CVE-2016-8630

The x86decodeinsn function in arch/x86/kvm/emulate.c in the Linux kernel before 4.8.7, when KVM is enabled, allows local users to cause a denial of service host OS crash via a certain use of a ModR/M byte in an undefined instruction...

CVE-2016-8630: Improper Access Control

The x86decodeinsn function in arch/x86/kvm/emulate.c in the Linux kernel before 4.8.7, when KVM is enabled, allows local users to cause a denial of service host OS crash via a certain use of a ModR/M byte in an undefined instruction...

CVE-2016-8630

The x86decodeinsn function in arch/x86/kvm/emulate.c in the Linux kernel before 4.8.7, when KVM is enabled, allows local users to cause a denial of service host OS crash via a certain use of a ModR/M byte in an undefined instruction...

UBUNTU-CVE-2016-8630

The x86decodeinsn function in arch/x86/kvm/emulate.c in the Linux kernel before 4.8.7, when KVM is enabled, allows local users to cause a denial of service host OS crash via a certain use of a ModR/M byte in an undefined instruction...

CVE-2016-7160

A vulnerability on Samsung Mobile M6.0 devices exists because external access to SystemUI activities is not properly restricted, leading to a SystemUI crash and device restart, aka SVE-2016-6248...

CVE-2016-7160

A vulnerability on Samsung Mobile M6.0 devices exists because external access to SystemUI activities is not properly restricted, leading to a SystemUI crash and device restart, aka SVE-2016-6248...

Design/Logic Flaw

A vulnerability on Samsung Mobile M6.0 devices exists because external access to SystemUI activities is not properly restricted, leading to a SystemUI crash and device restart, aka SVE-2016-6248...

CVE-2016-7160

The CVE CVE-2016-7160 affects Samsung Mobile M(6.0) devices, where external access to SystemUI activities is not properly restricted. The underlying issue causes a SystemUI crash and can lead to a device restart. Public details describe the vulnerable component as part of the SystemUI access cont...

CVE-2016-7160: NULL Pointer Dereference

A vulnerability on Samsung Mobile M6.0 devices exists because external access to SystemUI activities is not properly restricted, leading to a SystemUI crash and device restart, aka SVE-2016-6248...

PT-2016-7243

Name of the Vulnerable Software and Affected Versions Samsung Mobile M version 6.0 Description A vulnerability exists due to improper restriction of external access to SystemUI activities, which can cause a SystemUI crash and device restart. Recommendations For Samsung Mobile M version 6.0,...

CVE-2016-7090

The integrated web server on Siemens SCALANCE M-800 and S615 modules with firmware before 4.02 does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session...

CVE-2016-7090

The integrated web server on Siemens SCALANCE M-800 and S615 modules with firmware before 4.02 does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session...

CVE-2016-7090

CVE-2016-7090 affects Siemens SCALANCE M-800 and S615 modules with firmware before 4.02. The integrated web server fails to set the Secure attribute on the session cookie in HTTPS, enabling cookie capture if the cookie is transmitted in an insecure (HTTP) context. Affected products: SCALANCE M-80...

CVE-2016-7090: Exposure of Sensitive Information to an Unauthorized Actor

The integrated web server on Siemens SCALANCE M-800 and S615 modules with firmware before 4.02 does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session...

PT-2016-7208

Name of the Vulnerable Software and Affected Versions Siemens SCALANCE M-800 and S615 modules versions prior to 4.02 Description The issue concerns the integrated web server's handling of session cookies in https sessions. Specifically, it does not set the secure flag for the session cookie, maki...

Dropbear SSH Arbitrary Code Execution Vulnerability

Dropbear is a relatively small SSH server and client. An arbitrary code execution vulnerability exists in Dropbear dbclient, which can be exploited by a remote attacker to execute arbitrary code when a local dbclient user enters a specific -m or -c parameter...

PT-2016-7234

Name of the Vulnerable Software and Affected Versions Charybdis versions prior to 3.5.3 Description The issue allows remote attackers to spoof certificate fingerprints, enabling them to log in as another user. This is achieved by crafting the AUTHENTICATE parameter. The m authenticate function in...

ZKTeco ZKAccess Professional 3.5.3 File Elevation of Privilege Vulnerability

ZKTeco ZKAccess Professional is an access control system. ZKTeco ZKAccess Professional 3.5.3 File Elevation of Privilege Vulnerability, which occurs due to incorrect privileges of an authenticated user with the 'M' flag...

m-fanshop.ch XSS vulnerability

Vulnerable URL: https://www.m-fanshop.ch/catalogsearch/result/?q=999%22%3E%3Csvg%2Fonload%3Dprompt%28%2FOPENBUGBOUNTY%2F%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 168107...

Unsealing the Deal: Cyber Threats to Mergers and Acquisitions Persist in a Hot Market

Risks Posed by Sensitive Corporate Communications, Broadened Attack Surface In 2015, a record $5 trillion dollars was tied up in mergers and acquisitions M&A deals, according to JP Morgan. So far, mega deals in 2016 include Microsoft’s purchase of LinkedIn, Shire’s acquisition of Baxalta, and...