CVE-2017-18079

A flaw was found in the Linux kernel's implementation of i8042 serial ports. An attacker could cause a kernel panic if they are able to add and remove devices as the module is loaded...

The vulnerability of the dvb_frontend_free function (drivers/media/dvb-core/dvb_frontend.c) in the Linux kernel allows a hacker to cause a service failure or exert other effects.

The vulnerability of the dvbfrontendfree function located in the drivers/media/dvb-core/dvbfrontend.c file in the Linux kernel is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker, operating locally, to cause service failures or other effects...

The vulnerability of the parse_hid_report_descriptor function (drivers/input/tablet/gtco.c) in the Linux operating system allows a hacker to trigger a service failure or exert other effects.

The vulnerability of the parsehidreportdescriptor function in the Linux kernel’s drivers/input/tablet/gtco.c file arises from a read operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause service failures or other effects such as...

Oracle PeopleSoft 8.5x - Remote Code Execution

Oracle PeopleSoft 8.5x - Remote Code Execution Exploit Title: RCE vulnerability in monitor service of PeopleSoft 8.54, 8.55, 8.56 Date: 30 Oct 2017 Exploit Author: Vahagn Vardanyan Vendor Homepage: Oracle Software Link: Oracle PeopleSoft Version: 8.54, 8.55, 8.56 Tested on: Windows, Linux CVE :...

The vulnerability of the ptp_unpack_OPL function in the libmtp library, which allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the ptpunpackOPL function in the libmtp library exists due to a mistake related to integer overflow. Exploiting this vulnerability could allow a malicious actor to cause service failures or execute arbitrary code when a mobile device is connected via a USB cable...

CVE-2017-3765

In Enterprise Networking Operating System ENOS in Lenovo and IBM RackSwitch and BladeCenter products, an authentication bypass known as "HP Backdoor" was discovered during a Lenovo security audit in the serial console, Telnet, SSH, and Web interfaces. This bypass mechanism can be accessed when...

CVE-2017-3765

In Enterprise Networking Operating System ENOS in Lenovo and IBM RackSwitch and BladeCenter products, an authentication bypass known as "HP Backdoor" was discovered during a Lenovo security audit in the serial console, Telnet, SSH, and Web interfaces. This bypass mechanism can be accessed when...

Hoermann BiSecur Device Key Acquisition Vulnerability

Hoermann BiSecur devices is a security door remote control device from Hoermann Germany. A security vulnerability exists in Hoermann BiSecur devices prior to version 2018. An attacker could exploit the vulnerability by recording a single radio broadcast to intercept radio frames between the BiSec...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2018-4001)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2018-4001 advisory. - USB: serial: console: fix use-after-free after failed setup Johan Hovold Orabug: 27206830 CVE-2017-16525 - uwb: properly check kthreadrun return...

Telesquare SKT LTE Router SDT-CS3B1 - Information Disclosure Vulnerability

Exploit for hardware platform in category web applications Telesquare SKT LTE Router SDT-CS3B1 Insecure Direct Object Reference Info Leak Vendor: Telesquare Co., Ltd. Product web page: http://www.telesquare.co.kr Affected version: FwVer: SDT-CS3B1, sw version 1.2.0 LteVer: ML300S5XEA41090 1 0.1.0...

Telesquare SKT LTE Router SDT-CS3B1 - Information Disclosure

Telesquare SKT LTE Router SDT-CS3B1 Insecure Direct Object Reference Info Leak Vendor: Telesquare Co., Ltd. Product web page: http://www.telesquare.co.kr Affected version: FwVer: SDT-CS3B1, sw version 1.2.0 LteVer: ML300S5XEA41090 1 0.1.0 Modem model: PM-L300S Summary: We introduce SDT-CS3B1 LTE...

The vulnerability of the Linux operating system’s kernel allows a hacker to trigger a service failure or cause other adverse effects.

The vulnerability of the Linux operating system’s kernel sound/core/seqdevice.c is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure or other effects through a specially crafted USB device...

The vulnerability of the Linux operating system’s kernel allows a hacker to trigger a service failure or cause other adverse effects.

The vulnerability of the Linux operating system’s kernel drivers/usb/core/config.c arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure or other effects by using a specially crafted USB device tha...

The vulnerability of the cdc_parse_cdc_header function in the Linux operating system’s kernel allows a attacker to cause a service failure or exert other effects.

The vulnerability of the cdcparsecdcheader function in the Linux kernel’s drivers/usb/core/message.c file arises from the execution of an operation outside the buffer in memory. Exploiting this vulnerability could allow an attacker to cause a service failure or other adverse effects through a...

The vulnerability of the usbhid_parse function in the Linux operating system’s kernel allows a hacker to cause a service failure or exert other effects.

The vulnerability of the usbhidparse function in the Linux kernel’s drivers/hid/usbhid/hid-core.c file arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a system failure or other adverse effects through a...

The vulnerability of the Linux operating system’s kernel (sound/usb/mixer.c) allows a hacker to cause a service failure or exert other effects.

The vulnerability of the Linux operating system’s kernel sound/usb/mixer.c is related to the use of memory after it is freed in sndusbmixerinterrupt. Exploiting this vulnerability can allow a attacker to cause service failures or other effects through a specially crafted USB device...

The vulnerability of the imon_probe function in the Linux operating system allows a hacker to cause a service failure or exert other effects.

The vulnerability of the imonprobe function in the Linux kernel’s drivers/media/rc/imon.c file is related to pointer arithmetic errors. Exploiting this vulnerability could allow an attacker to cause system failures or other adverse effects through a specially crafted USB device...

The vulnerability of the `usbSerialConsoleDisconnect` function (drivers/usb/serial/console.c) in the Linux kernel allows a hacker to cause a service failure or exert other effects.

The vulnerability of the usbserialconsoledisconnect function in the Linux kernel’s drivers/usb/serial/console.c file relates to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure or other effects through a specially crafted USB...

The vulnerability of the `usb_get_bos_descriptor` function in the Linux operating system’s kernel allows a hacker to cause a service failure or exert other effects.

The vulnerability of the usbgetbosdescriptor function in the Linux kernel’s drivers/usb/core/config.c file relates to reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to cause a service failure or other effects through a specially created USB device...

The vulnerability of the `snd_usb_create_streams` function in the Linux operating system allows a hacker to cause a service failure or exert other effects.

The vulnerability of the sndusbcreatestreams function in the Linux kernel stems from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure or other effects through a specially crafted USB device...