428 matches found
CVE-2018-4229
An issue was discovered in certain Apple products. macOS before 10.13.5 is affected. The issue involves the "Grand Central Dispatch" component. It allows attackers to bypass a sandbox protection mechanism by leveraging the misparsing of entitlement plists...
Design/Logic Flaw
An issue was discovered in certain Apple products. macOS before 10.13.5 is affected. The issue involves the "Grand Central Dispatch" component. It allows attackers to bypass a sandbox protection mechanism by leveraging the misparsing of entitlement plists...
CVE-2018-4229
An issue was discovered in certain Apple products. macOS before 10.13.5 is affected. The issue involves the "Grand Central Dispatch" component. It allows attackers to bypass a sandbox protection mechanism by leveraging the misparsing of entitlement plists...
CVE-2018-4229
CVE-2018-4229 (Apple macOS) : Affects macOS prior to 10.13.5, involving the Grand Central Dispatch component. The issue allows a sandbox protection bypass via misparsing of entitlement plists. Apple’s security update for macOS High Sierra 10.13.5 addresses this, so upgrading to macOS 10.13.5 (Sec...
XNU Kernel - Heap Overflow Due to Bad Bounds Checking in MPTCP Exploit
Exploit for multiple platform in category dos / poc mptcpusrconnectx is the handler for the connectx syscall for the APMULTIPATH socket family. The logic of this function fails to correctly handle source and destination sockaddrs which aren't AFINET or AFINET6: // verify salen for AFINET: if...
ERROR: "This app has been disabled because entitlement to the app was not found if you have entitlement to this app, you may delete and re-install it"
Secure Mail fails to be launched on Huawei Phone with error: "This app has been disabled because entitlement to the app was not found if you have entitlement to this app, you may delete and re-install it"...
Apple Mac OS X Multiple Vulnerabilities-02 (HT205375)
Apple Mac OS X is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2017-7004
An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. The issue involves the "Security" component. A race condition allows attackers to bypass intended entitlement restrictions for sending XPC messages via a crafted app...
Race condition
An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. The issue involves the "Security" component. A race condition allows attackers to bypass intended entitlement restrictions for sending XPC messages via a crafted app...
CVE-2017-7004
An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. The issue involves the "Security" component. A race condition allows attackers to bypass intended entitlement restrictions for sending XPC messages via a crafted app...
CVE-2017-7004
CVE-2017-7004 describes a race condition in userspace entitlement checks that could allow a local attacker to bypass entitlement restrictions and send privileged XPC messages. Affected products are Apple iOS prior to 10.3.2 and macOS prior to 10.12.5. The root cause is a race in how entitlements ...
A Managed Password Cracking Tool: GoCrack
FireEye’s Innovation and Custom Engineering ICE team released a tool called GoCrack that allows red teams to efficiently manage password cracking tasks across multiple GPU servers by providing an easy-to-use, web-based real-time UI to create, view, and manage tasks. Simply deploy a GoCrack server...
Introducing GoCrack: A Managed Password Cracking Tool
FireEye's Innovation and Custom Engineering ICE team released a tool today called GoCrack that allows red teams to efficiently manage password cracking tasks across multiple GPU servers by providing an easy-to-use, web-based real-time UI Figure 1 shows the dashboard to create, view, and manage...
Apple Allows Uber to Use a Powerful Feature that Lets it Record iPhone Screen
If you are an iPhone user and use Uber app, you would be surprised to know that widely popular ride-hailing app can record your screen secretly. Security researcher Will Strafach recently revealed that Apple selectively grants what's known as an "entitlement" Uber a powerful ability to use the...
Apple macOS 10.12.3 / iOS < 10.3.2 - Userspace Entitlement Checking Race Condition Exploit
Exploit for multiple platform in category local exploits / Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1223 One way processes in userspace that offer mach services check whether they should perform an action on behalf of a client from which they have received a message is by...
CVE-2016-4311
Cross-site request forgery CSRF vulnerability in the XACML flow feature in WSO2 Identity Server 5.1.0 allows remote attackers to hijack the authentication of privileged users for requests that process XACML requests via an entitlement/eval-policy-submit.jsp request...
CVE-2016-4311
Cross-site request forgery CSRF vulnerability in the XACML flow feature in WSO2 Identity Server 5.1.0 allows remote attackers to hijack the authentication of privileged users for requests that process XACML requests via an entitlement/eval-policy-submit.jsp request...
python, subscription security update
CentOS Errata and Security Advisory CESA-2016:2592 An update for subscription-manager, subscription-manager-migration-data, and python-rhsm is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerabili...
Moderate: Red Hat Security Advisory: subscription-manager security, bug fix, and enhancement update
An update for subscription-manager, subscription-manager-migration-data, and python-rhsm is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a...