Cisco ASR 5000 Series Packet Data Network Gateway Denial of Service Vulnerability

Cisco ASR 5000 Series is the 5000 series of wireless controller products from Cisco.Packet Data Network Gateway aka PGW is one of the packet data gateways. A security vulnerability exists in the General Packet Radio Switching Tunneling Protocol Version 1 GTPv1 implementation of the Cisco ASR 5000...

Acer Admits E-commerce Site Breached

Taiwanese electronics company Acer began sending letters to customers last week indicating that some of their sensitive financial information–credit card data included–may have been accessed over the last year or so. Customers’ names, addresses, card numbers, expiration dates, and three digit CVV...

CVE-2016-0392

IBM General Parallel File System GPFS in GPFS Storage Server 2.0.0 through 2.0.7 and Elastic Storage Server 2.5.x through 2.5.5, 3.x before 3.5.5, and 4.x before 4.0.3, as distributed in Spectrum Scale RAID, allows local users to gain privileges via a crafted parameter to a setuid program...

CVE-2016-0392

IBM General Parallel File System GPFS in GPFS Storage Server 2.0.0 through 2.0.7 and Elastic Storage Server 2.5.x through 2.5.5, 3.x before 3.5.5, and 4.x before 4.0.3, as distributed in Spectrum Scale RAID, allows local users to gain privileges via a crafted parameter to a setuid program...

Hardcoded credentials

General Electric GE Multilink ML800, ML1200, ML1600, and ML2400 switches with firmware before 5.5.0 and ML810, ML3000, and ML3100 switches with firmware before 5.5.0k have hardcoded credentials, which allows remote attackers to modify configuration settings via the web interface...

CVE-2016-2310

General Electric GE Multilink ML800, ML1200, ML1600, and ML2400 switches with firmware before 5.5.0 and ML810, ML3000, and ML3100 switches with firmware before 5.5.0k have hardcoded credentials, which allows remote attackers to modify configuration settings via the web interface...

CVE-2016-2310

General Electric GE Multilink ML800, ML1200, ML1600, and ML2400 switches with firmware before 5.5.0 and ML810, ML3000, and ML3100 switches with firmware before 5.5.0k have hardcoded credentials, which allows remote attackers to modify configuration settings via the web interface...

CVE-2016-2310

The CVE-2016-2310 issue affects GE Multilink switches (ML800, ML1200, ML1600, ML2400) with firmware before 5.5.0 and (ML810, ML3000, ML3100) with firmware before 5.5.0k. The underlying root cause is hardcoded credentials that allow remote attackers to modify configuration settings via the web int...

Configuration option control vulnerability in various GE products

GE ML800 and others are Ethernet switch products from General Electric GE. Various GE products use hard-coded certificates, allowing a remote attacker to exploit the vulnerability to gain administrator privileges for device configuration and control all available configuration options through a w...

General Motors: IE search XSS

Gm.com website's search function contained a parameter that allowed XSS injection. The vulnerable input parameter has been identified and remediated. Search DOM XSS reproduced in IE due to non-encoded GET params in this browser. The tag with an extra parameter and without the end tag used to bypa...

Kingsoft General System has ROOT privilege command execution vulnerability

Kingsoft is one of the Internet software companies. Kingsoft General System has a ROOT privilege command execution vulnerability. The vulnerability exists in the file: /src/system/dhcpdialog.php The main code can be seen here: $IGoperation = $POST'IGoperation'; $IGcardname = $POST'IGcard';...

Debian Security Advisory DSA 3582-1 (expat - security update)

Gustavo Grieco discovered that Expat, an XML parsing C library, does not properly handle certain kinds of malformed input documents, resulting in buffer overflows during processing and error reporting. A remote attacker can take advantage of this flaw to cause an application using the Expat libra...

Cisco Nexus and Cisco Multilayer Director Switches MOTD Telnet Login Reset Vulnerability (Cisco-SA-20150610-CVE-2015-0775)

A vulnerability in the Message of the Day MOTD or banner functionality of the NX-OS Software could allow an unauthenticated, remote attacker to cause the login process to reset. Copyright C 2016 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are...

Google Android Broadcom Wi-Fi Driver - Memory Corruption

/ Copyright C 2016 by AbdSec Core Team This program is free software: you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation, either version 3 of the License, or at your option any later version. This program is...

Oracle: Security Advisory (ELSA-2016-3553)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle: Security Advisory (ELSA-2016-0695)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory for openssl (SUSE-SU-2016:1228-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

IBM Spectrum Scale and General Parallel File System Elevation of Privilege Vulnerability

IBM GPFS is an enterprise file management system optimized for petabyte-scale storage management.IBM Spectrum Scale is a data and file management solution based on IBM GPFS. IBM Spectrum Scale and IBM GPFS have a security vulnerability in the handling of the mmapplypolicy command that allows a...

Sophos Cyberoam Central Console (CCC) Detection (SSH Login)

SSH login-based detection of Sophos Cyberoam Central Console CCC. Copyright C 2016 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

Yasr 0.6.9-5 Buffer Overflow

Exploit Author: Juan Sacco - http://www.exploitpack.com - [email protected] Program affected: General-purpose console screen reader Version: 0.6.9-5 Tested and developed under: Kali Linux 2.0 x86 - https://www.kali.org Program description: Yasr is a general-purpose console screen reader for...