CVE-2016-6917

Buffer overflow in nvhostjob.c in the NVIDIA video driver for Android, Shield TV before OTA 3.3, Shield Table before OTA 4.4, and Shield Table TK1 before OTA 1.5...

CVE-2016-6917

Buffer overflow in nvhostjob.c in the NVIDIA video driver for Android, Shield TV before OTA 3.3, Shield Table before OTA 4.4, and Shield Table TK1 before OTA 1.5...

CVE-2016-6917

CVE-2016-6917 is a buffer overflow in nvhost_job.c of the NVIDIA video driver for Android, affecting Shield TV (OTA 3.3) and Shield Table (OTA 4.4) and Shield Table TK1 (OTA 1.5). The underlying issue is a buffer overflow in nvhost_job.c that can cause a system crash. The NVIDIA security bulletin...

SQL Injection Vulnerability in Shield Spirit Public Number Promotion System yaoqinguser.php

Shield Spirit public number promotion system is a public number promotion system for individuals and businesses. Shield Spirit public number promotion system yaoqinguser.php SQL injection vulnerability, due to the lack of 'username' parameter filtering, allowing attackers to exploit the...

Radio Hack Box - Tool to Demonstrate Vulnerabilities in Wireless Input Devices

The SySS Radio Hack Box is a proof-of-concept software tool to demonstrate the replay and keystroke injection vulnerabilities of the wireless keyboard Cherry B.Unlimited AES. Requirements Raspberry Pi Raspberry Pi Radio Hack Box shield a LCD, some LEDs, and some buttons nRF24LU1+ USB radio dongle...

Installer of PhishWall Client Internet Explorer version may insecurely load Dynamic Link Libraries

Overview PhishWall Client Internet Explorer version, provided by SecureBrain Corporation, is an anti-phishing and anti-MITB software. The installer of PhishWall Client Internet Explorer version contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries...

JVN#93699304: Installer of PhishWall Client Internet Explorer version may insecurely load Dynamic Link Libraries

PhishWall Client Internet Explorer version, provided by SecureBrain Corporation, is an anti-phishing and anti-MITB software. The installer of PhishWall Client Internet Explorer version contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427...

Arbitrary code execution vulnerability in Shield Spirit public number promotion system setup.php page

Shield Spirit Public Promotion System is a product that is mainly applied to public promotion alliance. An arbitrary code execution vulnerability exists in the setup.php page of the Shield Spirit Public Promotion System. Allow attackers to exploit the vulnerability to directly execute code...

SQL Injection Vulnerability in Shield Spirit Public Number Promotion System vip.php Page

Shield Spirit Public Promotion System is a product that is mainly applied to public promotion alliance. A SQL injection vulnerability exists in the vip.php page of Shield Spirit Public Number Promotion System. Allow attackers to exploit the vulnerability to obtain sensitive database information...

Information Disclosure Through Logs

logstash-core is vulnerable to information disclosure. The vulnerability is possible because it logs information from HTTP authorization headers which could contain sensitive information. Users who use secure communication from logstash to elasticsearch via basic authorization using elastic shiel...

SQL Injection Vulnerability in Shield Spirit Public Number Promotion System reg.php Page

Shield Spirit Public Promotion System is a product that is mainly applied to public promotion alliance. A SQL injection vulnerability exists in the username parameter of the Shield Spirit public number promotion system \php\reg.php page. An attacker can exploit the vulnerability to obtain sensiti...

Shield Spirit Public Promotion System setup.php has a reinstallation vulnerability

Shield Spirit public number promotion system is mainly applied to public number promotion affiliate. A reinstallation vulnerability exists in Shield Spirit Public Promotion System setup.php. As the program fails to validate the installation, an attacker can reinstall the system by exploiting the...

SQL Injection Vulnerability in Shield Spirit Public Number Promotion System Login.php

Shield Spirit public number promotion system is mainly applied to public number promotion affiliate. A SQL injection vulnerability exists in the login.php of the Shield Spirit public number promotion system. Since the username variable in the statement gets data directly from post, it allows...

Security Bulletin: NVIDIA SHIELD Contains Multiple Vulnerabilities in nvhost_job.c

Vulnerability Details CVE-2016-6915 NVIDIA nvhostjob.c contains a vulnerability in the stack buffer overflow, leading to a system crash Android Security Bulletin – December 2016 CVSS Base Score: 8.4 CVSS Temporal Score: 7.6 CVSS Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C...

Authentication Bypass Vulnerability in Shield Spirit Public Promotion System check.php

Shield Spirit public number promotion system is mainly applied to public number promotion affiliate. An authentication bypass vulnerability exists in the Shield Spirit Public Number Promotion System check.php. It allows an attacker to gain unauthorized access to the system's administration page t...

CVE-2016-6915

Stack-based buffer overflow in nvhostjob.c in the NVIDIA video driver for Android, Shield TV before OTA 3.3, Shield Table before OTA 4.4, and Shield Table TK1 before OTA 1.5...

CVE-2016-6917

Buffer overflow in nvhostjob.c in the NVIDIA video driver for Android, Shield TV before OTA 3.3, Shield Table before OTA 4.4, and Shield Table TK1 before OTA 1.5...

CVE-2016-6916

Integer overflow in nvhostjob.c in the NVIDIA video driver for Android, Shield TV before OTA 3.3, Shield Table before OTA 4.4, and Shield Table TK1 before OTA 1.5 allows local users to cause a denial of service system crash via unspecified vectors, which triggers a buffer overflow...

Hotspot Shield 6.0.3 - Unquoted Service Path Privilege Escalation

Exploit for windows platform in category local exploits Exploit Title: Hotspot Shield Unquoted Service Path Privilege Escalation Date: 13/10/2016 Author: Amir.ght Vendor Homepage: https://www.hotspotshield.com Software Link: https://www.hotspotshield.com/download/ version : 6.0.3 Latest Tested on...

Hotspot Shield 6.0.3 Privilege Escalation

Exploit Title: Hotspot Shield Unquoted Service Path Privilege Escalation Date: 13/10/2016 Author: Amir.ght Vendor Homepage: https://www.hotspotshield.com Software Link: https://www.hotspotshield.com/download/ version : 6.0.3 Latest Tested on: Windows 7 Hotspot Shield installs as a service with an...