CVE-2016-8433

An elevation of privilege vulnerability in the MediaTek driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the...

CVE-2016-8448

An elevation of privilege vulnerability in MediaTek components, including the thermal driver and video driver, could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged...

CVE-2016-8472

An information disclosure vulnerability in the MediaTek driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: N/A. Android ID:...

CVE-2016-8433

An elevation of privilege vulnerability in the MediaTek driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the...

CVE-2016-6785

An elevation of privilege vulnerability in the MediaTek driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10...

CVE-2016-6783

An elevation of privilege vulnerability in the MediaTek driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: N/A. Android I...

Privilege escalation

An elevation of privilege vulnerability in the MediaTek driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10...

CVE-2016-6783

An elevation of privilege vulnerability in the MediaTek driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: N/A. Android I...

mt-bc.com XSS vulnerability

Vulnerable URL:...

MAC-Telnet 'mactelnet.c' Buffer Overflow Vulnerability

MAC-Telnet is an open source client for connecting to RouterOS Routing Operating System via MAC addresses. A buffer overflow vulnerability exists in the 'handlepacket' function in the mactelnet.c file in the client in MAC-Telnet 0.4.3 and earlier versions. An attacker on the remote TELENT server...

PT-2016-7225

Name of the Vulnerable Software and Affected Versions MAC-Telnet versions 0.4.3 and earlier Description A buffer overflow issue exists in the handle packet function in mactelnet.c, allowing remote TELNET servers to execute arbitrary code via a long string in an MT CPTYPE PASSSALT control packet...

ch-mt-marsan.fr XSS vulnerability

Vulnerable URL: http://www.ch-mt-marsan.fr/recherche-avancee-66.html?txmnogosearchpi1%5Bq%5D=%3Cscript%3Ealert%28%27OPENBUGBOUNTY%27%29%3C%2Fscript%3Emnogosearchpi1%5Brid%5D=384mnogosearchpi1%5Busid%5D=5773dc05cae12=66 Details: Description| Value ---|--- Patched:| No Latest check for patch:|...

ie.mt.com XSS vulnerability

Vulnerable URL: http://ie.mt.com/ie/en/home/search/AdvancedSearch.html?q=Humid...

az.mt.com XSS vulnerability

Vulnerable URL: http://az.mt.com/az/ru/home/search/AdvancedSearch.html?q=Humid...

'Bitcoin is Now Officially a Commodity' — US Regulator Declared

Bitcoins are making their way, in Bits and Pieces. In a recent report The Hacker News THN had mentioned about banks adopting the Blockchain Technology from Bitcoins; to create a safe and secure distributed ledger. Now, last week U.S. Commodity Future Trading Commission CFTC, has added Bitcoins an...

Design/Logic Flaw

mt-phpincgi.php in Hajime Fujimoto mt-phpincgi before 2015-05-15 does not properly restrict URLs, which allows remote attackers to conduct PHP object injection attacks and execute arbitrary PHP code via a crafted request, as exploited in the wild in May 2015...

CVE-2015-2945

The mt-phpincgi script, used to run Movable Type templates as PHP, contains a PHP object injection vulnerability in versions prior to the 2015-05-15 security update. The root cause is an insufficient restriction on URLs, which allows unauthenticated remote attackers to submit a crafted request to...

PT-2015-5994

Name of the Vulnerable Software and Affected Versions mt-phpincgi.php in Hajime Fujimoto mt-phpincgi versions prior to 2015-05-15 Description The issue allows remote attackers to conduct PHP object injection attacks and execute arbitrary PHP code via a crafted request. This has been exploited in...

CVE-2015-2945: Improper Control of Generation of Code

mt-phpincgi.php in Hajime Fujimoto mt-phpincgi before 2015-05-15 does not properly restrict URLs, which allows remote attackers to conduct PHP object injection attacks and execute arbitrary PHP code via a crafted request, as exploited in the wild in May 2015...

JVN#64459670: mt-phpincgi vulnerable to PHP object injection

mt-phpincgi is script that runs Movable Type templates as PHP. mt-phpincgi contains a PHP object Injection vulnerability. According to the reporter, attacks that attempt to exploit this vulnerability have been confirmed. Impact Arbitrary PHP code may be executed on the server by an unauthenticate...