DEBIAN-CVE-2015-7837

The Linux kernel, as used in Red Hat Enterprise Linux 7, kernel-rt, and Enterprise MRG 2 and when booted with UEFI Secure Boot enabled, allows local users to bypass intended securelevel/secureboot restrictions by leveraging improper handling of secureboot flag across kexec reboot...

Linux kernel XFS_IS_REALTIME_INODE Macro Denial of Service Vulnerability

Linux kernel is an open source operating system. A security vulnerability in the XFSISREALTIMEINODE macro in the Linux kernel fs/xfs/xfslinux.h file allows local attackers to exploit the vulnerability by submitting a special request for a denial of service attack...

DEBIAN-CVE-2017-14340

The XFSISREALTIMEINODE macro in fs/xfs/xfslinux.h in the Linux kernel before 4.13.2 does not verify that a filesystem has a realtime device, which allows local users to cause a denial of service NULL pointer dereference and OOPS via vectors related to setting an RHINHERIT flag on a directory...

UBUNTU-CVE-2017-14340

The XFSISREALTIMEINODE macro in fs/xfs/xfslinux.h in the Linux kernel before 4.13.2 does not verify that a filesystem has a realtime device, which allows local users to cause a denial of service NULL pointer dereference and OOPS via vectors related to setting an RHINHERIT flag on a directory...

OpenFire 3.10.2 < 4.0.1 - Multiple Vulnerabilities

Several vulnerabilities doscovered in OpenFire version 3.10.2 to 4.0.1 Product Description OpenFire is an opensource project under GNU GPL licence. It provides a Jabber/XMPP server fully develloped in Java. It's develloped by the Ignite realtime community. The actual version of the product is...

RealTime RWR-3G-100 Router Cross-Site Request Forgery Vulnerability

RealTime RWR-3G-100 Router is a router from RealTime System India. A cross-site request forgery vulnerability exists in the RealTime RWR-3G-100 Router using firmware version 1.0.56. A remote attacker could exploit this vulnerability to force an end user to perform an unintended action...

CVE-2017-12853

The RealTime RWR-3G-100 Router Firmware Version : Ver1.0.56 is affected by CSRF an attack that forces an end user to execute unwanted actions on a web application in which they're currently authenticated...

CVE-2017-12853

The RealTime RWR-3G-100 Router Firmware Version : Ver1.0.56 is affected by CSRF an attack that forces an end user to execute unwanted actions on a web application in which they're currently authenticated...

Cross site request forgery (csrf)

The RealTime RWR-3G-100 Router Firmware Version : Ver1.0.56 is affected by CSRF an attack that forces an end user to execute unwanted actions on a web application in which they're currently authenticated...

CVE-2017-12853

The RealTime RWR-3G-100 Router Firmware Version : Ver1.0.56 is affected by CSRF an attack that forces an end user to execute unwanted actions on a web application in which they're currently authenticated...

CVE-2017-12853

The RealTime RWR-3G-100 Router Firmware Version : Ver1.0.56 is affected by CSRF an attack that forces an end user to execute unwanted actions on a web application in which they're currently authenticated...

CVE-2017-12853

The RealTime RWR-3G-100 Router Firmware Ver1.0.56 is affected by a Cross-Site Request Forgery (CSRF) vulnerability (CVE-2017-12853). Red Hat, CNVD, NVD and CVE records confirm CSRF could cause an end user to perform unintended actions while authenticated. CVSS indicates a NETWORK attack with high...

RealTime RWR-3G-100 Router - Cross-Site Request Forgery (Change Admin Password) Vulnerability

Exploit for hardware platform in category web applications /...

RealTime RWR-3G-100 Router - Cross-Site Request Forgery (Change Admin Password)

RealTime RWR-3G-100 Router - Cross-Site Request Forgery Change Admin Password !-- CHANGE...

RealTime RWR-3G-100 Router Cross Site Request Forgery

...

Realtime Subscriber Count - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Realtime Subscriber Count published at the 'play' market has multiple vulnerabilities...

Guest Post: Bamm Visscher on Detection

Yesterday my friend Bamm Visscher published a series of Tweets on detection. I thought readers might like to digest it as a lightly edited blog post. Here, then, is the first ever as far as I can remember guest post on TaoSecurity Blog. Enjoy. When you receive new threat intel and apply it in you...

WhatsApp may let you Recall Sent Messages and Track Friends Location in Realtime

Are you the victim of sending awkward WhatsApp messages to your friends, families, and colleagues while you're drunk? No need to panic now, as you'll soon be able to recall your drunk or mistakenly sent text messages on WhatsApp – a much-demanded feature. Recall Unread Messages Sent Mistakenly Th...

Get the Vehicle Information Such as the VIN from the Target Module

Post Module to query DTCs, Some common engine info and Vehicle Info. It returns such things as engine speed, coolant temp, Diagnostic Trouble Codes as well as All info stored by Mode $09 Vehicle Info, VIN, etc This module requires Metasploit: https://metasploit.com/download Current source:...

Ignite Realtime Smack Man-in-the-Middle Security Bypass Vulnerability

Ignite Realtime Smack is the open source XMPP client library for instant messaging and presentation. A security bypass vulnerability exists in Exponent Ignite Realtime Smack versions prior to version 4.1.9. Successful exploitation of this vulnerability may allow an attacker to perform unauthorize...