Lucene search
+L

3028 matches found

CVE
CVE
•added 2016/10/31 10:00 a.m.•57 views

CVE-2016-7989

CVE-2016-7989 affects Samsung Galaxy S4–S7. A malformed OTA WAP PUSH SMS containing an OMACP message triggers an unhandled ArrayIndexOutOfBoundsException in Samsung’s WifiServiceImpl (wifi-service.jar), causing the Android runtime to crash repeatedly and render the device unusable until a factory...

7.8CVSS7.1AI score0.00604EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2016/10/31 12:00 a.m.•4 views

CVE-2016-7991: Undefined Security Weakness

On Samsung Galaxy S4 through S7 devices, the "omacp" app ignores security information embedded in the OMACP messages resulting in remote unsolicited WAP Push SMS messages being accepted, parsed, and handled by the device, leading to unauthorized configuration changes, a subset of SVE-2016-6542...

7.8CVSS5.8AI score0.00492EPSS
SaveExploits0References2
ThreatPost
ThreatPost
•added 2016/10/14 5:24 p.m.•12 views

Malicious Links Top Source of Mobile Trojans

Cheetah Mobile says the scourge of Ghost Push malware is still taking its toll on Android devices nearly two years after making its debut. Now the research firm is trying to track down how Ghost Push and other Trojans have remained so prolific despite mitigation efforts. In a report released Frid...

0.5AI score
SaveExploits0References2
CNVD
CNVD
•added 2016/09/18 12:00 a.m.•9 views

PHP wddx module release re-reference vulnerability

PHP is an open source general-purpose computer scripting language maintained by the PHP Group and the open source community. A heap block release dereference vulnerability exists in the phpwddxpushelement function of the PHP wddx module, which could allow a remote attacker to execute arbitrary co...

9.8CVSS8.8AI score0.06654EPSS
SaveExploits1References1
Exploit DB
Exploit DB
•added 2016/09/13 12:00 a.m.•51 views

Inteno EG101R1 VoIP Router - DNS Change

!/bin/bash Inteno EG101R1 VoIP Router Unauthenticated Remote DNS Change Exploit Copyright 2016 c Todor Donev https://www.ethical-hacker.org/ https://www.facebook.com/ethicalhackerorg Description: The vulnerability exist in the web interface, which is accessible without authentication. Once...

5.3AI score
SaveExploits0
The Hacker News
The Hacker News
•added 2016/08/02 12:01 a.m.•19 views

Android Will Alert You When A New Device Logs-in Your Google Account

Google has rolled out a new feature for Android users to keep its users account more secure: Native Android Push Notification when a new device accesses your Google account. Google has already been offering email notification for newly added devices, but since people usually ignore emails, the te...

6.9AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2016/07/05 12:00 a.m.•15 views

The vulnerability of the Linux operating system, which allows a malicious individual to trigger a service failure

Improper processing of IPv6 sockets using the UDPCORK option in the udpv6pushpendingframes function can lead to service failures...

4.7CVSS6.7AI score0.00404EPSS
SaveExploits0References2Affected Software1
Tenable Nessus
Tenable Nessus
•added 2016/06/01 12:00 a.m.•42 views

openSUSE Security Update : libxml2 (openSUSE-2016-662)

libxml2 was updated to fix security issues and a regression from the last version update. Security issues fixed : - CVE-2016-3627: Fixed stack exhaustion while parsing certain XML files in recovery mode bnc972335. - CVE-2016-3705: Improved protection against the Billion Laughs Attack bnc975947...

7.5CVSS6.8AI score0.07025EPSS
SaveExploits1References5
Citrix
Citrix
•added 2016/05/16 12:00 a.m.•18 views

Getting Started with Citrix Secure Mail

The purpose of this getting started guide is to provide a reference document with key information about Citrix Citrix Secure Mail. Navigation: What is Secure Mail? Citrix Secure Mail Connection Modes List of Supported Mail Servers Citrix Secure Mail w/ IBM Notes Supported File Formats Push...

6.1AI score
SaveExploits0
OSV
OSV
•added 2016/04/13 4:59 p.m.•12 views

DEBIAN-CVE-2016-3630

The binary delta decoder in Mercurial before 3.7.3 allows remote attackers to execute arbitrary code via a 1 clone, 2 push, or 3 pull command, related to a a list sizing rounding error and b short records...

8.8CVSS8.8AI score0.04872EPSS
SaveExploits0References1
NVD
NVD
•added 2016/04/13 4:59 p.m.•27 views

CVE-2016-3630

The binary delta decoder in Mercurial before 3.7.3 allows remote attackers to execute arbitrary code via a 1 clone, 2 push, or 3 pull command, related to a a list sizing rounding error and b short records...

8.8CVSS8.8AI score0.04872EPSS
SaveExploits0References12
PyPA
PyPA
•added 2016/04/13 4:59 p.m.•15 views

PYSEC-2016-29

The binary delta decoder in Mercurial before 3.7.3 allows remote attackers to execute arbitrary code via a 1 clone, 2 push, or 3 pull command, related to a a list sizing rounding error and b short records...

8.8CVSS8AI score0.04872EPSS
SaveExploits0References13Affected Software1
OSV
OSV
•added 2016/04/13 4:59 p.m.•48 views

PYSEC-2016-29

The binary delta decoder in Mercurial before 3.7.3 allows remote attackers to execute arbitrary code via a 1 clone, 2 push, or 3 pull command, related to a a list sizing rounding error and b short records...

8.8CVSS7.6AI score0.04872EPSS
SaveExploits0References13
OSV
OSV
•added 2016/04/13 4:59 p.m.•18 views

UBUNTU-CVE-2016-3630

The binary delta decoder in Mercurial before 3.7.3 allows remote attackers to execute arbitrary code via a 1 clone, 2 push, or 3 pull command, related to a a list sizing rounding error and b short records...

8.8CVSS7.7AI score0.04872EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2016/04/13 4:00 p.m.•41 views

CVE-2016-3630

The binary delta decoder in Mercurial before 3.7.3 allows remote attackers to execute arbitrary code via a 1 clone, 2 push, or 3 pull command, related to a a list sizing rounding error and b short records...

8.8AI score0.04872EPSS
SaveExploits0References12
hackapp
hackapp
•added 2016/04/01 9:38 a.m.•9 views

Push Ups Workout - Customized SSL, WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Push Ups Workout published at the 'play' market has multiple vulnerabilities...

0.8AI score
SaveExploits0References1Affected Software1
hackapp
hackapp
•added 2016/04/01 9:22 a.m.•15 views

Windows Live Hotmail PUSH mail - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Windows Live Hotmail PUSH mail published at the 'play' market has multiple vulnerabilities...

0.8AI score
SaveExploits0References1Affected Software1
hackapp
hackapp
•added 2016/04/01 9:04 a.m.•20 views

Abs – Push-Ups - Arms - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Abs – Push-Ups - Arms published at the 'play' market has multiple vulnerabilities...

0.2AI score
SaveExploits0References1Affected Software1
hackapp
hackapp
•added 2016/04/01 9:03 a.m.•9 views

30 Day Push Up Challenge - MIT license, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application 30 Day Push Up Challenge published at the 'play' market has multiple vulnerabilities...

0.8AI score
SaveExploits0References1Affected Software1
hackapp
hackapp
•added 2016/04/01 9:02 a.m.•14 views

Runtastic Push-Ups Workout - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Runtastic Push-Ups Workout published at the 'play' market has multiple vulnerabilities...

0.8AI score
SaveExploits0References1Affected Software1
Rows per page
Query Builder