Hardcoded credentials

Sonatype Nexus Repository Manager through 2.14.5 has weak password encryption with a hardcoded CMMDwoV value in the LDAP integration feature...

CVE-2017-17717

Sonatype Nexus Repository Manager through 2.14.5 has weak password encryption with a hardcoded CMMDwoV value in the LDAP integration feature...

CVE-2017-17717

CVE-2017-17717 affects Sonatype Nexus Repository Manager up to version 2.14.5. The vulnerability lies in the LDAP integration feature, which uses hard-coded CMMDwoV values to encrypt passwords, resulting in weak password encryption. Documents consistently describe the issue as a weakness in passw...

CVE-2017-17717

Sonatype Nexus Repository Manager through 2.14.5 has weak password encryption with a hardcoded CMMDwoV value in the LDAP integration feature...

Multiple OEM - 'nsd' Remote Stack Format String (PoC)

STX Subject: Remote Stack Format String in 'nsd' binary from multiple OEM Attack vector: Remote Authentication: Anonymous no credentials needed Researcher: bashis December 2017 PoC: https://github.com/mcw0/PoC Release date: December 14, 2017 Full Disclosure: 0-Day - PoC - 1 $ curl...

Google Android Media framework information disclosure vulnerability (CNVD-2017-38460)

Android on Google Pixel and Nexus is a Linux-based open source operating system for the Google Pixel and Nexus smartphones developed by Google and the Open Handset Alliance OHA, of which the Media framework is a part. Media framework is one of the multimedia development framework. An information...

Google Android telephony power lifting vulnerability

Android on Google Pixel and Nexus is a Linux-based open source operating system for the Google Pixel and Nexus smartphones developed by Google and the Open Handset Alliance OHA. telephony is one of the components that provides telephony functionality. Telephony is one of the components that...

Google Android Media framework information disclosure vulnerability (CNVD-2017-38467)

Android on Google Pixel and Nexus is a Linux-based open source operating system for the Google Pixel and Nexus smartphones developed by Google and the Open Handset Alliance OHA, of which the Media framework is a part. Media framework is one of the multimedia development framework. An information...

Google Android Media framework information disclosure vulnerability (CNVD-2017-38457)

Android on Google Pixel and Nexus is a Linux-based open source operating system for the Google Pixel and Nexus smartphones developed by Google and the Open Handset Alliance OHA, of which the Media framework is a part. Media framework is one of the multimedia development framework. An information...

Google Patches Critical Encryption Bug Impacting Pixel, Nexus Phones

Google patched a critical encryption bug found on its Pixel, Pixel 2 and Nexus phones this week along with delivering 49 other fixes, part of its December Pixel / Nexus Security Bulletin. Five of the patches relate to vulnerabilities rated high. One of the patches CVE-2017-13167 is for an elevati...

Google Android Kernel SCSI Driver Elevation of Privilege Vulnerability

Android on Google Pixel and Nexus is a Linux-based open source operating system for Google Pixel and Nexus smartphones developed by Google and the Open Handheld Alliance OHA.Kernel SCSI driver is a kernel SCSI small computer system interface driver used in the Kernel SCSI driver is a kernel SCSI...

Google Android Kernel MTP USB Driver Elevation of Privilege Vulnerability

Android on Google Pixel and Nexus is an open source Linux-based operating system for Google Pixel and Nexus smartphones developed by Google and the Open Handheld Alliance OHA.Kernel MTP USB driver is a USB data transfer driver using the Kernel MTP USB driver is one of the USB data transfer driver...

Google Android NVIDIA libwilhelm Information Disclosure Vulnerability

Android on Google Pixel and Nexus is an open source Linux-based operating system for the Google Pixel and Nexus smartphones developed by Google and the Open Handset Alliance OHA, of which NVIDIA libwilhelm is a library developed by NVIDIA. NVIDIA libwilhelm is one of the libraries developed by...

Google Android Kernel Camera Server Information Disclosure Vulnerability

Android on Google Pixel and Nexus is an open source Linux-based operating system for Google Pixel and Nexus smartphones developed by Google and the Open Handheld Alliance OHA. Kernel Camera server is one of the kernel camera servers. An information disclosure vulnerability exists in the Kernel...

Google Android Qualcomm Display Information Disclosure Vulnerability

Android on Google Pixel and Nexus is a Linux-based open source operating system for the Google Pixel and Nexus smartphones developed by Google Inc. and the Open Handset Alliance OHA, of which Qualcomm Display is one of the components. Qualcomm Display is one of the display components developed by...

Google Android Qualcomm Wireless networking information disclosure vulnerability

Android on Google Pixel and Nexus is a Linux-based open source operating system for the Google Pixel and Nexus smartphones developed by Google Inc. and the Open Handset Alliance OHA.Qualcomm Wireless networking is one of the wireless networking components used by Qualcomm. Networking is a Qualcom...

Google Android Broadcom Component Elevation of Privilege Vulnerability (CNVD-2017-36944)

Android on Google Pixel and Nexus is an open source Linux-based operating system for the Google Pixel and Nexus smartphones developed by Google and the Open Handheld Alliance OHA, in which the Broadcom driver is used. Broadcom driver is a Broadcom driver component for Broadcom devices. An elevati...

Google Android Qualcomm WLAN Information Disclosure Vulnerability

Android on Google Pixel and Nexus is a Linux-based open source operating system for the Google Pixel and Nexus smartphones developed by Google Inc. and the Open Handset Alliance OHA, with Qualcomm WLAN being one of the components used. Qualcomm WLAN is a wireless LAN component developed by Qualco...

Google Android Kernel File System Elevation of Privilege Vulnerability

Android on Google Pixel and Nexus is an open source Linux-based operating system for Google Pixel and Nexus smartphones developed by Google and the Open Handset Alliance OHA, of which the Kernel File system is a component. Kernel File system is one of the kernel file system components. The Kernel...

Google Android MediaTek Bluetooth Driver Elevation of Privilege Vulnerability

Android on Google Pixel and Nexus is a Linux-based open source operating system for the Google Pixel and Nexus smartphones developed by Google Inc. and the Open Handset Alliance OHA.MediaTek bluetooth driver is one of the MediaTek bluetooth drivers used in this program. driver is a MediaTek...