Huawei Mobile Emergdata Driver Buffer Overflow Vulnerability

The Huawei Honor Play 5A is a smartphone product from the Chinese company Huawei Huawei. A buffer overflow vulnerability exists in the Emergdata driver of the Huawei phone, which can be exploited by an attacker to trick users into installing a malicious application that sends specific parameters ...

Huawei Mate 8 Local Denial of Service Vulnerability

Huawei Mate 8 is a smartphone from the Chinese company Huawei. A local denial of service vulnerability exists in multiple versions of the huawei mate 8. A local attacker can exploit the vulnerability to reboot the device, resulting in a denial of service...

Huawei Honor 4C driver input validation vulnerability (CNVD-2016-05174)

The Huawei Honor 4C 华为荣耀4C is a smartphone product of the Chinese company Huawei. An input validation vulnerability exists in the Huawei Honor 4C driver, which can be exploited by an attacker to cause a system reboot or user privilege elevation by tricking the user into installing a malicious...

Sierra Wireless AirLink Raven XE/XT Unauthorized Access Vulnerability

The AirLink Raven XT and XE are M2M gateways from Sierra Wireless that provide remote monitoring and control of industrial applications. An unauthorized access vulnerability exists in AirLink Raven XT and XE. An unauthenticated, remote attacker could exploit the vulnerability to access system...

HooToo Tripmate HT-TM01 2.000.022 - Cross-Site Request Forgery

HooToo Tripmate HT-TM01 2.000.022 - Cross-Site Request Forgery Exploit Title: HooToo Tripmate HT-TM01 Cross Site Request Forgery Date: 03Sep15 Exploit Author: Ken Smith Contact: https://twitter.com/P4tchw0rk Vendor Homepage: http://www.hootoo.com Version: HT-TM01, version 2.000.022 1. Description...

Vulnerability in InFocus IN3128HD projector

InFocus IN3128HD projector is a projector product for the education industry from InFocus. A security vulnerability exists in the InFocus IN3128HD projector using firmware version 0.26. Because the program fails to restrict access to the cgi-bin/webctrl.cgi.elf file. A remote attacker can exploit...

Local denial of service vulnerability in nubia z7 phones

An unprotected broadcast receiver exists in the built-in application cn.nubia.factory on the ZTE nubia z7 series cell phone system cn.nubia.factory.service.FactoryResetReciver, a local malicious does not require any Android privileges to send malicious broadcasts to this broadcast receiver, which...

CVE-2013-0717

Multiple cross-site request forgery CSRF vulnerabilities in the web-based management utility on the NEC AtermWR9500N, AtermWR8600N, AtermWR8370N, AtermWR8160N, AtermWM3600R, and AtermWM3450RN routers allow remote attackers to hijack the authentication of administrators for requests that 1...

Cisco IOS fails to properly handle malformed DHCP packets

Overview A denial-of-service vulnerability exists in Cisco's Internetwork Operating System IOS. This vulnerability may allow remote attackers to conduct denial-of-service attacks on an affected device. Description The Dynamic Host Configuration Protocol DHCP provides a means for distributing...