CVE-2016-4521: Exposure of Sensitive Information to an Unauthorized Actor

Sixnet BT-5xxx and BT-6xxx M2M devices before 3.8.21 and 3.9.x before 3.9.8 have hardcoded credentials, which allows remote attackers to obtain access via unspecified vectors...

webpartner.italia.bt.com XSS vulnerability

Vulnerable URL: https://webpartner.italia.bt.com/internetverificacoperturaaccessi/EsitoCopertura.asp?NumTel=%27%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

calor BT - External URLs, Suspicious files, Unsafe deleting vulnerabilities

HackApp vulnerability scanner discovered that application calor BT published at the 'play' market has multiple vulnerabilities...

BT Notification - Native code usage, Runtime command execution, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application BT Notification published at the 'play' market has multiple vulnerabilities...

FreeBSD : wireshark -- multiple vulnerabilities (42c2c422-df55-11e5-b2bd-002590263bf5)

Wireshark development team reports : The following vulnerabilities have been fixed : - wnpa-sec-2015-31 NBAP dissector crashes. Bug 11602, Bug 11835, Bug 11841 - wnpa-sec-2015-37 NLM dissector crash. - wnpa-sec-2015-39 BER dissector crash. - wnpa-sec-2015-40 Zlib decompression crash. Bug 11548 -...

Sixnet BT Series Hard-coded Credentials Vulnerability

OVERVIEW Independent researcher Neil Smith has identified a hard-coded credential vulnerability in Sixnet’s BT series routers. Sixnet has produced patches and new firmware to mitigate this vulnerability. This vulnerability could be exploited remotely. Exploits that target this vulnerability are...

CVE-2015-8735

The vulnerability CVE-2015-8735 affects Wireshark 2.0.x before 2.0.1: the get_value function in epan/dissectors/packet-btatt.c (Bluetooth BT ATT dissector) uses an incorrect integer data type, allowing remote attackers to trigger a DoS via a crafted packet that leads to an invalid write and appli...

CVE-2015-8735

The getvalue function in epan/dissectors/packet-btatt.c in the Bluetooth Attribute aka BT ATT dissector in Wireshark 2.0.x before 2.0.1 uses an incorrect integer data type, which allows remote attackers to cause a denial of service invalid write operation and application crash via a crafted packe...

BT Portfolio,3.0.5 and below,Other

BT Portfolio,3.0.5 and below,Other Resolution: update to 3.0.6 or later Update notice: http://bowthemes.com/bt-portfolio-version-3.0.6.4.6-released.html...

PT-2015-5564

Name of the Vulnerable Software and Affected Versions Visualware MyConnection Server version 8.2b Description The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via specific parameters. The...

CVE-2015-2043: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Visualware MyConnection Server 8.2b allow remote attackers to inject arbitrary web script or HTML via the 1 bt, 2 variable, or 3 et parameter to myspeed/db/historyitem...

BT Home Hub 6.2.2.6 Login Procedure Authentication Bypass Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/26333/info BT Home Hub is prone to an authentication-bypass vulnerability. An attacker could exploit this issue to gain unauthorized access to the affected device. BT Home Hub firmware 6.2.2.6 is vulnerable; other version...

Oracle Linux 5 / 6 : unbreakable enterprise kernel (ELSA-2013-2538)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-2538 advisory. - Bluetooth: RFCOMM - Fix missing msgnamelen update in rfcommsockrecvmsg Mathias Krause Orabug: 17173830 CVE-2013-3225 - Bluetooth: fix possible in...

Kernel: Bluetooth: possible info leak in bt_sock_recvmsg()

The btsockrecvmsg function in net/bluetooth/afbluetooth.c in the Linux kernel before 3.9-rc7 does not properly initialize a certain length variable, which allows local users to obtain sensitive information from kernel stack memory via a crafted recvmsg or recvfrom system call...

PT-2013-1105

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.9-rc7 Description The issue allows local users to obtain sensitive information from kernel stack memory. This is due to the bt sock recvmsg function in net/bluetooth/af bluetooth.c not properly initializing a...

DefenseCode Security Advisory: Cisco Linksys Remote Preauth 0day Root Exploit Follow-Up

A few weeks ago, we have announced remote preauth root access exploit for Cisco Linksys http://www.youtube.com/watch?v=cv-MbL7KFKE. Vulnerability details were disclosed here: http://www.defensecode.com/public/DefenseCodeBroadcomSecurityAdvisory.pdf During further research, we have discovered that...

BT Home Hub - 'uuid' Buffer Overflow

source: https://www.securityfocus.com/bid/57243/info BT Home Hub is prone to a buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data before copying it to an insufficiently sized buffer. An attacker can exploit this issue to gain elevated privileg...

BT Home Hub - uuid Buffer Overflow

BT Home Hub - uuid Buffer Overflow source: https://www.securityfocus.com/bid/57243/info BT Home Hub is prone to a buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data before copying it to an insufficiently sized buffer. An attacker can exploit...

ES CmS 0.1 Sql Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: ES CmS 0.1 Sql Injection Vulnerability Google Dork: inurl:/page.php?id= Date: 2012 Exploit Author: MR.XpR Software Link: http://es-cms.com , http://sourceforge.net/projects/escms/files/esCMS Alpha/0.1/escmsalphav01.zip Version:...

Hacker made calls worth £10,000 from public phone

Hacker made calls worth £10,000 from public phone Computer expert Dariusz Ganski, of Sunny Bank, Kingswood, used a router to tap into BT phone boxes and made hours of calls to expensive numbers. He make calls worth £10,000 of premium-line bills and he has been jailed for 18 months. Prosecutor Dav...