macOS < 10.12 Multiple Vulnerabilities

The remote host is running a version of Mac OS X that is prior to 10.10.5, 10.11.x prior to 10.11.6, or is not macOS 10.12. It is, therefore, affected by multiple vulnerabilities in the following components : - apache - apachemodphp - Apple HSSPI Support - AppleEFIRuntime - AppleMobileFileIntegri...

About the security content of macOS Sierra 10.12

About the security content of macOS Sierra 10.12 This document describes the security content of macOS Sierra 10.12. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases...

Oracle ATS Arbitrary File Upload

No description provided by source...

Mac OS X 10.9.5 or later < 10.11.1 Multiple Vulnerabilities

Binary data 9324.prm...

Oracle Application Testing Suite (ATS) - Arbitrary File Upload (Metasploit)

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Oracle ATS Arbitrary File Upload', 'Description' = %q This module exploits an authentication bypass and arbitrary file upload in Oracle Applicatio...

Oracle ATS Arbitrary File Upload

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Oracle ATS Arbitrary File Upload', 'Description' = %q This module exploits an authentication bypass and arbitrary file upload in Oracle Applicatio...

CVE-2016-1796

Apple Type Services ATS in Apple OS X before 10.11.5 allows attackers to obtain sensitive kernel memory-layout information or cause a denial of service out-of-bounds memory access via a crafted app...

Design/Logic Flaw

Apple Type Services ATS in Apple OS X before 10.11.5 allows attackers to bypass intended FontValidator sandbox-policy restrictions and execute arbitrary code in a privileged context via a crafted app...

Out-of-bounds

Apple Type Services ATS in Apple OS X before 10.11.5 allows attackers to obtain sensitive kernel memory-layout information or cause a denial of service out-of-bounds memory access via a crafted app...

CVE-2016-1796

CVE-2016-1796 affects Apple Type Services (ATS) in OS X El Capitan before 10.11.5. The ZDI advisory describes a heap-based buffer overflow in libATSServer’s GetUncompressedBitmapRepresentation that can allow arbitrary code execution on vulnerable systems, typically requiring the user to visit a m...

CVE-2016-1797

CVE-2016-1797 corresponds to Apple OS X El Capitan ATS sandbox-escape via FontValidator. A crafted app could bypass the FontValidator sandbox policy, allowing arbitrary code execution with system/kernel privileges. ZDI-16-360 describes the flaw as within the fontd sandbox policy, enabling an atta...

Oracle Application Testing Suite (ATS) 12.4.0.2.0 - Authentication Bypass / Arbitrary File Upload

Exploit Title: Oracle Application Testing Suite Authentication Bypass and Arbitrary File Upload Remote Exploit Exploit Author: Zhou Yu Vendor Homepage: http://www.oracle.com/ Software Link: http://www.oracle.com/technetwork/oem/downloads/apptesting-downloads-1983826.html?ssSourceSiteId=otncn...

Oracle ATS Arbitrary File Upload

This module exploits an authentication bypass and arbitrary file upload in Oracle Application Testing Suite OATS, version 12.4.0.2.0 and unknown earlier versions, to upload and execute a JSP shell. Module Options msf use exploit/multi/http/oracle/atsfileupload msf undefinedatsfileupload show...

APPLE-SA-2015-10-21-4 OS X El Capitan 10.11.1 and Security Update 2015-007

APPLE-SA-2015-10-21-4 OS X El Capitan 10.11.1 and Security Update 2015-007 OS X El Capitan 10.11.1 and Security Update 2015-007 are now available and address the following: Accelerate Framework Available for: OS X Mavericks v10.9.5, OS X Yosemite v10.10.5, and OS X El Capitan 10.11 Impact: Visiti...

CVE-2015-6985

Apple Type Services ATS in Apple OS X before 10.11.1 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web page...

Memory corruption

Apple Type Services ATS in Apple OS X before 10.11.1 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web page...

CVE-2015-6985

CVE-2015-6985 affects Apple Type Services (ATS) in macOS OS X before 10.11.1. A crafted web page can remotely trigger memory corruption, leading to arbitrary code execution or application crash. The issue is the result of a memory-handling flaw in ATS. Apple released OS X 10.11.1 (Security Update...

Mac OS X < 10.10.4 Multiple Vulnerabilities

Binary data 8801.prm...

Mac OS X < 10.8.6/10.9.6 ATS vulnerability

Binary data 8804.prm...

APPLE-SA-2015-06-30-2 OS X Yosemite v10.10.4 and Security Update 2015-005

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 APPLE-SA-2015-06-30-2 OS X Yosemite v10.10.4 and Security Update 2015-005 OS X Yosemite v10.10.4 and Security Update 2015-005 are now available and address the following: Admin Framework Available for: OS X Mavericks v10.9.5, OS X Yosemite v10.10 to...