systemd security and bug fix update

219-30.0.1.3 - set 'RemoveIPC=no' in logind.conf as default for OL7.2 22224874 - allow dm remove ioctl to co-operate with UEK3 Vaughan Cao Orabug: 18467469 - add hv dynamic memory support Jerry Snitselaar Orabug: 18621475 - rules: load sg module 1223340 - run: drop mistakenly committed test code...

SunellSecurity NVR / Camera - Denial Of Service

Exploit for hardware platform in category dos / poc Exploit Title: SunellSecurity NVR / Cams - Buffer overflow in CGI Date: 11.2.2016 Exploit Author: qwsj Vendor Homepage: https://github.com/qwsj Version: 1.6.08-09 / 2.0.06-08 Tested on: Windows / Linux Bug in CGI scrypt's for develop. Web servic...

CVE-2016-7910

Use-after-free vulnerability in the diskseqfstop function in block/genhd.c in the Linux kernel before 4.7.1 allows local users to gain privileges by leveraging the execution of a certain stop operation even if the corresponding start operation had failed...

SUSE-SU-2016:2627-1 Security update for POS_Image3, POS_Server3

This update provides POSImage3 and POSServer3 version 3.5.5, which bring many fixes and enhancements: - Fixed potential security issues bsc946740 use three argument perl open function consistently use array in perl system call everywhere use preferably perl built-in functions instead of external...

BSOD Error: "STOP 0x0000007E CVhdMp.sys with Kaspersky antivirus

When booting from the Network, to run the Imaging Wizard or simply to boot from a vDisk, the following Blue Screen message is displayed: STOP 0x0000007E CVhdMp.sys Error: BNIStack failed, network stack could not be initialized...

SetucoCMS vulnerable to cross-site request forgery

Overview SetucoCMS provided by SetucoCMS Project is a content management system CMS. SetucoCMS contains cross-site request forgery vulnerability. Satoshi Ogawa of Mitsui Bussan Secure Directions, Inc. and Shoji Baba reported this vulnerability to IPA. JPCERT/CC coordinated with the developer unde...

SetucoCMS vulnerable to session management

Overview SetucoCMS provided by SetucoCMS Project is a content management system CMS. SetucoCMS contains session management vulnerability. Satoshi Ogawa of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security...

CVE-2016-4860

Yokogawa STARDOM FCN/FCJ controller R1.01 through R4.01 does not require authentication for Logic Designer connections, which allows remote attackers to reconfigure the device or cause a denial of service via a 1 stop application program, 2 change value, or 3 modify application command...

CVE-2016-4860

Yokogawa STARDOM FCN/FCJ controller R1.01 through R4.01 does not require authentication for Logic Designer connections, which allows remote attackers to reconfigure the device or cause a denial of service via a 1 stop application program, 2 change value, or 3 modify application command...

SQL Injection Vulnerability in ry_whoisid Parameter of SSF Digital Management One-Stop System for Primary and Secondary Schools ry_list.asp Page

The SSF One-Stop Shop for Digital Management in Primary and Secondary Schools consists of an external website, a blog for teachers and students, and three internal platforms Teachers' Platform, Students' Platform and Parents' Platform. The product has a SQL injection vulnerability, the...

UBUNTU-CVE-2015-3854

packages/SystemUI/src/com/android/systemui/power/PowerNotificationWarnings.java in Android 5.x allows attackers to bypass a DEVICEPOWER permission requirement via a broadcast intent with the PNW.stopSaver action, aka internal bug 20918350...

CG-WLBARGL vulnerable to command injection

Overview CG-WLBARGL provided by Corega Inc is a wireless LAN router. CG-WLBARGL contains a command injection vulnerability. Ohji Kashiwazaki of Global Security Experts Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning...

JVN#76653039: CG-WLBARGL vulnerable to command injection

CG-WLBARGL provided by Corega Inc is a wireless LAN router. CG-WLBARGL contains a command injection vulnerability. Impact An arbitrary command may be executed by an authenticated attacker. Solution Do not use CG-WLBARGL As of Jun 22nd, 2016, there are no practical solutions to this issue. It is...

MS16-075 and MS16-076: Description of the security update for Windows Netlogon and SMB Server: June 14, 2016

None None...

Siemens S7300/400 PLC has a Privilege Bypass Downtime Vulnerability

The Siemens S7300/400 PLC is a modular general-purpose controller from Siemens for the manufacturing industry. A privilege bypass downtime vulnerability exists in the Siemens S7300/400 PLC. An attacker can exploit the vulnerability by sending a specific message to change the PLC from the RUN stat...

DEBIAN-CVE-2016-2548

sound/core/timer.c in the Linux kernel before 4.4.1 retains certain linked lists after a close or stop action, which allows local users to cause a denial of service system crash via a crafted ioctl call, related to the 1 sndtimerclose and 2 sndtimerstop functions...

MS16-048: Description of the security update for CSRSS: April 12, 2016

None None...

Stop Motion Studio - Base64 encoded String, MIT license vulnerabilities

HackApp vulnerability scanner discovered that application Stop Motion Studio published at the 'play' market has multiple vulnerabilities...

Stop-Motion Movie Creator - Apache license, Dynamic Code Loading, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Stop-Motion Movie Creator published at the 'play' market has multiple vulnerabilities...

PicPac Stop Motion & TimeLapse - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application PicPac Stop Motion & TimeLapse published at the 'play' market has multiple vulnerabilities...