Huawei cellular Wi-Fi driver suffers from input checksum vulnerability

Huawei Think 5 is a smartphone from the Chinese company Huawei Huawei. An input validation vulnerability exists in the Huawei Think 5 cellular Wi-Fi driver. An attacker could trick users into installing a malicious application, which could exploit the vulnerability to send specific parameters to...

Huawei H60 cell phone touthscreen driver suffers from stack overflow vulnerability

The Huawei H60 Honor 6 is a smartphone from the Chinese company Huawei. A stack overflow vulnerability exists in the touthscreen driver of the Huawei H60 phone. After an attacker induces a user to install a malicious application, the application can exploit the vulnerability to send specific...

Buffer Overflow Vulnerability in Huawei P9 Mobile Wi-Fi Driver

Huawei P9 is a smartphone from the Chinese company Huawei Huawei. A buffer overflow vulnerability in the Huawei P9 phone's Wi-Fi driver due to a lack of parameter checking can be exploited by an attacker to trick a user into installing a malicious application, which in turn can be exploited by th...

Apache CouchDB 2.0.0 Local Privilege Escalation

Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/APACHE-COUCHDB-LOCAL-PRIVILEGE-ESCALATION.txt + ISR: ApparitionSec Vendor: ================== couchdb.apache.org Product: ============== CouchDB v2.0.0 Apache CouchDB is open...

Huawei Play 5C phone TP touchscreen driver suffers from buffer overflow vulnerability

Huawei Play 5C is a smartphone from Huawei. A buffer overflow vulnerability exists in the TP touchscreen driver of the Huawei Play 5C phone. Due to the lack of parameter checking in the TP touchscreen driver, an attacker who gains root privileges and exploits the vulnerability can construct...

Privilege elevation vulnerability in TrustZone driver for some Huawei phones

Huawei P9, P9 Lite, P8 Lite are Huawei smartphones. An elevation of privilege vulnerability exists in the TrustZone driver of some Huawei phones. An attacker may trick users into installing a malicious application, and the application can exploit the vulnerability to send specific parameters to t...

Elevation of Privilege Vulnerability in Multiple Huawei Phones (CNVD-2016-11303)

Huawei Mate 8, Mate S, P8 are smartphones from Huawei. A security vulnerability in the form of missing parameter checking exists in several Huawei phones. The vulnerability is exploited on the premise that an attacker obtains Graphic or Camera permissions and induces the user to install a malicio...

Elevation of Privilege Vulnerability in Multiple Huawei Phones (CNVD-2016-11305)

Huawei Mate 8, Mate S, P8 are smartphones from Huawei. A security vulnerability in the form of missing parameter checking exists in several Huawei phones. The vulnerability is exploited on the premise that an attacker obtains Graphic or Camera permissions and induces the user to install a malicio...

Elevation of Privilege Vulnerability in Multiple Huawei Phones (CNVD-2016-11304)

Huawei Mate 8, Mate S, P8 are smartphones from Huawei. A security vulnerability in the form of missing parameter checking exists in several Huawei phones. The vulnerability is exploited on the premise that an attacker obtains Graphic or Camera permissions and induces the user to install a malicio...

NETGATE AMITI Antivirus 23.0.305 Privilege Escalation

Exploit Title: NETGATE AMITI Antivirus Unquoted Service Path Privilege Escalation Date: 15/10/2016 Author: Amir.ght Vendor Homepage: http://www.netgate.sk/ Software Link: http://www.netgate.sk/download/download.php?id=11 version : build 23.0.305 Latest Tested on: Windows 7 AMITI Antivirus install...

Stack overflow security vulnerability in Huawei phone video driver

The video driver for Huawei phones is a software that provides video capabilities. A stack overflow security vulnerability exists in the video driver for Huawei phones. Successful exploitation of the vulnerability by an attacker could result in a system reboot or user privilege elevation...

IObit Malware Fighter 4.3.1 - Unquoted Service Path Privilege Escalation

Exploit for windows platform in category local exploits Exploit Title: IObit Malware Fighter Unquoted Service Path Privilege Escalation Date: 12/10/2016 Author: Amir.ght Vendor Homepage: http://www.iobit.com/en/index.php Software Link:...

Wacom Consumer Service Privilege Escalation

Wacom Consumer Service: http://www.wacom.com By Ross Marks: http://www.rossmarks.co.uk Exploit-db: https://www.exploit-db.com/author/?a=8724 Category: Local Tested on: Windows 10 x86/x64 1 Unquoted Service Path Privilege Escalation Wacom's "Wacom Consumer Service" installs as a service with an...

Waves Audio Service - Unquoted Service Path Privilege Escalation Vulnerability

Exploit for windows platform in category local exploits Waves Audio Service: http://www.maxx.com By Ross Marks: http://www.rossmarks.co.uk Exploit-db: https://www.exploit-db.com/author/?a=8724 Category: Local Tested on: Windows 10 x86/x64 1 Unquoted Service Path Privilege Escalation Max audio...

Huawei Honor 4C Driver Input Validation Vulnerability (CNVD-2016-05175)

The Huawei Honor 4C 华为荣耀4C is a smartphone product of the Chinese company Huawei. An input validation vulnerability exists in the Huawei Honor 4C driver, which can be exploited by an attacker to cause a system reboot or user privilege elevation by tricking the user into installing a malicious...

Huawei HiSuite For Windows 4.0.3.301 Privilege Escalation

Vendor: Huawei, www.huawei.com Affected Product: HiSuite for Windows Affected Version: = 4.0.3.301 CVE ID: CVE-2016-5821 OVE ID: OVE-20160624-0001 Severity: High Author: Benjamin Gnahm @mitp0sh, Blue Frost Security GmbH Title: Huawei HiSuite Insecure Service Directory ACLs A privilege escalation...

Scientific Linux Security Update : kernel on SL6.x i386/x86_64 (20160323)

It was found that the fix for CVE-2015-1805 incorrectly kept buffer offset and buffer length in sync on a failed atomic read, potentially resulting in a pipe buffer state corruption. A local, unprivileged user could use this flaw to crash the system or leak kernel memory to user space...

Moderate: Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Updated kernel packages that fix one security issue, several bugs, and add one enhancement are now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a...

Oracle Linux 5 : kernel (ELSA-2016-0450)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2016-0450 advisory. - fb vm: convert fbmmap to vmiomapmemory helper Jacob Tanenbaum 1035240 CVE-2013-2596 - s390 add dummy ioremappfnrange to asm-s390/pgtable.h Jacob...

Scientific Linux Security Update : kernel on SL5.x i386/x86_64 (20160315)

An integer overflow flaw was found in the way the Linux kernel's Frame Buffer device implementation mapped kernel memory to user space via the mmap syscall. A local user able to access a frame buffer device file /dev/fb could possibly use this flaw to escalate their privileges on the system...