The vulnerability of the Android operating system, allowing a hacker to execute arbitrary code

The vulnerability related to privilege escalation in MediaTek’s Android operating system driver involves deficiencies in access control. Exploiting this vulnerability allows a malicious actor to execute arbitrary code of a local malware application within the kernel context. This issue is...

USN-3179-1 openjdk-8 vulnerabilities

Karthik Bhargavan and Gaetan Leurent discovered that the DES and Triple DES ciphers were vulnerable to birthday attacks. A remote attacker could possibly use this flaw to obtain clear text data from long encrypted sessions. This update moves those algorithms to the legacy algorithm set and causes...

IBM WebSphere Application Server 9.0 < 9.0.0.2 Multiple Vulnerabilities

Binary data 9881.prm...

Inherent Risks of Using the Intelligent Platform Management Interface (IPMI) on the Lenovo System x Integrated Management Module (IMM), Integrated Management Module II (IMM2) and ThinkServer TSM - us

Lenovo Security Advisory: LEN-10617 Potential Impact: Access to systems through IPMI if default settings are not changed Severity: High Scope of Impact: Industry-Wide CVE Identifiers: CVE-2013-4037, CVE-2013-4031 Summary Description: Various risks with the industry-standard Intelligent Platform...

Oracle Java SE Security Updates (jan2017-2881727) 01 - Linux

Oracle Java SE is prone to multiple vulnerabilities. Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

The vulnerability of the Android operating system, allowing a hacker to execute arbitrary code

The vulnerability of Broadcom’s Android operating system Wi-Fi kernel is related to deficiencies in access control for certain functions. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a malicious application from a remote location...

The vulnerability of the Android operating system, allowing a hacker to execute arbitrary code

The vulnerability of Broadcom’s Android operating system Wi-Fi kernel is related to deficiencies in access control for certain functions. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a malicious application from a remote location...

The vulnerability of the Android operating system, allowing a hacker to execute arbitrary code

The vulnerability of the Qualcomm camera kernel driver in the Android operating system is related to access control deficiencies. Exploiting this vulnerability allows a remote attacker to execute arbitrary code through a malicious application...

The vulnerability of the Android operating system, allowing a hacker to execute arbitrary code

The vulnerability related to privilege escalation in the Qualcomm GPU operating system for Android is linked to access control deficiencies. Exploiting this vulnerability allows a remote attacker to execute arbitrary local malicious code within the kernel context. This issue is considered critica...

The vulnerability of the Android operating system, allowing a hacker to execute arbitrary code

The vulnerability of NVIDIA GPU kernel driver for the Android operating system is related to deficiencies in access control for certain functions. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a malicious application remotely...

The vulnerability of the Android operating system, which allows a hacker to gain unauthorized access to memory

The vulnerability of the Page Table subsystem configuration in the Android operating system arises due to errors in the authentication process. Exploiting this vulnerability can allow an intruder, operating locally, to gain unauthorized access to supervisor memory...

New RCE Flaws Found in Samsung Smartcam

UPDATE At DEFCON 22 in 2014, researchers demonstrated hacks against the Samsung Smartcam that allowed an attacker to remotely take over the device. Samsung’s reaction at the time was to remove the web interface enabling the attack rather than patch the code in question. The Exploitee.rs, formerly...

Carlo Gavazzi VMU-C EM and VMU-C PV

CVSS V3 10 ATTENTION: Remotely exploitable/low skill level to exploit. Vendor: Carlo Gavazzi Equipment: VMU-C EM, VMU-C PV Vulnerabilities: Access Control Flaws, CSRF, Sensitive Information Stored In Clear Text AFFECTED PRODUCTS Carlo Gavazzi reports that the vulnerabilities affect the following...

Netgear launches Bug Bounty Program for Hacker; Offering up to $15,000 in Rewards

It might be the easiest bug bounty program ever. Netgear launched on Thursday a bug bounty program to offer up to $15,000 in rewards to hackers who will find security flaws in its products. Since criminals have taken aim at a rapidly growing threat surface created by millions of new Internet of...

OpenSSH < 7.4 Multiple Vulnerabilities (Jan 2017) - Windows

OpenSSH is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:openbsd:openssh"; ifdescription...

Fedora 24 : xen (2016-bc02bff7f5)

two security flaws 1406840 x86 PV guests may be able to mask interrupts XSA-202, CVE-2016-10024 x86: missing NULL pointer check in VMFUNC emulation XSA-203, CVE-2016-10025 x86: Mishandling of SYSCALL singlestep during emulation XSA-204, CVE-2016-10013 1406260 Note that Tenable Network Security ha...

Oracle MySQL 5.7.x < 5.7.17 Multiple Vulnerabilities

Binary data 9846.prm...

Critical Updates — RCE Flaws Found in SwiftMailer, PhpMailer and ZendMail

A security researcher recently reported a critical vulnerability in one of the most popular open source PHP libraries used to send emails that allowed a remote attacker to execute arbitrary code in the context of the web server and compromise a web application. Disclosed by Polish security...

Open-Xchange (OX) App Suite Multiple XSS Vulnerabilities

Open-Xchange OX App Suite is prone to multiple cross-site scripting XSS vulnerabilities. Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later Thi...

Open-Xchange (OX) App Suite Multiple Cross Site Scripting Vulnerabilities - 02

Open-Xchange OX App Suite is prone to multiple cross-site scripting XSS vulnerabilities. Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later Thi...