Allwinner 3.4 Legacy Kernel Local Privilege Escalation

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require "msf/core" class MetasploitModule "Allwinner 3.4 Legacy Kernel Local Privilege Escalation", "Description" = %q This module attempts to exploit a debug backdoor...

CVE-2016-2065

The CVE-2016-2065 entry concerns the MSM QDSP6 audio driver (sound/soc/msm/qdsp6v2/msm-audio-effects-q6-v2.c) in the Linux kernel 3.x, used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices. The flaw arises from incorrect use of a parameters pointer when handling an ioctl...

Integer overflow

Integer overflow in sound/soc/msm/qdsp6v2/q6lsm.c in the Qualcomm components in Android before 2016-08-05 on Nexus 6 devices allows attackers to gain privileges via a crafted application, aka Android internal bug 28813987 and Qualcomm internal bug CR792367...

Allwinner 3.4 Legacy Kernel Local Privilege Escalation

This module attempts to exploit a debug backdoor privilege escalation in Allwinner SoC based devices. Vulnerable Allwinner SoC chips: H3, A83T or H8 which rely on Kernel 3.4. Vulnerable OS: all OS images available for Orange Pis, any for FriendlyARM's NanoPi M1, SinoVoip's M2+ and M3, Cuebietech'...

COSO Framework for Service Organizations and SOC Reporting (Part 3 of 3)

In part 1 of this series, we discussed the recent changes to the COSO framework and the overall impact that the updated framework has on service organizations that receive Service Organization Controls SOC reports...

Would Coalfire Clients benefit from membership with the PCAOB?

Coalfire Controls, LLC Coalfire is a registered Certified Public Accounting CPA firm registered with the American Institute of Certified Public Accountants AICPA and the Colorado State Board of Accountancy, as required to issue Service Organization Control SOC attestation reports in accordance wi...

COSO Framework for Service Organizations and SOC Reporting (Part 2 of 3)

Every SOC report whether it is a SOC 1, SOC 2 or SOC 3 should include information about the service organizations risk assessment process. Risk assessment can take many forms and there is no "one size fits all" format. Risk assessment is intended to be an evolutionary process, designed to meet th...

COSO Framework for Service Organizations and SOC Reporting (Part 1 of 3)

One of the most important reference tools that companies use to establish and evaluate their internal controls is the Committee of Sponsoring Organizations COSO Internal Control - Integrated Framework. Initially published in 1992 the 1992 Framework, the COSO framework has been the most widely use...

CVE-2014-7115

CVE-2014-7115 concerns the Android app “The Letters to God - soc. network” (package com.wPismakBoguLetterstoGod) version 0.1, where SSL certificate validation is not performed. This allows a man-in-the-middle to spoof servers and potentially access sensitive information via a crafted certificate....

MODACOM URoad-5000 1450 - Remote Command Execution/Backdoor

No description provided by source. ================================================ == Alex Stanev Security Advisory 4 @31.05.2011 == == http://sec.stanev.org == ================================================ PRODUCT URoad-5000 VENDOR MODACOM http://www.modacom.co.kr VERSIONS AFFECTED v1450 CLA...

Praim Ino SoC I9000 Series瘦客户端"browsed"命令注入漏洞

Praim Ino SoC I9000 Series Thin Clients是一款瘦客户端产品。 Praim Ino SoC I9000 Series Thin Clients相关"browsed"应用没有正确过滤用户提交的输入，允许攻击者向UDP 1680端口发送特制报文，可注入和执行任意shell命令。 0 Praim Ino SoC I9000 Series Thin Clients 目前没有详细解决方案： http://www.praim.com/en/products/solution-thin-client/ino-soc-series1319idp/...

MODACOM URoad-5000 1450 - Remote Command Execution Backdoor Access

MODACOM URoad-5000 1450 - Remote Command Execution Backdoor Access ================================================ == Alex Stanev Security Advisory 4 @31.05.2011 == == http://sec.stanev.org == ================================================ PRODUCT URoad-5000 VENDOR MODACOM...

MODACOM URoad-5000 1450 Command Execution

================================================ == Alex Stanev Security Advisory 4 @31.05.2011 == == http://sec.stanev.org == ================================================ PRODUCT URoad-5000 VENDOR MODACOM http://www.modacom.co.kr VERSIONS AFFECTED v1450 CLASS Remote command execution/Backdoo...

MODACOM URoad-5000 v1450 Remote Command Execution/Backdoor

Exploit for hardware platform in category remote exploits ================================================ == Alex Stanev Security Advisory 4 @31.05.2011 == == http://sec.stanev.org == ================================================ PRODUCT URoad-5000 VENDOR MODACOM http://www.modacom.co.kr...

Eircom Netopia Router Backdoor

++++++++++++++++++++ FULL DISCLOSURE OF EIRCOM NETOPIA ROUTER BACKDOOR VULNERABILITY! Yes, failcom suck, and they did it again. DERP! They gave us a nice TELNET shell into their routers, and now we can mess about 'cos it spawns a root shell by magic! and magic is the actual command! They also lef...

Windows 8 to run on smartphone chips !

In his keynote speech at the Consumer Electronics Show CES in Las Vegas, Microsoft CEO Steve Ballmer revealed that Windows 8, the next version of Microsoft's desktop operating system, will be able to run on much smaller mobile devices like phones. He revealed that Windows 8 will support...

openSUSE Security Update : seamonkey (seamonkey-3428)

Mozilla SeaMonkey was updated to 2.0.10 to fix one critical security issue. MFSA 2010-73 / CVE-2010-3765: Morten Krkvik of Telenor SOC reported an exploit targeting particular versions of Firefox 3.6 on Windows XP that Telenor found while investigating an intrusion attempt on a customer network...

Mozilla Foundation Security Advisory 2010-73

Mozilla Foundation Security Advisory 2010-73 Title: Heap buffer overflow mixing document.write and DOM insertion Impact: Critical Announced: October 27, 2010 Reporter: Morten Krkvik Products: Firefox, Thunderbird, SeaMonkey Fixed in: Firefox 3.6.12 Firefox 3.5.15 Thunderbird 3.1.6 Thunderbird...

CVE-2010-0928

OpenSSL 0.9.8i on the Gaisler Research LEON3 SoC on the Xilinx Virtex-II Pro FPGA uses a Fixed Width Exponentiation FWE algorithm for certain signature calculations, and does not verify the signature before providing it to a caller, which makes it easier for physically proximate attackers to...

Design/Logic Flaw

OpenSSL 0.9.8i on the Gaisler Research LEON3 SoC on the Xilinx Virtex-II Pro FPGA uses a Fixed Width Exponentiation FWE algorithm for certain signature calculations, and does not verify the signature before providing it to a caller, which makes it easier for physically proximate attackers to...