CVE-2018-7991

Huawei smartphones Mate10 with versions earlier before ALP-AL00B 8.0.0.110C00 have a Factory Reset Protection FRP bypass vulnerability. The system does not sufficiently verify the permission, an attacker uses a data cable to connect the smartphone to the computer and then perform some specific...

CVE-2018-7991

Huawei smartphones Mate10 with versions earlier before ALP-AL00B 8.0.0.110C00 have a Factory Reset Protection FRP bypass vulnerability. The system does not sufficiently verify the permission, an attacker uses a data cable to connect the smartphone to the computer and then perform some specific...

CVE-2018-7991

CVE-2018-7991 concerns Huawei Mate10 smartphones (versions earlier than ALP-AL00B 8.0.0.110(C00)) with a Factory Reset Protection (FRP) bypass vulnerability. The issue arises because the system does not sufficiently verify permissions when a device is connected via a data cable to a computer and ...

Huawei Mate10 FRP Bypass Vulnerability

Huawei Mate10 is a smartphone product. Huawei Mate10 suffers from FRP bypass vulnerability. Due to the system's failure to adequately check permissions, an attacker using a data cable to connect the phone to a computer can bypass the phone's FRP protection and enter the system settings page after...

Debian DLA-1423-1 : linux-4.9 new package (Spectre)

Linux 4.9 has been packaged for Debian 8 as linux-4.9. This provides a supported upgrade path for systems that currently use kernel packages from the 'jessie-backports' suite. There is no need to upgrade systems using Linux 3.16, as that kernel version will also continue to be supported in the LT...

Your Mac Does Not Turn On: How to fix

If you are using your Mac every day with no issues, then that’s great. However, sometimes, like all computers, the Mac also does not respond to pressing the power button. If this happens, and you have no idea what to do, then it can lead to a lot of frustration. There could be several reasons why...

Wireless GUI Android Security Assessment: Hijacker

Hijacker is a Graphical User Interface for the penetration testing tools Aircrack-ng, Airodump-ng , MDK3 and Reaver . It offers a simple and easy UI to use these tools without typing commands in a console and copy&pasting MAC addresses. This application requires an ARM android device with an...

Wireshark DOCSIS Protocol Parser Denial of Service Vulnerability

Wireshark formerly Ethereal is a suite of network packet analysis software developed by the Wireshark team. The function of the software is to intercept network packets and display detailed data for analysis.DOCSIS protocol dissector is one of the Limited Cable Data Service Interface protocol...

smart-cable.com XSS vulnerability

Open Bug Bounty ID: OBB-501196 Description| Value ---|--- Affected Website:| smart-cable.com Open Bug Bounty Program:| Not created yet Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N...

TP-Link TL-SG108E XSS / Weak Access Control

Overview ------------- Three vulnerabilities have been discovered in the TP-Link TL-SG108E, firmware 1.0.0 Build 20160722 Rel.50167: CVE-2017-17745 - Cross Site Scripting XSS in systemnameset.cgi, sysName parameter CVE-2017-17746 - Weak access control for user authentication CVE-2017-17747 - Weak...

Linksys WVBR0-25 User-Agent Command Execution

The Linksys WVBR0-25 Wireless Video Bridge, used by DirecTV to connect wireless Genie cable boxes to the Genie DVR, is vulnerable to OS command injection in version use exploit/linux/http/linksys/wvbr0useragentexecnoauth msf undefinedwvbr0useragentexecnoauth show actions ...actions... msf...

cable-discount.com XSS vulnerability

Open Bug Bounty ID: OBB-447458 Description| Value ---|--- Affected Website:| cable-discount.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Chea...

How to configure console access on XenServer or Citrix Hypervisor

This article is for customers running Citrix Hypervisor or XenServer who want to configure serial console access to their XenServer hosts. In some support cases, serial console access to the XenServer host is required for debug purposes. The serial connection is to use with HyperTerminal or simil...

Four Million Time Warner Cable Records Left on Misconfigured AWS S3

In what’s almost felt like an epidemic over the last few weeks, yet another slew of sensitive information—600 gigabytes of files—was recently left exposed on two cloud repositories, accessible to anyone. The repositories, owned by BroadSoft, a global communication software and service provider,...

Chongqing Cable Networks Come to the Point app suffers from overstepping access vulnerability

Lai Dot app is an exclusive service for Chongqing Cable broadband subscribers to watch videos, just download and install the client on smart mobile terminals such as cell phones and flat-panel computers and then access Chongqing Cable WIFI network to enjoy the viewing experience. Chongqing Cable ...

Cisco DPC3939 Firmware Unauthorized Operation Vulnerability

Cisco DPC3939 is a wireless voice gateway product from Cisco USA. A security vulnerability exists in the Cisco DPC3939 firmware. Allows a remote attacker to discover the CM MAC address through an xfinitywifi hotspot connected to the device...

CVE-2017-9484

The Comcast firmware on Cisco DPC3939 firmware version dpc3939-P20-18-v303r20421733-160420a-CMCST and DPC3939 firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST devices allows remote attackers to discover a CM MAC address by sniffing Wi-Fi traffic and performing simple arithmetic...

Updated libmtp and libgphoto packages fix security vulnerabilities

An integer overflow vulnerability in the ptpunpackEOSCustomFuncEx function of the ptp-pack.c file of libmtp and libgphoto allows attackers to cause a denial of service out-of-bounds memory access or maybe remote code execution by inserting a mobile device into a personal computer through a USB...

UBUNTU-CVE-2017-11406

In Wireshark 2.2.0 to 2.2.7 and 2.0.0 to 2.0.13, the DOCSIS dissector could go into an infinite loop. This was addressed in plugins/docsis/packet-docsis.c by rejecting invalid Frame Control parameter values...

DEBIAN-CVE-2017-11406

In Wireshark 2.2.0 to 2.2.7 and 2.0.0 to 2.0.13, the DOCSIS dissector could go into an infinite loop. This was addressed in plugins/docsis/packet-docsis.c by rejecting invalid Frame Control parameter values...