CVE-2017-8153: Undefined Security Weakness

Huawei VMall for Android with the versions before 1.5.8.5 have a privilege elevation vulnerability due to improper design. An attacker can trick users into installing a malicious app which can send out HTTP requests and execute JavaScript code in web pages without obtaining the Internet access...

CVE-2017-8126: Improper Input Validation

The UMA product with software V200R001 has a privilege elevation vulnerability due to insufficient validation or improper processing of parameters. An attacker could craft specific packets to exploit these vulnerabilities to gain elevated privileges...

CVE-2017-8124: Improper Input Validation

The UMA product with software V200R001 has a privilege elevation vulnerability due to insufficient validation or improper processing of parameters. An attacker could craft specific packets to exploit these vulnerabilities to gain elevated privileges...

PT-2017-18190

Name of the Vulnerable Software and Affected Versions ME906s-158 versions earlier than ME906S Installer 13.1805.10.3 Description The issue allows an attacker to elevate privileges, potentially modifying configuration information to include malicious files. This could trick users into executing...

CVE-2017-8123: Improper Input Validation

The UMA product with software V200R001 has a privilege elevation vulnerability due to insufficient validation or improper processing of parameters. An attacker could craft specific packets to exploit these vulnerabilities to gain elevated privileges...

CVE-2017-8129: Improper Input Validation

The UMA product with software V200R001 and V300R001 has a privilege elevation vulnerability due to insufficient validation or improper processing of parameters. An attacker could craft specific packets to exploit these vulnerabilities to gain elevated privileges...

PT-2017-15486

Name of the Vulnerable Software and Affected Versions Huawei Themes APP versions earlier than PLK-UL00C17B385 Huawei Themes APP versions earlier than CRR-L09C432B380 Huawei Themes APP versions earlier than LYO-L21C577B128 Description The issue allows an attacker to exploit a privilege elevation...

CVE-2017-8117: Improper Input Validation

The UMA product with software V200R001 and V300R001 has a privilege elevation vulnerability due to insufficient validation or improper processing of parameters. An attacker could craft specific packets to exploit these vulnerabilities to gain elevated privileges...

PT-2017-18131

Name of the Vulnerable Software and Affected Versions UMA product version V200R001 Description The issue is related to insufficient validation or improper processing of parameters, which can lead to privilege elevation. An attacker could exploit this by crafting specific packets to gain elevated...

PT-2017-18135

Name of the Vulnerable Software and Affected Versions UMA product version V200R001 Description The issue is related to insufficient validation or improper processing of parameters, which can lead to privilege elevation. An attacker could exploit this by crafting specific packets to gain elevated...

PT-2017-18133

Name of the Vulnerable Software and Affected Versions UMA product version V200R001 Description The issue is related to insufficient validation or improper processing of parameters, which can lead to privilege elevation. An attacker could exploit this by crafting specific packets to gain elevated...

Google Android Qualcomm Display Mobilization Vulnerability

Android on Google Pixel and Nexus is a Linux-based open source operating system for the Google Pixel and Nexus smartphones developed by Google Inc. and the Open Handset Alliance OHA, of which Qualcomm Display is one of the components. Qualcomm Display is one of the display components developed by...

iBall iB-WRA300N3GT Elevation of Privilege Vulnerability

The iBall iB-WRA300N3GT is a wireless router product from iBall India. The iBall iB-WRA300N3GT using firmware version iB-WRA300N3GT1.1.1 is vulnerable to a power lifting vulnerability. A remote attacker can exploit this vulnerability to gain root privileges...

CVE-2017-16819

A stored cross-site scripting vulnerability in the Icon Time Systems RTC-1000 v2.5.7458 and earlier time clock allows remote attackers to inject arbitrary JavaScript in the nameFirst aka First Name field for the employee details page /employee.html that is then reflected in multiple pages where...

Microsoft ASP.NET Core Elevation of Privilege Vulnerability (CNVD-2017-37114)

Microsoft ASP.NET Core is a cross-platform open source framework from Microsoft. The framework is used to build cloud-based applications such as Web One applications, IoT applications, and mobile backends. A privilege extraction vulnerability exists in Microsoft ASP.NET Core version 2.0. A remote...

Patch Tuesday: Microsoft Releases Update to Fix 53 Vulnerabilities

It's Patch Tuesday—time to update your Windows devices. Microsoft has released a large batch of security updates as part of its November Patch Tuesday in order to fix a total of 53 new security vulnerabilities in various Windows products, 19 of which rated as critical, 31 important and 3 moderate...

November Patch Tuesday: 53 Vulnerabilities and a Massive Adobe Update

This November Patch Tuesday is moderate in volume and severity. Microsoft released patches to address 53 unique vulnerabilities, with 25 focused on Remote Code Execution fixes. Windows OS receives 14 patches, while the lion's share is focused on Browsers, Microsoft Office, and Adobe. According to...

PowerShell Penetration Testing Framework: Nishang

Nishang is an open source framework and collection of powerful PowerShell scripts and payloads that you can use during penetration testing audit, post exploitation phase or other stages of offensive security auditing. Nishang is useful during various phases of a security auditing process and has...

CVE-2017-6274: Improper Restriction of Operations within the Bounds of a Memory Buffer

An elevation of Privilege vulnerability exists in the Thermal Driver, where a missing bounds checks in the thermal throttle driver can cause an out-of-bounds write in the kernel. This issue is rated as moderate. Product: Pixel. Version: N/A. Android ID: A-34705801. References: N-CVE-2017-6274...

Xen Hypervisor Privilege Escalation

The vulnerability of Xen hypervisors is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor, operating locally within a user account of the x86 guest operating system in hardware virtualization mode, to trigger a hypervisor failure or increase their...