4959 matches found
MS12-034: Description of the security update for CVE-2012-0181 in Windows XP and Windows Server 2003: May 8, 2012
MS12-034: Description of the security update for CVE-2012-0181 in Windows XP and Windows Server 2003: May 8, 2012 INTRODUCTION Microsoft has released security bulletin MS12-034. To view the complete security bulletin, visit one of the following Microsoft websites: Home users:...
CVE-2016-8334
CVE-2016-8334 (Foxit PDF Reader JBIG2 parsing vulnerability) is a heap-based out-of-bounds read disclosed via JBIG2 symbol dictionary segments. A signed/unsigned state in the parser allows two chained segments to trigger different allocation paths based on the SDTEMPLATE value and the “bitmap cod...
CVE-2016-2246
HP ThinPro 4.4 through 6.1 mishandles the keyboard layout control panel and virtual keyboard application, which allows local users to bypass intended access restrictions and gain privileges via unspecified vectors...
CVE-2016-5328
VMware Tools 9.x and 10.x before 10.1.0 on OS X, when System Integrity Protection SIP is enabled, allows local users to determine kernel memory addresses and bypass the kASLR protection mechanism via unspecified vectors...
CVE-2016-2246
CVE-2016-2246 concerns HP ThinPro 4.4–6.1, where the keyboard layout control panel and the Virtual Keyboard application are mishandled, enabling local users to bypass access restrictions and elevate privileges. Root cause and impact are described as local unauthorized access with privilege elevat...
CVE-2016-2246: Undefined Security Weakness
HP ThinPro 4.4 through 6.1 mishandles the keyboard layout control panel and virtual keyboard application, which allows local users to bypass intended access restrictions and gain privileges via unspecified vectors...
PT-2016-5079
Name of the Vulnerable Software and Affected Versions HP ThinPro versions 4.4 through 6.1 Description The issue concerns the mishandling of the keyboard layout control panel and virtual keyboard application, allowing local users to bypass intended access restrictions and gain privileges...
Moderate: Red Hat Security Advisory: Red Hat Ceph Storage 1.3 security and bug fix update
An update is now available for Red Hat Ceph Storage 1.3. This erratum is for Red Hat Ceph Storage that runs on Ubuntu 14.04. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severi...
Apple macOS Sierra IOAcceleratorFamily Component Memory Corruption Vulnerability
Apple macOS Sierra is a specialized operating system developed by Apple for Mac computers.IOAcceleratorFamily is one of the IO acceleration management components. A security vulnerability exists in the IOAcceleratorFamily component in Apple macOS Sierra versions prior to 10.12.2. An attacker can...
Apple macOS Sierra IOKit Component Memory Corruption Vulnerability
Apple macOS Sierra is a specialized operating system developed by Apple for Mac computers.IOKit is one of the components that reads system information. A security vulnerability exists in the IOKit component in Apple macOS Sierra versions prior to 10.12.2. An attacker could exploit the vulnerabili...
Apple macOS Sierra IOSurface Component Memory Corruption Vulnerability
Apple macOS Sierra is a specialized operating system developed by Apple for Mac computers.IOSurface is one of the programming framework components. A security vulnerability exists in the IOSurface component in Apple macOS Sierra versions prior to 10.12.2. A local attacker could exploit the...
WinAPI User Hunter: hunter
WinAPI User Hunter During Red Team engagements it is common to track/hunt specific users. Assuming we already have access to a desktop as a normal user no matter how, always “assume compromise” in a Windows Domain and we want to spread laterally. We want to know where the user is logged on, if he...
Microsoft Internet Explorer 11 MSHTML - CGeneratedContent::HasGeneratedSVGMarker
Exploit for windows platform in category dos / poc window.onload = function document.getElementsByTagName"iframe"0.src = "repro-iframe.html"; Description Internally MSIE uses various lists of linked CTreePos objects to represent the DOM tree. For HTML/SVG elements a CTreeNode element is...
Kernel Address Space Layout Randomization Recovery Software
Kernel Address Space Layout Randomization Recovery Software KASLRfinder is a small utility that can be used to find where in memory the Windows 10 kernel and its drivers are loaded – despite the addresses being randomized by Kernel Address Space Layout Randomization KASLR. The utility can be run ...
Microsoft Internet Explorer 11 - MSHTML 'CGeneratedContent::HasGeneratedSVGMarker' Type Confusion
window.onload = function document.getElementsByTagName"iframe"0.src = "repro-iframe.html"; Description Internally MSIE uses various lists of linked CTreePos objects to represent the DOM tree. For HTML/SVG elements a CTreeNode element is created, which embeds two CTreePos instances: one tha...
CVE-2016-7214
The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allow local users to bypass the ASLR protection mechanism via a crafted...
HP ThinPro Local Elevation of Privilege Vulnerability
HP ThinPro is a thin client device from Hewlett-Packard HP in the United States. A security vulnerability exists in the Keyboard Layout Control Panel and Virtual Keyboard application on the HP ThinPro operating system. An attacker could exploit the vulnerability to locally gain unauthorized acces...
WordPress Page Layout Builder Plugin < 2.0.0 Reflected XSS Vulnerability - Active Check
The WordPress Page Layout Builder Plugin is prone to a reflected cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...
Bypassing ASLR in 60 Milliseconds
Address Space Layout Randomization was a champion hardening technology introduced in most major desktop and mobile operating systems as a mitigation against memory-based code-execution attacks. Bypassing ASLR, however, has become somewhat of a parlor game for attackers and white-hat researchers,...
Configuring Multi Language Keyboard Layout for the session in Receiver for HTML5 and Receiver for Chrome
This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. This article describes how to configure Multi Language keyboard layout in Receiver for HTML5 and...