Xen security vulnerabilities

Xen is an open source virtual machine monitor product from the University of Cambridge, UK. The product enables different and incompatible operating systems to run on the same computer and supports runtime migration to ensure uptime and avoid downtime. There is a security vulnerability in xen tha...

UBUNTU-CVE-2022-22637

A logic issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.3, Safari 15.4, watchOS 8.5, iOS 15.4 and iPadOS 15.4, tvOS 15.4. A malicious website may cause unexpected cross-origin behavior...

Apple macOS ImageIO DDS image out-of-bounds read vulnerability

Summary An out-of-bounds read vulnerability exists in the DDS image parsing functionality of ImageIO library on Apple macOS Big Sur 11.6.1 and iOS 15.1. A specially-crafted DDS file can disclose sensitive memory content which can aid in exploitation of other vulnerabilities. An attacker can deliv...

xen security vulnerabilities

Xen is an open source virtual machine monitor product from the University of Cambridge, UK. The product enables different and incompatible operating systems to run on the same computer and supports runtime migration to ensure uptime and avoid downtime. A security vulnerability exists in xen, whic...

vulhub

This is an open-source collection of vulnerable web applications and environments, designed for security training and testing. The repository contains a variety of applications, including web servers, databases, and other services, each with its own set of vulnerabilities. The goal is to provide ...

operating systems such as Code Execution

The vulnerabilities of operating systems such as tvOS, iOS, macOS, iPadOS, watchOS, and the Safari browser are caused by a numerical overflow vulnerability. Exploiting this vulnerability allows an attacker to execute arbitrary code upon processing malicious web content...

operating systems such as Code Execution

Vulnerabilities of operating systems such as tvOS, iOS, macOS, iPadOS, watchOS, and the Safari browser are related to the use of memory after it is freed. Exploiting these vulnerabilities allows a malicious actor to execute arbitrary code during the processing of malicious web content from a remo...

Active Directory Federation Services Privilege Escalation

The vulnerability of the Active Directory Federation Services AD FS for Windows operating systems is related to security configuration errors. Exploiting this vulnerability can allow a malicious actor to bypass security restrictions and increase their privileges...

Windows HTTP Protocol Stack Buffer Overflow

The vulnerability of the HTTP Protocol Stack in Microsoft Windows operating systems is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

operating systems tvOS Code Execution

Vulnerabilities of operating systems such as tvOS, iOS, macOS, iPadOS, watchOS, and the Safari browser are related to type confusion errors. Exploiting these vulnerabilities can allow attackers to execute arbitrary code during the processing of malicious web content...

Microsoft Graphics Component security vulnerabilities

Microsoft Graphics Component is a graphics driver component from Microsoft Corporation USA. A security vulnerability exists in Microsoft Graphics Component. The following products and versions are affected:Windows 10 for 32-bit Systems,Windows 10 for x64-based Systems,Windows 10 Version 1607 for...

Microsoft Windows Permission Licensing and Access Control Vulnerabilities

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A vulnerability exists in Microsoft Windows AppContracts API Server with privilege license and access control issues. The following products and editions are affected:Windows 10 Version...

PT-2022-1530 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to errors in privilege management in the implementation of the Kerberos protocol in Windows operating systems. It allows a remote attacker to elevate their privileges...

Domain Escalation – sAMAccountName Spoofing

Computer accounts have the $ sign appended at the end of their names in contrast with standard user accounts. By default Microsoft operating systems lack… Continue reading - Domain Escalation - sAMAccountName Spoofing...

GDI+ Graphic Library Unauthorized Access

The vulnerability of the GDI+ graphics library in Microsoft Windows operating systems is related to insufficient protection of service data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

vulhub

This is an open-source collection of vulnerable systems and applications for educational purposes. The repository is maintained by phith0n and is available on GitHub. It contains a variety of vulnerable systems and applications, including web applications, databases, and operating systems. The...

vulhub

This is an open-source collection of vulnerable web applications and environments for security research and training. It is a repository of vulnerable systems, including web applications, databases, and other software, designed to help security professionals and researchers practice and improve...

Junos Emergency Shutdown

The vulnerability of the P2MP communication technology in Junos operating systems and Junos OS Evolved lies in buffer out-of-buffer writing. Exploiting this vulnerability can allow a malicious actor to cause an application to terminate abnormally due to a failure in the RPD process...

kernel of operating systems Privilege Escalation

The vulnerability of the kernel in operating systems such as Mac OS, tvOS, iOS, iPadOS, and watchOS is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

kernel of operating systems Privilege Escalation

The vulnerability in the kernel of operating systems such as Mac OS, tvOS, iOS, iPadOS, and watchOS relates to operations that occur outside of the buffer in memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...