Microsoft Windows: Audit Other Logon/Logoff Events

Audit Other Logon/Logoff Events determines whether Windows generates audit events for other logon or logoff events. These other logon or logoff events include: - A Remote Desktop session connects or disconnects. - A workstation is locked or unlocked. - A screen saver is invoked or dismissed. - A...

CVE-2018-10569

An issue was discovered in Edimax EW-7438RPn Mini v2 before version 1.26. There is XSS in an SSID field...

The vulnerability of the `lim_send_sme_probe_req_ind` function in the Qualcomm WLAN operating system’s Android component from the CAF repository allows a hacker to escalate their privileges.

The vulnerability of the limsendsmeprobereqind function in the Qualcomm WLAN operating system’s Android component, as found in the CAF repository, is due to a buffer overflow. Exploiting this vulnerability could allow a malicious actor to gain increased privileges remotely...

The vulnerability of the Qualcomm WLAN operating system driver for Android from the CAF repository allows a hacker to increase their privileges.

The vulnerability of the Qualcomm WLAN operating system driver for Android, found in the CAF repository, is due to an overflow in the buffer in the “stack”. Exploiting this vulnerability can allow a remote attacker to gain increased privileges...

CVE-2016-5638 Netgear WNDR4500 running firmware version V1.0.1.40_1.0.6877 reveals some sensitive information such as 2.4GHz & 5GHz Wireless Network Name (SSID) and Network Key (Password) in clear text

There are few web pages associated with the genie app on the Netgear WNDR4500 running firmware version V1.0.1.401.0.6877. Genie app adds some capabilities over the Web GUI and can be accessed even when you are away from home. A remote attacker can access genieping.htm or genieping2.htm or...

Android Qualcomm WLAN Information Disclosure Vulnerability (CNVD-2018-13387)

Android on Google Pixel and Nexus is a Linux-based open source operating system for the Google Pixel and Nexus smartphones developed by Google Inc. and the Open Handset Alliance OHA, with Qualcomm WLAN being one of the components used. Qualcomm WLAN is a wireless LAN component developed by Qualco...

Google to Fix Location Data Leak in Google Home, Chromecast

Google in the coming weeks is expected to fix a location privacy leak in two of its most popular consumer products. New research shows that Web sites can run a simple script in the background that collects precise location data on people who have a Google Home or Chromecast device installed...

Microsoft Windows Wireless Network Profile Local Information Disclosure Vulnerability

Microsoft Windows 10 and others are a series of operating systems released by Microsoft Corporation in the U.S. Microsoft Windows 10 is a set of operating systems for personal computers.Windows Server 2016 is a set of server operating systems. A local information disclosure vulnerability exists i...

Microsoft Windows Wireless Network Profile CVE-2018-8209 Local Information Disclosure Vulnerability

Description Microsoft Windows is prone to a local information-disclosure vulnerability. Local attackers can exploit this issue to obtain sensitive information that may lead to further attacks. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Version...

KLA11266 Multiple vulnerabilities in Microsoft Windows

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to gain privileges, cause denial of service, bypass security restrictions, execute arbitrary code, obtain sensitive information. Below is a complete list of vulnerabilities: 1. An elevation...

Google Android MediaTek component elevation of privilege vulnerability (CNVD-2018-13167)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. An elevation of privilege vulnerability exists in the Google Android MediaTek component Mediatek WLAN TDLS. An attacker can exploit this vulnerability to achieve elevation of...

Yestv camera has an override access vulnerability

Yestv yestv camera is wireless network wifi smart monitor. The yestv camera is vulnerable to an override access vulnerability. With the obtained address and username password, an attacker can exploit the vulnerability to obtain video information from the camera...

CVE-2018-11477

An issue was discovered on Vgate iCar 2 Wi-Fi OBD2 Dongle devices. The data packets that are sent between the iOS or Android application and the OBD dongle are not encrypted. The combination of this vulnerability with the lack of wireless network protection exposes all transferred car data to the...

Design/Logic Flaw

An issue was discovered on Vgate iCar 2 Wi-Fi OBD2 Dongle devices. The data packets that are sent between the iOS or Android application and the OBD dongle are not encrypted. The combination of this vulnerability with the lack of wireless network protection exposes all transferred car data to the...

CVE-2018-11477

An issue was discovered on Vgate iCar 2 Wi-Fi OBD2 Dongle devices. The data packets that are sent between the iOS or Android application and the OBD dongle are not encrypted. The combination of this vulnerability with the lack of wireless network protection exposes all transferred car data to the...

CVE-2018-11477

CVE-2018-11477 affects Vgate iCar 2 Wi‑Fi OBD2 Dongle. The issue is that data packets between the mobile apps (iOS/Android) and the dongle are not encrypted, and there is a lack of wireless network protection. This potentially allows an attacker on the same network to access transferred car data....

Google Android WLAN Buffer Overflow Vulnerability (CNVD-2018-12402)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA, and WLAN is a wireless connection module used in it. There is a security vulnerability in WLAN in Android. An attacker can exploit the vulnerability to overwrite the buffer...

Google Android WLAN Buffer Overflow Vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA, and WLAN is a wireless connection module used in it. A buffer overflow vulnerability exists in WLAN in Android. An attacker could exploit this vulnerability to execute code or cau...

Cisco Aironet 1810, 1830, and 1850 Series Access Points Point-to-Point Tunneling Protocol Denial of Service Vulnerability

A vulnerability in the implementation of Point-to-Point Tunneling Protocol PPTP functionality in Cisco Aironet 1810, 1830, and 1850 Series Access Points could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service DoS condition. The...

CVE-2017-9657

Under specific 802.11 network conditions, a partial re-association of the Philips IntelliVue MX40 Version B.06.18 WLAN monitor to the central monitoring station is possible. In this state, the central monitoring station can indicate the MX40 is not connected or associated to the central monitor,...