

Name of the Vulnerable Software and Affected Versions Android versions prior to 2016-07-05 Description The issue is related to insufficient access control in the MediaTek hardware sensor driver in the Android operating system. It allows a remote attacker to elevate their privileges using a...

CVE-2016-0230

IBM Power Hardware Management Console HMC 7.3 through 7.3.0 SP7, 7.9 through 7.9.0 SP3, 8.1 through 8.1.0 SP3, 8.2 through 8.2.0 SP2, 8.3 through 8.3.0 SP2, 8.4 through 8.4.0 SP1, and 8.5.0 allows physically proximate attackers to obtain root access via unspecified vectors...

Design/Logic Flaw

IBM Power Hardware Management Console HMC 7.3 through 7.3.0 SP7, 7.9 through 7.9.0 SP3, 8.1 through 8.1.0 SP3, 8.2 through 8.2.0 SP2, 8.3 through 8.3.0 SP2, 8.4 through 8.4.0 SP1, and 8.5.0 allows physically proximate attackers to obtain root access via unspecified vectors...

CVE-2016-0230

IBM Power Hardware Management Console HMC 7.3 through 7.3.0 SP7, 7.9 through 7.9.0 SP3, 8.1 through 8.1.0 SP3, 8.2 through 8.2.0 SP2, 8.3 through 8.3.0 SP2, 8.4 through 8.4.0 SP1, and 8.5.0 allows physically proximate attackers to obtain root access via unspecified vectors...

CVE-2016-0230

CVE-2016-0230 concerns IBM Power Hardware Management Console (HMC) releases: 7.3 through 7.3.0 SP7, 7.9 through 7.9.0 SP3, 8.1 through 8.1.0 SP3, 8.2 through 8.2.0 SP2, 8.3 through 8.3.0 SP2, 8.4 through 8.4.0 SP1, and 8.5.0. The vulnerability allows physically proximate attackers to obtain root ...

PT-2016-4101

Name of the Vulnerable Software and Affected Versions IBM Power Hardware Management Console HMC versions 7.3 through 7.3.0 SP7 IBM Power Hardware Management Console HMC versions 7.9 through 7.9.0 SP3 IBM Power Hardware Management Console HMC versions 8.1 through 8.1.0 SP3 IBM Power Hardware...

CVE-2016-0230: Undefined Security Weakness

IBM Power Hardware Management Console HMC 7.3 through 7.3.0 SP7, 7.9 through 7.9.0 SP3, 8.1 through 8.1.0 SP3, 8.2 through 8.2.0 SP2, 8.3 through 8.3.0 SP2, 8.4 through 8.4.0 SP1, and 8.5.0 allows physically proximate attackers to obtain root access via unspecified vectors...

The vulnerability of the QEMU hardware emulation software allows attackers to enhance their privileges, cause service failures, or gain access to protected information.

The vulnerability of the QEMU hardware emulation software is related to lack of access control. Exploiting this vulnerability can allow a malicious actor to enhance their privileges, cause service failures, or gain access to protected information using a guest operating system...

IBM Hardware Management Console Elevation of Privilege Vulnerability

The IBM Hardware Management Console HMC is a suite of graphical interface software for configuring and managing the Power System family of servers from IBM in the United States. A security vulnerability exists in IBM HMC, which can be exploited by a local attacker to elevate privileges and gain...

Debian DLA-539-1 : qemu-kvm security update

Several vulnerabilities were discovered in qemu-kvm, a full virtualization solution for Linux hosts on x86 hardware with x86 guests. CVE-2016-3710 Wei Xiao and Qinghao Tang of 360.cn Inc discovered an out-of-bounds read and write flaw in the QEMU VGA module. A privileged guest user could use this...

[SECURITY] [DLA 539-1] qemu-kvm security update

Package : qemu-kvm Version : 1.1.2+dfsg-6+deb7u13 CVE ID : CVE-2016-3710 CVE-2016-3712 Several vulnerabilities were discovered in qemu-kvm, a full virtualization solution for Linux hosts on x86 hardware with x86 guests. CVE-2016-3710 Wei Xiao and Qinghao Tang of 360.cn Inc discovered an...