203 matches found
Design/Logic Flaw
The device-initialization functionality in the MSM camera driver for the Linux kernel 2.6.x and 3.x, as used in Qualcomm Innovation Center QuIC Android contributions for MSM devices and other products, enables MSMCAMIOCTLSETMEMMAPINFO ioctl calls for an unrestricted mmap interface, which allows...
CVE-2013-2595
The CVE-2013-2595 issue affects the MSM camera driver in Linux kernels 2.6.x and 3.x, used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices. The vulnerability stems from the MSM_CAM_IOCTL_SET_MEM_MAP_INFO ioctl exposing an unrestricted mmap interface, enabling a locally ...
Netflix Open Source Security Tools Solve Range of Challenges
Few organizations experience the scale of Web-based application security challenges that Netflix engineers deal with on a regular basis. Sometimes the response to a threat requires a homespun tool that, more often than not, ends up being released to open source. “Our assumption is that we...
CVE-2014-4325
The cmdboot function in app/aboot/aboot.c in the Little Kernel LK bootloader, as distributed with Qualcomm Innovation Center QuIC Android contributions for MSM devices and other products, allows attackers to bypass intended device-lock and kernel-signature restrictions by using fastboot mode in a...
CVE-2014-0973
The imageverify function in platform/msmshared/imageverify.c in the Little Kernel LK bootloader, as distributed with Qualcomm Innovation Center QuIC Android contributions for MSM devices and other products, does not check whether a certain digest size is consistent with the RSApublicdecrypt API...
Command injection
The cmdboot function in app/aboot/aboot.c in the Little Kernel LK bootloader, as distributed with Qualcomm Innovation Center QuIC Android contributions for MSM devices and other products, allows attackers to bypass intended device-lock and kernel-signature restrictions by using fastboot mode in a...
Solution Scripts Home Free 1.0 search.cgi Directory Traversal Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/921/info Home Free is a suite of Perl cgi scripts that allow a website to support user contributions of various types. One of the scripts, search.cgi, accepts a parameter called letter which can be any text string. The...
CiviCRM 3.1 < Beta 5 Multiple XSS Vulnerabilities
No description provided by source. Author: h00die [email protected] & Ch3nz [email protected] Software Link: http://sourceforge.net/projects/civicrm/files/civicrm-latest/3.1.beta1/civicrm-3.1.beta1-standalone.tar.gz/download Version: 3.1 Beta 5, Tested on 3.1 Beta 1 Tested on: BT4 pre-final Greetz ...
Easter Holiday Phishing Scams and Malware Campaigns
As the Easter holiday approaches, US-CERT reminds users to stay aware of holiday scams and cyber campaigns, which may include: shipping notifications that may be phishing scams or may contain malware electronic greeting cards that may contain malware requests for charitable contributions that may...
Integer overflow
Multiple integer overflows in the JPEG engine drivers in the MSM camera driver for the Linux kernel 2.6.x and 3.x, as used in Qualcomm Innovation Center QuIC Android contributions for MSM devices and other products, allow attackers to cause a denial of service system crash via a large number of...
UBUNTU-CVE-2013-4736
Multiple integer overflows in the JPEG engine drivers in the MSM camera driver for the Linux kernel 2.6.x and 3.x, as used in Qualcomm Innovation Center QuIC Android contributions for MSM devices and other products, allow attackers to cause a denial of service system crash via a large number of...
CVE-2013-4736
Multiple integer overflows in the JPEG engine drivers in the MSM camera driver for the Linux kernel 2.6.x and 3.x, as used in Qualcomm Innovation Center QuIC Android contributions for MSM devices and other products, allow attackers to cause a denial of service system crash via a large number of...
CVE-2013-4739
CVE-2013-4739 concerns the MSM camera driver for the Linux kernel 3.x (used in Qualcomm Innovation Center Android contributions for MSM devices). The description states that an attacker can obtain sensitive information from kernel stack memory via two crafted IOCTLs: MSM_MCR_IOCTL_EVT_GET (driver...
CVE-2013-4738
Multiple stack-based buffer overflows in the MSM camera driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center QuIC Android contributions for MSM devices and other products, allow attackers to gain privileges via 1 a crafted VIDIOCMSMVPEDEQUEUESTREAMBUFFINFO ioctl call, related to...
Holiday Season Phishing Scams and Malware Campaigns
As the winter holidays approach, US-CERT reminds users to stay aware of seasonal scams and cyber campaigns, which may include: electronic greeting cards that may contain malware requests for charitable contributions that may be phishing scams and may originate from illegitimate sources claiming t...
Linux - Means Freedom [The Hacker News Magazine] October 2011 Issue Released
Linux - Means Freedom The Hacker News Magazine October 2011 Issue Released Dear Readers, We here at The Hacker News were very humbled to be given the opportunity to celebrate 10 millions hits to the website. Wow! We are so very grateful for your support and as I told you last month, I don't think...
Holiday Season Phishing Scams and Malware Campaigns
As the winter holidays are quickly approaching, US-CERT is republishing this entry to increase awareness. In the past, US-CERT has received reports of an increased number of phishing scams and malware campaigns that take advantage of the winter holiday and holiday shopping season. US-CERT reminds...
CiviCRM 3.1 Beta 5 - Multiple Cross-Site Scripting Vulnerabilities
CiviCRM 3.1 Beta 5 - Multiple Cross-Site Scripting Vulnerabilities Author: h00die [email protected] & Ch3nz [email protected] Software Link: http://sourceforge.net/projects/civicrm/files/civicrm-latest/3.1.beta1/civicrm-3.1.beta1-standalone.tar.gz/download Version: and from being in the same input...
CiviCRM 3.1 < Beta 5 Multiple XSS Vulnerabilities
Exploit for unknown platform in category web applications ================================================= CiviCRM 3.1 and from being in the same input box. In several cases it is possible to use multiple input boxes that get displayed later either together or close enough that it is possible to...
CiviCRM 3.1 < Beta 5 - Multiple Cross-Site Scripting Vulnerabilities
Author: h00die [email protected] & Ch3nz [email protected] Software Link: http://sourceforge.net/projects/civicrm/files/civicrm-latest/3.1.beta1/civicrm-3.1.beta1-standalone.tar.gz/download Version: and from being in the same input box. In several cases it is possible to use multiple input boxes th...