MiniUPnP ngiflib DecodeGifImg' Function Denial of Service Vulnerability

MiniUPnP is a set of UPnP tools developed by MiniUPnP project that can be used in embedded systems. This tool enables devices in home and corporate networks to connect to each other. ngiflib is one of the GIF image format decoding libraries written in C language. A security vulnerability exists i...

Fake Fortnite Apps for Android Spread Spyware, Cryptominers

An array of malicious Android apps purporting to be the popular game known as Fortnite are accessing cameras, harvesting and wiping device data, and recording audio on victims’ phones. Researchers at Zscaler’s ThreatLabZ said that bad actors are taking advantage of Fortnite owner Epic Games’s...

DeviceLock Plug and Play Auditor Buffer Overflow Vulnerability

DeviceLock Plug and Play Auditor freeware is a plug-and-play device scanning program from DeviceLock, Inc. that scans devices that have been or are being accessed by hosts on the LAN. A buffer overflow vulnerability exists in the DLPnpAuditor.exe file in version 5.72 of DeviceLock Plug and Play...

CVE-2018-10655

DLPnpAuditor.exe in DeviceLock Plug and Play Auditor freeware 5.72 has a Unicode Buffer Overflow SEH...

CVE-2018-10655

DLPnpAuditor.exe in DeviceLock Plug and Play Auditor freeware 5.72 has a Unicode Buffer Overflow SEH...

CVE-2018-10655

DLPnpAuditor.exe in DeviceLock Plug and Play Auditor freeware 5.72 has a Unicode Buffer Overflow SEH...

CVE-2018-10655

The CVE-2018-10655 entry affects DeviceLock Plug and Play Auditor (DLPnpAuditor.exe) v5.72 (freeware). The vulnerability is a Unicode buffer overflow (SEH) in DLPnpAuditor.exe triggered by a specially crafted text file used with the “scan network” option, enabling arbitrary code execution on the ...

CVE-2018-8914

SQL injection vulnerability in UPnP DMA in Synology Media Server before 1.7.6-2842 and before 1.4-2654 allows remote attackers to execute arbitrary SQL commands via the ObjectID parameter...

Mobile Menace Monday: re-emergence of a fake Android AV

Back in early 2013, a new mobile antivirus AV company called Armor for Android emerged into the mobile security software industry that had everyone perplexed. It seemed eerily like malware known as a Fake AV, and some even gave it that label. As a younger mobile researcher, I was one of those who...

DeviceLock Plug And Play Auditor 5.72 Buffer Overflow

Credits: hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/DEVICELOCK-PLUG-PLAY-AUDITOR-v5.72-UNICODE-BUFFER-OVERFLOW.txt + ISR: Apparition Security Vendor: ======== https://www.devicelock.com/freeware.html/ Product: ======== DeviceLock Plug and...

DeviceLock Plug and Play Auditor 5.72 - Unicode Buffer Overflow (SEH)

DeviceLock Plug and Play Auditor 5.72 - Unicode Buffer Overflow SEH Exploit Title: DeviceLock Plug and Play Auditor 5.72 - Unicode Buffer Overflow SEH Date: 2018-05-04 Exploit Author: Youssef mami Vendor Homepage: https://www.devicelock.com/freeware.html/ Version: 5.72 CVE : CVE-2018-10655 Securi...

Vulnerability to cause a Windows system crash, hardware experts published PoC exploit code-exploit warning-the black bar safety net

Bitdefender company researcher Marius Tivadar on GitHub released a PoC code, even if the computer is locking the case in a few seconds cause Windows computers to crash. ! The PoC code is the use of Microsoft processing an NTFS file system image process in the presence of a vulnerability, the code...

USB Sticks Can Trigger BSOD – Even on a Locked Device

A proof of concept for easily generating the blue screen of death BSOD on Windows devices has been released, along with a video demonstrating that the denial-of-service effect can take place even if the device is locked. Using a handcrafted image of a Windows NT file system NTFS loaded onto a USB...

Microsoft Windows 10: Load and unload device drivers

This policy setting determines which users can dynamically load and unload device drivers. This user right is not required if a signed driver for the new hardware already exists in the driver.cab file on the device. Device drivers run as highly privileged code. Windows supports the Plug and Play...

openSUSE Security Update : chromium (openSUSE-2018-381)

This update for Chromium to version 66.0.3359.117 fixes the following issues : Security issues fixed boo1090000 : - CVE-2018-6085: Use after free in Disk Cache - CVE-2018-6086: Use after free in Disk Cache - CVE-2018-6087: Use after free in WebAssembly - CVE-2018-6088: Use after free in PDFium -...

Security update for chromium (important)

This update for Chromium to version 66.0.3359.117 fixes the following issues: Security issues fixed boo1090000: - CVE-2018-6085: Use after free in Disk Cache - CVE-2018-6086: Use after free in Disk Cache - CVE-2018-6087: Use after free in WebAssembly - CVE-2018-6088: Use after free in PDFium -...

Android malware on Play Store targeting Palestinians on Facebook

By Waqas We have reported time and again about the widespread malware This is a post from HackRead.com Read the original post: Android malware on Play Store targeting Palestinians on Facebook...

Google Play Boots Three Malicious Apps From Marketplace Tied to APTs

Two advanced persistent threat groups managed to sneak apps onto the Google Play marketplace earlier this year. Both were designed to conduct surveillance on targets located in the Middle East region, according to Lookout security researchers. One of the groups, identified as APT-C-23 also known ...

Lenovo Help Mobile App Transmits Information Over HTTP - US

Lenovo Security Advisory: LEN-20475 Potential Impact: Exposure of user-identifiable information Severity: High Scope of Impact: Lenovo-specific CVE Identifier: CVE-2017-3776 Summary Description: The Lenovo Help Android app assists users with support for Lenovo devices. This requires transmitting...

Intel Tells Remote Keyboard Users to Delete App After Critical Bug Found

Intel said Tuesday it was putting the kibosh on a popular Android and iOS app called Intel Remote Keyboard after researchers discovered that local attackers can inject keystrokes into a remote keyboard session when in use. The Intel Remote Keyboard product is an Android and iOS app that works in...