USN-2184-1: Unity vulnerabilities

Frédéric Bardy discovered that Unity incorrectly filtered keyboard shortcuts when the screen was locked. A local attacker could possibly use this issue to run commands, and unlock the current session. Giovanni Mellini discovered that Unity could display the Dash in certain conditions when the...

USN-2184-1 unity vulnerabilities

Frédéric Bardy discovered that Unity incorrectly filtered keyboard shortcuts when the screen was locked. A local attacker could possibly use this issue to run commands, and unlock the current session. Giovanni Mellini discovered that Unity could display the Dash in certain conditions when the...

CVE-2013-7221: Undefined Security Weakness

The automatic screen lock functionality in GNOME Shell aka gnome-shell before 3.10 does not prevent access to the "Enter a Command" dialog, which allows physically proximate attackers to execute arbitrary commands by leveraging an unattended workstation...

PT-2014-5144

Name of the Vulnerable Software and Affected Versions Unity versions prior to 7.2.1 Description The issue allows physically proximate attackers to bypass the lock screen and execute arbitrary commands. This can be achieved by right-clicking on the indicator bar and then pressing the ALT and F2...

CVE-2014-1321

Power Management in Apple OS X 10.9.x through 10.9.2 allows physically proximate attackers to bypass an intended transition into the locked-screen state by touching 1 a key or 2 the trackpad during a lid-close action...

CVE-2014-1321

Power Management in Apple OS X 10.9.x through 10.9.2 allows physically proximate attackers to bypass an intended transition into the locked-screen state by touching 1 a key or 2 the trackpad during a lid-close action...

CVE-2014-1321: Undefined Security Weakness

Power Management in Apple OS X 10.9.x through 10.9.2 allows physically proximate attackers to bypass an intended transition into the locked-screen state by touching 1 a key or 2 the trackpad during a lid-close action...

PT-2014-4103

Name of the Vulnerable Software and Affected Versions Apple OS X versions 10.9.x through 10.9.2 Description The issue allows physically proximate attackers to bypass the intended transition into the locked-screen state. This can be achieved by touching either a key or the trackpad during a...

Mail.ru: Clicjacking on Login panel

i am able to run on frame which lead to click jacking, Find Details on screen shot...

CVE-2014-1984: Improper Authentication

Session fixation vulnerability in the management screen in Cybozu Remote Service Manager through 2.3.0 and 3.x before 3.1.1 allows remote attackers to hijack web sessions via unspecified vectors...

PT-2014-4405

Name of the Vulnerable Software and Affected Versions Cybozu Remote Service Manager versions prior to 3.1.1 Cybozu Remote Service Manager version 2.3.0 Description A session fixation issue in the management screen allows remote attackers to hijack web sessions. Recommendations For version 2.3.0,...

PT-2015-3695 · Gtk+ Team +1 · Gtk+ +1

Name of the Vulnerable Software and Affected Versions: GTK+ versions 3.10.9 and earlier Description: The issue allows physically proximate attackers to bypass the lock screen by pressing the menu button in applications that use GTK+, such as cinnamon-screensaver and gnome-screensaver...

MS-DOS: CRITICAL BUG!

CRITICAL BUG! If you type in color followed by a space and 2 numbers it can potentially render the screen unreadable! So far, my extensive testing has led me to find that certain letters work as well, though without a real pattern I'm not sure which ones. So far I know the letters "AF" will rende...

Philips Smart TVs vulnerable to Screen Hijack and Cookie Theft

Previous articles on The Hacker News have highlighted that How Internet of Things IoT opens your home to cyber threats. Recently the security researchers from vulnerability research firm ReVuln published a video demonstration shows that Philips Smart TV is prone to cyber attacks by hackers...

CVE-2014-2077

Cross-site scripting XSS vulnerability in the frontend in Open-Xchange OX AppSuite 7.4.1 before 7.4.1-rev10 and 7.4.2 before 7.4.2-rev8 allows remote attackers to inject arbitrary web script or HTML via the subject of an email, involving 'the aria "tags" for screenreaders at the top bar'...

[wig] WebApp Information Gatherer (Identify CMS)

wig is a Python tool that identifies a websites CMS by searching for fingerprints of static files and extracting version numbers from known files. OS identification is done by using the value of the ‘server’ and ‘X-Powered-By’ in the response header. These values are compared to a database of whi...

CVE-2014-1286

SpringBoard Lock Screen in Apple iOS before 7.1 allows remote attackers to cause a denial of service lock-screen hang by leveraging a state-management error...

CVE-2014-1285

Springboard in Apple iOS before 7.1 allows physically proximate attackers to bypass intended access restrictions and read the home screen by leveraging an application crash during activation of an unactivated device...

CVE-2014-1274

FaceTime in Apple iOS before 7.1 allows physically proximate attackers to obtain sensitive FaceTime contact information by using the lock screen for an invalid FaceTime call...

Design/Logic Flaw

FaceTime in Apple iOS before 7.1 allows physically proximate attackers to obtain sensitive FaceTime contact information by using the lock screen for an invalid FaceTime call...