PT-2017-11692

Name of the Vulnerable Software and Affected Versions Android for MSM versions affected versions not specified Firefox OS for MSM versions affected versions not specified QRD Android versions affected versions not specified Description The issue is related to the ISP Camera driver in the Linux...

CVE-2017-11028: Exposure of Sensitive Information to an Unauthorized Actor

In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in the ISP Camera driver, the contents of an arbitrary kernel address can be leaked to userspace by the function msmispgetstreamcommondata...

Google Android Qualcomm Component Information Disclosure Vulnerability (CNVD-2017-36259)

Android is a Linux-based open source operating system developed by Google and the Open Handheld Alliance OHA, and Qualcomm Camera is a camera program developed by Qualcomm. An information disclosure vulnerability exists in Qualcomm Camera in Android. The vulnerability can be exploited by an...

Google to add "DNS over TLS" security feature to Android OS

No doubt your Internet Service Provides ISPs, or network-level hackers cannot spy on https communications. But do you know — ISPs can still see all of your DNS requests, allowing them to know what websites you visit. Google is working on a new security feature for Android that could prevent your...

DNS Diagnostics & Performance Measurement Tools: DNSDiag

Ever been wondering if your ISP is hijacking your DNS traffic ? Ever observed any misbehavior with your DNS responses? Ever been redirected to wrong address and suspected something is wrong with your DNS? Here we have a set of tools to perform basic audits on your DNS requests and responses to ma...

CVE-2017-11000

In all Qualcomm products with Android releases from CAF using the Linux kernel, in an ISP Camera kernel driver function, an incorrect bounds check may potentially lead to an out-of-bounds write...

CVE-2017-8251

In all Qualcomm products with Android releases from CAF using the Linux kernel, in functions msmispcheckstreamcfgcmd & msmispstatsupdatecgcoverride, 'streamcfgcmd-numstreams' is not checked, and could overflow the array streamcfgcmd-streamhandle...

CVE-2017-11000

In all Qualcomm products with Android releases from CAF using the Linux kernel, in an ISP Camera kernel driver function, an incorrect bounds check may potentially lead to an out-of-bounds write...

CVE-2017-11000

CVE-2017-11000 affects Qualcomm components: specifically the Camera driver within Android CAF builds using the Linux kernel ISP Camera driver function. The root cause is an incorrect bounds check that may lead to an out-of-bounds write, described as an Elevation of Privilege (EoP) issue in the Qu...

PT-2017-11675

Name of the Vulnerable Software and Affected Versions Qualcomm products with Android releases from CAF using the Linux kernel affected versions not specified Description The issue is related to an incorrect bounds check in an ISP Camera kernel driver function, which may potentially lead to an...

PT-2017-18237

Name of the Vulnerable Software and Affected Versions Qualcomm products with Android releases from CAF using the Linux kernel affected versions not specified Description The issue is related to the msm isp check stream cfg cmd and msm isp stats update cgc override functions, where the stream cfg...

CVE-2017-11000: Improper Restriction of Operations within the Bounds of a Memory Buffer

In all Qualcomm products with Android releases from CAF using the Linux kernel, in an ISP Camera kernel driver function, an incorrect bounds check may potentially lead to an out-of-bounds write...

Researchers Figure Out How to Blind ISPs from Smart Home Device Traffic

Researchers have come up with a way to blind ISPs and attackers in a man-in-the-middle position to network traffic emanating from smart home devices. Smart devices such as sleep monitors, electric switches, security cameras and many others require an internet connection to function properly. They...

Flaws in ISP gateways let attackers remotely tap internet traffic

By Waqas Defcon is the most important event for the DIY hacking This is a post from HackRead.com Read the original post: Flaws in ISP gateways let attackers remotely tap internet traffic...

CVE-2016-10401

ZyXEL PK5001Z devices have zyad5001 as the su password, which makes it easier for remote attackers to obtain root access if a non-root account password is known or a non-root default account exists within an ISP's deployment of these devices...

CVE-2016-10401

ZyXEL PK5001Z devices have zyad5001 as the su password, which makes it easier for remote attackers to obtain root access if a non-root account password is known or a non-root default account exists within an ISP’s deployment of these devices. Recent assessments: Assessed Attacker Value: 0 Assesse...

ProtonMail Launches Free VPN Service

Encrypted email service ProtonMail announced today it was launching a free VPN service called ProtonVPN. Developers said the move comes following one year of development and four months of beta testing by 10,000 ProtonMail community members. According to Proton Technologies AG, the company behind...

Erosion of ISP Privacy Rules Sparks New Anti-Snooping Efforts

Since Congress voted to prevent the implementation of new ISP privacy protections there has been a committed and sometimes loud call for new rules. The fear is, without adequate safeguards in place, ISPs will be free to build detailed customer profiles that include names, addresses and online...

No credentials of the cases, the attacker will be able to login to FreeRADIUS-vulnerability warning-the black bar safety net

Recently, from the Luxembourg RESTENA the security research expert Stefan Winter in the current world's most popular radius server found a TLS authentication bypass vulnerability. ! FreeRADIUS is currently the world's most popular RADIUS server, in fact the vast majority of the radius server is...

StringBleed: SNMP Protocol“God mode”vulnerability affects a variety of network devices-vulnerability warning-the black bar safety net

Recently, data from South America, two security researchers discovered that the SNMP（Simple Network Management Protocol the v1 and v2 version of the Protocol the presence of the authorized authentication and access control bypass vulnerability, at least 78 kinds of models of network access and Io...