CVE-2015-5876

dyld in Dev Tools in Apple iOS before 9 allows attackers to execute arbitrary code in a privileged context or cause a denial of service memory corruption via a crafted app...

Memory corruption

dyld in Dev Tools in Apple iOS before 9 allows attackers to execute arbitrary code in a privileged context or cause a denial of service memory corruption via a crafted app...

CVE-2015-5876

dyld in Dev Tools in Apple iOS before 9 allows attackers to execute arbitrary code in a privileged context or cause a denial of service memory corruption via a crafted app...

CVE-2015-5876: Improper Restriction of Operations within the Bounds of a Memory Buffer

dyld in Dev Tools in Apple iOS before 9 allows attackers to execute arbitrary code in a privileged context or cause a denial of service memory corruption via a crafted app...

PT-2015-2117

Name of the Vulnerable Software and Affected Versions Dev Tools in Apple iOS versions prior to 9 Description The issue is related to a buffer overflow in the dyld component, which can be exploited by attackers to execute arbitrary code in a privileged context or cause a denial of service due to...

WPS attack tool: Penetrator-WPS

This is experimental tool that is capable of attacking multiple WPS-enabled wireless access points in real time Penetrator-WPS utilizes the pixie-dust attack every time it receives M3 message, unless it is disabled with -P – pixie-dust requires pixiewps to be installed. Installation First, you ne...

SS-2015-015: XSS in dev/build returnURL Parameter

More info at https://www.silverstripe.org/software/download/security-releases/ss-2015-015/...

SUSE SLED11 / SLES11 Security Update : net-snmp (SUSE-SU-2015:1524-1)

net-snmp was updated to fix one security vulnerability and several bugs. - fix a vulnerability within the snmppduparse function of snmpapi.c. bnc940188, CVE-2015-5621 - Add build requirement 'procps' to fix a net-snmp-config error. bsc935863 - add support for /dev/shm in snmp hostmib bnc853382,...

PT-2015-3331

Name of the Vulnerable Software and Affected Versions Amazon Fire OS versions prior to 2016-01-15 Description The issue is related to a stack-based buffer overflow in the havok write function. This can be exploited by sending a long string to the /dev/hv device, potentially causing a denial of...

Null pointer dereference

The kvmapichasevents function in arch/x86/kvm/lapic.h in the Linux kernel through 4.1.3 allows local users to cause a denial of service NULL pointer dereference and system crash or possibly have unspecified other impact by leveraging /dev/kvm access for an ioctl call...

CVE-2015-4692

The kvmapichasevents function in arch/x86/kvm/lapic.h in the Linux kernel through 4.1.3 allows local users to cause a denial of service NULL pointer dereference and system crash or possibly have unspecified other impact by leveraging /dev/kvm access for an ioctl call...

CVE-2015-4692

The kvmapichasevents function in arch/x86/kvm/lapic.h in the Linux kernel through 4.1.3 allows local users to cause a denial of service NULL pointer dereference and system crash or possibly have unspecified other impact by leveraging /dev/kvm access for an ioctl call...

CVE-2015-4692

The kvmapichasevents function in arch/x86/kvm/lapic.h in the Linux kernel through 4.1.3 allows local users to cause a denial of service NULL pointer dereference and system crash or possibly have unspecified other impact by leveraging /dev/kvm access for an ioctl call...

CVE-2015-4692

CVE-2015-4692 affects the Linux kernel’s KVM code: in arch/x86/kvm/lapic.h, the kvm_apic_has_events() function may dereference a NULL pointer via an ioctl to /dev/kvm, enabling a local attacker to cause a denial of service (system crash). The description indicates the issue exists through kernel ...

CVE-2015-4692: Undefined Security Weakness

The kvmapichasevents function in arch/x86/kvm/lapic.h in the Linux kernel through 4.1.3 allows local users to cause a denial of service NULL pointer dereference and system crash or possibly have unspecified other impact by leveraging /dev/kvm access for an ioctl call...

Debian GNU/Linux Data Compromise

The multiple vulnerabilities in the liblink-grammar4-dev package of the Debian GNU/Linux operating system may lead to breaches of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...

PT-2016-3466

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.1.1 Description The issue is related to the tty open function in the Linux kernel, which mishandles a driver-lookup failure. This can be exploited by local users to cause a denial of service, resulting in a NUL...

SilverStripe CMS & Framework Open Redirect Vulnerability

SilverStripe CMS & Framework is a CMS content management system. An open redirect vulnerability exists in SilverStripe CMS & Framework version 3.1.13. A remote attacker can exploit the vulnerability by using the URL in the 'returnURL' parameter of the dev/build URI to redirect the user to an...

CVE-2015-5062

Open redirect vulnerability in SilverStripe CMS & Framework 3.1.13 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the returnURL parameter to dev/build...

PT-2015-6760

Name of the Vulnerable Software and Affected Versions SilverStripe CMS & Framework version 3.1.13 Description The issue allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks. This is achieved by manipulating a URL in the returnURL parameter to the /dev/buil...