Google Android Camera Sequential Privilege Access Control Vulnerability

Android on Google Pixel and Nexus is a Linux-based open source operating system for Google Pixel and Nexus smartphones developed by Google and the Open Handheld Alliance OHA.Camera is one of the camera components. A privilege access control vulnerability exists in Camera in Android on Google Pixe...

Google Android Qualcomm Snapdragon display engine privilege access control vulnerability

Android on Google Pixel and Nexus is a Linux-based open source operating system for Google Pixel and Nexus smartphones developed by Google Inc. and the Open Handset Alliance OHA.The Qualcomm Snapdragon The Qualcomm Snapdragon display engine is one of the display engine components. A privilege...

Google Android Qualcomm QTEECOM Driver Privilege Access Control Vulnerability

Android on Google Pixel and Nexus is an open source Linux-based operating system for Google Pixel and Nexus smartphones developed by Google Inc. and the Open Handset Alliance OHA.Qualcomm QTEECOM driver The Qualcomm QTEECOM driver is one of the Secure Execution Environment Communicator drivers. A...

BaserCMS Privilege Access Control Vulnerability

baserCMS is an enterprise-level content management system CMS. A privilege access control vulnerability exists in baserCMS versions 4.1.0.1 and earlier and 3.0.15 and earlier, which stems from the program failing to restrict access. The vulnerability can be exploited by a remote attacker to bypas...

2018 Cyberthreat Defense Report: Where IT Security Is Going

What keeps you awake at night? We asked IT security professionals the same question and found that these issues are top of mind: malware and spear phishing, securing mobile devices, employee security awareness and new technologies that detect threats capable of bypassing traditional signature-bas...

Kupu Privilege Access Control Vulnerability

Kupu is an open source text editor. A security vulnerability exists in Kupu. A remote attacker can exploit this vulnerability to edit Kupu settings...

Damon database suffers from an override modification process vulnerability (CNVD-2018-03645)

DM7 is a new-generation database product designed by Damon on the basis of summarizing the R&D and application experience of DM series products, absorbing the advantages of mainstream database products, and adopting JAVA-like virtual machine technology. DM7 database has the loophole of oversteppi...

CVE-2017-5260

In versions 4.3.2-R4 and prior of Cambium Networks cnPilot firmware, although the option to access the configuration file is not available in the normal web administrative console for the 'user' account, the configuration file is accessible via direct object reference DRO at...

CVE-2017-9957: Use of Hard-coded Credentials

A vulnerability exists in Schneider Electric's U.motion Builder software versions 1.2.1 and prior in which the web service contains a hidden system account with a hardcoded password. An attacker can use this information to log into the system with high-privilege credentials...

Barracuda Load Balancer Privilege Access Control Vulnerability

Barracuda Load Balancer is an application delivery controller from Barracuda Networks. The controller provides protection against intrusions and attacks while optimizing application load and providing strong performance support. A power lifting vulnerability exists in Barracuda Load Balancer...

Buffer overflow

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. The supported version that is affected is Prior to 5.1.24. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to...

ProjectSend r754 - Insecure Direct Object Reference Vulnerability

Exploit for php platform in category web applications Document Title: =============== ProjectSend r754 - IDOR & Authentication Bypass Vulnerability Product & Service Introduction: =============================== ProjectSend is a self-hosted application you can install it easily on your own VPS or...

IBM TS3100 and TS3200 Tape Library Privilege Access Vulnerability

IBM TS3100 and TS3200 Tape Library are tape libraries developed by IBM in the United States for small and medium-sized environments to address backup, recovery and archival data storage. A security vulnerability exists in IBM TS3100 and TS3200 Tape Library versions D.60 and earlier. An attacker...

F5 BIG-IP - QEMU vulnerability CVE-2012-3515

The remote host is missing a security patch. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/h:f5:big-ip"; if description...

IBM MQ M2000 Appliance GSKit Privilege Access Control Vulnerability

GSKit on IBM MQ M2000 appliancesIBM MQ M2000 Appliance is an all-in-one appliance for rapid deployment of enterprise-class messaging middleware from IBM, U.S.A. GSKit is a set of security management tools. A security vulnerability exists in GSKit in IBM MQ M2000 Appliance versions prior to 8.0.0....

IBM System Networking Switch Center Contention Condition Vulnerability

IBM System Networking Switch Center is a suite of applications used to remotely monitor and manage Ethernet converged switches from IBM USA, which was acquired by Lenovo of China. A contention condition vulnerability exists in IBM System Networking Switch Center versions prior to 7.3.1.5 and Leno...

CVE-2015-5838

SpringBoard in Apple iOS before 9 does not properly restrict access to privileged API calls, which allows attackers to spoof the dialog windows of an arbitrary app via a crafted app...

Mobile Devices C4 OBD2 Dongle Privilege Access Vulnerability (CNVD-2015-05627)

The Mobile Devices aka MDI C4 OBD2 Dongle is a programmable OBD2 solution from the French company Mobile Devices. A security vulnerability exists in the Mobile Devices C4 OBD2 Dongle that arises from different user installers storing the same SSH private key. A remote attacker could exploit the...

Windows NDProxy Privilege Escalation XP SP3 x86 and 2003 SP2 x86 (MS14-002) Exploit

NDPROXY is a system-provided driver that interfaces WAN miniport drivers, call managers, and miniport call managers to the Telephony Application Programming Interfaces TAPI services. The vulnerability is caused when the NDProxy.sys kernel component fails to properly validate input. An attacker wh...

ManageEngine SupportCenter Plus 7.90 - Multiple Vulnerabilities

Exploit for multiple platform in category web applications Document Title: =============== ManageEngine SupportCenter Plus 7.90 - Multiple Vulnerabilities Product & Service Introduction: =============================== SupportCenter Plus is a web-based customer support software that lets...