CVE-2016-10109

Use-after-free vulnerability in pcsc-lite before 1.8.20 allows a remote attackers to cause denial of service crash via a command that uses "cardsList" after the handle has been released through the SCardReleaseContext function...

Man In The Middle (MitM)

adamvr-geoip-lite is vulnerable to man-in-the-middle MitM attacks via downloading geoip resources over HTTP. This impacts the integrity and availability of this geoip data that may alter the decisions made by an application using this data...

DSA-3752-1 pcsc-lite - security update

Bulletin has no description...

Debian Security Advisory DSA 3752-1 (pcsc-lite - security update)

Peter Wu discovered that a use-after-free in the pscd PC/SC daemon of PCSC-Lite might result in denial of service or potentially privilege escalation. OpenVAS Vulnerability Test $Id: deb3752.nasl 6607 2017-07-07 12:04:25Z cfischer $ Auto-generated from advisory DSA 3752-1 using nvtgen 1.0 Script...

[ASA-201701-12] pcsclite: privilege escalation

Arch Linux Security Advisory ASA-201701-12 ========================================== Severity: Medium Date : 2017-01-04 CVE-ID : CVE-2016-10109 Package : pcsclite Type : privilege escalation Remote : No Link : https://security.archlinux.org/AVG-126 Summary ======= The package pcsclite before...

Debian: Security Advisory (DSA-3752-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

WordPress plugin wp-ad-guru-lite suffers from a reflected cross-site scripting vulnerability

WordPress is a blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A reflective cross-site scripting vulnerability exists in the wordpress plugin wp-ad-guru-lite 'optionsPage.php' page, which can be exploited by attackers to...

UBUNTU-CVE-2016-10109

Use-after-free vulnerability in pcsc-lite before 1.8.20 allows a remote attackers to cause denial of service crash via a command that uses "cardsList" after the handle has been released through the SCardReleaseContext function...

CVE-2016-10109

Use-after-free vulnerability in pcsc-lite before 1.8.20 allows a remote attackers to cause denial of service crash via a command that uses "cardsList" after the handle has been released through the SCardReleaseContext function...

Pro QR Lite - BSD license, MIT license vulnerabilities

HackApp vulnerability scanner discovered that application Pro QR Lite published at the 'play' market has multiple vulnerabilities...

Man In The Middle (MitM)

geoip-lite-country is vulnerable to man-in-the-middle MitM attacks. This is because the library downloads a CSV resource via HTTP, allowing MitM attacks...

Analyze Suspected Malware Documents: QuickSand

Analyze Suspected Malware Documents QuickSand is a compact C framework to analyze suspected malware documents to 1 identify exploits in streams of different encodings, 2 locate and extract embedded executables. By having the ability to locate embedded obfuscated executables, QuickSand could detec...

SISCO MMS-EASE and AX-S4 ICCP Denial of Service Vulnerabilities

SISCO MMS-EASE and AX-S4 ICCP are both products of SISCO Corporation, USA. The former is a set of C programming interfaces APIs for MMS Manufacturing Message Specification and the latter is a set of data sharing software.SNAP-Lite Utility is one of the data mining and analysis components. A...

UTrade CFD Lite - Dynamic Code Loading, External URLs, Unsafe deleting vulnerabilities

HackApp vulnerability scanner discovered that application UTrade CFD Lite published at the 'play' market has multiple vulnerabilities...

Code injection

The SNAP Lite component in certain SISCO MMS-EASE and AX-S4 ICCP products allows remote attackers to cause a denial of service CPU consumption via a crafted packet...

CVE-2015-6574

The SNAP Lite component in certain SISCO MMS-EASE and AX-S4 ICCP products allows remote attackers to cause a denial of service CPU consumption via a crafted packet...

CVE-2015-6574

CVE-2015-6574 affects the SNAP Lite component in Siemens SISCO MMS-EASE and AX-S4 ICCP products. The vulnerability allows remote attackers to cause a denial-of-service (CPU consumption) by sending a specially crafted packet. Public documentation confirms affected products include SIPROTEC 5 devic...

Huawei Mobile FRP Bypass Vulnerability

Huawei P9, P9 Lite are smartphones from Huawei. Huawei phone FRP Factory Reset Protection bypass vulnerability. An attacker can use the vulnerability to bypass the FRP feature by updating the Google account without authorization during the execution of FRP reset of the phone...

Downloads Resources over HTTP

Overview Affected versions of headless-browser-lite insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code...

Debian DLA-723-1 : libsoap-lite-perl security update

It was discovered that there was a 'Billion Laughs' 0 XML expansion vulnerability in libsoap-lite-perl, a Perl implementation of a SOAP 1 client and server. For Debian 7 'Wheezy', this issue has been fixed in libsoap-lite-perl version 0.714-1+deb7u1. We recommend that you upgrade your...