6990 matches found
CVE-2017-0641
A remote denial of service vulnerability in libvpx in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High severity due to the possibility of remote denial of service. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6....
CVE-2017-0643
A remote denial of service vulnerability in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High severity due to the possibility of remote denial of service. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0,...
Schneider Electric U.motion Builder message_simple_html restart parameter denial of service vulnerability
U.motion Builder is a generator product from Schneider Electric France. Schneider Electric U.motion Builder messagesimplehtml reboot parameter denial of service vulnerability. Allows a remote attacker to permanently reboot the system and deny service to all users...
PT-2017-2310
Name of the Vulnerable Software and Affected Versions Android versions 5.0.2 through 7.1.2 Description A remote denial of service issue in the libhevc library of the Mediaserver component could allow an attacker to cause a device hang or reboot using a specially crafted file. This issue is relate...
HP PageWide / OfficeJet Pro Printers Arbitrary Code Execution
Create a bind shell on an unpatched OfficeJet 8210 Write a script to profile.d and reboot the device. When it comes back online then nc to port 1270. easysnmp instructions: sudo apt-get install libsnmp-dev pip install easysnmp import socket import sys from easysnmp import snmpset profiledscript =...
PT-2017-2308
Name of the Vulnerable Software and Affected Versions Android versions 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1 Description A remote denial of service issue in Mediaserver could allow an attacker to use a specially crafted file to cause a device hang or reboot. This issue is related to insufficient access...
CVE-2017-0644: Undefined Security Weakness
A remote denial of service vulnerability in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High severity due to the possibility of remote denial of service. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1...
CVE-2017-0643: Undefined Security Weakness
A remote denial of service vulnerability in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High severity due to the possibility of remote denial of service. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0,...
CVE-2017-0641: Improper Initialization
A remote denial of service vulnerability in libvpx in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High severity due to the possibility of remote denial of service. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6....
CVE-2017-0640: Undefined Security Weakness
A remote denial of service vulnerability in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High severity due to the possibility of remote denial of service. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1. Android I...
PT-2017-2311
Name of the Vulnerable Software and Affected Versions Android versions 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2 Description A remote denial of service issue in the libvpx library of the Mediaserver in Android could allow an attacker to cause a device hang or reboot using a specially...
PT-2017-2309
Name of the Vulnerable Software and Affected Versions Android versions 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1 Description A remote denial of service issue in Mediaserver could allow an attacker to use a specially crafted file to cause a device hang or reboot. This issue is related to insufficient...
Nexus 9 vs. Malicious Headphones, Take Two
Nexus 9 vs. Malicious Headphones, Take Two In March 2017 we disclosed CVE-2017-0510, a critical vulnerability in Nexus 9, that allowed for quite unique an attack by malicious headphones. Interestingly, its patch was insufficient. We had responsibly reported that finding CVE-2017-0648 to Google,...
PT-2017-2307
Name of the Vulnerable Software and Affected Versions Android versions 6.0 through 7.1.1 Description A remote denial of service issue in Mediaserver could allow an attacker to cause a device hang or reboot using a specially crafted file. This issue is rated as High severity due to the possibility...
PT-2017-2866
Name of the Vulnerable Software and Affected Versions D-Link DIR-605L versions prior to 2.08UIBetaB01.bin D-Link DIR-615L affected versions not specified Description The issue is related to insufficient input validation in the firmware of the affected devices. It allows an unauthenticated GET...
Behind the CARBANAK Backdoor
In this blog, we will take a closer look at the powerful, versatile backdoor known as CARBANAK aka Anunak. Specifically, we will focus on the operational details of its use over the past few years, including its configuration, the minor variations observed from sample to sample, and its evolution...
(0Day) Schneider Electric U.motion Builder message_simple_html reboot Parameter Denial of Service Vulnerability
This vulnerability allows remote attackers to deny service on vulnerable installations of Schneider Electric U.motion Builder. Authentication is not required to exploit this vulnerability. The specific flaw exists within processing of messagesimplehtml.php, which is exposed on the web service. Th...
Foscam camera startup script improperly assigned privileges vulnerability
Foscam camera is a webcam that pushes messages to your phone and also enables video Baidu cloud storage directly through WIFI. An improper privilege assignment vulnerability exists in the Foscam camera boot script. /mnt/mtd/boot.sh During system boot, the device will execute various boot scripts...
Foscam camera ONVIF reboot vulnerability
FOSCAM Group is a national high-tech enterprise specializing in the design, research and development, manufacturing and sales of network cameras, network video recorders and other products. Foscam camera ONVIF has a reboot vulnerability that allows an unauthenticated attacker to reboot the device...
