Cisco Email Security Appliance Filter Bypass Vulnerability

A vulnerability in the content scanning engine of Cisco AsyncOS Software for Cisco Email Security Appliances ESA could allow an unauthenticated, remote attacker to bypass configured message or content filters on the device. The vulnerability is due to incomplete input validation of email message...

The vulnerability of the control device in the electrical energy sector, SICAM PAS, allows a intruder to upload, download, or delete files in certain parts of the file system.

The vulnerability of the telecontrol device in the electrical energy sector, SICAM PAS, is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to upload, download, or delete files in certain parts of the file system by sending specially crafted TCP...

CVE-2016-10088

The sg implementation in the Linux kernel through 4.9 does not properly restrict write operations in situations where the KERNELDS option is set, which allows local users to read or write to arbitrary kernel memory locations or cause a denial of service use-after-free by leveraging access to a...

Google Nexus NVIDIA GPU Driver Local Elevation of Privilege Vulnerability (CNVD-2016-12234)

Android on Nexus 9 is a Linux-based open source operating system for the Nexus 9 tablet PC developed by Google and the Open Handheld Alliance OHA.The NVIDIA GPU Driver is one of the NVIDIA GPU drivers that is used in the... A local elevation of privilege vulnerability exists in the NVIDIA GPU...

Memory leak vulnerability in several Huawei products

Huawei AR3200 is a Huawei router device, and S12700, S5300, S5700, S6300, S6700, S7700, S9300, S9700 are Huawei switch devices. A memory disclosure vulnerability exists in multiple Huawei products. Due to the device's Multiprotocol Label Switching MPLS message processing module repeatedly...

Samsung Mobile Denial of Service Vulnerability

Samsung Mobile is a series of smart mobile devices released by the South Korean company Samsung Samsung. A denial of service vulnerability exists in Samsung Mobile L version 5.0 and 5.1 and M version 6.0 devices using the Exynos 7420 chipset. The vulnerability stems from a program back-referencin...

Mobile Applications Leak Device, Location Data

Both Android and iOS apps leak data, leaving users vulnerable to data theft, denial-of-service attacks, and remote SIM card rooting. In a report released Thursday “Are mobile apps a leaky tap in the enterprise?” researchers at Zscaler assert that Android and iOS users are equally vulnerable to a...

VulnCheck KEV: CVE-2014-3393

The Clientless SSL VPN portal customization framework in Cisco ASA Software 8.2 before 8.25.51, 8.3 before 8.32.42, 8.4 before 8.47.23, 8.6 before 8.61.14, 9.0 before 9.04.24, 9.1 before 9.15.12, and 9.2 before 9.22.4 does not properly implement authentication, which allows remote...

The vulnerability of the ABB PCM600 control and configuration device allows a intruder to gain access to user passwords.

The vulnerability of the ABB PCM600 control and configuration device lies in the use of reversible encryption for passwords stored in the ACTConfig configuration file. Exploiting this vulnerability could allow an attacker acting locally to gain access to user passwords...

SUSE-SU-2016:1764-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP1 Realtime kernel was updated to 3.12.58 to receive various security and bugfixes. The following security bugs were fixed: - CVE-2015-7566: The treoattach function in drivers/usb/serial/visor.c in the Linux kernel allowed physically proximate attackers to cause a...

Unauthorized Access Vulnerability in Nport 5110 Devices of Mosaic Technology (Shanghai) Co.

The MOXA Nport 5110 is a serial communication server. An unauthorized access warrant vulnerability exists in the MOXA Nport 5110 device, which could be exploited by an attacker to obtain sensitive information about the device...

SUSE-SU-2016:1038-1 Security update for Linux Kernel Live Patch 6

This update for the Linux Kernel 3.12.44-52.10.1 fixes the following issues: - CVE-2016-2384: A malicious USB device could cause a kernel crash in the alsa usb-audio driver. bsc967773 - CVE-2015-8812: A flaw was found in the CXGB3 kernel driver when the network was considered congested. The kerne...

Safety warning: a affect 1. 3 billion Apple users, the exploit code-exploit warning-the black bar safety net

! Recently, security researchers released a tweet that referred to Apple device vulnerabilities as well as about the vulnerability of the program code. Bug-fix is not ideal In the last week the media exposure of the Apple device system, a critical Vulnerability, CVE-2 0 1 6-1 7 5 7, you can use...

eWON all Device 弱口令

参考链接: http://ewon.biz/sites/default/files/aug-004-0-en-ewongettingstarted.pdf...

MGASA-2015-0439 Updated kernel-linus packages fixes security vulnerability

This update of kernel-linus provides the upstream 4.1.12 longterm kernel and fixes at least the following security issue: Moein Ghasemzadeh discovered that the USB WhiteHEAT serial driver contained hardcoded attributes about the USB devices. An attacker could construct a fake WhiteHEAT USB device...

[SECURITY] [DLA 325-1] linux-2.6 security update

Package : linux-2.6 Version : 2.6.32-48squeeze16 CVE ID : CVE-2015-2925 CVE-2015-5257 CVE-2015-7613 This update fixes the CVEs described below. CVE-2015-2925 Jann Horn discovered that when a subdirectory of a filesystem was bind-mounted into a chroot or mount namespace, a user that should be...

Apple iOS Game Center Information Disclosure Vulnerability

Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. A security vulnerability in Apple iOS Game Center's handling of gamer emails allows malicious apps to access sensitive gamer information...

Heart drop of blood away? 2 0 million equipment is still under threat-vulnerability warning-the black bar safety net

Heart drop of blood is already a thing of the past? NO! A lapse of more than a year after the infamous the heart of the blood security vulnerabilities and not completely disappeared, still the 2 0 million of network devices present a security threat. According to Shodan, the search results displa...

Multiple Huawei ME906 Products Information Disclosure Vulnerability

Huawei ME906 is a mobile internet module with M.2 which supports LTE, WCDMA, EVDO and GSM. Several Huawei ME906 products contain hashes of root accounts and passwords, allowing attackers to exploit vulnerabilities that can be cracked to obtain ROOT account password information...

The vulnerability of the microprogramming software used in Cisco TelePresence TC conference call control devices allows intruders to inject arbitrary HTTP headers.

The vulnerability of the microprogramming software used in Cisco TelePresence TC devices exists due to insufficient verification of input data. Exploiting this vulnerability allows a malicious actor to inject arbitrary HTTP headers using a specially crafted URL...