122 matches found
Safari Proxy Object Type Confusion
This module exploits a type confusion bug in the Javascript Proxy object in WebKit. The DFG JIT does not take into account that, through the use of a Proxy, it is possible to run arbitrary JS code during the execution of a CreateThis operation. This makes it possible to change the structure of e....
CVE-2016-4404
A security vulnerability was identified in the Filter SDK component of HP KeyView earlier than v11.2. The vulnerability could be exploited remotely to allow code execution via a memory allocation issue...
CVE-2016-4404
A security vulnerability was identified in the Filter SDK component of HP KeyView earlier than v11.2. The vulnerability could be exploited remotely to allow code execution via a memory allocation issue...
CVE-2016-4404
The CVE-2016-4404 issue affects the HP KeyView product family, specifically the Filter SDK component, with remote code execution possible due to a memory-allocation issue in versions earlier than v11.2. Public documentation indicates an unauthenticated, remote-exploit scenario via network access,...
CVE-2011-4404
creationtimestamp| type| source ---|---|--- 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/vmware/vmwareupdatemanagertraversal.rb 2025-02-06 03:13:40+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23...
About the security content of tvOS 11.4
About the security content of tvOS 11.4 This document describes the security content of tvOS 11.4. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...
CVE-2017-4404
CVE-2017-4404 is rejected/not used and does not represent an active vulnerability entry.
MoinMoin 1.9 < 1.9.5 ACL Security Vulnerability - Linux
MoinMoin does not properly handle group names that contain virtual group names such as SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
siteground.com XSS vulnerability
Vulnerable URL: https://www.siteground.com/reseller/order.htm Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 4404 VIP website status:| Yes Coordinated Disclosure Timeline: Description| Value ---|--- Vulnerabilit...
Mac OS X IOKit Keyboard Driver Root Privilege Escalation
This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'rex' class Metasploit3 'Mac OS X IOKit Keyboard Driver Root Privilege Escalation', 'Description' = %q A heap overflow in...
CVE-2014-4404
creationtimestamp| type| source ---|---|--- 2014-12-02 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/35440 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/osx/local/iokitkeyboardroot.rb 2023-06-14 21:10:03+00:00| seen|...
Apple Mac OSX - IOKit Keyboard Driver Privilege Escalation (Metasploit)
This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'rex' class Metasploit3 'Mac OS X IOKit Keyboard Driver Root Privilege Escalation', 'Description' = %q A heap overflow in...
Mac OS X IOKit Keyboard Driver Root Privilege Escalation Exploit
A heap overflow in IOHIKeyboardMapper::parseKeyMapping allows kernel memory corruption in Mac OS X before 10.10. By abusing a bug in the IORegistry, kernel pointers can also be leaked, allowing a full kASLR bypass. Tested on Mavericks 10.9.5, and should work on previous versions. The issue has be...
Mac OS X IOKit Keyboard Driver Root Privilege Escalation
A heap overflow in IOHIKeyboardMapper::parseKeyMapping allows kernel memory corruption in Mac OS X before 10.10. By abusing a bug in the IORegistry, kernel pointers can also be leaked, allowing a full kASLR bypass. Tested on Mavericks 10.9.5, and should work on previous versions. The issue was...
CVE-2014-4404
Heap-based buffer overflow in IOHIDFamily in Apple iOS before 8 and Apple TV before 7 allows attackers to execute arbitrary code in a privileged context via an application that provides crafted key-mapping properties...
Immunity Canvas: OSX_PARSEKEYMAPPING
Name| osxparsekeymapping ---|--- CVE| CVE-2014-4404 Exploit Pack| CANVAS Description| IOHIKeyboardMapper::parseKeyMapping local privilege escalation Notes| CVE Name: CVE-2014-4404 VENDOR: Apple Notes: Tested on: - 10.9 - 10.9.1 - 10.9.2 - 10.9.3 - 10.9.4 - 10.9.5 Repeatability: Multiple Times...
CVE-2014-4404
Heap-based buffer overflow in IOHIDFamily in Apple iOS before 8 and Apple TV before 7 allows attackers to execute arbitrary code in a privileged context via an application that provides crafted key-mapping properties...
CVE-2014-4404
Heap-based buffer overflow in IOHIDFamily in Apple iOS before 8 and Apple TV before 7 allows attackers to execute arbitrary code in a privileged context via an application that provides crafted key-mapping properties. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assess...
RHEL 5 : MRG (RHSA-2013:1851)
An updated Grid component package that fixes multiple security issues is now available for Red Hat Enterprise MRG 2.4 for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores,...