CVE-2016-4713

CoreDisplay in Apple OS X before 10.12 allows attackers to view arbitrary users' screens by leveraging screen-sharing access...

PT-2016-6099

Name of the Vulnerable Software and Affected Versions Apple OS X versions prior to 10.12 Description The issue allows attackers to view arbitrary users' screens by leveraging screen-sharing access. Recommendations For versions prior to 10.12, update to version 10.12 or later to resolve the issue...

CVE-2016-4713: Exposure of Sensitive Information to an Unauthorized Actor

CoreDisplay in Apple OS X before 10.12 allows attackers to view arbitrary users' screens by leveraging screen-sharing access...

InVision: CRITICAL Any █████ of any screen can be removed by anyone!

Summary ------- This is an IDOR bug which allows to remove ██████ of other users. Steps to reproduce ------ 1. Make sure you have two accounts A and B 2. On account A create a ███ on a screen and remember its ID, let's say it was 12345678 3. With account B create a ██████████ on a screen, let's s...

Vulnerability of the Windows operating system, allowing a perpetrator to execute arbitrary code

The vulnerability of the Windows operating system is related to incorrect restrictions on the download of web content when the screen is blocked. Exploiting this vulnerability allows a local attacker to execute arbitrary code using a specially crafted Wi-Fi access point or broadband mobile device...

iSpy Keylogger Targets Passwords, Skype, Webcams

Researchers are monitoring sales and infection rates of a new keylogger being sold on the dark web for $25 to $35. Along with capturing keystrokes, iSpy grabs passwords stored in web browsers, records Skype chats, takes webcam screenshots and steals the license keys of software such as Adobe...

PT-2017-9034

Name of the Vulnerable Software and Affected Versions slock affected versions not specified Description The issue allows attackers to bypass the screen lock through vectors involving an invalid password hash. This triggers a NULL pointer dereference and crash. Recommendations At the moment, there...

Microsoft Windows Local Elevation of Privilege Vulnerability (CNVD-2016-07926)

Microsoft Windows is a series of operating systems released by the American company Microsoft. A lock screen elevation of privilege vulnerability exists in Microsoft Windows that originates from a program error that allows loading of web content from the Windows lock screen. An attacker in close...

Boozt Fashion AB: ADB Backup is enabled within AndroidManifest

ADB Backup is enabled for this app. ADB Backup feature is a good tool for backing up all of your files. If it's enabled, malicious users who have your phone can copy all of the sensitive data for this app in your phone. Requirement: Unlock phone's screen; Enable the developer mode. Sensitive data...

CVE-2016-3302

Microsoft Windows 8.1, Windows Server 2012 R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607, when the lock screen is enabled, do not properly restrict the loading of web content, which allows physically proximate attackers to execute arbitrary code via a 1 crafted Wi-Fi access point or 2...

CVE-2016-3302

Microsoft Windows 8.1, Windows Server 2012 R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607, when the lock screen is enabled, do not properly restrict the loading of web content, which allows physically proximate attackers to execute arbitrary code via a 1 crafted Wi-Fi access point or 2...

Privilege escalation

Microsoft Windows 8.1, Windows Server 2012 R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607, when the lock screen is enabled, do not properly restrict the loading of web content, which allows physically proximate attackers to execute arbitrary code via a 1 crafted Wi-Fi access point or 2...

CVE-2016-3302

Microsoft Windows 8.1, Windows Server 2012 R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607, when the lock screen is enabled, do not properly restrict the loading of web content, which allows physically proximate attackers to execute arbitrary code via a 1 crafted Wi-Fi access point or 2...

CVE-2016-3302: Undefined Security Weakness

Microsoft Windows 8.1, Windows Server 2012 R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607, when the lock screen is enabled, do not properly restrict the loading of web content, which allows physically proximate attackers to execute arbitrary code via a 1 crafted Wi-Fi access point or 2...

Icecream Apps Insecure File Permissions / Privilege Escalation

Exploit Title: Multiple Icecream Apps Local Privilege Escalation Date: 13/09/2016 Exploit Author: Tulpa Contact: [email protected] Author website: www.tulpa-security.com Vendor Homepage: icecreamapps.com Software Versions Affected: Icecream Ebook Reader 4.21 | Icecream Screen Recorder 4.21...

Microsoft Windows Lock Screen Elevation of Privilege Vulnerability (3178469)

This host is missing an important security update according to Microsoft Bulletin MS16-112. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Cumulative update for Windows 10 Version 1607: September 13, 2016

None None...

MS16-112: Description of the security update for Windows lock screen: September 13, 2016

None None...

MS16-112: Security Update for Windows Lock Screen (3178469)

The remote Windows host is missing a security update. It is, therefore, affected by an elevation of privilege vulnerability due to improperly allowing web content to load from the Windows lock screen. A local attacker can exploit this, by connecting to a maliciously configured WiFi hotspot or by...

PT-2016-2758

Name of the Vulnerable Software and Affected Versions Microsoft Windows versions 8.1, 10 Gold, 10 1511, 10 1607, Windows Server 2012 R2, Windows RT 8.1 Description The issue is related to the incorrect restriction of web content loading when the lock screen is enabled, allowing a local attacker t...