Hardcoded credentials

Quick Emulator Qemu built with the USB redirector usb-guest support is vulnerable to a memory leakage flaw. It could occur while destroying the USB redirector in 'usbredirhandledestroy'. A guest user/process could use this issue to leak host memory, resulting in DoS for a host...

Fedora 25 : freeipa (2016-ca1d1e1dc1)

Rebase to upstream 4.4.3: http://www.freeipa.org/page/Releases/4.4.3 ---- - Fixes 1395311 - CVE-2016-9575 ipa: Insufficient permission check in certprofile-mod - Fixes 1370493 - CVE-2016-7030 ipa: DoS attack against kerberized services by abusing password policy Note that Tenable Network Security...

Code injection

Lack of appropriate exception handling in some receivers of the Telecom application on Samsung Note devices with L5.0/5.1, M6.0, and N7.0 software allows attackers to crash the system easily resulting in a possible DoS attack, or possibly gain privileges. The Samsung ID is SVE-2016-7120...

Code injection

Lack of appropriate exception handling in some receivers of the Telecom application on Samsung Note devices with L5.0/5.1, M6.0, and N7.0 software allows attackers to crash the system easily resulting in a possible DoS attack, or possibly gain privileges. The Samsung ID is SVE-2016-7119...

Code injection

Lack of appropriate exception handling in some receivers of the Telecom application on Samsung Note devices with L5.0/5.1, M6.0, and N7.0 software allows attackers to crash the system easily resulting in a possible DoS attack, or possibly gain privileges. The Samsung ID is SVE-2016-7121...

CVE-2016-9965

Lack of appropriate exception handling in some receivers of the Telecom application on Samsung Note devices with L5.0/5.1, M6.0, and N7.0 software allows attackers to crash the system easily resulting in a possible DoS attack, or possibly gain privileges. The Samsung ID is SVE-2016-7119...

CVE-2016-9967

Lack of appropriate exception handling in some receivers of the Telecom application on Samsung Note devices with L5.0/5.1, M6.0, and N7.0 software allows attackers to crash the system easily resulting in a possible DoS attack, or possibly gain privileges. The Samsung ID is SVE-2016-7121...

CVE-2016-9966

Lack of appropriate exception handling in some receivers of the Telecom application on Samsung Note devices with L5.0/5.1, M6.0, and N7.0 software allows attackers to crash the system easily resulting in a possible DoS attack, or possibly gain privileges. The Samsung ID is SVE-2016-7120...

CVE-2016-9967

CVE-2016-9967 affects the Telecom application receiver component on Samsung Note smartphones running Android L (5.0/5.1), M (6.0), and N (7.0). The issue is a lack of proper exception handling in those receivers, which can crash the system and potentially allow privilege escalation. The Samsung i...

CVE-2016-9965

CVE-2016-9965 concerns a denial-of-service/privilege-escalation risk in Samsung Note devices. The connected CNVD-2016-13011 and related entries describe a vulnerability in the Telecom application’s receiver on Note devices running Android L/5.x, M/6.x, and N/7.0, arising from improper exception h...

CVE-2016-9965

Lack of appropriate exception handling in some receivers of the Telecom application on Samsung Note devices with L5.0/5.1, M6.0, and N7.0 software allows attackers to crash the system easily resulting in a possible DoS attack, or possibly gain privileges. The Samsung ID is SVE-2016-7119...

GitLab: SSRF via git Repo by URL Abuse

Hi team , First things first, awesome work with As a poc i simply port forwarded port 4444 on my router and started simple HTTP server and listened on 4444 to check for incoming connections, by doing the steps mentioned above i got a GET request from 40.84.0.225 , images for the same are attached...

Information disclosure

A vulnerability in the Active Directory integration component of Cisco Identity Services Engine ISE could allow an unauthenticated, remote attacker to perform a denial of service DoS attack. More Information: CSCuw15041. Known Affected Releases: 1.21.199...

CVE-2016-9198

Cisco Identity Services Engine (ISE) Active Directory integration is vulnerable to a DoS via improper handling of PAP authentication requests. The issue allows an unauthenticated, remote attacker to affect authentication requests for subsequent attempts within the same Active Directory domain. Af...

CVE-2016-9198

A vulnerability in the Active Directory integration component of Cisco Identity Services Engine ISE could allow an unauthenticated, remote attacker to perform a denial of service DoS attack. More Information: CSCuw15041. Known Affected Releases: 1.21.199...

TP-LINK TD-W8951ND Denial of Service Vulnerability

TP-LINK TD-W8951ND is a wireless router product. A denial of service vulnerability exists in TP-LINK TD-W8951ND. The vulnerability allows attackers to launch denial of service attacks...

CVE-2016-9863

An issue was discovered in phpMyAdmin. With a very large request to table partitioning function, it is possible to invoke a Denial of Service DoS attack. All 4.6.x versions prior to 4.6.5 are affected...

CVE-2016-6623

An issue was discovered in phpMyAdmin. An authorized user can cause a denial-of-service DoS attack on a server by passing large values to a loop. All 4.6.x versions prior to 4.6.4, 4.4.x versions prior to 4.4.15.8, and 4.0.x versions prior to 4.0.10.17 are affected...

Design/Logic Flaw

An issue was discovered in phpMyAdmin. The transformation feature allows a user to trigger a denial-of-service DoS attack against the server. All 4.6.x versions prior to 4.6.4, 4.4.x versions prior to 4.4.15.8, and 4.0.x versions prior to 4.0.10.17 are affected...

Design/Logic Flaw

An issue was discovered in phpMyAdmin. An unauthenticated user is able to execute a denial-of-service DoS attack by forcing persistent connections when phpMyAdmin is running with $cfg'AllowArbitraryServer'=true. All 4.6.x versions prior to 4.6.4, 4.4.x versions prior to 4.4.15.8, and 4.0.x versio...