PT-2016-7554

Name of the Vulnerable Software and Affected Versions Memcached affected versions not specified Description The issue is related to an integer overflow in the process bin sasl auth function, which handles authentication commands for the Memcached binary protocol. This overflow can lead to a heap...

Remote Code Execution Vulnerability in Memcached Update

Memcached is a high-performance distributed in-memory object caching system for dynamic Web applications to reduce database load. A remote code execution vulnerability exists in Memcached Update. processbinupdate function handling multiple commands of the Memcached binary protocol can lead to a...

From the byte overflows to arbitrary code execution-Linux stack exploit-vulnerability warning-the black bar safety net

One byte overflow called off-by-one, once a period of time, the off-by-one is considered to be not utilized, but later research found on the heap even if only one byte overflow can lead to arbitrary code execution. At the same time the heap of the off-by-one using also appear in the domestic and...

Unauthorized Access Vulnerability in D-Link DWR-932B LET Router WPS System

The D-Link DWR-932B LET is a wireless router. An unauthorized access vulnerability exists in the WPS system of the D-Link DWR-932B LET router. Since the WPS system PIN is hardcoded into the /bin/appmgr program, an attacker can exploit the vulnerability to use the PIN to access the wireless networ...

Unauthorized Information Disclosure Vulnerability in AVTECH Devices

AVTECH, founded in 1996, is one of the world's leading CCTV manufacturers. The main products are surveillance equipment, network cameras, network video recorders and so on. An unauthorized information disclosure vulnerability exists in AVTECH devices. Due to the cgi-bin/ directory is not set with...

CVE-2016-5348

The GPS component in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-10-01, and 7.0 before 2016-10-01 allows man-in-the-middle attackers to cause a denial of service memory consumption, and device hang or reboot via a large xtra.bin or xtra2.bin file on a spoofed...

UBUNTU-CVE-2016-5348

The GPS component in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-10-01, and 7.0 before 2016-10-01 allows man-in-the-middle attackers to cause a denial of service memory consumption, and device hang or reboot via a large xtra.bin or xtra2.bin file on a spoofed...

CVE-2016-5348

The GPS component in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-10-01, and 7.0 before 2016-10-01 allows man-in-the-middle attackers to cause a denial of service memory consumption, and device hang or reboot via a large xtra.bin or xtra2.bin file on a spoofed...

PT-2016-6379

Name of the Vulnerable Software and Affected Versions Android versions 4.x through 4.4.3 Android versions 5.0.x through 5.0.1 Android versions 5.1.x through 5.1.0 Android versions 6.x before 2016-10-01 Android versions 7.0 before 2016-10-01 Description The issue allows man-in-the-middle attackers...

CVE-2016-5348: Undefined Security Weakness

The GPS component in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-10-01, and 7.0 before 2016-10-01 allows man-in-the-middle attackers to cause a denial of service memory consumption, and device hang or reboot via a large xtra.bin or xtra2.bin file on a spoofed...

CVE-2016-6840

Cross-site scripting XSS vulnerability in the management interface in Huawei OceanStor ISM before V200R001C04SPC200 allows remote attackers to inject arbitrary web script or HTML via the loginName parameter to cgi-bin/doLoginCgiEntry and possibly other unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in the management interface in Huawei OceanStor ISM before V200R001C04SPC200 allows remote attackers to inject arbitrary web script or HTML via the loginName parameter to cgi-bin/doLoginCgiEntry and possibly other unspecified vectors...

PT-2016-7134

Name of the Vulnerable Software and Affected Versions Huawei OceanStor ISM versions prior to V200R001C04SPC200 Description A cross-site scripting XSS issue exists in the management interface, allowing remote attackers to inject arbitrary web script or HTML. This can be achieved via the loginName...

CVE-2016-6840: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the management interface in Huawei OceanStor ISM before V200R001C04SPC200 allows remote attackers to inject arbitrary web script or HTML via the loginName parameter to cgi-bin/doLoginCgiEntry and possibly other unspecified vectors...

FreeBSD : openssh -- sshd -- remote valid user discovery and PAM /bin/login attack (adccefd1-7080-11e6-a2cb-c80aa9043978)

The OpenSSH project reports : sshd8: Mitigate timing differences in password authentication that could be used to discern valid from invalid account names when long passwords were sent and particular password hashing algorithms are in use on the server. CVE-2016-6210, reported by EddieEzra.Harari...

Command injection

cgi-bin/cgimain in NUUO NVRmini 2 1.7.6 through 3.0.0 and NETGEAR ReadyNAS Surveillance 1.1.2 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the sn parameter to the transferlicense command...

Updated openssh packages fix security vulnerability

The dosetupenv function in session.c in sshd in OpenSSH through 7.2p2, when the UseLogin feature is enabled and PAM is configured to read .pamenvironment files in user home directories, allows local users to gain privileges by triggering a crafted environment for the /bin/login program, as...

PT-2016-6632

Name of the Vulnerable Software and Affected Versions NUUO NVRmini 2 versions 1.7.5 through 2.x NUUO NVRsolo versions 1.7.5 through 2.x NETGEAR ReadyNAS Surveillance versions 1.1.1 through 1.4.1 Description The issue allows remote attackers to reset the administrator password via a...

PT-2016-6636

Name of the Vulnerable Software and Affected Versions NUUO NVRmini 2 versions 1.7.6 through 3.0.0 NETGEAR ReadyNAS Surveillance version 1.1.2 Description The issue is a stack-based buffer overflow in the cgi-bin/cgi main component. It allows remote authenticated users to execute arbitrary code vi...

CVE-2016-5679: Improper Neutralization of Special Elements used in an OS Command

cgi-bin/cgimain in NUUO NVRmini 2 1.7.6 through 3.0.0 and NETGEAR ReadyNAS Surveillance 1.1.2 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the sn parameter to the transferlicense command...