CVE-2017-17175

Short Message Service SMS module of Mate 9 Pro Huawei smart phones with the versions before LON-AL00B 8.0.0.354C00 has a Denial of Service DoS vulnerability. An unauthenticated attacker may set up a pseudo base station, and send special malware text message to the phone, causing the mobile phone ...

CVE-2017-17175

Short Message Service SMS module of Mate 9 Pro Huawei smart phones with the versions before LON-AL00B 8.0.0.354C00 has a Denial of Service DoS vulnerability. An unauthenticated attacker may set up a pseudo base station, and send special malware text message to the phone, causing the mobile phone ...

CVE-2017-17175: Improper Input Validation

Short Message Service SMS module of Mate 9 Pro Huawei smart phones with the versions before LON-AL00B 8.0.0.354C00 has a Denial of Service DoS vulnerability. An unauthenticated attacker may set up a pseudo base station, and send special malware text message to the phone, causing the mobile phone ...

Security Advisory - DoS Vulnerability in SMS Module of Some Huawei Smart Phones

There is a Denial of Service DoS vulnerability in the Short Message Service SMS module of some Huawei smart phones. An unauthenticated attacker may set up a pseudo base station, and send special malware text message to the phone, causing the mobile phone to fail to make calls and send and receive...

Pseudo-Shell Post-Exploitation Module

This module will run a Pseudo-Shell. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'readline' class MetasploitModule Msf::Post include Msf::Post::File include Msf::Post::Unix include Msf::Post::Linux::System...

CVE-2017-7753

An out-of-bounds read occurs when applying style rules to pseudo-elements, such as ::first-line, using cached style data. This vulnerability affects Thunderbird 52.3, Firefox ESR 52.3, and Firefox 55...

DEBIAN-CVE-2017-7753

An out-of-bounds read occurs when applying style rules to pseudo-elements, such as ::first-line, using cached style data. This vulnerability affects Thunderbird 52.3, Firefox ESR 52.3, and Firefox 55...

Cross site scripting

An out-of-bounds read occurs when applying style rules to pseudo-elements, such as ::first-line, using cached style data. This vulnerability affects Thunderbird 52.3, Firefox ESR 52.3, and Firefox 55...

CVE-2017-7753

An out-of-bounds read occurs when applying style rules to pseudo-elements, such as ::first-line, using cached style data. This vulnerability affects Thunderbird 52.3, Firefox ESR 52.3, and Firefox 55...

CVE-2017-7753

CVE-2017-7753 is an out-of-bounds read in the rendering path when applying style rules to pseudo-elements (e.g., ::first-line) using cached style data. Affected products/versions include Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox

CVE-2017-7753

An out-of-bounds read occurs when applying style rules to pseudo-elements, such as ::first-line, using cached style data. This vulnerability affects Thunderbird 52.3, Firefox ESR 52.3, and Firefox 55...

CVE-2017-7753: Out-of-bounds Read

An out-of-bounds read occurs when applying style rules to pseudo-elements, such as ::first-line, using cached style data. This vulnerability affects Thunderbird 52.3, Firefox ESR 52.3, and Firefox 55...

[SECURITY] [DLA 1389-1] apache2 security update

Package : apache2 Version : 2.2.22-13+deb7u13 CVE ID : CVE-2017-15710 CVE-2018-1301 CVE-2018-1312 Debian Bug : Several vulnerabilities have been found in the Apache HTTPD server. CVE-2017-15710 Alex Nichols and Jakob Hirsch reported that modauthnzldap, if configured with AuthLDAPCharsetConfig,...

Malwarebytes CrackMe 2: contest summary

About three weeks ago, we published our second CrackMe. It triggered a lot of interest, and we got many high-quality write-ups. Choosing the winner was really difficult! In this post, I am going to summarize the contest and comment on the received submissions. CrackMe 2 challenge The topic of the...

CenoCipher - Easy-To-Use, End-To-End Crypto-Communication Tool

CenoCipher is a free, open-source, easy-to-use tool for exchanging secure encrypted communications over the internet. It uses strong cryptography to convert messages and files into encrypted cipher-data, which can then be sent to the recipient via regular email or any other channel available, suc...

Authentication flaw

In Apache httpd 2.2.0 to 2.4.29, when generating an HTTP Digest authentication challenge, the nonce sent to prevent reply attacks was not correctly generated using a pseudo-random seed. In a cluster of servers using a common Digest authentication configuration, HTTP requests could be replayed...

SQL Injection Vulnerability in Guangzhou Haiji Network Company's Website Building System

The main business scope of Guangzhou Haiji Network Company includes: software development OA, CRM, sales and inventory, etc., e-commerce one-stop service for website production, network promotion, website operation, etc., small integrated cabling internal LAN, etc. and IT outsourcing services...

The vulnerability of the Mozilla Firefox ESR browser arises from an operation that goes beyond buffer boundaries in memory, allowing attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Mozilla Firefox ESR browser arises from an operation that goes beyond the buffer boundaries when applying style rules to pseudo-elements such as ::first-line. Exploiting this vulnerability can allow a malicious actor to cause a service failure using cached style data...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2017-3657)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-3657 advisory. - mm: Tighten x86 /dev/mem with zeroing reads Kees Cook Orabug: 26675925 CVE-2017-7889 - more biomapuseriov leak fixes Al Viro Orabug: 27069042...

PT-2017-18882 · Blackberry · Qnx Sdp

Name of the Vulnerable Software and Affected Versions: BlackBerry QNX Software Development Platform SDP versions 6.6.0 and 6.5.0 SP1 and earlier Description: A loss of integrity issue in the default configuration of the QNX SDP could allow an attacker to reduce the entropy of the PRNG, making oth...