Security Bypass Vulnerabilities in Multiple Moxa Products

Moxa ioLogik E1210 and others are Moxa's remote Ethernet I/O products that provide bridge monitoring. A security vulnerability exists in several Moxa products. A remote attacker could exploit the vulnerability to execute arbitrary code, modify parameters and settings, or reboot the device...

Critical: kernel

Issue Overview: A race condition was found in the way the Linux kernel's memory subsystem handled the copy-on-write COW breakage of private read-only memory mappings. An unprivileged local user could use this flaw to gain write access to otherwise read-only memory mappings and thus increase their...

NETGATE AMITI Antivirus 23.0.305 Privilege Escalation

Exploit Title: NETGATE AMITI Antivirus Unquoted Service Path Privilege Escalation Date: 15/10/2016 Author: Amir.ght Vendor Homepage: http://www.netgate.sk/ Software Link: http://www.netgate.sk/download/download.php?id=11 version : build 23.0.305 Latest Tested on: Windows 7 AMITI Antivirus install...

Stack overflow security vulnerability in Huawei phone video driver

The video driver for Huawei phones is a software that provides video capabilities. A stack overflow security vulnerability exists in the video driver for Huawei phones. Successful exploitation of the vulnerability by an attacker could result in a system reboot or user privilege elevation...

IObit Malware Fighter 4.3.1 - Unquoted Service Path Privilege Escalation

Exploit for windows platform in category local exploits Exploit Title: IObit Malware Fighter Unquoted Service Path Privilege Escalation Date: 12/10/2016 Author: Amir.ght Vendor Homepage: http://www.iobit.com/en/index.php Software Link:...

Android GPS Component Denial of Service Vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA, with GPS as one of the global positioning components. A denial of service vulnerability exists in the GPS component of Android. An attacker can exploit this vulnerability to condu...

Design/Logic Flaw

The sound driver in the kernel in Android before 2016-10-05 on Nexus 5, Nexus 5X, Nexus 6, Nexus 6P, and Nexus Player devices allows attackers to cause a denial of service reboot via a crafted application, aka internal bug 28838221...

CVE-2016-3920

id3/ID3.cpp in libstagefright in mediaserver in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-10-01, and 7.0 before 2016-10-01 allows remote attackers to cause a denial of service device hang or reboot via a crafted file, aka internal bug 30744884...

Code injection

Off-by-one error in server/wifi/anqp/VenueNameElement.java in Wi-Fi in Android 6.x before 2016-10-01 and 7.0 before 2016-10-01 allows remote attackers to cause a denial of service reboot via an access point that provides a crafted 1 Venue Group or 2 Venue Type value, aka internal bug 29464811...

UBUNTU-CVE-2016-5348

The GPS component in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-10-01, and 7.0 before 2016-10-01 allows man-in-the-middle attackers to cause a denial of service memory consumption, and device hang or reboot via a large xtra.bin or xtra2.bin file on a spoofed...

Android Qualcomm GPS/GNSS Man-In-The-Middle

Original at: https://wwws.nightwatchcybersecurity.com/2016/10/04/advisory-cve-2016-5348-2/ Summary Android devices can be crashed remotely forcing a halt and then a soft reboot by a MITM attacker manipulating assisted GPS/GNSS data provided by Qualcomm. This issue affects the open source code in...

Waves Audio Service Privilege Vulnerability

Waves Audio Service is a powerful audio service from Waves. An elevation of privilege vulnerability exists in Waves Audio Service, which stems from the default installation of Max audio drivers with the service path unquoted and running with SYSTEM privileges, which allows a local attacker to...

Wacom Consumer Service Privilege Escalation

Wacom Consumer Service: http://www.wacom.com By Ross Marks: http://www.rossmarks.co.uk Exploit-db: https://www.exploit-db.com/author/?a=8724 Category: Local Tested on: Windows 10 x86/x64 1 Unquoted Service Path Privilege Escalation Wacom's "Wacom Consumer Service" installs as a service with an...

anonym8 - Transparent Proxy through TOR, I2P, Privoxy, Polipo and modify DNS

Transparent Proxy through TOR, I2P, Privoxy, Polipo and modify DNS, for a simple and better privacy and security; Include Anonymizing Relay Monitor arm, macchanger, hostname and wipe Cleans ram/cache & swap-space features. Tested on Debian, Kali, Parrot to use the graphical interface, you'll need...

Waves Audio Service - Unquoted Service Path Privilege Escalation Vulnerability

Exploit for windows platform in category local exploits Waves Audio Service: http://www.maxx.com By Ross Marks: http://www.rossmarks.co.uk Exploit-db: https://www.exploit-db.com/author/?a=8724 Category: Local Tested on: Windows 10 x86/x64 1 Unquoted Service Path Privilege Escalation Max audio...

CVE-2016-1454

Cisco NX-OS 4.0 through 7.3 and 11.0 through 11.2 on 1000v, 2000, 3000, 3500, 5000, 5500, 5600, 6000, 7000, 7700, and 9000 devices allows remote attackers to cause a denial of service device reload by leveraging a peer relationship to send a crafted BGP UPDATE message, aka Bug IDs CSCuq77105 and...

XenServer Host become responsive In Reboot/Shutdown

XenServer hangs on reboot with following message in serial logs Sending all processes the TERM signal... Sending all processes the KILL signal... Saving random seed: Syncing hardware clock to system time Turning off swap: Unmounting pipe file systems: Unmounting file systems: Please stand by whil...

All paths in multipath are not visible in XenServer after a reboot

After a XenServer Host reboot, some of the paths are not visible when typing the command multipath -ll...

Cisco IOS and IOS XE Software Denial of Service Vulnerability (CNVD-2016-08397)

Cisco IOS and IOS XE Software are both operating systems developed by Cisco for its network devices. A denial of service vulnerability exists in the H.323 subsystem in Cisco IOS and IOS XE Software, which arises from a program's failure to properly validate fields in the H.323 protocol group. A...

Cisco IOS Common Industrial Protocol Denial of Service Vulnerability

Cisco IOS is an operating system developed by Cisco for its network devices.Common Industrial Protocol CIP is one of the industrial protocols used for industrial automation applications. A denial of service vulnerability exists in the CIP functionality in Cisco IOS. A remote attacker could exploi...