IC Mobile Navigator - Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application IC Mobile Navigator published at the 'play' market has multiple vulnerabilities...

UBUNTU-CVE-2016-1612

The LoadIC::UpdateCaches function in ic/ic.cc in Google V8, as used in Google Chrome before 48.0.2564.82, does not ensure receiver compatibility before performing a cast of an unspecified variable, which allows remote attackers to cause a denial of service or possibly have unknown other impact vi...

Design/Logic Flaw

Cisco Unified Computing System UCS B Blade Server Software 2.2.x before 2.2.6 allows local users to cause a denial of service host OS or BMC hang by sending crafted packets over the Inter-IC I2C bus, aka Bug ID CSCuq77241...

CVE-2015-4265: Undefined Security Weakness

Cisco Unified Computing System UCS B Blade Server Software 2.2.x before 2.2.6 allows local users to cause a denial of service host OS or BMC hang by sending crafted packets over the Inter-IC I2C bus, aka Bug ID CSCuq77241...

PT-2015-6490

Name of the Vulnerable Software and Affected Versions Cisco Unified Computing System UCS B Blade Server Software versions 2.2.x through 2.2.5 Description The issue allows local users to cause a denial of service, resulting in a host OS or BMC hang, by sending crafted packets over the Inter-IC I2C...

Mandriva Linux Security Advisory : jasper (MDVSA-2015:012)

Updated jasper packages fix security vulnerabilities : A double free flaw was found in the way JasPer parsed ICC color profiles in JPEG 2000 image files. A specially crafted file could cause an application using JasPer to crash or, possibly, execute arbitrary code CVE-2014-8137. A heap-based buff...

Inmatrix-Ltd.-Zoom-Player-8.5-.jpeg

Exploit Title: Inmatrix Ltd. Zoom Player Crafted JPEG File Memory Corruption and Arbitrary Code Execution Exploit. Version: Zoom Player v8.5 Date: 09-1-2013 Author: Debasish Mandal. Blog : http://www.debasish.in/ d =...

CVE-2014-6908

The Forum IC aka com.tapatalk.forumimmigrercom application 3.3.12 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Forum IC aka com.tapatalk.forumimmigrercom application 3.3.12 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6908

The Forum IC aka com.tapatalk.forumimmigrercom application 3.3.12 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6908

The CVE-2014-6908 entry concerns the Forum IC app (com.tapatalk.forumimmigrercom) for Android, version 3.3.12, which does not verify X.509 certificates from SSL servers. This trust failure allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certifica...

CVE-2014-6908: Undefined Security Weakness

The Forum IC aka com.tapatalk.forumimmigrercom application 3.3.12 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Edimax IC-3030iWn - UDP Packet Password Information Disclosure

Edimax IC-3030iWn - UDP Packet Password Information Disclosure source: https://www.securityfocus.com/bid/54006/info Edimax IC-3030iWn is prone to an information-disclosure vulnerability. Successful exploits will allow a remote attacker to gain access to sensitive information. Information obtained...

Edimax IC-3030iWn - UDP Packet Password Information Disclosure

source: https://www.securityfocus.com/bid/54006/info Edimax IC-3030iWn is prone to an information-disclosure vulnerability. Successful exploits will allow a remote attacker to gain access to sensitive information. Information obtained will aid in further attacks. !/usr/bin/env python """ Exploit...

Edimax IC-3030iWn Web Admin Auth Bypass exploit

Exploit for hardware platform in category web applications This exploit against: - Edimax IC-3030i - Edimax IC-3015 - Airlive WN 500 !/usr/bin/env python """ Exploit Title: Edimax IC-3030iWn Web Admin Auth Bypass exploit Date: 4 April 2012 Exploit Author: email protected, @y3dips URL:...

Edimax IC-3030iWn Authentication Bypass

!/usr/bin/env python """ Exploit Title: Edimax IC-3030iWn Web Admin Auth Bypass exploit Date: 4 April 2012 Exploit Author: [email protected], @y3dips URL: http://echo.or.id Vendor Homepage: http://www.edimax.com Sourcecode Link: http://www.edimax.com/en/producedetail.php?pdid=352&pl1id=8&pl2id=91...

Code injection

Unspecified vulnerability in HP Insight Control for Linux aka IC-Linux before 6.3 allows remote authenticated users to obtain sensitive information, modify data, or cause a denial of service via unknown vectors...

CVE-2011-1535

HP Insight Control for Linux (IC-Linux) prior to version 6.3 is affected by CVE-2011-1535. The vulnerability allows remote authenticated users to obtain sensitive information, modify data, or cause a denial of service via unknown vectors (as per HP and NVD records). A security bulletin (HPSBMA026...

[security bulletin] HPSBMA02658 SSRT100413 rev.1 - Insight Control for Linux (IC-Linux), Remote Unauthorized Elevation of Privilege, Execution of Arbitrary Code, Encryption Downgrade, Information Disclosure, Denial of Service (DoS)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c02794777 Version: 1 HPSBMA02658 SSRT100413 rev.1 - Insight Control for Linux IC-Linux, Remote Unauthorized Elevation of Privilege, Execution of Arbitrary Code, Encryption Downgrade, Information...

CVE-2010-1031: Undefined Security Weakness

Unspecified vulnerability in HP Insight Control for Linux aka IC-Linux or ICE-LX 2.11 and earlier allows local users to gain privileges via unknown vectors...