Design/Logic Flaw

While processing modem SSR after IMS is registered, the IMS data daemon is restarted but the ipcdataHandle is no longer available. Consequently, the DPL thread frees the internal memory for dataDHandle but the local variable pointer is not updated which can lead to a Use After Free condition in...

CVE-2018-5891

While processing modem SSR after IMS is registered, the IMS data daemon is restarted but the ipcdataHandle is no longer available. Consequently, the DPL thread frees the internal memory for dataDHandle but the local variable pointer is not updated which can lead to a Use After Free condition in...

@bani2812/teasilent (1.1.4), @cetiak/tea-open-source1 (1.0.1) +60 more potentially affected by CVE-2018-6184 via next (>=1.2.3, <=4.2.1)

next NPM version =1.2.3, =0.0.1, =1.0.0, =1.0.0, =1.0.5, =0.3.0, =0.1.8, =0.1.0, =1.0.2, =1.3.21, =0.0.80, =1.0.0, =1.1.0 and more Source cves: CVE-2018-6184 Source advisory: OSV:GHSA-M34X-WGRH-G897...

Top Gear: Stunt School SSR - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Top Gear: Stunt School SSR published at the 'play' market has multiple vulnerabilities...

[UNIX] Discuz! Command Execution Vulnerability

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...