4137 matches found
The vulnerability of the Android operating system, allowing a hacker to execute arbitrary code
The vulnerability of the Broadcom Wi-Fi driver for the Android operating system is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to execute arbitrary code within the operating system’s kernel, using a special application...
The vulnerability of the Android operating system, allowing a hacker to execute arbitrary code
The vulnerability of the MediaTek camera driver for the Android operating system is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to execute arbitrary code within the operating system kernel using a special application...
Denial Of Service (DoS)
github.com/minio/minio is vulnerable to denial of service DoS attacks. A malicious user can pass special a file to with special characters in its name to cause an infinite loop in the system. This can lead to the system running out of resources and crashing...
TP-Link C2 and C20i Security Bypass Vulnerability
The TP-Link C2 and C20i are router devices from China P&L. A security bypass vulnerability exists in the TP-Link C2 and C20i, which can be exploited by remote attackers to submit a special request to bypass security restrictions and perform unauthorized operations...
EulerOS 2.0 SP1 : mercurial (EulerOS-SA-2016-1019)
According to the versions of the mercurial package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - It was discovered that Mercurial failed to properly check Git sub-repository URLs. A Mercurial repository that includes a Git sub-repository...
BLF-Tech LLC VisualView HMI Local Code Execution Vulnerability
BLF-Tech LLC VisualView HMI is a human-machine interface interaction program from BLF-Tech LLC. BLF-Tech LLC VisualView HMI has a security vulnerability that allows a local attacker to exploit the vulnerability special request to execute arbitrary code and elevate privileges...
Intel Security Anti-Virus Engine Security Bypass Vulnerability
Intel Security Anti-Virus Engine is an anti-virus engine for multiple operating systems that detects and removes viruses, spyware, Trojans, and worms in real time, ensuring comprehensive network protection for desktops and laptops. A security vulnerability exists in Intel Security AVE. A local...
DEBIAN-CVE-2016-6333
Cross-site scripting XSS vulnerability in the CSS user subpage preview feature in MediaWiki before 1.23.15, 1.26.x before 1.26.4, and 1.27.x before 1.27.1 allows remote attackers to inject arbitrary web script or HTML via the edit box in Special:MyPage/common.css...
Google gRPC Heap Buffer Overflow Vulnerability
gRPC is an open source RPC framework . A heap buffer overflow vulnerability exists in the gprfree function within Google gRPC core/lib/support/alloc.c, which allows remote attackers to exploit the vulnerability to submit a special request to execute arbitrary code...
Phabricator: The special code in editor has no Authority control and can lead to Information Disclosure
Here is your keyword:mongoose Details: - Summary: Uploaded file will be showed as a special code Fxxx in Phabricator editor,but it has no Authority control. - Reproduce steps: 1.Open two different browsers to simulate two different users 2.browser A:login as user "toma" 3.browser B:login a user...
Django two url jump vulnerability analysis: CVE-2017-7233&7234-vulnerability warning-the black bar safety net
! Django official News&Event in the 4 on 4, released a security update that fixes two URL jump loopholes, one is the urlparse pot, the other by long Dinh tech security researcher phithon report, are very beautiful. Because there are replicate Django vulnerability of habit, the evening pumping up...
Microsoft Windows Kernel win32k.sys - Multiple Bugs in the NtGdiGetDIBitsInternal System Call Exploi
Exploit for windows platform in category dos / poc Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1078 We have discovered two bugs in the implementation of the win32k!NtGdiGetDIBitsInternal system call, which is a part of the graphic subsystem in all modern versions of Windows...
Google Android Qualcomm Kyro L2 driver elevation of privilege vulnerability
Google Android is a mobile operating system based on the Linux open kernel. Google Android suffers from an elevation of privilege vulnerability in the Qualcomm Kyro L2 driver implementation, which allows remote attackers to exploit the vulnerability to submit a special application with elevated...
Google Android kernel ION subsystem elevation of privilege vulnerability
Google Android is a mobile operating system based on the Linux open kernel. Google Android has a security vulnerability in the kernel ION implementation that allows remote attackers to exploit the vulnerability to submit special applications with elevated privileges...
Google Android Qualcomm CP access driver elevation of privilege vulnerability
Google Android is a mobile operating system based on the Linux open kernel. Google Android has a security vulnerability in the Qualcomm CP access driver implementation that allows remote attackers to exploit the vulnerability to submit special applications with elevated privileges...
macOS Kernel 10.12.3 (16D32) - audit_pipe_open Off-by-One Memory Corruption Exploit
Exploit for macOS platform in category dos / poc / Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1126 MacOS kernel memory corruption due to off-by-one in auditpipeopen auditpipeopen is the special file open handler for the auditpipe device major number 10. Here's the code:...
macOS Kernel 10.12.3 (16D32) - Use-After-Free Due to Double-Release in posix_spawn Exploit
Exploit for multiple platform in category dos / poc / Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1104 exechandleportactions is responsible for handling the xnu port actions extension to posixspawn. It supports 4 different types of port PSPASPECIAL, PSPAEXCEPTION,...
Information disclosure
Huawei eSpace IAD V300R002C01SPC100 and earlier versions have an information leak vulnerability; an attacker can check and download the fault information by accessing a special URL...
