Emerson 396983-02-2 Non-isolated Highway Addressable Remote Transducer Detection

Binary data 756532.prm...

Mitsubishi L26CPU-BT PLC Detection

Binary data 751788.prm...

PT-2019-16132

Name of the Vulnerable Software and Affected Versions Android versions 7.0 through 9 Description A memory corruption issue exists due to a use after free in the btm proc smp cback function of tm ble.cc. This could lead to remote code execution with no additional execution privileges needed. User...

Privilege escalation

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9607, MDM9635M, MDM9640, MDM9650, MSM8909W, QCA6174A, QCA6574AU, QCA9377, QCA9379, SD 210/SD 212/SD 205, SD 400, SD 450, SD 410/12, SD 425, SD 430, SD...

PT-2018-4145

Name of the Vulnerable Software and Affected Versions Android versions prior to 2018-04-05 security patch level Description The issue is related to a lack of input validation on BT HCI commands processing, which allows privilege escalation. This affects Qualcomm Snapdragon Automobile, Snapdragon...

CVE-2014-10054: Undefined Security Weakness

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9607, MDM9635M, MDM9640, MDM9650, MSM8909W, QCA6174A, QCA6574AU, QCA9377, QCA9379, SD 210/SD 212/SD 205, SD 400, SD 450, SD 410/12, SD 425, SD 430, SD...

CVE-2017-13284

In configsetstring of config.cc, it is possible to pair a second BT keyboard without user approval due to improper input validation. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android...

CVE-2017-13284: Improper Input Validation

In configsetstring of config.cc, it is possible to pair a second BT keyboard without user approval due to improper input validation. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android...

CVE-2017-13284

In configsetstring of config.cc, it is possible to pair a second BT keyboard without user approval due to improper input validation. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android...

CVE-2017-15192

In Wireshark 2.4.0 to 2.4.1 and 2.2.0 to 2.2.9, the BT ATT dissector could crash. This was addressed in epan/dissectors/packet-btatt.c by considering a case where not all of the BTATT packets have the same encapsulation level...

login.secure.bt.com XSS vulnerability

Open Bug Bounty ID: OBB-507373 Description| Value ---|--- Affected Website:| login.secure.bt.com Open Bug Bounty Program:| Not created yet Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N...

U.K. Man Avoids Jail Time in vDOS Case

A U.K. man who pleaded guilty to launching more than 2,000 cyberattacks against some of the world's largest companies has avoided jail time for his role in the attacks. The judge in the case reportedly was moved by pleas for leniency that cited the man's youth at the time of the attacks and a...

dslchecker.bt.com XSS vulnerability

Open Bug Bounty ID: OBB-452754 Description| Value ---|--- Affected Website:| dslchecker.bt.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

bt-tt.net Open Redirect vulnerability

Open Bug Bounty ID: OBB-439859 Description| Value ---|--- Affected Website:| bt-tt.net Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...

SUSE SLED12 / SLES12 Security Update : wireshark (SUSE-SU-2017:2860-1)

This update for wireshark fixes the following issues: Wireshark was updated to 2.2.10, fixing security issues and bugs : - CVE-2017-15191: DMP dissector crash wnpa-sec-2017-44 - CVE-2017-15192: BT ATT dissector crash wnpa-sec-2017-42 - CVE-2017-15193: MBIM dissector crash wnpa-sec-2017-43 Note th...

openSUSE Security Update : wireshark (openSUSE-2017-1158)

This update for wireshark to version 2.2.10 fixes multiple minor security issues. These vulnerabilities that could be used to trigger dissector crashes or infinite loops by making Wireshark read specially crafted packages from the network or a capture file : - CVE-2017-15192: BT ATT dissector cra...

Wireshark 2.2.x < 2.2.10 Multiple Vulnerabilities (macOS)

The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 2.2.10. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-2.2.10 advisory. - In Wireshark 2.4.0 to 2.4.1 and 2.2.0 to 2.2.9, the MBIM dissector could crash or exhaust system...

MGASA-2017-0374 Updated wireshark packages fix security vulnerability

DMP dissector crash CVE-2017-15191. BT ATT dissector crash CVE-2017-15192. MBIM dissector crash CVE-2017-15193...

Updated wireshark packages fix security vulnerability

DMP dissector crash CVE-2017-15191. BT ATT dissector crash CVE-2017-15192. MBIM dissector crash CVE-2017-15193...

Security fix for the ALT Linux 9 package wireshark version 2.4.2-alt1

Oct. 15, 2017 Anton Farygin 2.4.2-alt1 - 2.4.2 - fixes: wnpa-sec-2017-42 BT ATT dissector crash CVE-2017-15192 wnpa-sec-2017-43 MBIM dissector crash CVE-2017-15193 wnpa-sec-2017-44 DMP dissector crash CVE-2017-15191 wnpa-sec-2017-45 RTSP dissector crash CVE-2017-15190 wnpa-sec-2017-46 DOCSIS...