Android Privilege Escalation

The vulnerability of the drivers/media/platform/msm/camerav2/isp/msmispaxiutil.c component of Qualcomm’s Android operating system is related to the lack of flow control checks. Exploiting this vulnerability allows a remote attacker to enhance their privileges through a specially created applicati...

Android Privilege Escalation

The vulnerability of the drivers/media/platform/msm/camerav2/isp/msmispstatsutil.c component of Qualcomm’s Android operating system is related to the lack of checks for certain index values. Exploiting this vulnerability can allow a remote attacker to increase their privileges through a specially...

Design/Logic Flaw

The Configuration utility in F5 BIG-IP systems 11.0.x, 11.1.x, 11.2.x before 11.2.1 HF16, 11.3.x, 11.4.x before 11.4.1 HF10, 11.5.x before 11.5.4 HF2, 1.6.x before 11.6.1, and 12.0.0 before HF1 allows remote administrators to read Access Policy Manager APM access logs via unspecified vectors...

CVE-2016-1497

The Configuration utility in F5 BIG-IP systems 11.0.x, 11.1.x, 11.2.x before 11.2.1 HF16, 11.3.x, 11.4.x before 11.4.1 HF10, 11.5.x before 11.5.4 HF2, 1.6.x before 11.6.1, and 12.0.0 before HF1 allows remote administrators to read Access Policy Manager APM access logs via unspecified vectors...

CVE-2016-1497

The Configuration utility in F5 BIG-IP systems 11.0.x, 11.1.x, 11.2.x before 11.2.1 HF16, 11.3.x, 11.4.x before 11.4.1 HF10, 11.5.x before 11.5.4 HF2, 1.6.x before 11.6.1, and 12.0.0 before HF1 allows remote administrators to read Access Policy Manager APM access logs via unspecified vectors...

CVE-2016-1497

The Configuration utility in F5 BIG-IP systems 11.0.x, 11.1.x, 11.2.x before 11.2.1 HF16, 11.3.x, 11.4.x before 11.4.1 HF10, 11.5.x before 11.5.4 HF2, 1.6.x before 11.6.1, and 12.0.0 before HF1 allows remote administrators to read Access Policy Manager APM access logs via unspecified vectors...

CVE-2016-1497

The CVE-2016-1497 issue affects the BIG-IP Configuration utility across multiple BIG-IP releases and allows an authorized admin to read APM access logs via the Configuration utility. Impact is exposure of session details in Access Policy Manager logs; an attacker must have a valid BIG-IP admin ac...

CVE-2016-1497: Exposure of Sensitive Information to an Unauthorized Actor

The Configuration utility in F5 BIG-IP systems 11.0.x, 11.1.x, 11.2.x before 11.2.1 HF16, 11.3.x, 11.4.x before 11.4.1 HF10, 11.5.x before 11.5.4 HF2, 1.6.x before 11.6.1, and 12.0.0 before HF1 allows remote administrators to read Access Policy Manager APM access logs via unspecified vectors...

PT-2016-4843

Name of the Vulnerable Software and Affected Versions F5 BIG-IP systems versions 11.0.x through 11.2.x before 11.2.1 HF16 F5 BIG-IP systems versions 11.3.x F5 BIG-IP systems versions 11.4.x before 11.4.1 HF10 F5 BIG-IP systems versions 11.5.x before 11.5.4 HF2 F5 BIG-IP systems versions 11.6.x...

Unspecified Vulnerability in F5 BIG-IP Configuration Utility

F5 BIG-IP is an all-in-one network appliance that integrates network traffic management, application security management, load balancing and other functions from F5 USA. A security vulnerability exists in the F5 BIG-IP, which can be exploited by remote attackers to gain access to the Access Polic...

CVE-2015-8022: Undefined Security Weakness

The Configuration utility in F5 BIG-IP LTM, Analytics, APM, ASM, GTM, and Link Controller 11.x before 11.2.1 HF16, 11.3.x, 11.4.x before 11.4.1 HF10, 11.5.x before 11.5.4, and 11.6.x before 11.6.1; BIG-IP AAM 11.4.x before 11.4.1 HF10, 11.5.x before 11.5.4, and 11.6.x before 11.6.1; BIG-IP AFM an...

Lenovo Service Engine (LSE) BIOS for Desktop

Lenovo Security Advisory: LEN-2015-077 Potential Impact: Limited use of system resources Severity: Low Summary: Lenovo has released a utility to remove files configured by Lenovo Service Engine LSE on desktop systems running Windows 8 and 8.1 to follow updated security guidelines from Microsoft...

F5 BIG-IP - BIG-IP file validation vulnerability CVE-2015-8022

The BIG-IP Configuration utility may not properly validate file type or contents where uploaded files are allowed in the Access Policy Manager customization configuration section. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and ar...

Apache APR-util and httpd Denial of Service Vulnerabilities

Apache APR-util and httpd are the United States Apache Apache Software Foundation products. The former is an application can be used across multiple operating system platforms to provide the underlying support for the development of interface libraries , the latter is a special operating system...

F5 Networks BIG-IP : BIG-IP file validation vulnerability (K12401251)

The Configuration utility in F5 BIG-IP LTM, Analytics, APM, ASM, GTM, and Link Controller 11.x before 11.2.1 HF16, 11.3.x, 11.4.x before 11.4.1 HF10, 11.5.x before 11.5.4, and 11.6.x before 11.6.1; BIG-IP AAM 11.4.x before 11.4.1 HF10, 11.5.x before 11.5.4, and 11.6.x before 11.6.1; BIG-IP AFM an...

Android on Nexus Qualcomm Component Privilege Acquisition Vulnerability (CNVD-2016-06245)

Android on Nexus 7 is an open source Linux-based operating system for the Nexus 7 smartphone developed by Google and the Open Handset Alliance OHA.Qualcomm is one of the Qualcomm components used in the Qualcomm devices. Qualcomm is a Qualcomm component used in one of Qualcomm's devices. A...

F5 Networks BIG-IP : BIG-IP APM access logs vulnerability (K31925518)

A vulnerability in the BIG-IP Configuration utility can be used by an unauthorized BIG-IP administrative user to gain unauthorized access to the Access Policy Manager APM access logs. This vulnerability requires valid user account credentials and access to the Configuration utility. This flaw...

[SECURITY] Fedora 24 Update: kf5-kdesignerplugin-5.24.0-1.fc24

This framework provides plugins for Qt Designer that allow it to display the widgets provided by various KDE frameworks, as well as a utility kgendesignerplugin that can be used to generate other such plugins from ini-style description files...

How to Collect Xcode Logs

You can collect system logs on iOS devices either by using iPhone Configuration Utility tool or Xcode. You can then email the files to Citrix support for help troubleshoot issues with apps...

Meinberg NTP Time Server ELX800/GPS M4x V5.30p - Remote Command Execution / Escalate Privileges

!/usr/bin/python EDB Note: Source https://github.com/securifera/CVE-2016-3962-Exploit EDB Note: More info https://www.securifera.com/blog/2016/07/17/time-to-patch-rce-on-meinberg-ntp-time-server/ 271 - trigger notifications 299 - copy user defined notifications Kernel Version: 2.6.15.1 System...