Buffer Overflow Vulnerability in Huawei P9 Mobile Wi-Fi Driver

Huawei P9 is a smartphone from the Chinese company Huawei Huawei. A buffer overflow vulnerability in the Huawei P9 phone's Wi-Fi driver due to a lack of parameter checking can be exploited by an attacker to trick a user into installing a malicious application, which in turn can be exploited by th...

Huawei H60 cell phone touthscreen driver suffers from stack overflow vulnerability

The Huawei H60 Honor 6 is a smartphone from the Chinese company Huawei. A stack overflow vulnerability exists in the touthscreen driver of the Huawei H60 phone. After an attacker induces a user to install a malicious application, the application can exploit the vulnerability to send specific...

CVE-2016-6712

A remote denial of service vulnerability in libvpx in Mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-11-01 could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High due to the...

Google Android Telephony Denial of Service Vulnerability

Android is a Linux-based open source operating system developed by Google and the Open Handheld Alliance OHA, with Telephony as one of the components providing telephony functionality. A denial of service vulnerability exists in Telephony in Android. The vulnerability can be exploited by an...

D-Link DI-524 - Cross-Site Request Forgery

D-Link DI-524 - Cross-Site Request Forgery Title: D-Link DI-524 - Cross-Site-Request-Forgery Vulnerability Credit: Felipe Soares de Souza Date: 09/12/2016 Vendor: D-Link Product: D-Link DI-524 Wireless 150 Product link: https://dlink.com.br/produto/di-524150 Version: Firmware 9.01 1- Reboot the...

Google Android Mediaserver Denial of Service Vulnerability (CNVD-2016-12181)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handset Alliance OHA in the U.S. Mediaserver is one of the multimedia service components. A denial of service vulnerability exists in Mediaserver in Android. The vulnerability can be exploited to cause ...

Google Android Mediaserver Denial of Service Vulnerability (CNVD-2016-12180)

Android is a Linux-based open source operating system developed by Google and the Open Handset Alliance OHA, of which Mediaserver is a multimedia service component. A denial of service vulnerability exists in Mediaserver in Android. The vulnerability can be exploited to cause a device to hang or...

Denial of Service Vulnerability in Moxa NPort5110 TCP/IP Stack

Moxa NPort5110 is an industrial-grade serial server manufactured by Moxa Taiwan for serial device networking. A denial of service vulnerability exists in the Moxa NPort5110 TCP/IP stack. Sending 1-2 UDP length anomaly messages to the NPort5110's UDP port 161 SNMP can cause the NPort5110's TCP/IP...

Apache CouchDB 2.0.0 Local Privilege Escalation

Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/APACHE-COUCHDB-LOCAL-PRIVILEGE-ESCALATION.txt + ISR: ApparitionSec Vendor: ================== couchdb.apache.org Product: ============== CouchDB v2.0.0 Apache CouchDB is open...

Denial of Service Vulnerability in TrustZone Driver for Some Huawei Phones

Huawei P9, P9 Lite, P8 Lite are Huawei smartphones. A denial of service vulnerability exists in the TrustZone driver of some Huawei phones. An attacker can trick users into installing a malicious application, and the application exploits the vulnerability to pass specific parameters to the...

Huawei Play 5C phone TP touchscreen driver suffers from buffer overflow vulnerability

Huawei Play 5C is a smartphone from Huawei. A buffer overflow vulnerability exists in the TP touchscreen driver of the Huawei Play 5C phone. Due to the lack of parameter checking in the TP touchscreen driver, an attacker who gains root privileges and exploits the vulnerability can construct...

Privilege elevation vulnerability in TrustZone driver for some Huawei phones

Huawei P9, P9 Lite, P8 Lite are Huawei smartphones. An elevation of privilege vulnerability exists in the TrustZone driver of some Huawei phones. An attacker may trick users into installing a malicious application, and the application can exploit the vulnerability to send specific parameters to t...

Wyse Zero Client Unable to Log On to StoreFront

Wyse Zero Clients are unable to log on to StoreFront. The following error is received: Start roaming account , Citrix Sign-On failed This issue occurs after rebooting one of the devices. The devices that are not yet rebooted are working without any issues...

Integer Overflow Vulnerability in Some Huawei Switches

Huawei CloudEngine 12800, CloudEngine 5800, CloudEngine 6800, CloudEngine 7800, CloudEngine 8800 are Huawei's switch devices. An integer overflow vulnerability exists in some of Huawei's switches. Due to the lack of checksums on specific fields in IPFPM messages, an unauthenticated remote attacke...

Buffer overflow vulnerability in HIFI driver for multiple Huawei phones

Huawei Mate 8, Mate S, P8, P9 are smartphones from Huawei. A buffer overflow vulnerability exists in the HIFI driver of multiple Huawei phones. Due to the lack of parameter checking in the HIFI driver of certain Huawei phones, an attacker could exploit the vulnerability to construct specific...

CVE-2016-6747

A denial of service vulnerability in Mediaserver in Android before 2016-11-05 could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High due to the possibility of remote denial of service. Android ID: A-31244612. References: NVIDIA...

CVE-2016-6714

A remote denial of service vulnerability in Mediaserver in Android 6.x before 2016-11-01 and 7.0 before 2016-11-01 could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High due to the possibility of remote denial of service. Android ID:...

CVE-2016-6713

A remote denial of service vulnerability in Mediaserver in Android 6.x before 2016-11-01 and 7.0 before 2016-11-01 could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High due to the possibility of remote denial of service. Android ID:...

Denial of service

A denial of service vulnerability in the Input Manager Service in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-11-01, and 7.0 before 2016-11-01 could enable a local malicious application to cause the device to continually reboot. This issue is rated as Moderat...

Denial of service

A denial of service vulnerability in Proxy Auto Config in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-11-01, and 7.0 before 2016-11-01 could enable a remote attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as...