CVE-2016-11050

An issue was discovered on Samsung mobile devices with S3KK, Note2KK, S4L, Note3L, and S5L software. An attacker can rewrite the IMEI by flashing crafted firmware. The Samsung ID is SVE-2016-5562 March 2016...

Epilepsy Foundation Bombarded with Seizure-Triggering Twitter Posts

The Epilepsy Foundation on Monday filed a criminal complaint against a number of undisclosed Twitter users after they bombarded its Twitter feed in November with a barrage of posts of flashing or strobing lights — exposing its thousands of followers to potential seizure-triggering images. The...

Unspecified Vulnerabilities in NVIDIA GPUModeSwitch Tool and NVIDIA NVFlash

NVIDIA NVFlash and GPUModeSwitch Tool are both products of NVIDIA Corporation.NVIDIA NVFlash is a tool for flashing the BIOS firmware of NVIDIA graphics cards.GPUModeSwitch Tool is an NVIDIA GPU mode change utility program. A security vulnerability exists in NVIDIA GPUModeSwitch Tool and NVIDIA...

CVE-2018-14988

The MXQ TV Box 4.4.2 Android device with a build fingerprint of MBX/m201N/m201N:4.4.2/KOT49H/20160106:user/test-keys contains the Android framework with a package name of android versionCode=19, versionName=4.4.2-20170213 that contains an exported broadcast receiver application component that, wh...

Design/Logic Flaw

In all android releases Android for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, when flashing image using FastbootLib if size is not divisible by block size, information leak occurs...

CVE-2018-11275

In all android releases Android for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, when flashing image using FastbootLib if size is not divisible by block size, information leak occurs...

CVE-2018-11275: Exposure of Sensitive Information to an Unauthorized Actor

In all android releases Android for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, when flashing image using FastbootLib if size is not divisible by block size, information leak occurs...

Design/Logic Flaw

An exploitable permanent denial of service vulnerability exists in Insteon Hub running firmware version 1013. The firmware upgrade functionality, triggered via PubNub, retrieves signed firmware binaries using plain HTTP requests. The device doesn't check the kind of firmware image that is going t...

CVE-2018-3834

An exploitable permanent denial of service vulnerability exists in Insteon Hub running firmware version 1013. The firmware upgrade functionality, triggered via PubNub, retrieves signed firmware binaries using plain HTTP requests. The device doesn't check the kind of firmware image that is going t...

Citrix Receiver 4.9 LTSR - Self service mode set to false, desktop icons constantly flashing

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. Installed Citrix Receiver 4.9 LTSR on some of the test VDAs published desktops and ever since...

Information disclosure

While flashing a meta image, a buffer over-read can potentially occur when the number of images are out of the maximum range of 32 in Android releases from CAF using the linux kernel Android for MSM, Firefox OS for MSM, QRD Android before security patch level 2018-06-05...

CVE-2017-14893

While flashing meta image, a buffer over-read may potentially occur when the image size is smaller than the image header size or is smaller than the image header size + total image header entry in Android releases from CAF using the linux kernel Android for MSM, Firefox OS for MSM, QRD Android...

CVE-2017-18158

Possible buffer overflows and array out of bounds accesses in Android releases from CAF using the linux kernel Android for MSM, Firefox OS for MSM, QRD Android before security patch level 2018-06-05 while flashing images...

CVE-2017-14893

While flashing meta image, a buffer over-read may potentially occur when the image size is smaller than the image header size or is smaller than the image header size + total image header entry in Android releases from CAF using the linux kernel Android for MSM, Firefox OS for MSM, QRD Android...

CVE-2017-14893

CVE-2017-14893 involves a potential buffer over-read during flashing a meta image in Android CAF builds (Android for MSM, Firefox OS for MSM, QRD Android) via the Linux kernel, before the 2018-06-05 patch level. Root cause: image size smaller than the image header or header plus header entries tr...

CVE-2017-14872

While flashing a meta image, a buffer over-read can potentially occur when the number of images are out of the maximum range of 32 in Android releases from CAF using the linux kernel Android for MSM, Firefox OS for MSM, QRD Android before security patch level 2018-06-05...

CVE-2017-18158: Improper Restriction of Operations within the Bounds of a Memory Buffer

Possible buffer overflows and array out of bounds accesses in Android releases from CAF using the linux kernel Android for MSM, Firefox OS for MSM, QRD Android before security patch level 2018-06-05 while flashing images...

RSA Authentication Manager 8.2.1.4.0-build1394922 / < 8.3 P1 - XML External Entity Injection / Cr

Exploit for java platform in category web applications SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: XXE & XSS vulnerabilities product: RSA Authentication Manager vulnerable version: 8.2.1.4.0-build1394922, 8.3 P1...

RSA Authentication Manager 8.2.1.4.0-build1394922 8.3 P1 - XML External Entity Injection Cross-Site Flashing DOM Cross-Site Scripting

RSA Authentication Manager 8.2.1.4.0-build1394922 8.3 P1 - XML External Entity Injection Cross-Site Flashing DOM Cross-Site Scripting SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: XXE & XSS vulnerabilities product: R...

RSA Authentication Manager 8.2.1.4.0-build1394922 / < 8.3 P1 - XML External Entity Injection / Cross-Site Flashing / DOM Cross-Site Scripting

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: XXE & XSS vulnerabilities product: RSA Authentication Manager vulnerable version: 8.2.1.4.0-build1394922, 8.3 P1 fixed version: 8.3 P1 and later CVE number: CVE-2018-1247...