Huawei Mobile FRP Bypass Vulnerability

Huawei P9, P9 Lite are smartphones from Huawei. Huawei phone FRP Factory Reset Protection bypass vulnerability. An attacker can use the vulnerability to bypass the FRP feature by updating the Google account without authorization during the execution of FRP reset of the phone...

Downloads Resources over HTTP

Overview Affected versions of headless-browser-lite insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code...

Debian DLA-723-1 : libsoap-lite-perl security update

It was discovered that there was a 'Billion Laughs' 0 XML expansion vulnerability in libsoap-lite-perl, a Perl implementation of a SOAP 1 client and server. For Debian 7 'Wheezy', this issue has been fixed in libsoap-lite-perl version 0.714-1+deb7u1. We recommend that you upgrade your...

Denial of Service Vulnerability in TrustZone Driver for Some Huawei Phones

Huawei P9, P9 Lite, P8 Lite are Huawei smartphones. A denial of service vulnerability exists in the TrustZone driver of some Huawei phones. An attacker can trick users into installing a malicious application, and the application exploits the vulnerability to pass specific parameters to the...

[SECURITY] [DLA 723-1] libsoap-lite-perl security update

Package : libsoap-lite-perl Version : 0.714-1+deb7u1 CVE ID : CVE-2015-8978 It was discovered that there was a "Billion Laughs" 0 XML expansion vulnerability in libsoap-lite-perl, a Perl implementation of a SOAP 1 client and server. For Debian 7 "Wheezy", this issue has been fixed in...

DLA-723-1 libsoap-lite-perl - security update

Bulletin has no description...

Soap Lite Denial of Service Vulnerability

Soap Lite a.k.a. the SOAP::Lite extension for Perl is a collection of Perl modules that provide a simple and lightweight interface to the client-side and server-side Simple Object Access Protocol SOAP. A security vulnerability exists in Soap Lite 1.14 and earlier versions. An attacker can exploit...

DEBIAN-CVE-2015-8978

In Soap Lite aka the SOAP::Lite extension for Perl 1.14 and earlier, an example attack consists of defining 10 or more XML entities, each defined as consisting of 10 of the previous entity, with the document consisting of a single instance of the largest entity, which expands to one billion copie...

CVE-2015-8978

In Soap Lite aka the SOAP::Lite extension for Perl 1.14 and earlier, an example attack consists of defining 10 or more XML entities, each defined as consisting of 10 of the previous entity, with the document consisting of a single instance of the largest entity, which expands to one billion copie...

CVE-2015-8978

In Soap Lite aka the SOAP::Lite extension for Perl 1.14 and earlier, an example attack consists of defining 10 or more XML entities, each defined as consisting of 10 of the previous entity, with the document consisting of a single instance of the largest entity, which expands to one billion copie...

Design/Logic Flaw

In Soap Lite aka the SOAP::Lite extension for Perl 1.14 and earlier, an example attack consists of defining 10 or more XML entities, each defined as consisting of 10 of the previous entity, with the document consisting of a single instance of the largest entity, which expands to one billion copie...

UBUNTU-CVE-2015-8978

In Soap Lite aka the SOAP::Lite extension for Perl 1.14 and earlier, an example attack consists of defining 10 or more XML entities, each defined as consisting of 10 of the previous entity, with the document consisting of a single instance of the largest entity, which expands to one billion copie...

CVE-2015-8978

In Soap Lite aka the SOAP::Lite extension for Perl 1.14 and earlier, an example attack consists of defining 10 or more XML entities, each defined as consisting of 10 of the previous entity, with the document consisting of a single instance of the largest entity, which expands to one billion copie...

CVE-2015-8978

In Soap Lite aka the SOAP::Lite extension for Perl 1.14 and earlier, an example attack consists of defining 10 or more XML entities, each defined as consisting of 10 of the previous entity, with the document consisting of a single instance of the largest entity, which expands to one billion copie...

CVE-2015-8978

In Soap Lite aka the SOAP::Lite extension for Perl 1.14 and earlier, an example attack consists of defining 10 or more XML entities, each defined as consisting of 10 of the previous entity, with the document consisting of a single instance of the largest entity, which expands to one billion copie...

CVE-2015-8978

CVE-2015-8978 is a documented XML exponential entity expansion (Billion Laughs) vulnerability in the Perl SOAP-Lite (SOAP::Lite) module, affecting SOAP-Lite 1.14 and earlier. The issue stems from nested XML entity definitions that explode when parsing external SOAP requests, potentially causing m...

Ubiquiti UniFi AP AC Lite Database Modification Vulnerability

Ubiquiti UniFi AP AC Lite is a network access point product from Ubiquiti, China. A database modification vulnerability exists in Ubiquiti UniFi AP AC Lite version 5.2.7, which can be exploited by an attacker to directly modify the database...

Messenger Lite - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Messenger Lite published at the 'play' market has multiple vulnerabilities...

InfoWatch DMM Lite - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application InfoWatch DMM Lite published at the 'play' market has multiple vulnerabilities...

Ubiquiti UniFi AP AC Lite 5.2.7 Improper Access Control

Product: UniFi AP AC Lite Vendor: Ubiquiti Networks Inc. Internal reference: ? Bug ID Vulnerability type: Incorrect access control Vulnerable version: Unify 5.2.7 and possible other versions affected not tested Vulnerable component: Database Report confidence: yes Solution status: Not fixed by...