11 matches found
Linux kernel Heap Buffer Overflow DoS
The vulnerability of the stlsm6dsxreadtaggedfifo function in the stlsm6dsxbuffer.c component of the Linux kernel is related to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability could allow an attacker to cause a service failure...
EXOCET - AV-evading, Undetectable, Payload Delivery Tool
EXOCET is superior to Metasploit's "Evasive Payloads" modules as EXOCET uses AES-256 in GCM Mode Galois/Counter Mode. Metasploit's Evasion Payloads uses a easy to detect RC4 encryption. While RC4 can decrypt faster, AES-256 is much more difficult to ascertain the intent of the malware. However, i...
DSX Communication Devices Detection (HTTP)
HTTP based detection of DSX communication devices. Note: Providing login credentials allows to extract detailed device information. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
DSX Communication Devices Default Credentials (HTTP)
The DSX communication device is configured with default credentials. Copyright C 2020 Simmons Foods, Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...
PT-2019-19493
Name of the Vulnerable Software and Affected Versions Android kernel affected versions not specified Description The issue is related to a possible use after free in the synaptics dsx htc touchscreen driver due to improper locking. This could lead to local escalation of privilege, requiring Syste...
PT-2019-19496
Name of the Vulnerable Software and Affected Versions Android kernel affected versions not specified Description The issue is related to a possible out of bounds write due to a use after free in the synaptics dsx htc touchscreen driver. This could lead to a local escalation of privilege, requirin...
PT-2018-8531
Name of the Vulnerable Software and Affected Versions Android for MSM versions prior to 2017-06-05 Firefox OS for MSM versions prior to 2017-06-05 QRD Android versions prior to 2017-06-05 Description The issue concerns the touchscreen driver synaptics dsx, where the size of a stack-allocated buff...
CVE-2005-2136
Raritan Dominion SX DSX Console Servers DSX16, DSX32, DSX4, DSX8, and DSXA-48 set 1 world-readable permissions for /etc/shadow and 2 world-writable permissions for /bin/busybox, which allows local users to obtain hashed passwords or execute arbitrary code as other users...
CVE-2005-2136
The CVE-2005-2136 entry concerns Raritan Dominion SX (DSX) Console Servers (DSX16, DSX32, DSX4, DSX8, DSXA-48). The underlying issue is improper file permissions: world-readable /etc/shadow and world-writable /bin/busybox, enabling local users to obtain password hashes and possibly execute arbitr...
CVE-2005-2136: Incorrect Authorization
Raritan Dominion SX DSX Console Servers DSX16, DSX32, DSX4, DSX8, and DSXA-48 set 1 world-readable permissions for /etc/shadow and 2 world-writable permissions for /bin/busybox, which allows local users to obtain hashed passwords or execute arbitrary code as other users...
