530 matches found
CVE-2016-3931: Undefined Security Weakness
drivers/misc/qseecom.c in the Qualcomm QSEE Communicator driver in Android before 2016-10-05 on Nexus 5X, Nexus 6, Nexus 6P, and Android One devices allows attackers to gain privileges via a crafted application, aka Android internal bug 29157595 and Qualcomm internal bug CR 1036418...
PT-2016-2621
Name of the Vulnerable Software and Affected Versions Android versions prior to 2016-08-05 Description The issue is related to the lack of validation of certain pointers in the drivers/misc/qseecom.c file of the Qualcomm components in Android. This allows attackers to gain privileges via a crafte...
CVE-2014-9865: Improper Access Control
drivers/misc/qseecom.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 and 7 2013 devices does not properly restrict user-space input, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28748271 and Qualcomm internal bug CR550013...
CVE-2014-9884: Improper Input Validation
drivers/misc/qseecom.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 and 7 2013 devices does not validate certain pointers, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28769920 and Qualcomm internal bug CR580740...
CVE-2014-9894: Exposure of Sensitive Information to an Unauthorized Actor
drivers/misc/qseecom.c in the Qualcomm components in Android before 2016-08-05 on Nexus 7 2013 devices does not ensure that certain name strings end in a '\0' character, which allows attackers to obtain sensitive information via a crafted application, aka Android internal bug 28749708 and Qualcom...
CVE-2014-9887: Undefined Security Weakness
drivers/misc/qseecom.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 and 7 2013 devices does not validate certain length values, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28804057 and Qualcomm internal bug CR636633...
PT-2016-2618
Name of the Vulnerable Software and Affected Versions Android versions prior to 2016-08-05 Description The issue is related to the lack of validation of certain length values in the drivers/misc/qseecom.c file of the Qualcomm components in Android. This allows attackers to gain privileges via a...
CVE-2014-9891: Undefined Security Weakness
drivers/misc/qseecom.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 devices does not validate certain buffer addresses, which allows attackers to gain privileges via a crafted application that makes an ioctl call, aka Android internal bug 28749283 and Qualcomm internal bug...
CVE-2014-9864: Improper Input Validation
drivers/misc/qseecom.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 and 7 2013 devices does not validate ioctl calls, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28747998 and Qualcomm internal bug CR561841...
PT-2016-2639
Name of the Vulnerable Software and Affected Versions Android versions prior to 2016-08-05 Description The issue is related to the improper restriction of user-space input in the drivers/misc/qseecom.c file of the Qualcomm components in Android. This allows attackers to gain privileges via a...
kernel security and bug fix update
3.10.0-327.28.2.OL7 - Oracle Linux certificates Alexey Petrenko 3.10.0-327.28.2 - net bridge: include in6.h in ifbridge.h for struct in6addr Jiri Benc 1331285 1268057 - net inet: defines IPPROTO needed for module alias generation Jiri Benc 1331285 1268057 - net sync some IP headers with glibc Jir...
CVE-2014-9787: Undefined Security Weakness
Integer overflow in drivers/misc/qseecom.c in the Qualcomm components in Android before 2016-07-05 on Nexus 7 2013 devices allows attackers to gain privileges via a crafted application, aka Android internal bug 28571496 and Qualcomm internal bug CR545764...
CVE-2014-9785: Undefined Security Weakness
drivers/misc/qseecom.c in the Qualcomm components in Android before 2016-07-05 on Nexus 7 2013 devices does not validate addresses before copying data, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28469042 and Qualcomm internal bug CR545747...
Post Exploitation Powershell Tool: mimikittenz
Post Exploitation Powershell Tool mimikittenz is a post-exploitation powershell tool that utilizes the Windows function ReadProcessMemory in order to extract plain-text passwords from various target processes. mimikittenz can also easily extract other kinds of juicy info from target processes usi...
CVE-2016-2188
The iowarriorprobe function in drivers/usb/misc/iowarrior.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service NULL pointer dereference and system crash via a crafted endpoints value in a USB device descriptor...
CVE-2016-3689: Undefined Security Weakness
The imspcuparsecdcdata function in drivers/input/misc/ims-pcu.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service system crash via a USB device without both a master and a slave interface...
Android Privilege Escalation
The vulnerability of the MediaTek misc-sd driver for the Android operating system is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to enhance their privileges through a specially created application...
Android MediaTek misc-sd elevation of privilege vulnerability
Android is a cell phone operating system based on the Linux open kernel. A security vulnerability exists in the implementation of the MediaTek misc-sd driver in versions of Android prior to 5.1.1 LMY49F, and 6.0 prior to 2016-01-01. A remote attacker can exploit the vulnerability to gain elevated...
