News & Vulnerabilities

News: November 18 – November 24 2016

• Dangerous Rootkit Found Pre-Installed On Nearly 3 Million Android Phones
• Android banking malware whitelists itself to stay connected with attackers
• Qualcomm now offering US$15k for security bugs
• Siemens-branded CCTV webcams require urgent firmware patch
• Great. Now Even Your Headphones Can Spy on You
• Elegant 0-day unicorn underscores “serious concerns” about Linux security
• DoD Opens .Mil to Legal Hacking, Within Limits

Vulnerabilities

• Dlink DIR Routers – Unauthenticated HNAP Login Stack Buffer Overflow (Metasploit)
• Samsung SecEmailUI – Script Injection
• Vulnerability Summary for CVE-2016-9150
• Vulnerability Summary for CVE-2016-9151
• Vulnerability Summary for CVE-2016-8562
• Vulnerability Summary for CVE-2016-4095
• Vulnerability Summary for CVE-2016-8673