CVE-2018-11023

The CVE-2018-11023 entry concerns the Amazon Kindle Fire HD (3rd generation) running Fire OS 4.5.5.3. The kernel component kernel/omap/drivers/misc/gcx/gcioctl/gcif.c is vulnerable to kernel crashes when an attacker crafts an argument for an ioctl call on /dev/gcioctl using the command 3222560159...

CVE-2018-11025

kernel/omap/drivers/mfd/twl6030-gpadc.c in the kernel component in Amazon Kindle Fire HD3rd Fire OS 4.5.5.3 allows attackers to inject a crafted argument via the argument of an ioctl on device /dev/twl6030-gpadc with the command 24832 and cause a kernel crash...

CVE-2018-11023

kernel/omap/drivers/misc/gcx/gcioctl/gcif.c in the kernel component in Amazon Kindle Fire HD 3rd Fire OS 4.5.5.3 allows attackers to inject a crafted argument via the argument of an ioctl on device /dev/gcioctl with the command 3222560159 and cause a kernel crash...

CVE-2018-11020

The CVE-2018-11020 issue affects Amazon Kindle Fire HD (3rd gen) running Fire OS 4.5.5.3. The kernel component kernel/omap/drivers/rpmsg/rpmsg_omx.c is vulnerable to a crafted ioctl argument on /dev/rpmsg-omx1 using command 3221772291, which can trigger a kernel crash. Documents consistently iden...

CVE-2018-11024

CVE-2018-11024 affects the kernel component in Amazon Kindle Fire HD (3rd gen) running Fire OS 4.5.5.3. The vulnerable code resides in kernel/omap/drivers/misc/gcx/gcioctl/gcif.c. An attacker can pass a crafted argument to an ioctl on /dev/gcioctl with command 1077435789, which can trigger a kern...

[SECURITY] Fedora 28 Update: dolphin-emu-5.0-25.fc28

Dolphin is a Gamecube, Wii and Triforce the arcade machine based on the Gamecube emulator, which supports full HD video with several enhancements such as compatibility with all PC controllers, turbo speed, networked multiplaye r, and more. Most games run perfectly or with minor bugs...

[SECURITY] Fedora 29 Update: dolphin-emu-5.0-25.fc29

Dolphin is a Gamecube, Wii and Triforce the arcade machine based on the Gamecube emulator, which supports full HD video with several enhancements such as compatibility with all PC controllers, turbo speed, networked multiplaye r, and more. Most games run perfectly or with minor bugs...

CVE-2017-2877

CVE-2017-2877 : Foscam C1 Indoor HD Camera (firmware 2.52.2.43) is vulnerable via the Multi-Camera interface on UDP/10001. The vulnerability stems from a missing error check in the devMng path for command 0x0064, allowing an unauthenticated attacker to reset all user accounts to factory defaults ...

CVE-2017-2876

CVE-2017-2876 affects the Foscam C1 Indoor HD Camera (System 1.9.3.18; Application 2.52.2.43). The issue is a buffer overflow in the Multi-Camera port 10000 (devMng) during authentication, where the username/password fields can overflow a small stack/IPC buffer, enabling a remote attacker to exec...

CVE-2017-2855

An exploitable buffer overflow vulnerability exists in the DDNS client used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43. On devices with DDNS enabled, an attacker who is able to intercept HTTP connections will be able to fully compromise the device by creating a rogue...

CVE-2017-2878

An exploitable buffer overflow vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43. A specially crafted HTTP request can cause a buffer overflow resulting in overwriting arbitrary data. An attacker can simply send an...

Buffer overflow

An exploitable buffer overflow vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43. A specially crafted HTTP request can cause a buffer overflow resulting in overwriting arbitrary data. An attacker can simply send an...

CVE-2017-2878

CVE-2017-2878 affects the Foscam C1 Indoor HD Camera web management interface. The issue is a buffer overflow in the CGIProxy.fcgi logOut path: a user-supplied username (buffer size up to 0x40) is copied into a 0x20-byte field via strcpy, allowing an attacker—requiring at least a visitor-privileg...

CVE-2017-2857

An exploitable buffer overflow vulnerability exists in the DDNS client used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43. On devices with DDNS enabled, an attacker who is able to intercept HTTP connections will be able to fully compromise the device by creating a rogue...

CVE-2017-2854

An exploitable buffer overflow vulnerability exists in the DDNS client used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43. On devices with DDNS enabled, an attacker who is able to intercept HTTP connections will be able to fully compromise the device by creating a rogue...

CVE-2017-2874

CVE-2017-2874 affects the Foscam C1 Indoor HD Camera via the devMng Multi-Camera interface over UDP ports 10000/10001. The information-disclosure vulnerability can be triggered by an unauthenticated remote attacker using the find command (0x0000) to retrieve sensitive device data, including MAC a...

[SECURITY] Fedora 27 Update: dolphin-emu-5.0-24.fc27

Dolphin is a Gamecube, Wii and Triforce the arcade machine based on the Gamecube emulator, which supports full HD video with several enhancements such as compatibility with all PC controllers, turbo speed, networked multiplaye r, and more. Most games run perfectly or with minor bugs...

[SECURITY] Fedora 28 Update: dolphin-emu-5.0-24.fc28

Dolphin is a Gamecube, Wii and Triforce the arcade machine based on the Gamecube emulator, which supports full HD video with several enhancements such as compatibility with all PC controllers, turbo speed, networked multiplaye r, and more. Most games run perfectly or with minor bugs...

HD Tune Pro 5.70 Denial Of Service

Exploit Title: HD Tune Pro 5.70 - Denial Of Service PoC Author: Gionathan "John" Reale Discovey Date: 2018-08-29 Homepage: https://www.hdtune.com/ Software Link: https://www.hdtune.com/download.html Tested Version: v5.70 Tested on OS: Windows 7 32-bit Steps to Reproduce: Run the python exploit...

HD Tune Pro 5.70 - Denial of Service (PoC)

Exploit Title: HD Tune Pro 5.70 - Denial Of Service PoC Author: Gionathan "John" Reale Discovey Date: 2018-08-29 Homepage: https://www.hdtune.com/ Software Link: https://www.hdtune.com/download.html Tested Version: v5.70 Tested on OS: Windows 7 32-bit Steps to Reproduce: Run the python exploit...