Google Android Proxy Auto Config Denial of Service Vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA, of which Proxy Auto-Config PAC is a Script-like component. A denial of service vulnerability exists in PAC in Android. A remote attacker can exploit this vulnerability to cause a...

Android Proxy Auto Config (PAC) Crash Vulnerability

Android devices can be crashed forcing a halt and then a soft reboot by downloading a large proxy auto config PAC file when adjusting the Android networking settings. This can also be exploited by an MITM attacker that can intercept and replace the PAC file. However, the bug is mitigated by...

Google Android Mediaserver Denial of Service Vulnerability (CNVD-2016-11050)

Android is a Linux-based open source operating system developed by Google and the Open Handset Alliance OHA, of which Mediaserver is a multimedia service component. A denial of service vulnerability exists in Google Android Mediaserver. A remote attacker can exploit the vulnerability to cause the...

Google Android Mediaserver Denial of Service Vulnerability (CNVD-2016-11048)

Android is a Linux-based open source operating system developed by Google and the Open Handset Alliance OHA, of which Mediaserver is a multimedia service component. A denial of service vulnerability exists in Google Android Mediaserver. A remote attacker can exploit the vulnerability to cause the...

Google Android Mediaserver Denial of Service Vulnerability (CNVD-2016-11047)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handset Alliance OHA in the U.S. Mediaserver is one of the multimedia service components. A denial of service vulnerability exists in Google Android Mediaserver. A remote attacker can exploit the...

Google Android Mediaserver Denial of Service Vulnerability (CNVD-2016-11049)

Android is a Linux-based open source operating system developed by Google and the Open Handset Alliance OHA, of which Mediaserver is a multimedia service component. A denial of service vulnerability exists in Google Android Mediaserver. A remote attacker can exploit the vulnerability to cause the...

Microsoft Windows - LSASS SMB NTLM Exchange Null-Pointer Dereference (MS16-137)

MS16-137: LSASS Remote Memory Corruption Advisory Title: LSASS SMB NTLM Exchange Remote Memory Corruption Version: 1.0 Issue type: Null Pointer Dereference Authentication: Pre-Authenticated Affected vendor: Microsoft Release date: 8/11/2016 Discovered by: Laurent Gaffié Advisory by: Laurent Gaffi...

Boot Signal fails while reboot and shutdown signal works properly

The machines created from Streaming VM setup wizard are unable to boot when boot signal is sent from the PVS console. If we send the reboot or shutdown signal it reboots or shuts down the machines...

Huawei Mate 8 Local Denial of Service Vulnerability

Huawei Mate 8 is a smartphone from the Chinese company Huawei. A local denial of service vulnerability exists in multiple versions of the huawei mate 8. A local attacker can exploit the vulnerability to reboot the device, resulting in a denial of service...

CVE-2016-7160

A vulnerability on Samsung Mobile M6.0 devices exists because external access to SystemUI activities is not properly restricted, leading to a SystemUI crash and device restart, aka SVE-2016-6248...

Resource Consumption Vulnerability in Multiple Schneider Electric Products

Schneider Electric Magelis HMI Magelis GTO Advanced Optimum panels and so on are the HMI human-machine panel series products of France Schneider Electric Schneider Electric. A resource depletion vulnerability exists in multiple Schneider Electric products. An attacker could exploit the...

Denial of Service Vulnerability in Multiple Schneider Electric Products

Schneider Electric Magelis HMI Magelis GTO Advanced Optimum panels and so on are the HMI human-machine panel series products of France Schneider Electric Schneider Electric. A denial of service vulnerability exists in multiple Schneider Electric products. An attacker can exploit the vulnerability...

SunellSecurity NVR / Camera - Denial Of Service

Exploit for hardware platform in category dos / poc Exploit Title: SunellSecurity NVR / Cams - Buffer overflow in CGI Date: 11.2.2016 Exploit Author: qwsj Vendor Homepage: https://github.com/qwsj Version: 1.6.08-09 / 2.0.06-08 Tested on: Windows / Linux Bug in CGI scrypt's for develop. Web servic...

SunellSecurity NVR / Camera - Denial of Service

Exploit Title: SunellSecurity NVR / Cams - Buffer overflow in CGI Date: 11.2.2016 Exploit Author: qwsj Vendor Homepage: https://github.com/qwsj Version: 1.6.08-09 / 2.0.06-08 Tested on: Windows / Linux Bug in CGI scrypt's for develop. Web service buffer overflow and leading to a stop web service,...

InfraPower PPS-02-S Q213V1 - Unauthenticated Remote Root Command Execution Vulnerability

Exploit for php platform in category web applications InfraPower PPS-02-S Q213V1 Unauthenticated Remote Root Command Execution Vendor: Austin Hughes Electronics Ltd. Product web page: http://www.austin-hughes.com Affected version: Q213V1 Firmware: V2395S Fixed version: Q216V3 Firmware:...

Amazon Linux AMI : kernel (ALAS-2016-757) (Dirty COW)

A race condition was found in the way the Linux kernel's memory subsystem handled the copy-on-write COW breakage of private read-only memory mappings. An unprivileged local user could use this flaw to gain write access to otherwise read-only memory mappings and thus increase their privileges on t...

Security Bypass Vulnerabilities in Multiple Moxa Products

Moxa ioLogik E1210 and others are Moxa's remote Ethernet I/O products that provide bridge monitoring. A security vulnerability exists in several Moxa products. A remote attacker could exploit the vulnerability to execute arbitrary code, modify parameters and settings, or reboot the device...

Critical: kernel

Issue Overview: A race condition was found in the way the Linux kernel's memory subsystem handled the copy-on-write COW breakage of private read-only memory mappings. An unprivileged local user could use this flaw to gain write access to otherwise read-only memory mappings and thus increase their...

NETGATE AMITI Antivirus 23.0.305 Privilege Escalation

Exploit Title: NETGATE AMITI Antivirus Unquoted Service Path Privilege Escalation Date: 15/10/2016 Author: Amir.ght Vendor Homepage: http://www.netgate.sk/ Software Link: http://www.netgate.sk/download/download.php?id=11 version : build 23.0.305 Latest Tested on: Windows 7 AMITI Antivirus install...

Stack overflow security vulnerability in Huawei phone video driver

The video driver for Huawei phones is a software that provides video capabilities. A stack overflow security vulnerability exists in the video driver for Huawei phones. Successful exploitation of the vulnerability by an attacker could result in a system reboot or user privilege elevation...