CVE-2016-2345

CVE-2016-2345 affects SolarWinds DameWare Mini Remote Control (dwmrcs) daemon: dwrcs.exe in version 12.0 is vulnerable to a stack-based buffer overflow triggered by a crafted string, enabling remote code execution. The issue is documented across multiple sources (NVD, CERT/CC, OpenVAS, Exploit-DB...

Pyronix SMS Remote Control - Customized SSL, MIT license vulnerabilities

HackApp vulnerability scanner discovered that application Pyronix SMS Remote Control published at the 'play' market has multiple vulnerabilities...

PT-2016-5124

Name of the Vulnerable Software and Affected Versions DameWare Mini Remote Control version 12.0 Description The issue is a stack-based buffer overflow in the dwmrcs daemon, specifically in the dwrcs.exe component. This allows remote attackers to execute arbitrary code via a crafted string...

CVE-2016-2345: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in dwrcs.exe in the dwmrcs daemon in SolarWinds DameWare Mini Remote Control 12.0 allows remote attackers to execute arbitrary code via a crafted string...

Haier (Haier) HK-50C5WD Appliance Power Smart Security WI-FI Socket with Replay Attack Vulnerability

Haier Haier HK-50C5WD Home Appliance Bao Smart Security WI-FI Socket is a smart socket from Haier Qingdao. Haier HK-50C5WD Home Appliance Po Smart Security WI-FI Socket has a security vulnerability. Allows remote and near-field control of its on and off via a mobile app, which utilizes and analyz...

AirDroid Patches Vulnerability Exposing Android Data

A critical vulnerability impacting 50 million Android users running the popular AirDroid application has been patched. AirDroid, an app that allows you link an Android device to a computer and send SMS messages, run apps and add contacts via a Wi-Fi connected web browser, released the patch Jan...

UBUNTU-CVE-2016-2392

The isrndis function in the USB Net device emulator hw/usb/dev-network.c in QEMU before 2.5.1 does not properly validate USB configuration descriptor objects, which allows local guest OS administrators to cause a denial of service NULL pointer dereference and QEMU process crash via vectors...

D-Link Webcam Hack Turns IoT Device into Backdoor

Connecting a webcam to your home or office network might seem like a harmless thing, but researchers have figured out how to turn that connected device into a backdoor. Researchers at Vectra Networks today released a report demonstrating how a $30 D-Link webcam can be abused by attackers and turn...

戴尔（Dell）远程控制卡脆弱的Session-ID机制

No description provided by source...

GPS satellite positioning platform vulnerability disaster, the user location information in an emergency-vulnerability warning-the black bar safety net

Recently, the press exposure a lot of plays through the GPS positioning device trace abduction. By on the market on some of the GPS positioning device research, found that these GPS positioning system background using a common set of procedures, its Cloud Platform on the presence of multiple...

IOT security: LED lights there are multiple security vulnerabilities-vulnerability warning-the black bar safety net

Recently, there are foreign security experts found Zengge company WIFI LED lamp in the presence of a plurality of security vulnerabilities. Shenzhen levy Aurora Mega science and technologyZENGGE is a set of LED Controller product development, manufacturing, sales and engineering design,...

SlemBunk: An Evolving Android Trojan Family Targeting Users of Worldwide Banking Apps

FireEye mobile researchers recently identified a series of Android trojan apps that are designed to imitate the legitimate apps of 33 financial management institutions and service providers across the globe. We dub the family “SlemBunk,” and have seen it covering three major continents: North...

Multiple Vulnerabilities in the Integrated Management System of AnPulse Technology

An Pulse Technology Integrated Management System is a set of educational management software. The system is vulnerable to arbitrary file upload, arbitrary file inclusion, and multiple editor vulnerabilities. An attacker can exploit the vulnerabilities to gain remote control of the web server host...

SolarWinds DameWare Mini Remote Control Detection (credentialed check)

Binary data solarwindsdamewareminiremotecontrolinstalled.nbin...

SolarWinds DameWare Mini Remote Control < 12.0 Hotfix 2 SSLv3 Padding Oracle On Downgraded Legacy Encryption (POODLE)

The remote host is running a version of SolarWinds DameWare Mini Remote Control prior to 12.0 Hotfix 2. It is, therefore, affected by a man-in-the-middle MitM information disclosure vulnerability known as POODLE. The vulnerability is due to the way SSL 3.0 handles padding bytes when decrypting...

SolarWinds DameWare Mini Remote Control < 12.0 Hotfix 1 DWRCC.exe RCE

The remote host is running a version of SolarWinds DameWare Mini Remote Control prior to 12.0 Hotfix 1. It is, therefore, affected by a remote code execution vulnerability due to a flaw in the DWRCC.exe URI handler that is triggered when handling certain command line arguments. An unauthenticated...

Stack overflow

Stack-based buffer overflow in the URI handler in DWRCC.exe in SolarWinds DameWare Mini Remote Control before 12.0 HotFix 1 allows remote attackers to execute arbitrary code via a crafted commandline argument in a link...

CVE-2015-8220: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in the URI handler in DWRCC.exe in SolarWinds DameWare Mini Remote Control before 12.0 HotFix 1 allows remote attackers to execute arbitrary code via a crafted commandline argument in a link...

PT-2015-7747

Name of the Vulnerable Software and Affected Versions SolarWinds DameWare Mini Remote Control versions prior to 12.0 HotFix 1 Description The issue is related to a stack-based buffer overflow in the URI handler of DWRCC.exe, which allows remote attackers to execute arbitrary code via a crafted...

SolarWinds DameWare Mini Remote Control URI Handler Stack Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of SolarWinds DameWare Mini Remote Control. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...