Broadcom: Heap overflow in TDLS Teardown Request while handling Fast Transition IE (CVE-2017-0561)

详细分析：https://googleprojectzero.blogspot.tw/2017/04/over-air-exploiting-broadcoms-wi-fi4.html Posted by Gal Beniamini, Project Zero It's a well understood fact that platform security is an integral part of the security of complex systems. For mobile devices, this statement rings even truer; modern...

Brave Browser: Fast AdBlocker - Dangerous filesystem permissions, Exported ContentProvider, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Brave Browser: Fast AdBlocker published at the 'play' market has multiple vulnerabilities...

Fast Tags4likes for Instagram - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Fast Tags4likes for Instagram published at the 'play' market has multiple vulnerabilities...

Broadcom: Stack buffer overflow when parsing CCKM reassociation response(CVE-2017-6957)

Broadcom produces Wi-Fi HardMAC SoCs which are used to handle the PHY and MAC layer processing. These chips are present in both mobile devices and Wi-Fi routers, and are capable of handling many Wi-Fi related events without delegating to the host OS. In order to allow fast roaming between access...

CVE-2017-6957

CVE-2017-6957 is a stack-based buffer overflow in Broadcom Wi‑Fi HardMAC SoC firmware (notably BCM4339) when handling Cisco CCKM Fast and Secure Roaming. In affected firmware, the reassociation response frame containing Cisco IE 156 is parsed and a length field derived from IE[20]:IE[21] can over...

Get Followers Fast - Native code usage, SD-card access, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application Get Followers Fast published at the 'play' market has multiple vulnerabilities...

SUSE SLES11 Security Update : xen (SUSE-SU-2017:0718-1)

This update for xen fixes several issues. These security issues were fixed : - CVE-2016-10155: The virtual hardware watchdog 'wdti6300esb' was vulnerable to a memory leakage issue allowing a privileged user to cause a DoS and/or potentially crash the Qemu process on the host bsc1024183 -...

Fast Browser - Base64 encoded String, WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Fast Browser published at the 'play' market has multiple vulnerabilities...

Dolphin Jetpack - Fast & Flash - Customized SSL, Dangerous filesystem permissions, Insecure SSL socket vulnerabilities

HackApp vulnerability scanner discovered that application Dolphin Jetpack - Fast & Flash published at the 'play' market has multiple vulnerabilities...

Ace Browser – Fast, AdBlock - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Ace Browser – Fast, AdBlock published at the 'play' market has multiple vulnerabilities...

Fast Browser - Customized SSL, Runtime privilege escalation, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Fast Browser published at the 'play' market has multiple vulnerabilities...

5G Speed Fast Browser HD - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application 5G Speed Fast Browser HD published at the 'play' market has multiple vulnerabilities...

Super Fast Browser - Base64 encoded String, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Super Fast Browser published at the 'play' market has multiple vulnerabilities...

Power Browser - Fast Internet - Dangerous filesystem permissions, Exported ContentProvider, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Power Browser - Fast Internet published at the 'play' market has multiple vulnerabilities...

Maxthon Browser - Fast&abp - Customized SSL, Dangerous filesystem permissions, MIT license vulnerabilities

HackApp vulnerability scanner discovered that application Maxthon Browser - Fast&abp published at the 'play' market has multiple vulnerabilities...

Download Manager Fast - Dynamic Code Loading, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Download Manager Fast published at the 'play' market has multiple vulnerabilities...

Fast Download Manager - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Fast Download Manager published at the 'play' market has multiple vulnerabilities...

Opera Mini - fast web browser - Customized SSL, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application Opera Mini - fast web browser published at the 'play' market has multiple vulnerabilities...

Denial of Service Vulnerability in Multiple F5 BIG-IP Products (CNVD-2017-01192)

F5 BIG-IP is the popular load balancer. An unspecified security vulnerability exists in F5 BIG-IP, where submitting a special request can cause TMM to restart when TCP FAST OPEN is enabled...

CVE-2016-9249

An undisclosed traffic pattern received by a BIG-IP Virtual Server with TCP Fast Open enabled may cause the Traffic Management Microkernel TMM to restart, resulting in a Denial-of-Service DoS...