8752 matches found
Multiple I-O DATA Recording Hard disk products vulnerable to cross-site request forgery
Overview Multiple Recording Hard disk products provided by I-O DATA DEVICE, INC. contain a cross-site request forgery vulnerability due to an issue in the web management screen. kaito834 reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early...
win32k.sys SfnOUTSTRING Local Kernel Denial of Service Vulnerability
Win32k.sys is a multi-user management driver file for Windows XP. A local kernel denial of service vulnerability exists in the win32k.sys SfnOUTSTRING function. An attacker can exploit the vulnerability to launch a denial of service attack, resulting in a blue screen and reboot of the system. In...
CVE-2016-3838
Android 6.x before 2016-08-01 allows attackers to cause a denial of service loss of locked-screen 911 functionality via a crafted application that uses the app-pinning feature, aka internal bug 28761672...
CVE-2016-3838
Android 6.x before 2016-08-01 allows attackers to cause a denial of service loss of locked-screen 911 functionality via a crafted application that uses the app-pinning feature, aka internal bug 28761672...
CVE-2016-3838: Improper Access Control
Android 6.x before 2016-08-01 allows attackers to cause a denial of service loss of locked-screen 911 functionality via a crafted application that uses the app-pinning feature, aka internal bug 28761672...
Android OS Screen Lock Change
The vulnerability of the server/LockSettingsService.java script of the LockSettingsService component in the Android operating system is related to errors in managing registration data. Exploiting this vulnerability could allow a malicious actor, operating locally, to change the screen lock passwo...
Android System UI Denial of Service Vulnerability
Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. system UI is the system interface that comes with Android. A denial of service vulnerability exists in System UI in Android. An attacker can exploit this vulnerability by using a...
ownCloud: Arbitrary Code Injection in ownCloud’s Windows Client
The current ownCloud Windows Desktop client is prone to an arbitrary code injection vulnerability. The underlying issue is that the ownCloud desktop client tries to load QT extensions from C:\usr\i686-w64-mingw32\sys-root\mingw\lib\qt5\plugins. As any authenticated user on Windows is allowed to...
Centreon 2.5.3 - Web Useralias Command Execution (Metasploit)
Exploit for python platform in category remote exploits This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class MetasploitModule 'Centreon Web Useralias Command Execution', 'Description' = %q Centreon...
Centreon 2.5.3 - Web Useralias Command Execution (Metasploit)
This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class MetasploitModule 'Centreon Web Useralias Command Execution', 'Description' = %q Centreon Web Interface 'h00die ', module 'Nicolas CHATELAIN '...
CVE-2016-4595
Safari Login AutoFill in Apple OS X before 10.11.6 allows physically proximate attackers to discover passwords by reading the screen during the login procedure...
PT-2022-10473 · Caribou +2 · Caribou +2
Name of the Vulnerable Software and Affected Versions: Caribou affected versions not specified Description: A flaw was found in Caribou due to a regression of a previous fix. An attacker could use this flaw to bypass screen-locking applications that leverage Caribou as an input mechanism. The...
Log pollution can potentially lead to local HTML injection - ownCloud
The "download log" functionality in the admin screen is delivering the log in JSON format to the end-user. The file was delivered with an attachment disposition forcing the browser to download the document. However, Firefox running on Microsoft Windows would offer the user to open the data in the...
Server: Log pollution can potentially lead to local HTML injection
The "download log" functionality in the admin screen is delivering the log in JSON format to the end-user. The file was delivered with an attachment disposition forcing the browser to download the document. However, Firefox running on Microsoft Windows would offer the user to open the data in the...
Log pollution can potentially lead to local HTML injection (NC-SA-2016-002)
The "download log" functionality in the admin screen is delivering the log in JSON format to the end-user. The file was delivered with an attachment disposition forcing the browser to download the document. However, Firefox running on Microsoft Windows would offer the user to open the data in the...
PVS Targets Displays Blue Screen With Error Code 7B On Xenserver 6.1 and Later
PVS targets give a blue screen error code 7B when on Xenserver 6.1 or later hypervisor...
Screen Off and Lock - External URLs, Suspicious files vulnerabilities
HackApp vulnerability scanner discovered that application Screen Off and Lock published at the 'play' market has multiple vulnerabilities...
CVE-2016-3749
server/LockSettingsService.java in LockSettingsService in Android 6.x before 2016-07-01 allows attackers to modify the screen-lock password or pattern via a crafted application, aka internal bug 28163930...
CVE-2016-3749
server/LockSettingsService.java in LockSettingsService in Android 6.x before 2016-07-01 allows attackers to modify the screen-lock password or pattern via a crafted application, aka internal bug 28163930...
CVE-2016-3749
server/LockSettingsService.java in LockSettingsService in Android 6.x before 2016-07-01 allows attackers to modify the screen-lock password or pattern via a crafted application, aka internal bug 28163930...