CVE-2018-20808

An XSS issue has been found with rd.cgi in Pulse Secure Pulse Connect Secure 8.3RX before 8.3R3 due to improper header sanitization. This is not applicable to 8.1RX...

CVE-2019-6452: Insufficiently Protected Credentials

Kyocera Command Center RX TASKalfa4501i and TASKalfa5052ci allows remote attackers to abuse the Test button in the machine address book to obtain a cleartext FTP or SMB password...

Tap 'n Ghost Attack Creatively Targets Android Devices

Researchers have created a novel proof-of-concept PoC attack named Tap ‘n Ghost, which targets Near Field Communication NFC-enabled Android smartphones. This allows an attacker to take control of a target phone simply by tricking the victim into placing their handset on a specially crafted surfac...

PT-2019-5423 · Linux +5 · Linux Kernel +5

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.0.6 Description: An issue in the Linux kernel's network subsystem is related to errors in pointer counting in the functions rx queue add kobject and netdev queue add kobject in net/core/net-sysfs.c. This issue...

Open redirect

Druide Antidote RX, HD, 8 before 8.05.2287, 9 before 9.5.3937 and 10 before 10.1.2147 allows remote attackers to steal NTLM hashes or perform SMB relay attacks upon a direct launch of the product, or upon an indirect launch via an integration such as Chrome, Firefox, Word, Outlook, etc. This occu...

CVE-2019-9565

CVE-2019-9565 affects Druide Antidote RX, HD, and older builds (8 before 8.05.2287, 9 before 9.5.3937, 10 before 10.1.2147). The issue enables remote attackers to steal NTLM hashes or perform SMB relay attacks when the product is launched directly or via integrated apps (Chrome, Firefox, Word, Ou...

CVE-2018-16880

A flaw was found in the Linux kernel's handlerx function in the vhostnet driver. A malicious virtual guest, under specific conditions, can trigger an out-of-bounds write in a kmalloc-8 slab on a virtual host which may lead to a kernel memory corruption and a system panic. Due to the nature of the...

DEBIAN-CVE-2018-16880

A flaw was found in the Linux kernel's handlerx function in the vhostnet driver. A malicious virtual guest, under specific conditions, can trigger an out-of-bounds write in a kmalloc-8 slab on a virtual host which may lead to a kernel memory corruption and a system panic. Due to the nature of the...

PT-2019-1545 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel versions from v4.16 and newer Description: A flaw in the Linux kernel's handle rx function in the vhost net driver can be exploited by a malicious virtual guest to trigger an out-of-bounds write in a kmalloc-8 slab on a virtual...

Buffer overflow

In all android releasesAndroid for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, Possible buffer overflow in TX and RX FIFOs of microcontroller in camera subsystem used to exchange commands and messages between Micro FW and CPP driver...

PT-2018-10934

Name of the Vulnerable Software and Affected Versions Android for MSM affected versions not specified Firefox OS for MSM affected versions not specified QRD Android affected versions not specified Description The issue is related to a possible buffer overflow in the TX and RX FIFOs of a...

CVE-2018-11986: Improper Restriction of Operations within the Bounds of a Memory Buffer

In all android releasesAndroid for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, Possible buffer overflow in TX and RX FIFOs of microcontroller in camera subsystem used to exchange commands and messages between Micro FW and CPP driver...

PT-2018-12763

Name of the Vulnerable Software and Affected Versions bcmdhd4358 Wi-Fi driver affected versions not specified Description The issue is related to an out-of-bounds array access in the dhd rx frame function within the dhd linux.c file of the bcmdhd4358 Wi-Fi driver. This occurs due to improper...

CVE-2018-16948: Exposure of Sensitive Information to an Unauthorized Actor

An issue was discovered in OpenAFS before 1.6.23 and 1.8.x before 1.8.2. Several RPC server routines did not fully initialize their output variables before returning, leaking memory contents from both the stack and the heap. Because the OpenAFS cache manager functions as an Rx server for the AFSC...

rx-buy.com XSS vulnerability

Open Bug Bounty ID: OBB-628579 Description| Value ---|--- Affected Website:| rx-buy.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

The vulnerability of the get_pipe function in the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the getpipe function in the Linux operating system’s drivers/usb/usbip/stubrx.c file relates to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause service failure by using a specially crafted USBIP package...

tcpdump: Buffer over-read in print-rx.c:ubik_print() in Rx protocol parser

The Rx protocol parser in tcpdump before 4.9.2 has a buffer over-read in print-rx.c:ubikprint...

CVE-2017-9705

CVE-2017-9705 affects Android for MSM, Firefox OS for MSM, and QRD Android builds using CAF Linux kernel, where the G-Link PKT driver’s concurrent rx notifications and read() operations can trigger a double-free due to missing locking. This can cause list_del() and list_add() to overlap and corru...

CVE-2017-9705

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, concurrent rx notifications and read operations in the G-Link PKT driver can result in a double free condition due to missing locking resulting in listdel and listadd overlapping and...

Rx Tera 2.0 Cross Site Request Forgery

============================================================================================================================ | Title : Rx Tera 2.0 CSRF Vulnerability | | Author : indoushka | | email : [email protected] | | Tested on : windows 10 FranASSais V.Pro | | Version : 2.0 | | Vendo...