Conext ComBox 865-1058 - Denial of Service

Exploit Title: Conext ComBox - Denial of Service HTTP-POST Description: The exploit cause the device to self-reboot, constituting a denial of service. Google Dork: "Conext ComBox" + "JavaScript was not detected" /OR/ "Conext ComBox" + "Recover Lost Password" Date: March 02, 2017 Exploit Author:...

CVE-2017-6297

The L2TP Client in MikroTik RouterOS versions 6.83.3 and 6.37.4 does not enable IPsec encryption after a reboot, which allows man-in-the-middle attackers to view transmitted data unencrypted and gain access to networks on the L2TP server by monitoring the packets for the transmitted data and...

CVE-2017-6297

The L2TP Client in MikroTik RouterOS versions 6.83.3 and 6.37.4 does not enable IPsec encryption after a reboot, which allows man-in-the-middle attackers to view transmitted data unencrypted and gain access to networks on the L2TP server by monitoring the packets for the transmitted data and...

Huawei Mobile Goldeneye Driver Buffer Overflow Vulnerability

Huawei GT3, Honor 5C, Honor V8, P9 Lite, and Y6 II are a smartphone product of Huawei China. A buffer overflow vulnerability exists in the Goldeneye driver of Huawei phones, which can be exploited by an attacker to trick a user into installing a malicious application that sends specific parameter...

The vulnerability of the Windows operating system, which allows a perpetrator to trigger a service failure

The vulnerability of the LSASS component in the Windows operating system exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to trigger a service failure reboot through a specially crafted authentication request...

Huawei Mobile Emergdata Driver Buffer Overflow Vulnerability

The Huawei Honor Play 5A is a smartphone product from the Chinese company Huawei Huawei. A buffer overflow vulnerability exists in the Emergdata driver of the Huawei phone, which can be exploited by an attacker to trick users into installing a malicious application that sends specific parameters ...

CVE-2017-0422

A denial of service vulnerability in Bionic DNS could enable a remote attacker to use a specially crafted network packet to cause a device hang or reboot. This issue is rated as High due to the possibility of remote denial of service. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1,...

CVE-2017-0422

A denial of service vulnerability in Bionic DNS could enable a remote attacker to use a specially crafted network packet to cause a device hang or reboot. This issue is rated as High due to the possibility of remote denial of service. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1,...

CVE-2017-0422

A denial of service vulnerability in Bionic DNS could enable a remote attacker to use a specially crafted network packet to cause a device hang or reboot. This issue is rated as High due to the possibility of remote denial of service. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1,...

CVE-2017-0422

CVE-2017-0422 is a DoS in Android’s Bionic DNS that can be triggered by a crafted network packet to cause a device hang or reboot. Affected Android versions include 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, and 7.1.1. The vulnerability stems from the Bionic DNS component and is remote in scope (netwo...

The vulnerability in the built-in software of NETGEAR routers such as NETGEAR R8500, NETGEAR R8300, NETGEAR R7000, NETGEAR R6400, NETGEAR R7300DST, NETGEAR R7100LG, NETGEAR R6300v2, NETGEAR WNDR3400v3, NETGEAR WNDR3500Lv2, NETGEAR R6250, NETGEAR R6700, NETGEAR R6900, NETGEAR R8000, NETGEAR R7900, NETGEAR WNDR4500v2, NETGEAR R6200v2, NETGEAR WNDR3400v2, NETGEAR D6220, NETGEAR D6400, NETGEAR C6300, NETGEAR R6200, NETGEAR R6300, NETGEAR VENG2610, NETGEAR AC1450, NETGEAR WNDR1000v3, NETGEAR WNDR3700v3, NETGEAR WNDR4000, NETGEAR WNDR4500, NETGEAR D6300, NETGEAR D6300B, NETGEAR DGN2200Bv4, and NETGEAR DGN2200v4, allows a hacker to obtain user password information.

The vulnerability of the embedded software of NETGEAR routers such as NETGEAR R8500, NETGEAR R8300, NETGEAR R7000, NETGEAR R6400, NETGEAR R7300DST, NETGEAR R7100LG, NETGEAR R6300v2, NETGEAR WNDR3400v3, NETGEAR WNDR3500Lv2, NETGEAR R6250, NETGEAR R6700, NETGEAR R6900, NETGEAR R8000, NETGEAR R7900,...

January 30, 2017—KB4010672 (OS Build 14393.729)

None None...

FiberHome Fengine S5800 Switches Denial of Service Vulnerability

FiberHome Fengine S5800 Switches are the new generation of Gigabit routing switches launched by FiberHome to meet the needs of multi-service access and high-density aggregation. With high-density Gigabit ports and 10 Gigabit uplink, this series of routers and switches can meet the diverse...

OnePlus 3 and 3T Denial of Service Vulnerability

OnePlus 3 and 3T are two smartphones from OnePlus Technologies. A denial of service vulnerability exists in the OnePlus 3 and 3T. A remote attacker can exploit the vulnerability to reboot the device and cause a denial of service...

CVE-2017-5554

An issue was discovered in ABOOT in OnePlus 3 and 3T OxygenOS before 4.0.2. The attacker can reboot the device into the fastboot mode, which could be done without any authentication. A physical attacker can press the "Volume Up" button during device boot, where an attacker with ADB access can iss...

Huawei P9 Lock Screen Bypass Vulnerability

Huawei P9 is a smartphone product of Huawei, China. Huawei P9 suffers from a lock screen bypass vulnerability. An unauthenticated attacker can force the phone into fastboot mode and delete the user's password file during a phone reboot. The lock screen password disappears after the phone reboots...

Huawei P9 Plus TP Driver Input Checksum Vulnerability

Huawei P9 Plus is a smartphone product from Huawei, China. An input checksum security vulnerability exists in the touchscreen driver of the Huawei P9 Plus phone. An attacker could trick users into installing a malicious application, and the application could exploit the vulnerability to send...

You Can Crash Anyone's iPhone Or iPad With A Simple Emoji Text Message

A newly discovered bug in Apple's iOS mobile operating system is being exploited in a prank that lets anyone crash your iPhone or iPad by just sending an emoji-filled iMessage, according to several reports. YouTube star EverythingApplePro published a video highlighting a sequence of characters th...

CVE-2016-6526

The SpamCall Activity component in Telecom application on Samsung Note device L5.0/5.1 and M6.0 allows attackers to cause a denial of service crash and reboot or possibly gain privileges via a malformed serializable object...

Juniper Junos Denial of Service Vulnerability (CNVD-2017-00604)

Juniper Junos is a Juniper Networks network operating system designed for the company's hardware systems. The operating system provides a secure programming interface and the Junos SDK. A denial of service vulnerability exists in Juniper Junos. An attacker could exploit this vulnerability to caus...