About the security content of iTunes 12.5.2 for Windows - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. For more information about security, se...

Design/Logic Flaw

Printing UIKit in Apple iOS before 10 mishandles environment variables, which allows local users to discover cleartext AirPrint preview content by reading a temporary file...

Moodle 2.2.x < 2.2.7 Multiple Vulnerabilities

Binary data 9412.prm...

Apple iOS IOHIDFamily Memory Leak Vulnerability

Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. A memory content disclosure vulnerability exists in Apple iOS IOHIDFamily, which allows local attackers to exploit the vulnerability to obtain sensitive information...

ManageEngine File Download / Content Disclosure / SQL Injection

Hi, This is part 12 of the ManageOwnage series. For previous parts, see 1. This time we have an arbitrary file download, directory content disclosure and blind SQL injection vulnerabilities in ManageEngine OpManager, Applications Manager and IT360. I've pushed two new Metasploit modules into the...

Information disclosure

Microsoft Internet Explorer 8 through 11 allows remote attackers to read content from a different 1 domain or 2 zone via a crafted web site, aka "Internet Explorer Cross-domain Information Disclosure Vulnerability."...

CVE-2014-6346

Microsoft Internet Explorer 8 through 11 allows remote attackers to read content from a different 1 domain or 2 zone via a crafted web site, aka "Internet Explorer Cross-domain Information Disclosure Vulnerability."...

CVE-2014-6340

CVE-2014-6340 affects Microsoft Internet Explorer (IE) 6–11. The vulnerability is a cross-domain information-disclosure flaw caused by improper enforcement of cross-domain policies, allowing remote attackers to read content from a different domain or security zone via a crafted web page. Public e...

CVE-2014-6345

Microsoft Internet Explorer 9 and 10 allows remote attackers to read content from a different 1 domain or 2 zone via a crafted web site, aka "Internet Explorer Cross-domain Information Disclosure Vulnerability."...

PHP 5.4.x < 5.4.34 / 5.5.x < 5.5.18 / 5.6.x < 5.6.2 Multiple Vulnerabilities

Binary data 8563.prm...

Sun i-Runbook 2.5.2 Directory And File Content Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/5209/info Sun i-Runbook is a single point of technical and administration management for Sun production environments. i-Runbook provides a web interface. i-Runbook can be led to disclose the contents of a known resource...

Zoner Photo Studio 15 b3 - Buffer Overflow Vulnerabilities

No description provided by source. Title: ====== Zoner Photo Studio v15 b3 - Buffer Overflow Vulnerabilities Date: ===== 2012-11-13 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=759 VL-ID: ===== 759 Common Vulnerability Scoring System:...

GRAND Flash Album Gallery 0.55 Wordpress Plugin Multiple Vulnerabilities

No description provided by source. Vulnerability ID: HTB22870 Reference: http://www.htbridge.ch/advisory/sqlinjectioningrandflashalbumgalle rywordpressplugin.html Product: GRAND Flash Album Gallery wordpress plugin Vendor: Sergey Pasyuk http://codeasily.com/ Vulnerable Version: 0.55 Vendor...

pppBlog <= 0.3.8 (randompic.php) System Disclosure Exploit

No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo pppBlog = 0.3.8 system disclosure exploit\r\n; echo by rgod [email protected]\r\n; echo site: http://retrogod.altervista.org\r\n\r\n; echo dork: intext:\Powered by pppblog\r\n\r\n; / works with: registerglobals=On / if...

Mac OS X : Apple Safari < 6.1.5 / 7.0.5 Multiple Vulnerabilities

The version of Apple Safari installed on the remote Mac OS X host is a version prior to 6.1.5 or 7.0.5. It is, therefore, affected by the following vulnerabilities : - Multiple memory corruption vulnerabilities exist in WebKit that could lead to unexpected program termination or arbitrary code...

Mailspect Control Panel 4.0.5 - Multiple Vulnerabilities

Document Title: ============ Mailspect Control Panel version 4.0.5 Multiple Vulnerabilities Release Date: =========== June 21, 2014 Product & Service Introduction: ======================== Mailspect is the email security and archiving brand of RAE Internet Inc., Tarrytown, New York. The Mailspect...

Microsoft XML Core Services信息泄露漏洞(CVE-2014-0266)(MS14-005)

BUGTRAQ ID: 65407 CVECAN ID: CVE-2014-0266 Microsoft XML Core Services MSXML提供了一组服务，使用户可以使用JScript、VBScript和其它微软的开发工具开发基于XML的本机应用程序。 Microsoft XML Core Services在实现上存在安全漏洞，可使攻击者读取用户本地文件系统上的文件或者经过身份验证的Web域内容。当用户查看特制的Web内容时会通过IE触发MSXML，此时攻击者即可以利用此漏洞。 0 Microsoft Windows Windows Server 2012 Microsoft...

Firefox ESR 24.x < 24.3 Multiple Vulnerabilities

The installed version of Firefox ESR 24.x is earlier than 24.3, and is, therefore, potentially affected by the following vulnerabilities : - Memory issues exist in the browser engine that could result in a denial of service or arbitrary code execution. CVE-2014-1477 - An error exists related to...

Safari vulnerable to local file content disclosure

Overview Safari contains a vulnerability where a local file may be accessed from remote, which may result in a local file content disclosure. Masahiro YAMADA reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact B...

Google Chrome for Android - Multiple file:: URL Handler Local Downloaded Content Disclosure Vulnerabilities

Google Chrome for Android - Multiple file:: URL Handler Local Downloaded Content Disclosure Vulnerabilities source: https://www.securityfocus.com/bid/55523/info Google Chrome for Android is prone to multiple vulnerabilities. Attackers may exploit these issues to execute arbitrary code in the...