Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2019-1182)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openssl: Side-channel vulnerability on SMT/Hyper-Threading architectures (PortSmash)

A microprocessor side-channel vulnerability was found on SMT e.g, Hyper-Threading architectures. An attacker running a malicious process on the same core of the processor as the victim process can extract certain secret information...

openssl: Side-channel vulnerability on SMT/Hyper-Threading architectures (PortSmash)

A microprocessor side-channel vulnerability was found on SMT e.g, Hyper-Threading architectures. An attacker running a malicious process on the same core of the processor as the victim process can extract certain secret information...

Sony PlayStation Vita (PS Vita) - Trinity: PSP Emulator Escape

Trinity is a fully chained exploit for the PS Vita™ consisting of six unique vulnerabilities. It is based on a decade of knowledge and research. The source code of Trinity can be found here. Table of Contents - Table of Contents - Introduction - MIPS Kernel Exploit Type Confusion Double-fetch Rac...

FreeBSD : dovecot -- Buffer overflow reading extension header (7862213c-5152-11e9-8b26-a4badb296695)

Aki Tuomi reports : Vulnerability Details : When reading FTS or POP3-UIDL header from dovecot index, the input buffer size is not bound, and data is copied to target structure causing stack overflow. Risk : This can be used for local root privilege escalation or executing arbitrary code in doveco...

Instagram Feed <= 1.11.3 - Unspecified Issues

The Smash Balloon Social Photo Feed WordPress plugin was affected by an Unspecified Issues security vulnerability...

Instagram Feed <= 1.5.1 - Cross-Site Scripting (XSS)

The Smash Balloon Social Photo Feed WordPress plugin was affected by a Cross-Site Scripting XSS security vulnerability...

QEMU - NBD Server Long Export Name Stack Buffer Overflow

Introduced in commit f37708f6b8 2.10. The NBD spec says a client can request export names up to 4096 bytes in length, even though they should not expect success on names longer than 256. However, qemu hard-codes the limit of 256, and fails to filter out a client that probes for a longer name; the...

QEMU - NBD Server Long Export Name Stack Buffer Overflow

Exploit for linux platform in category dos / poc Introduced in commit f37708f6b8 2.10. The NBD spec says a client can request export names up to 4096 bytes in length, even though they should not expect success on names longer than 256. However, qemu hard-codes the limit of 256, and fails to filte...

Internet Bug Bounty: CVE-2017-13089 wget stack smash

The http.c:skipshortbody function is called in some circumstances, such as when processing redirects. When the response is sent chunked in wget before 1.19.2, the chunk parser uses strtol to read each chunk's length, but doesn't check that the chunk length is a non-negative number. The code then...

Smash Hit - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Smash Hit published at the 'play' market has multiple vulnerabilities...

Smash Tennis 3D - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Smash Tennis 3D published at the 'play' market has multiple vulnerabilities...

SMASH Monsters - City Rampage - BSD license, Base64 encoded String, Customized SSL vulnerabilities

HackApp vulnerability scanner discovered that application SMASH Monsters - City Rampage published at the 'play' market has multiple vulnerabilities...

Road Smash: Crazy Racing! - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Road Smash: Crazy Racing! published at the 'play' market has multiple vulnerabilities...

Road Smash 2: Hot Pursuit - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Road Smash 2: Hot Pursuit published at the 'play' market has multiple vulnerabilities...

Smash Bandits Racing - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Smash Bandits Racing published at the 'play' market has multiple vulnerabilities...

Sugar Smash - Dangerous filesystem permissions, Insecure KeyStore, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Sugar Smash published at the 'play' market has multiple vulnerabilities...

Cookie Smash - Customized SSL, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application Cookie Smash published at the 'play' market has multiple vulnerabilities...

Smash Glass - Dynamic Code Loading, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application Smash Glass published at the 'play' market has multiple vulnerabilities...

Super Smash Adv - Battle Arena - Dangerous filesystem permissions, Insecure KeyStore vulnerabilities

HackApp vulnerability scanner discovered that application Super Smash Adv - Battle Arena published at the 'play' market has multiple vulnerabilities...