Hanwha Techwin Smartcam web interface switching hidden function vulnerability

Hanwha Techwin Smartcam is a series of security surveillance cameras based on cloud-based services. Hanwha Techwin Smartcam has a hidden feature that switches the web interface, which can be exploited by an attacker to manipulate the web interface...

Trend Micro Email Encryption Gateway Arbitrary Command Execution Vulnerability

Trend Micro Email Encryption is a suite of identity-based email encryption solutions from Trend Micro, Inc. The Trend Micro Email Encryption Gateway TMEEG is one of the gateway products that provides data protection. An arbitrary command execution vulnerability exists in Trend Micro Email...

CVE-2017-5132

Inappropriate implementation in V8 in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page, aka incorrect WebAssembly stack manipulation...

Huawei Secospace AntiDDoS8000 Memory Leak Vulnerability

Huawei Secospace AntiDDoS8000 is a firewall product from Huawei, China. A memory leak vulnerability exists in Huawei Secospace AntiDDoS8000 V500R001C20SPC500 version, which is due to the program failing to properly free memory. An attacker could exploit this vulnerability to cause a device anomal...

Google Android Qualcomm component elevation of privilege vulnerability (CNVD-2017-36525)

Android is a free and open source Linux-based operating system led and developed by Google Inc. and the Open Handset Alliance. An elevation of privilege vulnerability exists in the Google Android Display Qualcomm component. An attacker can exploit this vulnerability to achieve elevation of...

Tor Security Bypass Vulnerability

Tor The Onion Router is a second-generation implementation of onion routing, primarily used for anonymous access to the Internet. A security vulnerability exists in Tor. An attacker can exploit this vulnerability to bypass the cache replay protection mechanism...

CVE-2017-2722

DP300 V500R002C00,TE60 with software V100R001C01, V100R001C10, V100R003C00, V500R002C00 and V600R006C00,TP3106 with software V100R001C06 and V100R002C00,ViewPoint 9030 with software V100R011C02, V100R011C03,eCNS210TD with software V100R004C10,eSpace 7950 with software V200R003C00 and...

CVE-2017-8130

The UMA product with software V200R001 and V300R001 has an information leak vulnerability. An attacker could exploit them to obtain some sensitive information, causing information leak...

Foscam IP Video Camera Information Disclosure Vulnerability

Foscam C1 Indoor HD Camera is a wireless HD IP camera from Foscam China. An information disclosure vulnerability exists in the Foscam C1 Indoor HD Camera. An attacker can exploit this vulnerability by sending a specially crafted HTTP request to retrieve sensitive information...

Catalyst Mahara Code Execution Vulnerability

Catalyst Mahara is a social networking system from Catalyst IT in New Zealand. The system includes a blog, resume builder, file manager, and more. A security vulnerability exists in Catalyst Mahara. An attacker could exploit the vulnerability to execute code...

Google Android System Remote Code Execution Vulnerability

Android is a free and open source Linux-based operating system led and developed by Google Inc. and the Open Handset Alliance. A remote code execution vulnerability exists in System for Google Android 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, which can be exploited by attackers to execute...

Denial of Service Vulnerability in WPS Forms

WPS Office is an office software suite developed independently by Kingsoft Corporation. A denial of service vulnerability exists in the xlsxrw module of formset.exe in WPS when parsing a specific xls file, which can be exploited by an attacker to cause a denial of service...

Panasonic Home Unit KX-HJB1000 SQL Injection Vulnerability

The Panasonic KX-HJB1000 Home unit devices is a webcam from Panasonic Japan. A SQL injection vulnerability exists in Home unit KX-HJB1000. A remote attacker can exploit this vulnerability to execute arbitrary SQL commands...

CVE-2017-10862

jwt-scala 1.2.2 and earlier fails to verify token signatures correctly which may lead to an attacker being able to pass specially crafted JWT data as a correctly signed token...

Code injection

jwt-scala 1.2.2 and earlier fails to verify token signatures correctly which may lead to an attacker being able to pass specially crafted JWT data as a correctly signed token...

Google Android Broadcom Component Elevation of Privilege Vulnerability (CNVD-2017-31740)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA, and Broadcom Wi-Fi driver is a Broadcom-developed Wi-Fi driver module used in it. An elevation of privilege vulnerability exists in the Broadcom Wi-Fi driver in Android. An attack...

Google Android Qualcomm Memory Subsystem Memory Corruption Vulnerability

Android is a Linux-based open source operating system developed by Google and the Open Handheld Alliance OHA, and the Qualcomm Memory subsystem is a Qualcomm memory subsystem. A security vulnerability exists in the Qualcomm Memory subsystem in Android. An attacker could exploit this vulnerability...

Vanilla: Overwrite Drafts of Everyone

Description: ----------- Users have option to save drafts before doing comment on posts or discussions, where DraftID parameter is get passed to keep the draft record and if attacker replace this id with any existing id it will simple overwrite that record without checking the permission he that...

Joomla! cross-site scripting vulnerability (CNVD-2017-26330)

Joomla! is the U.S. Open Source Matters team of a set of PHP and MySQL development using open source , cross-platform content management system CMS. A cross-site scripting vulnerability exists in versions of Joomla! prior to 3.7.4. The vulnerability stems from the program's failure to adequately...

iSmartAlarm cube device input validation vulnerability

The iSmartAlarm cube devices are a smart home device from iSmartAlarm USA. A denial of service vulnerability exists in iSmartAlarm cube devices. An attacker can exploit this vulnerability to cause a denial of service device stops responding...