CVE-2018-9069 BIOS Write Protection Race Condition

In some Lenovo IdeaPad consumer notebook models, a race condition in the BIOS flash device locking mechanism is not adequately protected against, potentially allowing an attacker with administrator access to alter the contents of BIOS...

Cybersecurity Researchers Spotted First-Ever UEFI Rootkit in the Wild

Cybersecurity researchers at ESET have unveiled what they claim to be the first-ever UEFI rootkit being used in the wild, allowing hackers to implant persistent malware on the targeted computers that could survive a complete hard-drive wipe. Dubbed LoJax , the UEFI rootkit is part of a malware...

dctv.ph XSS vulnerability

Open Bug Bounty ID: OBB-680328 Description| Value ---|--- Affected Website:| dctv.ph Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| WordPress Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2018-15967

Adobe Flash Player versions 30.0.0.154 and earlier have a privilege escalation vulnerability. Successful exploitation could lead to information disclosure...

CVE-2018-15967

Adobe Flash Player versions 30.0.0.154 and earlier have a privilege escalation vulnerability. Successful exploitation could lead to information disclosure...

Privilege escalation

Adobe Flash Player versions 30.0.0.154 and earlier have a privilege escalation vulnerability. Successful exploitation could lead to information disclosure...

CVE-2018-15967

CVE-2018-15967 affects Adobe Flash Player

CVE-2018-15967

Adobe Flash Player versions 30.0.0.154 and earlier have a privilege escalation vulnerability. Successful exploitation could lead to information disclosure...

huber-verlag.de XSS vulnerability

Open Bug Bounty ID: OBB-678978 Description| Value ---|--- Affected Website:| huber-verlag.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Adobe Flash Player End of Life (EOL) Detection - Windows

The Adobe Flash Player on the remote host has reached the end of life EOL / is discontinued and should not be used anymore. This VT has been deprecated and replaced by the VT SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are...

Adobe Flash Player End of Life (EOL) Detection - Mac OS X

The Adobe Flash Player on the remote host has reached the end of life EOL / is discontinued and should not be used anymore. This VT has been deprecated and replaced by the VT SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are...

Adobe Flash Player End of Life (EOL) Detection - Linux

The Adobe Flash Player on the remote host has reached the end of life EOL / is discontinued and should not be used anymore. This VT has been deprecated and replaced by the VT SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are...

BIOS Write Protection Race Condition - US

Lenovo Security Advisory: LEN-20184 Potential Impact: Privilege escalation Severity: High Scope of Impact: Lenovo-specific CVE Identifier: CVE-2018-9069 Summary Description: In several consumer notebook models, a race condition in BIOS flash device locking mechanism is not adequately protected...

Google Android Buffer Overflow Vulnerability (CNVD-2018-19564)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. A buffer overflow vulnerability exists in Android, which stems from the program writing uninitialized memory to flash memory when processing the 'writedeviceinfoflash' function. A...

CVE-2018-17177

An issue was discovered on Neato Botvac Connected 2.2.0 and Botvac 85 1.2.1 devices. Static encryption is used for the copying of so-called "black box" logs event logs and core dumps to a USB stick. These logs are RC4-encrypted with a 9-character password of ^JEd4W!I that is obfuscated by hiding ...

CVE-2017-15844

In all android releases Android for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, while processing the function for writing device values into flash, uninitialized memory can be written to flash...

CVE-2017-15844

In all android releases Android for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, while processing the function for writing device values into flash, uninitialized memory can be written to flash...

CVE-2017-15844

CVE-2017-15844 affects CAF Android builds using the Linux kernel. During processing of the function that writes device values into flash, uninitialized memory can be written to flash. This can lead to information disclosure (CONFIDENTIALITY impact) with a local attacker, no user interaction requi...

RHEL 6 : flash-plugin (RHSA-2018:2707)

The remote Redhat Enterprise Linux 6 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2018:2707 advisory. The flash-plugin package contains a Mozilla Firefox compatible Adobe Flash Player web browser plug-in. This update upgrades Flash Player to version...

Updated flash-player-plugin packages fix security vulnerability

Updated flash-player-plugin packages fix security vulnerability: Successful exploitation of the currently un-disclosed vulerability could lead to information disclosure CVE-2018-15967...