CVE-2017-12223

Cisco IR800 Integrated Services Router Software ROMMON has an input validation vulnerability in ROMMON code that could let an unauthenticated, local attacker boot an unsigned Hypervisor via console access, modify ROMMON variables, and execute arbitrary code to install malicious Hypervisor firmwar...

CVE-2017-12223

A vulnerability in the ROM Monitor ROMMON code of Cisco IR800 Integrated Services Router Software could allow an unauthenticated, local attacker to boot an unsigned Hypervisor on an affected device and compromise the integrity of the system. The vulnerability is due to insufficient sanitization o...

Cisco IR800 Integrated Services Router ROM Monitor Input Validation Vulnerability

A vulnerability in the ROM Monitor ROMMON code of Cisco IR800 Integrated Services Router Software could allow an unauthenticated, local attacker to boot an unsigned Hypervisor on an affected device and compromise the integrity of the system. The vulnerability is due to insufficient sanitization o...

QEMU IDE disk and CD/DVD-ROM virtual machine implementation denial of service vulnerability

QEMU is a suite of analog processor software. A security vulnerability in the QEMU IDE disk and CD/DVD-ROM virtual machine implementation support allows local attackers to exploit the vulnerability by submitting a special request that crashes the application...

DIGISOL DG-BG1100N ROM-0 Backup File Disclosure

Exploit Title : ROM-0 Backup File Disclosure on DIGISOL Date : 24-08-2017 Exploit Author : Sudin nk Vendor Homepage: http://www.digisol.com Tested Routers : DG-BG1100N ADSL 2/2+ Modem Wifi Router Tested on : Parrotsec x8664 ROM-0 Backup File Disclosure on DIGISOL A dangerous vulnerability present...

CVE-2017-8850

CVE-2017-8850 covers OnePlus OTA downgrade/crossover vulnerabilities caused by lenient updater-scripts and shared OTA keys across OxygenOS and HydrogenOS, enabling cross-flash of OTAs and MiTM abuse of the update channel. The issue affects OnePlus devices including OnePlus One, X, 2, 3, and 3T, w...

All OnePlus Devices Vulnerable to Remote Attacks Due to 4 Unpatched Flaws

There is a bad news for all OnePlus lovers. A security researcher has discovered four vulnerabilities that affect all OnePlus handsets, including One, X, 2, 3 and 3T, running the latest versions of OxygenOS 4.1.3 worldwide and below, as well as HydrogenOS 3.0 and below for Chinese users. Damn, I ...

Broadcom: Stack buffer overflow when parsing CCKM reassociation response(CVE-2017-6957)

Broadcom produces Wi-Fi HardMAC SoCs which are used to handle the PHY and MAC layer processing. These chips are present in both mobile devices and Wi-Fi routers, and are capable of handling many Wi-Fi related events without delegating to the host OS. In order to allow fast roaming between access...

Debian Security Advisory DSA 3823-1 (eject - security update)

Ilja Van Sprundel discovered that the dmcrypt-get-device helper used to check if a given device is an encrypted device handled by devmapper, and used in eject, does not check return values from setuid and setgid when dropping privileges. OpenVAS Vulnerability Test $Id: deb3823.nasl 6607 2017-07-0...

CVE-2016-9447

The ROM mappings in the NSF decoder in gstreamer 0.10.x allow remote attackers to cause a denial of service out-of-bounds read or write and possibly execute arbitrary code via a crafted NSF music file...

CVE-2016-9447

CVE-2016-9447 affects the GStreamer 0.10.x NSF decoder: a crafted NSF music file can trigger an out-of-bounds read/write, leading to denial of service and possibly arbitrary code execution. The connected documents confirm the affected component and impact but do not provide a remediation or patch...

DEBIAN-CVE-2015-8818

The cpuphysicalmemorywriterominternal function in exec.c in QEMU aka Quick Emulator does not properly skip MMIO regions, which allows local privileged guest users to cause a denial of service guest crash via unspecified vectors...

Cyanogen Shutting Down All Services; No More Android ROM Updates

A bittersweet Christmas and New Year for users and fans of the most popular custom Android ROM, Cyanogen OS. Cyanogen that tried and failed to kill Google's Android operating system is now shutting down the custom services that it provides to phones that run its Cyanogen OS as we know it and the...

Build Your Own PwnPhone

Build Your Own PwnPhone We’ll attempt to show you how to build your own Pwn Phone running the Kali operating system and our AOPP Android Open Pwn Project image. Let’s get cracking… Flashing the Phone 1. Download the Recovery image for your device: https://twrp.me/Devices 2. Connect the device to...

ROM Manager - Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application ROM Manager published at the 'play' market has multiple vulnerabilities...

Multiple Routers Rom-0 Scanning Attempt

A vulnerability scanning tool is designed to gather information from servers. Such scans might indicate an attempt to disclose sensitive information. Remote attackers can use the Rom-0 vulnerability to get user credentials and other sensitive information...

Maru OS — Android ROM that Turns into Debian Linux When Connected to a PC

Good News for Linux Techno Freaks! Do you usually mess with your Android smartphone by trying out the continual ins and outs of various apps and custom ROMs? Then this news would be a perfect pick for you! What If, you can effectively carry a Linux computer in your pocket? Hereby introducing a ne...

SUSE-SU-2016:0010-1 Security update for kvm

This update for kvm fixes the following issues: Security issues fixed: - CVE-2015-7512: The receive packet size is now checked in the emulated pcnet driver, eliminating buffer overflow and potential security issue by malicious guest systems. bsc957162 - CVE-2015-8345: A infinite loop in processin...

PT-2016-7988

Name of the Vulnerable Software and Affected Versions TiEmu version 3.03-nogdb+dfsg-3 Description A buffer overflow exists in the ROM parameter handling. Local attackers can provide an oversized ROM parameter to the tiemu command-line interface to overflow the stack buffer and overwrite the...

PT-2016-4036 · Qemu Team +2 · Qemu +2

Name of the Vulnerable Software and Affected Versions: QEMU affected versions not specified Description: The issue is related to the cpu physical memory write rom internal function in exec.c, which does not properly skip MMIO regions. This allows local privileged guest users to cause a denial of...