398 matches found
CVE-2016-10137
An issue was discovered on BLU R1 HD devices with Shanghai Adups software. The content provider named com.adups.fota.sysoper.provider.InfoProvider in the app with a package name of com.adups.fota.sysoper allows any app on the device to read, write, and delete files as the system user. In the...
CVE-2016-10138
An issue was discovered on BLU Advance 5.0 and BLU R1 HD devices with Shanghai Adups software. The com.adups.fota.sysoper app is installed as a system app and cannot be disabled by the user. In the com.adups.fota.sysoper app's AndroidManifest.xml file, it sets the android:sharedUserId attribute t...
CVE-2016-10139
An issue was discovered on BLU R1 HD devices with Shanghai Adups software. The two package names involved in the exfiltration are com.adups.fota and com.adups.fota.sysoper. In the com.adups.fota.sysoper app's AndroidManifest.xml file, it sets the android:sharedUserId attribute to a value of...
CVE-2016-10139
The CVE-2016-10139 issue affects BLU R1 HD devices running Shanghai Adups software. The com.adups.fota.sysoper app declares android:sharedUserId as android.uid.system, allowing it to run as the privileged system user and grant additional permissions not listed in its manifest. This enables access...
CVE-2016-10135
An issue was discovered on LG devices using the MTK chipset with L5.0/5.1, M6.0/6.0.1, and N7.0 software, and RCA Voyager Tablet, BLU Advance 5.0, and BLU R1 HD devices. The MTKLogger app with a package name of com.mediatek.mtklogger has application components that are accessible to any applicati...
Backdoor Found in Firmware of Some Android Devices
Nearly three million Android devices are vulnerable to an attack that could allow a hacker to compromise over-the-air OTA updates to the devices and allow adversaries to remotely execute commands with root privileges. The problem stems from what researchers call an insecure implementation of an O...
Dangerous Rootkit found Pre-Installed on nearly 3 Million Android Phones
Here's some bad news for Android users again. Nearly 3 Million Android devices worldwide are vulnerable to man-in-the-middle MITM attacks that could allow attackers to remotely execute arbitrary code with root privileges, turning over full control of the devices to hackers. According to a new...
Ragentek Android OTA update mechanism vulnerable to MITM attack
Overview Ragentek Android software contains an over-the-air update mechanism that communicates over an unencrypted channel, which can allow a remote attacker to execute arbitrary code with root privileges. Description CWE-494: Download of Code Without Integrity Check - CVE-2016-6564 Android...
Macgo Windows Blu-ray Player Handles wma File Memory Corruption Vulnerability
Macgo Windows Blu-ray Player is a well-known Blu-ray movie player. A memory corruption vulnerability exists in the player's handling of WMA format files, which allows attackers to exploit the vulnerability to construct a malformed WMA format that can cause the program to crash...
Remote for Samsung TV/Blu-Ray - Dangerous filesystem permissions, Exported components, External URLs vulnerabilities
HackApp vulnerability scanner discovered that application Remote for Samsung TV/Blu-Ray published at the 'play' market has multiple vulnerabilities...
Unfixed XSS vulnerability at blu-rayunlimited.com
Security researcher Atmon3r, has submitted on 13/01/2012 a cross-site-scripting XSS vulnerability affecting blu-rayunlimited.com, which at the time of submission ranked 11091634 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/01/2012. It is...
Sony Blu-Ray Player Detection
Binary data 6100.prm...
Ashampoo Burning Studio Elements 10.0.9 - .ashprj Heap Overflow
Ashampoo Burning Studio Elements 10.0.9 - .ashprj Heap Overflow !/usr/bin/perl Ashampoo Burning Studio Elements 10.0.9 .ashprj Heap Overflow Vulnerability Vendor: Ashampoo GmbH & Co. KG Product web page: http://www.ashampoo.com Affected version: 10.0.9 Summary: Ashampoo Burning Studio Elements...
Ashampoo Burning Studio Elements 10.0.9 - '.ashprj' Heap Overflow
!/usr/bin/perl Ashampoo Burning Studio Elements 10.0.9 .ashprj Heap Overflow Vulnerability Vendor: Ashampoo GmbH & Co. KG Product web page: http://www.ashampoo.com Affected version: 10.0.9 Summary: Ashampoo Burning Studio Elements offers you everything you need to burn movies, music and data - fa...
Tipard Blu-ray Converter DLL Hijacking Exploit (quserex.dll)
Exploit for windows platform in category local exploits ============================================================ Tipard Blu-ray Converter DLL Hijacking Exploit quserex.dll ============================================================ || || | || o,7 || . o7 || 4||| ow, : / /...
Tipard Blu-ray Converter DLL Hijacking
=================================================== Tipard Blu-ray Converter DLL Hijacking Exploit quserex.dll =================================================== || || | || o,7 || . o7 || 4||| ow, : / / . -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ ...
Airkiosk/formlib application is XSS vuln
In the last week I've found a XSS vuln into the Sutra's Airkiosk application for the realtime distribution of flights/booking and check-in interface www.airkiosk.com. The XSS is possible because they are using a VULN/OLD formlib.pl in their application that permits to execute any JavaScript you...
