CVE-2018-17020

CVE-2018-17020 affects ASUS GT-AC5300 devices with firmware up to 3.0.0.4.384_32738. The issue allows remote attackers to cause a denial of service by sending a single HTTP request line (GET / HTTP/1.1). Connected documents confirm the vendor/product and the repro vector, and describe the impact ...

citymax-gt.com XSS vulnerability

Open Bug Bounty ID: OBB-655609 Description| Value ---|--- Affected Website:| citymax-gt.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Security update for Chromium (important)

This update for Chromium to version 67.0.3396.99 fixes multiple issues. Security issues fixed bsc1095163: - CVE-2018-6123: Use after free in Blink - CVE-2018-6124: Type confusion in Blink - CVE-2018-6125: Overly permissive policy in WebUSB - CVE-2018-6126: Heap buffer overflow in Skia -...

CVE-2015-1800

The samsungextdisp driver in the Samsung S4 GT-I9500 I9500XXUEMK8 kernel 3.4 and earlier allows attackers to potentially obtain sensitive information...

CVE-2015-1801

The CVE-2015-1801 entry concerns the Samsung S4 GT-I9500 with the samsung_extdisp driver (kernel 3.4 and earlier). The root cause is a memory corruption flaw in the samsung_extdisp pathway, enabling a local attacker to cause a denial of service or gain privileges. Connected sources reference the ...

CVE-2015-1800

CVE-2015-1800 affects the Samsung S4 GT-I9500 with kernel 3.4 and earlier, via the samsung_extdisp driver. Multiple connected sources indicate the s3cfb_extdsp_ops.c/samsung_extdisp path could disclose sensitive information to a local attacker, enabling information disclosure without requiring us...

CVE-2015-1800

The samsungextdisp driver in the Samsung S4 GT-I9500 I9500XXUEMK8 kernel 3.4 and earlier allows attackers to potentially obtain sensitive information...

Threat Outbreak Alert RuleID30125: Email Messages Distributing Malicious Software on August 8, 2017

Medium Alert ID: 54781 First Published: 2017 August 8 13:40 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID30125 may contain the following files: Name | Si...

CVE-2016-4032

CVE-2016-4032 concerns Samsung devices (Galaxy S6, Note 3, Galaxy S4 variants) where AT commands can be executed because the devices do not block AT+USBDEBUG and AT+WIFIVALUE when connected to a Linux host. The issue enables an attacker with AT access to modify Android settings on affected builds...

Extreme Simulator GT Racing 3D - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Extreme Simulator GT Racing 3D published at the 'play' market has multiple vulnerabilities...

GT Racing 2: The Real Car Exp - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application GT Racing 2: The Real Car Exp published at the 'play' market has multiple vulnerabilities...

GT Recovery - Undelete,Restore - Exported ContentProvider, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application GT Recovery - Undelete,Restore published at the 'play' market has multiple vulnerabilities...

Abfall GT - External URLs, WebView JavaScript enabled, WebView files access vulnerabilities

HackApp vulnerability scanner discovered that application Abfall GT published at the 'play' market has multiple vulnerabilities...

Samsung S4 GT-I9500 Memory Corruption Vulnerability

The Samsung S4 GT-I9500 is a smartphone released by the South Korean company Samsung. The 's3cfbextdspioctl' in the drivers/video/samsungextdisp/s3cfbextdspops.c file of the Samsung S4 GT-I9500 I9500XXUEMK8 release A memory corruption vulnerability exists in the function, allowing a local attacke...

MJGUEST 6.7 - QT 'mjguest.php' Cross Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/29002/info MJGUEST is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

Samsung S3 Full Lock Screen Bypass

====Title==== Samsung S3 : Full Lock Screen Bypass ========Summary======== It is possible to bypass the lock screen on the S3 allowing an indivdual full access to the phones features ==============Steps to recreate============== 1 On the code entry screen press Emergency Call2 Then press Emergenc...

CVE-2012-3292

CVE-2012-3292 affects the GridFTP component of Globus Toolkit (GT) prior to 5.2.2, where insufficient validation of a name lookup (getpwnam_r) could cause privilege escalation if a login uses a non-existent user, allowing GridFTP to run as the last user in the password file. Public references in ...

Fedora 17 : globus-gridftp-server-6.10-2.fc17 / globus-gridftp-server-control-2.5-2.fc17 (2012-8445)

Fix for http://jira.globus.org/browse/GT-195 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Ubuntu Update for linux-ti-omap4 USN-1364-1

Ubuntu Update for Linux kernel vulnerabilities USN-1364-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN13641.nasl 7960 2017-12-01 06:58:16Z santu $ Ubuntu Update for linux-ti-omap4 USN-1364-1 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.n...

Mozilla Foundation Security Advisory 2012-03

Mozilla Foundation Security Advisory 2012-03 Title: iframe element exposed across domains via name attribute Impact: High Announced: January 31, 2012 Reporter: Alex Dvorov Products: Firefox, Thunderbird, SeaMonkey Fixed in: Firefox 10.0 Thunderbird 10.0 SeaMonkey 2.7 Description Alex Dvorov...