Design/Logic Flaw

Untrusted search path vulnerability in Amazon Kindle for PC before 1.19 allows local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse DLL in the current working directory of the Kindle Setup installer...

CVE-2017-6189

Untrusted search path vulnerability in Amazon Kindle for PC before 1.19 allows local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse DLL in the current working directory of the Kindle Setup installer...

CVE-2017-6189

The CVE-2017-6189 issue affects Amazon Kindle for PC prior to 1.19, where an untrusted search path allows local users to perform DLL hijacking and arbitrary code execution via a Trojan DLL placed in the Kindle Setup installer’s current working directory. The vulnerability is tied to the Kindle Se...

PT-2017-16937

Name of the Vulnerable Software and Affected Versions Amazon Kindle for PC versions prior to 1.19 Description The issue allows local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse DLL in the current working directory of the Kindle Setup installer...

CVE-2017-6189: Untrusted Search Path

Untrusted search path vulnerability in Amazon Kindle for PC before 1.19 allows local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse DLL in the current working directory of the Kindle Setup installer...

Platform Security Assessment Framework: ChipSec

Platform Security Assessment Framework CHIPSEC is a framework for analyzing security of PC platforms including hardware, system firmware including BIOS/UEFI and the configuration of platform components. It allows creating security test suite, security assessment tools for various low level...

SA144 : OpenSSH Vulnerabilities January 2017

SUMMARY Blue Coat products using affected versions of OpenSSH are susceptible to several vulnerabilities. A remote attacker with access to an SSH server can exploit these vulnerabilities to execute arbitrary code on an SSH client. A local attacker can also exploit these vulnerabilities to obtain...

Pushbullet - SMS on PC - Dangerous filesystem permissions, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Pushbullet - SMS on PC published at the 'play' market has multiple vulnerabilities...

Yappy - SMS on PC & Tablet - Dangerous filesystem permissions, Hardcoded secrets, MIT license vulnerabilities

HackApp vulnerability scanner discovered that application Yappy - SMS on PC & Tablet published at the 'play' market has multiple vulnerabilities...

CVE-2016-9355

An issue was discovered in Becton, Dickinson and Company BD Alaris 8015 Point of Care PC unit, Version 9.5 and prior versions, and Version 9.7. An unauthorized user with physical access to an Alaris 8015 PC unit may be able to obtain unencrypted wireless network authentication credentials and oth...

CVE-2016-8375

An issue was discovered in Becton, Dickinson and Company BD Alaris 8015 Point of Care PC unit, Version 9.5 and prior versions, and Version 9.7, and 8000 PC unit. An unauthorized user with physical access to an affected Alaris PC unit may be able to obtain unencrypted wireless network authenticati...

CVE-2016-8375: Undefined Security Weakness

An issue was discovered in Becton, Dickinson and Company BD Alaris 8015 Point of Care PC unit, Version 9.5 and prior versions, and Version 9.7, and 8000 PC unit. An unauthorized user with physical access to an affected Alaris PC unit may be able to obtain unencrypted wireless network authenticati...

CVE-2016-9355: Undefined Security Weakness

An issue was discovered in Becton, Dickinson and Company BD Alaris 8015 Point of Care PC unit, Version 9.5 and prior versions, and Version 9.7. An unauthorized user with physical access to an Alaris 8015 PC unit may be able to obtain unencrypted wireless network authentication credentials and oth...

PT-2017-10082

Name of the Vulnerable Software and Affected Versions Becton, Dickinson and Company BD Alaris 8015 Point of Care PC unit versions 9.5 and prior Becton, Dickinson and Company BD Alaris 8015 Point of Care PC unit version 9.7 Description An issue allows an unauthorized user with physical access to...

ICSMA-17-017-01_BD Alaris 8000 Insufficiently Protected Credentials Vulnerability

OVERVIEW This advisory was originally posted to the NCCIC Portal on January 17, 2017, and is being released to the NCCIC/ICS-CERT web site. Becton, Dickinson and Company BD has identified an insufficiently protected credentials vulnerability in BD’s Alaris 8000 Point of Care PC unit, which provid...

The Intel part of the Skylake Processor the presence of vulnerabilities: through the USB interface to the invasion of the computer-vulnerability warning-the black bar safety net

Foreign Security Service Provider Positive Technologies recently found that part of the Intel sixth-generation Core Skylake processor loopholes, allowing hackers through the USB interface to the invasion of the computer, completely taking over theoperating system. This is due to the CPU debug...

Google Patches Android 'Custom Boot Mode' Vulnerability

A high-risk Android custom boot mode vulnerability was one of many bugs patched by Google as part of its January Android Security Bulletin released earlier this week. On Thursday, the IBM security team that discovered the vulnerability disclosed details about the flaw which leaves Nexus 6 and 6P...

Security update for xen (important)

This updates xen to version 4.4.406 to fix the following issues: - An unprivileged user in a guest could gain guest could escalate privilege to that of the guest kernel, if it had could invoke the instruction emulator. Only 64-bit x86 HVM guest were affected. Linux guest have not been vulnerable...

Lenovo Computer Manager suffers from elevation of privilege vulnerability

Lenovo PC Manager is a client software that integrates physical examination and optimization, computer repair, software management, remote service and intelligent driver. An elevation of privilege vulnerability exists in Lenovo PC Manager. As the client starts the DCService.exe and DCProcess.exe...

Malware exploit: Filestealer 1.3

FileStealer v1.3 Type: Upload vulnerability Author: Xylitol !-- FileStealer v1.3 panel upload vulnerability -- !-- Panel hash: be19e93878130b2f57d42d4dcf5ffcf0 -- form method="POST" action="http://localhost/panel/up.php" enctype="multipart/form-data" File: input type="file" name="file" / br / HWI...