CVE-2017-0502

An elevation of privilege vulnerability in MediaTek components, including the M4U driver, sound driver, touchscreen driver, GPU driver, and Command Queue driver, could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical...

CVE-2017-0532

An information disclosure vulnerability in the MediaTek video codec driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: N/A...

CVE-2017-0500

An elevation of privilege vulnerability in MediaTek components, including the M4U driver, sound driver, touchscreen driver, GPU driver, and Command Queue driver, could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical...

CVE-2017-0504

An elevation of privilege vulnerability in MediaTek components, including the M4U driver, sound driver, touchscreen driver, GPU driver, and Command Queue driver, could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical...

CVE-2017-0522

An elevation of privilege vulnerability in a MediaTek APK could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High due to the possibility of local arbitrary code execution in a privileged process. Product: Android...

CVE-2017-0501

An elevation of privilege vulnerability in MediaTek components, including the M4U driver, sound driver, touchscreen driver, GPU driver, and Command Queue driver, could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical...

Zhiyuan A6-m Collaboration Management Software Enterprise Edition Has Violent Breakthrough Vulnerabilities

Zhiyuan A6-m Collaboration Management Software Enterprise Edition is a collaboration management software for small and medium-sized enterprises. A6-m Collaboration Management Software Enterprise Edition suffers from a brute force vulnerability. This vulnerability allows attackers to brute-force...

m-almada.pt XSS vulnerability

Vulnerable URL: http://www.m-almada.pt/xportal/xmain?xpid=cmav2='"--!confirmopenbugbounty...

Samsung Exynos fimg2d driver for Android NULL pointer reference denial of service vulnerability

Samsung Exynos fimg2d driver for Android is a graphics device driver for Exynos chipset based on Android platform from Samsung, Korea. A security vulnerability exists in the Samsung Exynos fimg2d driver for Samsung phones using Android L 5.0/5.1 and M 6.0 versions. An attacker can exploit the...

Google Android - Unprotected MSRs in EL1 RKP Privilege Escalation Exploit

Exploit for Android platform in category dos / poc Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=980 As part of Samsung KNOX, Samsung phones include a security hypervisor called RKP Real-time Kernel Protection, running in EL2. This hypervisor is meant to ensure that the HLOS...

CVE-2016-6604

NULL pointer dereference in Samsung Exynos fimg2d driver for Android L5.0/5.1 and M6.0 allows attackers to have unspecified impact via unknown vectors. The Samsung ID is SVE-2016-6382...

UBUNTU-CVE-2016-6604

NULL pointer dereference in Samsung Exynos fimg2d driver for Android L5.0/5.1 and M6.0 allows attackers to have unspecified impact via unknown vectors. The Samsung ID is SVE-2016-6382...

Null pointer dereference

NULL pointer dereference in Samsung Exynos fimg2d driver for Android L5.0/5.1 and M6.0 allows attackers to have unspecified impact via unknown vectors. The Samsung ID is SVE-2016-6382...

CVE-2016-6604

NULL pointer dereference in Samsung Exynos fimg2d driver for Android L5.0/5.1 and M6.0 allows attackers to have unspecified impact via unknown vectors. The Samsung ID is SVE-2016-6382...

CVE-2016-10135

Technical details for CVE-2016-10135 are not publicly provided in the supplied documents; monitor for updates as connected sources do not reveal affected components or remediation.

Code injection

Samsung Note devices with KK4.4, L5.0/5.1, and M6.0 software allow attackers to crash the system by creating an arbitrarily large number of active VR service threads. The Samsung ID is SVE-2016-7650...

CVE-2017-5351

CVE-2017-5351 affects Samsung Note devices running KK (4.4), L (5.0/5.1), and M (6.0). Reported flaw: the system can be crashed by creating an arbitrarily large number of active VR service threads due to a failure to limit these threads. Root cause is described as uncontrolled/unchecked growth of...

CVE-2016-8630

The x86decodeinsn function in arch/x86/kvm/emulate.c in the Linux kernel before 4.8.7, when KVM is enabled, allows local users to cause a denial of service host OS crash via a certain use of a ModR/M byte in an undefined instruction...

CVE-2016-8630

The x86decodeinsn function in arch/x86/kvm/emulate.c in the Linux kernel before 4.8.7, when KVM is enabled, allows local users to cause a denial of service host OS crash via a certain use of a ModR/M byte in an undefined instruction...

UBUNTU-CVE-2016-8630

The x86decodeinsn function in arch/x86/kvm/emulate.c in the Linux kernel before 4.8.7, when KVM is enabled, allows local users to cause a denial of service host OS crash via a certain use of a ModR/M byte in an undefined instruction...