Design/Logic Flaw

Unspecified vulnerability in the Hyperion Financial Reporting component in Oracle Hyperion 11.1.2.4 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Security Models...

CVE-2016-3493

Unspecified vulnerability in the Hyperion Financial Reporting component in Oracle Hyperion 11.1.2.4 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Security Models...

CVE-2016-3493

Unspecified vulnerability in the Hyperion Financial Reporting component in Oracle Hyperion 11.1.2.4 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Security Models...

Apple TV < 9.2.2 Multiple Vulnerabilities

According to its banner, the version of the remote Apple TV device is prior to 9.2.2. It is, therefore, affected by multiple vulnerabilities in the following components : - CoreGraphics - ImageIO - IOAcceleratorFamily - IOHIDFamily - Kernel - libxml2 - libxslt - Sandbox Profiles - WebKit - WebKit...

CVE-2016-1418

Cisco Aironet Access Point Software 8.2100.0 on 1830e, 1830i, 1850e, 1850i, 2800, and 3800 access points allows local users to obtain Linux root access via crafted CLI command parameters, aka Bug ID CSCuy64037...

Lenovo Tells Users to Uninstall Vulnerable Updater

Lenovo has waved the white flag on a vulnerable component of its pre-installed software updater and recommends that users uninstall it from more than 110 notebook and desktop models running Windows 10. The decision to have users yank the Lenovo Accelerator Application comes days after a Duo Labs...

RomPager 4.34 - Misfortune Cookie Router Authentication Bypass

Exploit for hardware platform in category web applications Title: Misfortune Cookie Exploit RomPager = 4.34 router authentication remover Date: 17/4/2016 CVE: CVE-2015-9222 http://mis.fortunecook.ie Vendors: ZyXEL,TP-Link,D-Link,Nilox,Billion,ZTE,AirLive,... Vulnerable models:...

Apple TV < 7.2.1 Multiple Vulnerabilities

According to its banner, the remote Apple TV device is a version prior to 7.2.1. It is, therefore, affected by multiple vulnerabilities in the following components : - bootp - CFPreferences - CloudKit - Code Signing - CoreMedia Playback - CoreText - DiskImages - FontParser - ImageIO - IOHIDFamily...

Fashion Family: Sibling Models - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Fashion Family: Sibling Models published at the 'play' market has multiple vulnerabilities...

Machine Learning Linux IPS: Stratosphere

This is the linux version of the Stratosphere IPS, a behavioral-based intrusion detection and prevention system that uses machine learning algorithms to detect malicious behaviors. It is part of a larger suite of programs that include the Stratosphere Windows IPS and the Stratosphere Testing...

PT-2016-3202 · D Link · Dap-2660 +8

Name of the Vulnerable Software and Affected Versions: D-Link DAP-2310 versions 2.06 and earlier D-Link DAP-2330 versions 1.06 and earlier D-Link DAP-2360 versions 2.06 and earlier D-Link DAP-2553 H/W ver. B1 versions 3.05 and earlier D-Link DAP-2660 versions 1.11 and earlier D-Link DAP-2690...

Siemens SIPROTEC Information Disclosure Vulnerabilities (Update B)

1. EXECUTIVE SUMMARY CVSS v3 5.3 ATTENTION : Exploitable remotely/low skill level to exploit Vendor : Siemens Equipment : SIPROTEC 4 and SIPROTEC Compact Vulnerabilities : Information Exposure 2. UPDATE INFORMATION This updated advisory is a follow-up to the updated advisory titled ICSA-16-140-02...

The vulnerability of the embedded software of the industrial Ethernet switch EKI models 1361, 1362, 1321, 122x, and 1322 allows a intruder to gain access to the device.

The embedded software of the industrial Ethernet switch EKI models 1361, 1362, 1321, 122x, and 1322 contains SSH keys by default. Exploiting this vulnerability allows a malicious actor to gain access to the device by establishing an SSH connection remotely...

How to Root Windows Phone and Unlock the Bootloader to Install Custom ROMs

Yes, Now it is possible to unlock a Windows Lumia Phone for Root Access and run custom ROMs. Both Microsoft as well as Nokia have made Windows Lumia smartphones difficult to break into at a low-level by locking down their bootloaders, but a software hacker, who go by the name HeathCliff, has just...

Dell's Laptops are Infected with 'Superfish-Like' pre-installed Malware

Similar to the Superfish malware that surrounded Lenovo laptops in February, another big computer manufacturer Dell spotted selling PCs and laptops pre-installed with a rogue SSL certificate that could allow attackers: To impersonate as any HTTPS-protected website and spy on when banking or...

Huawei eSpace Unified Gateway Denial of Service Vulnerability

Huawei eSpace U1900 is a series of unified gateway products. A security vulnerability exists in the memory initialization when processing timeout messages in one of the modules of Huawei eSpace U1910, U1911, U1930, U1960, U1980, U1981 Unified Gateway versions prior to V200R003C00SPC300. A remote...

Vulnerability of the microprogramming software for Micrologix 1100 and 1400 programmable logic controllers, allowing attackers to execute arbitrary SQL commands

The vulnerability of the microprogrammed logic controllers Micrologix 1100 and 1400 lies in the lack of protection for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL commands remotely...

[SECURITY] Fedora 22 Update: libsedml-0.3.1-4.fc22

C++ library that fully supports SED-ML Simulation Experiment Description Markup Language for SBML as well as CellML models for creation of the description just as for the execution of Simulation Experiments. This project makes use of libSBML XML layer as well as code generation as starting point ...

[SECURITY] Fedora 23 Update: libsedml-0.3.1-4.fc23

C++ library that fully supports SED-ML Simulation Experiment Description Markup Language for SBML as well as CellML models for creation of the description just as for the execution of Simulation Experiments. This project makes use of libSBML XML layer as well as code generation as starting point ...

Zhone Technologies zNID GPON Authentication Bypass Vulnerability

Zhone Technologies zNID GPON 24xx, 24xxA, 42xx, 42xxA, 26xx and 28xx are router products from Zhone Technologies, USA. A security vulnerability exists in the Zhone Technologies zNID GPON that stems from a program failing to enforce authentication. An attacker could exploit the vulnerability to ga...