Buffer overflow vulnerability in CFM function in multiple Huawei products

CloudEngine 5800, CloudEngine 6800, CloudEngine 7800, CloudEngine 8800, CloudEngine 12800 are Huawei switch devices. A buffer overflow vulnerability exists in the CFM Connectivity Fault Management feature in multiple Huawei products. When the device uses CFM and is configured with MEP Maintenance...

Elevation of Privilege Vulnerability in Multiple Huawei Phones (CNVD-2016-11306)

Huawei Mate 8, Mate S, P8 are smartphones from Huawei. A security vulnerability in the form of missing parameter checking exists in several Huawei phones. The vulnerability is exploited on the premise that an attacker obtains Graphic or Camera permissions and induces the user to install a malicio...

Elevation of Privilege Vulnerability in Multiple Huawei Phones (CNVD-2016-11304)

Huawei Mate 8, Mate S, P8 are smartphones from Huawei. A security vulnerability in the form of missing parameter checking exists in several Huawei phones. The vulnerability is exploited on the premise that an attacker obtains Graphic or Camera permissions and induces the user to install a malicio...

Elevation of Privilege Vulnerability in Multiple Huawei Phones (CNVD-2016-11303)

Huawei Mate 8, Mate S, P8 are smartphones from Huawei. A security vulnerability in the form of missing parameter checking exists in several Huawei phones. The vulnerability is exploited on the premise that an attacker obtains Graphic or Camera permissions and induces the user to install a malicio...

Elevation of Privilege Vulnerability in Multiple Huawei Phones (CNVD-2016-11305)

Huawei Mate 8, Mate S, P8 are smartphones from Huawei. A security vulnerability in the form of missing parameter checking exists in several Huawei phones. The vulnerability is exploited on the premise that an attacker obtains Graphic or Camera permissions and induces the user to install a malicio...

Siemens SIMATIC S7-300/1200/1500 CPU Denial of Service Vulnerability

Siemens SIMATIC S7-300, 1200 and 1500 CPUs are modular general-purpose controllers for the manufacturing industry from Siemens, Germany, and are widely used in tobacco, petrochemical, water and other important industrial control sites. A denial of service vulnerability exists in the Siemens SIMAT...

Cisco ASR 5000 Series Denial of Service Vulnerability

Cisco ASR 5000 is the ASR 5000 series multifunction router products from Cisco USA. The Cisco ASR 5000 Series has a denial of service vulnerability that can be exploited by an attacker to cause the device to reboot and deny legitimate users...

Microsoft Windows - LSASS SMB NTLM Exchange Null-Pointer Dereference (MS16-137) Exploit

Exploit for windows platform in category dos / poc MS16-137: LSASS Remote Memory Corruption Advisory Title: LSASS SMB NTLM Exchange Remote Memory Corruption Version: 1.0 Issue type: Null Pointer Dereference Authentication: Pre-Authenticated Affected vendor: Microsoft Release date: 8/11/2016...

Important: kernel

Issue Overview: The IP stack in the Linux kernel before 4.6 allows remote attackers to cause a denial of service stack consumption and panic or possibly have unspecified other impact by triggering use of the GRO path for packets with tunnel stacking, as demonstrated by interleaved IPv4 headers an...

Google Android Proxy Auto Config Denial of Service Vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA, of which Proxy Auto-Config PAC is a Script-like component. A denial of service vulnerability exists in PAC in Android. A remote attacker can exploit this vulnerability to cause a...

Google Android Mediaserver Denial of Service Vulnerability (CNVD-2016-11048)

Android is a Linux-based open source operating system developed by Google and the Open Handset Alliance OHA, of which Mediaserver is a multimedia service component. A denial of service vulnerability exists in Google Android Mediaserver. A remote attacker can exploit the vulnerability to cause the...

Google Android Mediaserver Denial of Service Vulnerability (CNVD-2016-11049)

Android is a Linux-based open source operating system developed by Google and the Open Handset Alliance OHA, of which Mediaserver is a multimedia service component. A denial of service vulnerability exists in Google Android Mediaserver. A remote attacker can exploit the vulnerability to cause the...

Google Android Mediaserver Denial of Service Vulnerability (CNVD-2016-11047)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handset Alliance OHA in the U.S. Mediaserver is one of the multimedia service components. A denial of service vulnerability exists in Google Android Mediaserver. A remote attacker can exploit the...

Microsoft Windows - LSASS SMB NTLM Exchange Null-Pointer Dereference (MS16-137)

MS16-137: LSASS Remote Memory Corruption Advisory Title: LSASS SMB NTLM Exchange Remote Memory Corruption Version: 1.0 Issue type: Null Pointer Dereference Authentication: Pre-Authenticated Affected vendor: Microsoft Release date: 8/11/2016 Discovered by: Laurent Gaffié Advisory by: Laurent Gaffi...

Google Android Mediaserver Denial of Service Vulnerability (CNVD-2016-11050)

Android is a Linux-based open source operating system developed by Google and the Open Handset Alliance OHA, of which Mediaserver is a multimedia service component. A denial of service vulnerability exists in Google Android Mediaserver. A remote attacker can exploit the vulnerability to cause the...

Android Proxy Auto Config (PAC) Crash Vulnerability

Android devices can be crashed forcing a halt and then a soft reboot by downloading a large proxy auto config PAC file when adjusting the Android networking settings. This can also be exploited by an MITM attacker that can intercept and replace the PAC file. However, the bug is mitigated by...

Boot Signal fails while reboot and shutdown signal works properly

The machines created from Streaming VM setup wizard are unable to boot when boot signal is sent from the PVS console. If we send the reboot or shutdown signal it reboots or shuts down the machines...

Huawei Mate 8 Local Denial of Service Vulnerability

Huawei Mate 8 is a smartphone from the Chinese company Huawei. A local denial of service vulnerability exists in multiple versions of the huawei mate 8. A local attacker can exploit the vulnerability to reboot the device, resulting in a denial of service...

CVE-2016-7160

A vulnerability on Samsung Mobile M6.0 devices exists because external access to SystemUI activities is not properly restricted, leading to a SystemUI crash and device restart, aka SVE-2016-6248...

Resource Consumption Vulnerability in Multiple Schneider Electric Products

Schneider Electric Magelis HMI Magelis GTO Advanced Optimum panels and so on are the HMI human-machine panel series products of France Schneider Electric Schneider Electric. A resource depletion vulnerability exists in multiple Schneider Electric products. An attacker could exploit the...