CVE-2016-10436

In Android before 2018-04-05 or earlier security patch level on Qualcomm Small Cell SoC, Snapdragon Mobile, and Snapdragon Wear FSM9055, IPQ4019, IPQ8064, MDM9206, MDM9607, MDM9635M, MDM9640, MDM9650, MSM8909W, QCA4531, QCA9980, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD...

CVE-2016-10422

In Android before 2018-04-05 or earlier security patch level on Qualcomm Small Cell SoC, Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear FSM9055, IPQ4019, MDM9206, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 617, ...

CVE-2016-10438

CVE-2016-10438 is an information exposure issue in Android devices affected by Qualcomm Small Cell SoC, Snapdragon Mobile and Wear FSM9055, IPQ4019/IPQ8064, and various SD/SoC families. The root cause is logging of debug statements using %p, which could expose kernel or driver pointers. The repor...

CVE-2016-10422

CVE-2016-10422 affects Android devices (Qualcomm Small Cell SoC, Snapdragon lines, SDx platforms) with an underlying issue described as improper access control in a system call that leads to unauthorized access. The entry documents this vulnerability across multiple Qualcomm/Android components an...

CVE-2016-10436

CVE-2016-10436 affects Android on Qualcomm/Qualcomm-based SoCs (e.g., Qualcomm Small Cell SoC, Snapdragon Mobile and Wear FSM9055; IPQ4019/IPQ8064/MDM92xx/MSM89xx/SD family and related SDX20 devices). The issue is improper input validation on a read path that leads to memory corruption in the aff...

CVE-2016-10450

CVE-2016-10450 describes a potential stack-based buffer overflow in the Thermal service that could lead to root compromise on Android devices with Qualcomm Small Cell SoC, Snapdragon Mobile, and Snapdragon Wear/SDx platforms (e.g., FSM9055, MDM9xx, MSM89xx, SD 210–835, etc.). The concrete affecte...

CVE-2016-10450

In Android before 2018-04-05 or earlier security patch level on Qualcomm Small Cell SoC, Snapdragon Mobile, and Snapdragon Wear FSM9055, MDM9206, MDM9607, MDM9635M, MDM9640, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD...

Description of Windows Small Business Server 2008 Update Rollup 4

Description of Windows Small Business Server 2008 Update Rollup 4 INTRODUCTION Windows Small Business Server Windows SBS 2008 Update Rollup 4 is now available. This rollup package addresses the following issues in Windows SBS 2008. Issue 1 You may be unable to rename and to join a computer that i...

Microsoft Office: Automatically receive small updates to improve reliability

This test checks the setting for policy OpenVAS Vulnerability Test $Id: office2013autosmallupdates.nasl 11843 2018-10-11 14:33:21Z emoss $ Check value for Automatically receive small updates to improve reliability Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH,...

CVE-2018-5507

On F5 BIG-IP versions 13.0.0, 12.1.0-12.1.3.1, 11.6.1-11.6.2, or 11.5.1-11.5.5, vCMP guests running on VIPRION 2100, 4200 and 4300 series blades cannot correctly decrypt ciphertext from established SSL sessions with small MTU...

This Week in Security News: Corporate Vulnerability and Cyber Threats

Welcome to our weekly roundup, where we share what you need to know about the cybersecurity news and events that happened over the past few days. This week, a new cyber threat report reveals the vulnerability of small businesses and a new ransomware could infect your software to steal your...

rsvp.smallbusinessexpo.co XSS vulnerability

Open Bug Bounty ID: OBB-586634 Description| Value ---|--- Affected Website:| rsvp.smallbusinessexpo.co Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

[SECURITY] Fedora 27 Update: sblim-sfcb-1.4.9-9.fc27

Small Footprint CIM Broker sfcb is a CIM server conforming to the CIM Operations over HTTP protocol. It is robust, with low resource consumption and therefore specifically suited for embedded and resource constrained environments. sfcb supports providers written against the Common Manageability...

Schools Alert Management Script 2.0.2 SQL Injection

Exploit Title: Schools Alert Management Script - 2.0.2 - Authentication Bypass Date: 07.02.2018 Vendor Homepage: https://www.phpscriptsmall.com/ Software Link: https://www.phpscriptsmall.com/product/schools-alert-management-system/ Category: Web Application Exploit Author: Prasenjit Kanti Paul We...

[SECURITY] Fedora 27 Update: mupdf-1.12.0-5.fc27

MuPDF is a lightweight PDF viewer and toolkit written in portable C. The renderer in MuPDF is tailored for high quality anti-aliased graphics. MuPDF renders text with metrics and spacing accurate to within fractions of a pixel for the highest fidelity in reproducing the look of a printed page on...

Learning and Examination Management System - Cross-Site Scripting Vulnerability

Exploit for php platform in category web applications Exploit Title: Learning and Examination Management System Script 2.3.1 – Stored XSS Vendor Homepage: https://www.phpscriptsmall.com/ Software Link: https://www.phpscriptsmall.com/product/learning-examination-management-system/ Category: Web...

February 14, 2018 – Morning Cyber Coffee Headlines – “Valentine’s Day” Edition

Good morning! Sit with Carbon Black this morning over a cup of coffee or tea and browse a few industry headlines to get the day started. We’ve got just enough information below to get you through that first cup…enjoy! February 14 2018 - Headlines Carbon Black in the News: Endpoint security suites...

News Website Script 2.0.4 SQL Injection

Exploit Title:News Website Script - SQL Injection Error Based Google Dork: NA Date: 12.02.2018 Exploit Author: Varun Bagaria Vendor Homepage: https://www.phpscriptsmall.com/ Software Link: http://under24usd.com/demo/newstoday/index.php Version: 2.0.4 Tested on: Windows 7 Category: Webapps CVE : N...

Cisco Small Business RV13x Series Router Detection (HTTP)

HTTP based detection of Cisco Small Business RV13x Series Router. This VT has been deprecated and replaced by the more generic VT SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Readymade Video Sharing Script 3.2 - 'search' SQL Injection

Exploit Title: Readymade Video Sharing Script - SQL Injection Error Based Google Dork: NA Date: 10.02.2018 Exploit Author: Varun Bagaria Vendor Homepage: https://www.phpscriptsmall.com/ Software Link: https://www.phpscriptsmall.com/product/php-video-sharing-script/ Version: 3.2 Tested on: Windows...