CVE-2016-10109

Use-after-free vulnerability in pcsc-lite before 1.8.20 allows a remote attackers to cause denial of service crash via a command that uses "cardsList" after the handle has been released through the SCardReleaseContext function...

PT-2016-4579

Name of the Vulnerable Software and Affected Versions pcsc-lite versions prior to 1.8.20 Description The issue allows remote attackers to cause a denial of service crash through a command that uses cardsList after the handle has been released through the SCardReleaseContext function. This is a...

UBUNTU-CVE-2016-10109

Use-after-free vulnerability in pcsc-lite before 1.8.20 allows a remote attackers to cause denial of service crash via a command that uses "cardsList" after the handle has been released through the SCardReleaseContext function...

Pro QR Lite - BSD license, MIT license vulnerabilities

HackApp vulnerability scanner discovered that application Pro QR Lite published at the 'play' market has multiple vulnerabilities...

Man In The Middle (MitM)

geoip-lite-country is vulnerable to man-in-the-middle MitM attacks. This is because the library downloads a CSV resource via HTTP, allowing MitM attacks...

Analyze Suspected Malware Documents: QuickSand

Analyze Suspected Malware Documents QuickSand is a compact C framework to analyze suspected malware documents to 1 identify exploits in streams of different encodings, 2 locate and extract embedded executables. By having the ability to locate embedded obfuscated executables, QuickSand could detec...

SISCO MMS-EASE and AX-S4 ICCP Denial of Service Vulnerabilities

SISCO MMS-EASE and AX-S4 ICCP are both products of SISCO Corporation, USA. The former is a set of C programming interfaces APIs for MMS Manufacturing Message Specification and the latter is a set of data sharing software.SNAP-Lite Utility is one of the data mining and analysis components. A...

UTrade CFD Lite - Dynamic Code Loading, External URLs, Unsafe deleting vulnerabilities

HackApp vulnerability scanner discovered that application UTrade CFD Lite published at the 'play' market has multiple vulnerabilities...

Code injection

The SNAP Lite component in certain SISCO MMS-EASE and AX-S4 ICCP products allows remote attackers to cause a denial of service CPU consumption via a crafted packet...

CVE-2015-6574: Undefined Security Weakness

The SNAP Lite component in certain SISCO MMS-EASE and AX-S4 ICCP products allows remote attackers to cause a denial of service CPU consumption via a crafted packet...

CVE-2015-6574

CVE-2015-6574 affects the SNAP Lite component in Siemens SISCO MMS-EASE and AX-S4 ICCP products. The vulnerability allows remote attackers to cause a denial-of-service (CPU consumption) by sending a specially crafted packet. Public documentation confirms affected products include SIPROTEC 5 devic...

CVE-2015-6574

The SNAP Lite component in certain SISCO MMS-EASE and AX-S4 ICCP products allows remote attackers to cause a denial of service CPU consumption via a crafted packet...

Huawei Mobile FRP Bypass Vulnerability

Huawei P9, P9 Lite are smartphones from Huawei. Huawei phone FRP Factory Reset Protection bypass vulnerability. An attacker can use the vulnerability to bypass the FRP feature by updating the Google account without authorization during the execution of FRP reset of the phone...

Downloads Resources over HTTP

Overview Affected versions of headless-browser-lite insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code...

Denial of Service Vulnerability in TrustZone Driver for Some Huawei Phones

Huawei P9, P9 Lite, P8 Lite are Huawei smartphones. A denial of service vulnerability exists in the TrustZone driver of some Huawei phones. An attacker can trick users into installing a malicious application, and the application exploits the vulnerability to pass specific parameters to the...

Debian DLA-723-1 : libsoap-lite-perl security update

It was discovered that there was a 'Billion Laughs' 0 XML expansion vulnerability in libsoap-lite-perl, a Perl implementation of a SOAP 1 client and server. For Debian 7 'Wheezy', this issue has been fixed in libsoap-lite-perl version 0.714-1+deb7u1. We recommend that you upgrade your...

[SECURITY] [DLA 723-1] libsoap-lite-perl security update

Package : libsoap-lite-perl Version : 0.714-1+deb7u1 CVE ID : CVE-2015-8978 It was discovered that there was a "Billion Laughs" 0 XML expansion vulnerability in libsoap-lite-perl, a Perl implementation of a SOAP 1 client and server. For Debian 7 "Wheezy", this issue has been fixed in...

Soap Lite Denial of Service Vulnerability

Soap Lite a.k.a. the SOAP::Lite extension for Perl is a collection of Perl modules that provide a simple and lightweight interface to the client-side and server-side Simple Object Access Protocol SOAP. A security vulnerability exists in Soap Lite 1.14 and earlier versions. An attacker can exploit...

DLA-723-1 libsoap-lite-perl - security update

Bulletin has no description...

Design/Logic Flaw

In Soap Lite aka the SOAP::Lite extension for Perl 1.14 and earlier, an example attack consists of defining 10 or more XML entities, each defined as consisting of 10 of the previous entity, with the document consisting of a single instance of the largest entity, which expands to one billion copie...