Code injection

Off-by-one error in server/wifi/anqp/VenueNameElement.java in Wi-Fi in Android 6.x before 2016-10-01 and 7.0 before 2016-10-01 allows remote attackers to cause a denial of service reboot via an access point that provides a crafted 1 Venue Group or 2 Venue Type value, aka internal bug 29464811...

Waves Audio Service Privilege Vulnerability

Waves Audio Service is a powerful audio service from Waves. An elevation of privilege vulnerability exists in Waves Audio Service, which stems from the default installation of Max audio drivers with the service path unquoted and running with SYSTEM privileges, which allows a local attacker to...

Android Qualcomm GPS/GNSS Man-In-The-Middle

Original at: https://wwws.nightwatchcybersecurity.com/2016/10/04/advisory-cve-2016-5348-2/ Summary Android devices can be crashed remotely forcing a halt and then a soft reboot by a MITM attacker manipulating assisted GPS/GNSS data provided by Qualcomm. This issue affects the open source code in...

Wacom Consumer Service Privilege Escalation

Wacom Consumer Service: http://www.wacom.com By Ross Marks: http://www.rossmarks.co.uk Exploit-db: https://www.exploit-db.com/author/?a=8724 Category: Local Tested on: Windows 10 x86/x64 1 Unquoted Service Path Privilege Escalation Wacom's "Wacom Consumer Service" installs as a service with an...

anonym8 - Transparent Proxy through TOR, I2P, Privoxy, Polipo and modify DNS

Transparent Proxy through TOR, I2P, Privoxy, Polipo and modify DNS, for a simple and better privacy and security; Include Anonymizing Relay Monitor arm, macchanger, hostname and wipe Cleans ram/cache & swap-space features. Tested on Debian, Kali, Parrot to use the graphical interface, you'll need...

Waves Audio Service - Unquoted Service Path Privilege Escalation Vulnerability

Exploit for windows platform in category local exploits Waves Audio Service: http://www.maxx.com By Ross Marks: http://www.rossmarks.co.uk Exploit-db: https://www.exploit-db.com/author/?a=8724 Category: Local Tested on: Windows 10 x86/x64 1 Unquoted Service Path Privilege Escalation Max audio...

CVE-2016-1454

Cisco NX-OS 4.0 through 7.3 and 11.0 through 11.2 on 1000v, 2000, 3000, 3500, 5000, 5500, 5600, 6000, 7000, 7700, and 9000 devices allows remote attackers to cause a denial of service device reload by leveraging a peer relationship to send a crafted BGP UPDATE message, aka Bug IDs CSCuq77105 and...

XenServer Host become responsive In Reboot/Shutdown

XenServer hangs on reboot with following message in serial logs Sending all processes the TERM signal... Sending all processes the KILL signal... Saving random seed: Syncing hardware clock to system time Turning off swap: Unmounting pipe file systems: Unmounting file systems: Please stand by whil...

All paths in multipath are not visible in XenServer after a reboot

After a XenServer Host reboot, some of the paths are not visible when typing the command multipath -ll...

Cisco IOS Common Industrial Protocol Denial of Service Vulnerability

Cisco IOS is an operating system developed by Cisco for its network devices.Common Industrial Protocol CIP is one of the industrial protocols used for industrial automation applications. A denial of service vulnerability exists in the CIP functionality in Cisco IOS. A remote attacker could exploi...

Cisco IOS and IOS XE Software Denial of Service Vulnerability (CNVD-2016-08397)

Cisco IOS and IOS XE Software are both operating systems developed by Cisco for its network devices. A denial of service vulnerability exists in the H.323 subsystem in Cisco IOS and IOS XE Software, which arises from a program's failure to properly validate fields in the H.323 protocol group. A...

CVE-2016-8279

The video driver in Huawei Mate S smartphones with software CRR-TL00 before CRR-TL00C01B362, CRR-UL20 before CRR-UL20C00B362, CRR-CL00 before CRR-CL00C92B362, and CRR-CL20 before CRR-CL20C92B362; P8 smartphones with software GRA-TL00 before GRA-TL00C01B366, GRA-UL00 before GRA-UL00C00B366, GRA-UL...

Denial of Service Vulnerability in Multiple Huawei Firewall Devices

The Huawei USG9580, 9560 and 9520 are all USG9500 series firewall appliances from Huawei, China. A security vulnerability exists in the Huawei USG9520, USG9560, and USG9580, which allows remote attackers to exploit the vulnerability by submitting a special request to access the device and reboot...

How to reset root password of NetScaler SDX

This article describes how to reset the root password of NetScaler SDX running on XenServer. Note: If you are a XenServer user, do not refer to this article. Instead, see the XenServer documentation. Background For the XenServer component of a NetScaler SDX, a lost root password can be overwritte...

CVE-2016-6158

Multiple cross-site request forgery CSRF vulnerabilities in Huawei WS331a routers with software before WS331a-10 V100R001C01B112 allow remote attackers to hijack the authentication of administrators for requests that 1 restore factory settings or 2 reboot the device via unspecified vectors...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in Huawei WS331a routers with software before WS331a-10 V100R001C01B112 allow remote attackers to hijack the authentication of administrators for requests that 1 restore factory settings or 2 reboot the device via unspecified vectors...

CVE-2016-6158

CVE-2016-6158 concerns Huawei WS331a routers running software before WS331a-10 V100R001C01B112. The vulnerability is a Cross-Site Request Forgery (CSRF) in the management interface that lets an unauthenticated attacker cause actions like restoring factory settings or rebooting the device by issui...

CVE-2016-6158

Multiple cross-site request forgery CSRF vulnerabilities in Huawei WS331a routers with software before WS331a-10 V100R001C01B112 allow remote attackers to hijack the authentication of administrators for requests that 1 restore factory settings or 2 reboot the device via unspecified vectors...

Multiple Huawei Switches Remote Denial of Service Vulnerabilities

The Huawei S7700, S9300, S9700, and S12700 are intelligent routing switches from Huawei, a Chinese company. A remote denial of service vulnerability exists in multiple Huawei Switches. A remote attacker can exploit this vulnerability by sending a large number of malicious packets to cause a denia...

StoreFront 2.5 not loading apps

Storefront URL when logging in doesn't load any applications and just comes up after logging in with "Spinning wheel" Issue is fixed by rebooting the Storefront servers every time it happens. Also sometimes "Cannot complete you request" error comes after login...