183 matches found
[SECURITY] Fedora 34 Update: axel-2.17.10-1.fc34
Axel tries to accelerate HTTP/FTP downloading process by using multiple connections for one file. It can use multiple mirrors for a download. Axel has no dependencies and is lightweight, so it might be useful as a wget clone on byte-critical systems...
CVE-2019-12500
The Xiaomi M365 scooter 2019-02-12 before 1.5.1 allows spoofing of "suddenly accelerate" commands. This occurs because Bluetooth Low Energy commands have no server-side authentication check. Other affected commands include suddenly braking, locking, and unlocking...
Authentication flaw
The Xiaomi M365 scooter 2019-02-12 before 1.5.1 allows spoofing of "suddenly accelerate" commands. This occurs because Bluetooth Low Energy commands have no server-side authentication check. Other affected commands include suddenly braking, locking, and unlocking...
CVE-2019-12500
The CVE-2019-12500 entry concerns the Xiaomi M365 scooter. The vulnerability is rooted in Bluetooth Low Energy commands lacking server-side authentication, enabling spoofing of critical controls such as a sudden acceleration, braking, locking, and unlocking. Affected firmware is prior to 1.5.1. D...
PT-2019-12829
Name of the Vulnerable Software and Affected Versions Xiaomi M365 scooter versions prior to 1.5.1 Description The issue allows spoofing of commands, including "suddenly accelerate", due to the lack of server-side authentication check for Bluetooth Low Energy commands. Other affected commands...
CVE-2019-12500: Missing Authentication for Critical Function
The Xiaomi M365 scooter 2019-02-12 before 1.5.1 allows spoofing of "suddenly accelerate" commands. This occurs because Bluetooth Low Energy commands have no server-side authentication check. Other affected commands include suddenly braking, locking, and unlocking...
The Xiaomi M365 Scooter Can Be Hacked to Speed Up or Stop
A hacker can accelerate Xiaomi M365 scooter—or hit the breaks—while a rider is on it...
ImageMagick ComputeResizeImage function stack buffer vulnerability
ImageMagick is a software for creating, editing, and compositing images that can read, convert, and write images in many formats. A stack buffer vulnerability exists in the ComputeResizeImage function in the MagickCore/accelerate.c file in ImageMagick 7.0.7-22. A remote attacker can cause a denia...
Mac OS X 10.9.5 or later < 10.11.1 Multiple Vulnerabilities
Binary data 9324.prm...
Apple iOS < 9.1 Multiple Vulnerabilities
Binary data 9328.prm...
PHP DOS vulnerability new: CVE-2 0 1 5-4 0 2 4 Reviewed-vulnerability warning-the black bar safety net
0x01 bypassing the WAF principle According to the PHP DOS vulnerability principle, in multipartbufferheaders function parses the header of the corresponding value, the value value exists in the n rows. Each line of the string with whitespace at the beginning or does not exist. character':'are...
Apple iOS/OS X Arbitrary Code Execution Vulnerability
OS X formerly Mac OS X is the latest version of Apple's proprietary operating system for the Macintosh computer. iOS is an operating system developed by Apple for mobile devices. A security vulnerability exists in Apple iOS versions prior to 9.1 and Apple OS X versions prior to 10.11.1 when...
APPLE-SA-2015-10-21-1 iOS 9.1
APPLE-SA-2015-10-21-1 iOS 9.1 iOS 9.1 is now available and addresses the following: Accelerate Framework Available for: iPhone 4s and later, iPod touch 5th generation and later, iPad 2 and later Impact: Visiting a maliciously crafted website may lead to arbitrary code execution Description: A...
CVE-2015-5940
The Accelerate Framework component in Apple iOS before 9.1 and OS X before 10.11.1, when multi-threading is enabled, omits certain validation and locking steps, which allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site...
Memory corruption
The Accelerate Framework component in Apple iOS before 9.1 and OS X before 10.11.1, when multi-threading is enabled, omits certain validation and locking steps, which allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site...
CVE-2015-5940
The Accelerate Framework component in Apple iOS before 9.1 and OS X before 10.11.1, when multi-threading is enabled, omits certain validation and locking steps, which allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site...
CVE-2015-5940
CVE-2015-5940 affects Apple iOS prior to 9.1 and OS X prior to 10.11.1 where the Accelerate Framework, when multi-threading is enabled, omits validation/locking steps, enabling a remote attacker to trigger memory corruption and potentially execute arbitrary code or cause a denial of service via a...
PT-2015-7090
Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 9.1 Apple OS X versions prior to 10.11.1 Description The issue allows remote attackers to execute arbitrary code or cause a denial of service due to memory corruption via a crafted web site, when multi-threading is...
CVE-2015-5940: Improper Restriction of Operations within the Bounds of a Memory Buffer
The Accelerate Framework component in Apple iOS before 9.1 and OS X before 10.11.1, when multi-threading is enabled, omits certain validation and locking steps, which allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site...