CVE-2018-11257

Summary: CVE-2018-11257 affects Snapdragon Mobile Trust Authority (TA) permissions, enabling RPMB erase on secure devices in SD 210/212/205 and SD 845/850. The root cause is a permissions/privileges/access control flaw in TA that could allow an attacker with local access to erase RPMB, enabling e...

Design/Logic Flaw

In Android before the 2018-05-05 security patch level, NVIDIA Tegra X1 TZ contains a vulnerability in Widevine TA where the software writes data past the end, or before the beginning, of the intended buffer, which may lead to escalation of Privileges. This issue is rated as high. Android:...

CVE-2017-6293

In Android before the 2018-05-05 security patch level, NVIDIA Tegra X1 TZ contains a vulnerability in Widevine TA where the software writes data past the end, or before the beginning, of the intended buffer, which may lead to escalation of Privileges. This issue is rated as high. Android:...

CVE-2017-6293

In Android before the 2018-05-05 security patch level, NVIDIA Tegra X1 TZ contains a vulnerability in Widevine TA where the software writes data past the end, or before the beginning, of the intended buffer, which may lead to escalation of Privileges. This issue is rated as high. Android:...

CVE-2017-6293

CVE-2017-6293 affects NVIDIA SHIELD TV via the Tegra X1 TZ (Widevine TA); a buffer overrun in the TZ/TEE path allows local privilege escalation. The issue is described as a local code execution/elevation of privilege on the Tegra kernel driver. Public details in the connected documents indicate t...

CVE-2017-6293: Out-of-bounds Write

In Android before the 2018-05-05 security patch level, NVIDIA Tegra X1 TZ contains a vulnerability in Widevine TA where the software writes data past the end, or before the beginning, of the intended buffer, which may lead to escalation of Privileges. This issue is rated as high. Android:...

CVE-2018-6246: Exposure of Sensitive Information to an Unauthorized Actor

In Android before the 2018-05-05 security patch level, NVIDIA Widevine Trustlet contains a vulnerability in Widevine TA where the software reads data past the end, or before the beginning, of the intended buffer, which may lead to Information Disclosure. This issue is rated as moderate. Android:...

PT-2018-17435

Name of the Vulnerable Software and Affected Versions Android versions prior to the 2018-05-05 security patch level Description The issue concerns a buffer overflow in the NVIDIA Widevine Trustlet, specifically in the Widevine TA, where the software reads data past the end or before the beginning...

PT-2018-1373

Name of the Vulnerable Software and Affected Versions Android versions prior to the 2018-05-05 security patch level Description The issue is caused by the software writing data past the end, or before the beginning, of the intended buffer in the NVIDIA Tegra X1 TZ Widevine TA, which may lead to...

Design/Logic Flaw

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile and Snapdragon Mobile SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 820, and SD 820A, when executing a TA which has been granted privileges to the CPVC MINK class it is possible for the TA to access...

CVE-2016-10452: Improper Input Validation

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile and Snapdragon Mobile SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 808, SD 810, SD 820, SD 820A, and SD 835, memory protection assertion happens after invoking TA...

PT-2018-1227

Name of the Vulnerable Software and Affected Versions Android versions prior to 2018-04-05 security patch level Description The issue is related to insufficient input validation in the Qualcomm Memory Protection component. This can potentially allow a remote attacker to impact the confidentiality...

CVE-2018-5994: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection exists in the JS Jobs 1.1.9 component for Joomla! via the zipcode parameter in a newest-jobs request, or the ta parameter in a viewresume request...

PT-2018-17280

Name of the Vulnerable Software and Affected Versions: Joomla! JS Jobs component version 1.1.9 Description: The issue exists due to SQL Injection in the JS Jobs component for Joomla!. This occurs via the zipcode parameter in a "newest-jobs" request, or the ta parameter in a "view resume" request...

CVE-2017-14134

CVE-2017-14134 affects Maplesoft Maple T.A. 2016.0.6 (Customer Hosted). The vulnerability is a Reflected XSS in the forgotten password page, exploitable via the emailAddress parameter to passwordreset/PasswordReset.do. CVSS details indicate low to moderate impact (Confidentiality/Integrity potent...

TA News-App - External URLs, Suspicious files, Unsafe deleting vulnerabilities

HackApp vulnerability scanner discovered that application TA News-App published at the 'play' market has multiple vulnerabilities...

ta-odessa.com Open Redirect vulnerability

Vulnerable URL: http://www.ta-odessa.com/go.php?link=https://www.xssposed.org/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 1756369 Google Pagerank| 3 VIP website...

IC3 Issues Alert on CryptoWall Ransomware

The Internet Crime Complaint Center IC3 has issued an alert warning that U.S. individuals and businesses are still at risk of CryptoWall ransomware fraud. Scam operators use ransomware—a type of malicious software—to infect a device and restrict access until a ransom fee is paid­­. Individuals an...

ta-k.com XSS vulnerability

Open Bug Bounty ID: OBB-67052 Description| Value ---|--- Affected Website:| ta-k.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...

某教育门户CMS存在五处SQL注入

简要描述： RT 详细说明： 释锐是全国领先的智慧教育解决方案供应商。致力于通过技术创新为中小学、职校、高校和教育行政管理机构提供有竞争力的智慧教育解决方案和服务，持续提升客户体验，为客户创造最大价值。目前，释锐的产品和解决方案已经应用于 25 个省市，服务全国 3000 多所学校。 注入点：index.jsp?groupId=，labelGroup.jsp?labelName=， searchInfo.jsp?orderBy=， groupList.jsp?orderBy=，ta.jsp?tpId=&uuid= 案例： 注入点1：...