PT-2017-10645

Name of the Vulnerable Software and Affected Versions Android kernel Description A elevation of privilege issue exists in the Broadcom wi-fi driver, affecting Android. Recommendations For Android kernel, apply the fix referenced by Android ID A-37357704 to resolve the issue...

PT-2017-10650

Name of the Vulnerable Software and Affected Versions Android kernel Description A elevation of privilege vulnerability exists in the MediaTek accessory detector driver. This issue affects Android products. Recommendations For Android kernel, apply the fix referenced by Android ID A-36136137 to...

PT-2017-10641

Name of the Vulnerable Software and Affected Versions Android kernel Description A elevation of privilege vulnerability exists in the Broadcom wi-fi driver. This issue affects the Android kernel. Recommendations For Android kernel, apply the fix referenced by Android ID: A-37351060 to resolve the...

PT-2017-10651

Name of the Vulnerable Software and Affected Versions Android kernel Description A elevation of privilege issue exists in the MediaTek mmc driver, affecting Android. Recommendations For Android kernel, apply the fix referenced by Android ID: A-36274676 to resolve the issue...

PT-2017-10643

Name of the Vulnerable Software and Affected Versions Android kernel Description A elevation of privilege vulnerability exists in the Broadcom wi-fi driver. This issue affects Android products. Recommendations For Android kernel, apply the fix referenced by Android ID A-37722328 to resolve the...

PT-2017-3816

Name of the Vulnerable Software and Affected Versions Moxa PT-7528 versions 4.0 or lower Moxa PT-7828 versions 3.9 or lower Description The issue is related to the use of hard-coded credentials for the console configuration of Moxa Ethernet switches. Exploitation of this issue may allow an attack...

PT-2017-2872

Name of the Vulnerable Software and Affected Versions Android kernel Description The issue is related to insufficient access control in the MediaTek teei component of the Android operating system. It allows a remote attacker to elevate their privileges. Recommendations For Android kernel, apply t...

PT-2017-2875

Name of the Vulnerable Software and Affected Versions Android kernel Description The issue is related to an elevation of privilege vulnerability in the MediaTek accessory detector driver, which is associated with insufficient access control. This could allow a remote attacker to elevate their...

PT-2017-3815

Name of the Vulnerable Software and Affected Versions Moxa PT-7528 series firmware versions 4.0 and lower Moxa PT-7828 series firmware versions 3.9 and lower Description The issue is related to the use of a hard-coded cryptographic key in the affected products, which increases the risk of...

PT-2017-2871

Name of the Vulnerable Software and Affected Versions Android kernel Description The issue is related to a component of the Android operating system, specifically the MediaTek libmtkomxvdec, which has a flaw in access control. This flaw can be exploited by a remote attacker to elevate their...

CVE-2017-1376: Inclusion of Functionality from Untrusted Control Sphere

A flaw in the IBM J9 VM class verifier allows untrusted code to disable the security manager and elevate its privileges. IBM X-Force ID: 126873...

CVE-2017-0805

A elevation of privilege vulnerability in the Android media framework libstagefright. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37237701...

Zerodium Offers $500K for Secure Messaging App Zero Days

Zerodium, a vendor operating in the nebulous exploit acquisition market, has put a premium on zero-day vulnerabilities in secure messaging applications in a new pricing structure announced today. Remote code execution and local privilege elevation zero days in messaging apps such as WhatsApp,...

Fortinet FortiManager Elevation of Privilege Vulnerability

Fortinet FortiManager is a centralized network security management platform from Fortinet. The platform supports centralized management of any number of Fortinet devices and can group devices into different management domains ADOM to further simplify multi-device security deployment and managemen...

CVE-2017-1376

A flaw in the IBM J9 VM class verifier allows untrusted code to disable the security manager and elevate its privileges. IBM X-Force ID: 126873...

Cross site request forgery (csrf)

A Cross-Site Request Forgery CWE-352 vulnerability in esfadmingui in Micro Focus Enterprise Developer and Enterprise Server 2.3, 2.3 Update 1 before Hotfix 8, and 2.3 Update 2 before Hotfix 9 allows remote unauthenticated attackers to forge requests, if this component is configured. This includes...

CVE-2017-7423

A Cross-Site Request Forgery CWE-352 vulnerability in esfadmingui in Micro Focus Enterprise Developer and Enterprise Server 2.3, 2.3 Update 1 before Hotfix 8, and 2.3 Update 2 before Hotfix 9 allows remote unauthenticated attackers to forge requests, if this component is configured. This includes...

CVE-2017-7423

A Cross-Site Request Forgery CWE-352 vulnerability in esfadmingui in Micro Focus Enterprise Developer and Enterprise Server 2.3, 2.3 Update 1 before Hotfix 8, and 2.3 Update 2 before Hotfix 9 allows remote unauthenticated attackers to forge requests, if this component is configured. This includes...

ASUS DSL-N10S Elevation of Privilege Vulnerability

ASUS DSL-N10S is a wireless router product from ASUS. A privilege extraction vulnerability exists in ASUS DSL-N10S version V2.1.16APAC. An attacker can exploit this vulnerability to gain privileges and perform administrative operations...

PT-2017-17728

Name of the Vulnerable Software and Affected Versions Micro Focus Enterprise Developer and Enterprise Server versions 2.3 through 2.3 Update 2 before Hotfix 9 Description A Cross-Site Request Forgery issue allows remote unauthenticated attackers to forge requests, potentially creating new...