pixel-leds.com XSS vulnerability

Open Bug Bounty ID: OBB-628902 Description| Value ---|--- Affected Website:| pixel-leds.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

DEBIAN-CVE-2018-11813

libjpeg 9c has a large loop because readpixel in rdtarga.c mishandles EOF...

Social media: A treasure trove of spam and scams

There are two kinds of spam associated with social media. There are spam ads that actually live on social media, and there is spam that comes in your inbox, courtesy of social media. Both thrive by using data from your social media accounts. But how do spammers know how to target you and send you...

Pixel / Nexus Security Bulletin—June 2018Stay organized with collectionsSave and categorize content based on your preferences.

The Pixel/Nexus Security Bulletin contains details of security vulnerabilities and functional improvements affecting supported Google Pixel and Nexus devices Google devices. For Google devices, security patch levels of 2018-06-05 or later address all issues in this bulletin and all issues in the...

PT-2018-3525

Name of the Vulnerable Software and Affected Versions: libjpeg version 9c Description: The issue is related to the read pixel function in rdtarga.c of the libjpeg library, which mishandles EOF, leading to a large loop. This is due to resource management errors. Exploitation of this issue may allo...

Android OS FLAG_SECURE Information Disclosure

Blog post here: https://wwws.nightwatchcybersecurity.com/2018/05/24/android-os-didnt-use-flagsecure-for-sensitive-settings-cve-2017-13243/ SUMMARY Android OS did not use the FLAGSECURE flag for sensitive settings, potentially exposing sensitive data to other applications on the same device with t...

[SECURITY] Fedora 28 Update: leptonica-1.76.0-1.fc28

The library supports many operations that are useful on Document images Natural images Fundamental image processing and image analysis operations Rasterop aka bitblt Affine transforms scaling, translation, rotation, shear on images of arbitrary pixel depth Projective and bi-linear transforms Bina...

Samsung Patches Six Critical Bugs in Flagship Handsets

Samsung began rolling out patches over the weekend to fix six critical bugs found in its flagship Android handsets as part of its May patch bulletin. Flaws range from a remote code execution bug to a buffer overflow vulnerability, plus a peek-and-poke command bug that leaves memory locations open...

CVE-2018-5160

WebRTC can use a "WrappedI420Buffer" pixel buffer but the owning image object can be freed while it is still in use. This can result in the WebRTC encoder using uninitialized memory, leading to a potentially exploitable crash. This vulnerability affects Firefox 60...

Pixel / Nexus Security Bulletin—May 2018Stay organized with collectionsSave and categorize content based on your preferences.

The Pixel/Nexus Security Bulletin contains details of security vulnerabilities and functional improvements affecting supported Google Pixel and Nexus devices Google devices. For Google devices, security patch levels of 2018-05-05 or later address all issues in this bulletin and all issues in the...

Android Security Bulletin—May 2018Stay organized with collectionsSave and categorize content based on your preferences.

The Android Security Bulletin contains details of security vulnerabilities affecting Android devices. Security patch levels of 2018-05-05 or later address all of these issues. To learn how to check a device's security patch level, see Check & update your Android version. Android partners are...

Google Android Framework (aosp email application) Information Disclosure Vulnerability

Android on Google Pixel and Nexus is a Linux-based open source operating system for the Google Pixel and Nexus smartphones developed by Google and the Open Handset Alliance OHA.Framework aosp email application is a framework for email applications. Framework aosp email application is one of the...

Google Android Media framework (libhevc) Denial of Service Vulnerability

Android on Google Pixel and Nexus is a Linux-based open source operating system for the Google Pixel and Nexus smartphones developed by Google and the Open Handset Alliance OHA, with the Media framework libhevc as a decoding library for multimedia development. libhevc is one of the hevc decoding...

Google Android mnh Driver Privilege Vulnerability

Android on Google Pixel and Nexus is an open source Linux-based operating system for the Google Pixel and Nexus smartphones developed by Google and the Open Handset Alliance OHA. mnh driver is one of the mnh driver. The mnh driver in Android on Google Pixel and Nexus devices is vulnerable to a...

Google Android Media framework (libhevc) information disclosure vulnerability (CNVD-2018-08603)

Android on Google Pixel and Nexus is a Linux-based open source operating system for the Google Pixel and Nexus smartphones developed by Google and the Open Handset Alliance OHA, with the Media framework libhevc as a decoding library for multimedia development. libhevc is one of the hevc decoding...

Google Android Media framework(libavc) security vulnerability

Android on Google Pixel and Nexus is a Linux-based open source operating system for Google Pixel and Nexus smartphones developed by Google Inc. and the Open Handset Alliance OHA, with the Media framework libavc as a framework for multimedia development. is a framework used for multimedia...

Google Android Broadcom bcmdhd Driver Information Disclosure Vulnerability

Android on Google Pixel and Nexus is an open source Linux-based operating system for the Google Pixel and Nexus smartphones developed by Google and the Open Handset Alliance OHA.Broadcom Bcmdhd driver is a Broadcom WiFi driver used in the... Broadcom Bcmdhd driver is an American Broadcom Broadcom...

Google Android Framework (package installer) Denial of Service Vulnerability

Android on Google Pixel and Nexus is a Linux-based open source operating system for Google Pixel and Nexus smartphones developed by Google and the Open Handset Alliance OHA.Framework is a package installer framework. Framework package installer is one of the package installer framework. A denial ...

Google kernel mnh_sm driver information disclosure vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handset Alliance OHA. kernel mnhsm driver is one of the kernel drivers. An information disclosure vulnerability exists in the kernel mnhsm driver in Android on Google Pixel and Nexus devices. An attacke...

Android Media framework (libavc) information disclosure vulnerability (CNVD-2018-08704)

Android on Google Pixel and Nexus is a Linux-based open source operating system for Google Pixel and Nexus smartphones developed by Google Inc. and the Open Handset Alliance OHA.Media Framework libavc is a framework used for multimedia development. is a framework used for multimedia development. ...