Input validation

Under specific 802.11 network conditions, a partial re-association of the Philips IntelliVue MX40 Version B.06.18 WLAN monitor to the central monitoring station is possible. In this state, the central monitoring station can indicate the MX40 is not connected or associated to the central monitor,...

CVE-2017-9657

Under specific 802.11 network conditions, a partial re-association of the Philips IntelliVue MX40 Version B.06.18 WLAN monitor to the central monitoring station is possible. In this state, the central monitoring station can indicate the MX40 is not connected or associated to the central monitor,...

CVE-2017-9657

The CVE-2017-9657 entry describes an 802.11 WLAN issue in Philips IntelliVue MX40 (Version B.06.18) where partial re-association to the central monitor can leave the MX40 in telemetry mode while the central station expects local monitoring, potentially delaying alarms. Root causes cited include I...

CVE-2017-9657: Improper Cleanup on Thrown Exception

Under specific 802.11 network conditions, a partial re-association of the Philips IntelliVue MX40 Version B.06.18 WLAN monitor to the central monitoring station is possible. In this state, the central monitoring station can indicate the MX40 is not connected or associated to the central monitor,...

PT-2018-8518

Name of the Vulnerable Software and Affected Versions Philips IntelliVue MX40 Version B.06.18 Description The issue occurs under specific 802.11 network conditions, where a partial re-association of the Philips IntelliVue MX40 WLAN monitor to the central monitoring station is possible. This can...

Android WLAN Component Code Execution

The vulnerability of the wmaunifiedbcntxstatuseventhandler function in the Android WLAN operating system from the CAF repository involves reading data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code within a privileged proces...

Android WLAN Component Heap Buffer Overflow DoS

The vulnerability of the wmaroamscanfilter function in the Android WLAN operating system from the CAF repository is related to buffer overflow attacks. Exploiting this vulnerability could allow an attacker to execute arbitrary code within the context of a privileged process, using a specially...

Android WLAN Component Heap Buffer Overflow DoS

The vulnerability of the oemcmdhandler function in the Android operating system’s WLAN component from the CAF repository is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to disclose sensitive information using a...

Android WLAN Heap Buffer Overflow DoS

The vulnerability of the wmanlomatchevthandler function in the Android WLAN operating system from the CAF repository is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code within a privileged...

Android WLAN wma_p2p_noa_event_handler Code Execution

The vulnerability of the wmap2pnoaeventhandler function in the Android operating system, originating from the CAF repository, is related to the execution of operations outside of memory buffers. Exploiting this vulnerability could allow an attacker to execute arbitrary code within a privileged...

Android WLAN lim_process_action_vendor_specific Disclosure

The vulnerability of the limprocessactionvendorspecific function in the Android WLAN operating system from the CAF repository arises due to an operation occurring outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to disclose sensitive information that is...

Android WLAN Component Code Execution

The vulnerability of the wmaunifiedlinkpeerstatseventhandler function in the Android WLAN operating system from the CAF repository is caused by buffer overflow. Exploiting this vulnerability could allow an attacker to execute arbitrary code within the context of a privileged process, using a...

CVE-2016-10481

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9635M, MDM9640, MDM9650, QCA4531, QCA6174A, QCA6574AU, QCA6584, QCA6584AU, QCA9377, QCA9378, QCA9379, SD 210/SD 212/SD 205, SD 425, SD 600, SD 625, SD 650/52, SD 808...

Design/Logic Flaw

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9635M, MDM9640, MDM9650, QCA4531, QCA6174A, QCA6574AU, QCA6584, QCA6584AU, QCA9377, QCA9378, QCA9379, SD 210/SD 212/SD 205, SD 425, SD 600, SD 625, SD 650/52, SD 808...

CVE-2016-10481

CVE-2016-10481 affects Qualcomm WLAN firmware in Android devices; when WLAN FW receives the WMI_STA_SMPS_PARAM_CMDID ioctl in a not-associated state and the virtual channel handle is unassigned, the code does not null-check the handle, causing an assert. The entry is mapped to a high-severity, ne...

PT-2018-4651

Name of the Vulnerable Software and Affected Versions Android versions prior to 2018-04-05 security patch level Description The issue concerns the printing of debug messages in certain Qualcomm Snapdragon Mobile processors. Specifically, when the wlan qmi err cb function is called, it prints the...

CVE-2016-10481: Undefined Security Weakness

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9635M, MDM9640, MDM9650, QCA4531, QCA6174A, QCA6574AU, QCA6584, QCA6584AU, QCA9377, QCA9378, QCA9379, SD 210/SD 212/SD 205, SD 425, SD 600, SD 625, SD 650/52, SD 808...

Barco ClickShare CSE-200 Denial Of Service

!/usr/bin/python Exploit Title: Barco ClickShare CSE-200 - Remote Denial of Service Date: 11-04-2018 Hardware Link: https://www.barco.com/de/product/clickshare-cse-200 Exploit Author: Florian Hauser Contact: florian DOT g DOT hauser AT gmail DOT com CVE: requested by Barco Category: Hardware...

Barco ClickShare CSE-200 - Remote Denial of Service

Barco ClickShare CSE-200 - Remote Denial of Service !/usr/bin/python Exploit Title: Barco ClickShare CSE-200 - Remote Denial of Service Date: 11-04-2018 Hardware Link: https://www.barco.com/de/product/clickshare-cse-200 Exploit Author: Florian Hauser Contact: florian DOT g DOT hauser AT gmail DOT...

Windows Send Probe Request Packets

This module send probe requests through the wlan interface. The ESSID field will be use to set a custom message. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Windows Send Probe Request...