Apple iOS/watchOS/tvOS and OS X El Capitan IOAcceleratorFamily Denial of Service Vulnerability

Apple iOS is an operating system on Apple's cell phones. oS X El Capitan is a dedicated operating system developed for Mac computers. watchOS is a smartwatch operating system. A security vulnerability in IOAcceleratorFamily in Apple iOS, watchOS, and OS X El Capitan allows an attacker to exploit...

Apple iOS/watchOS/tvOS and OS X El Capitan libxml2 arbitrary code execution vulnerability (CNVD-2016-03522)

Apple iOS is an operating system on Apple's cell phones. oS X El Capitan is a dedicated operating system developed for Mac computers. watchOS is a smartwatch operating system. A security vulnerability in libxml2 in Apple iOS, watchOS, and OS X El Capitan could be exploited by an attacker to submi...

Apple iOS/watchOS/tvOS and OS X El Capitan kernel arbitrary code execution vulnerability (CNVD-2016-03533)

Apple iOS, watchOS, OS X El Capitan, and tvOS are products of Apple Inc. Apple iOS is an operating system for mobile devices; watchOS is an operating system for smartwatches; and OS X El Capitan is a specialized operating system for Mac computers. tvOS is a kernel component; OS X El Capitan is a...

Apple iOS/watchOS/tvOS and OS X El Capitan libxml2 arbitrary code execution vulnerability (CNVD-2016-03521)

Apple iOS is an operating system on Apple's cell phones. oS X El Capitan is a dedicated operating system developed for Mac computers. watchOS is a smartwatch operating system. A security vulnerability in libxml2 in Apple iOS, watchOS, and OS X El Capitan could be exploited by an attacker to submi...

CVE-2016-1824

IOHIDFamily in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of service memory corruption via a crafted app, a different vulnerability than CVE-2016-1823...

Memory corruption

IOHIDFamily in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of service memory corruption via a crafted app, a different vulnerability than CVE-2016-1823...

CVE-2016-1121

Use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before 15.016.20039 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors, a different...

Yasr 0.6.9-5 Buffer Overflow

Exploit Author: Juan Sacco - http://www.exploitpack.com - [email protected] Program affected: General-purpose console screen reader Version: 0.6.9-5 Tested and developed under: Kali Linux 2.0 x86 - https://www.kali.org Program description: Yasr is a general-purpose console screen reader for...

Microsoft Windows 7 < 10 / 2008 < 2012 R2 (x86/x64) - Local Privilege Escalation (MS16-032) (PowerShell)

function Invoke-MS16-032 https://googleprojectzero.blogspot.co.uk/2016/03/exploiting-leaked-thread-handle.html .DESCRIPTION Author: Ruben Boonen @FuzzySec Blog: http://www.fuzzysecurity.com/ License: BSD 3-Clause Required Dependencies: PowerShell v2+ Optional Dependencies: None .EXAMPLE C:\PS...

Vulnerabilities of iOS and Mac OS X operating systems, allowing attackers to execute arbitrary code in a privileged context

The vulnerability of the kernel in iOS and Mac OS X operating systems exists due to insufficient checking of resource states when resources are allowed to be shared among processes. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in a privileged context using a...

Vulnerabilities of iOS and Mac OS X operating systems, allowing attackers to execute arbitrary code in a privileged context

The vulnerability of the kernel in iOS and Mac OS X operating systems is related to the use of memory after it is freed. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in a privileged context using a specially created application...

Multiple Apple products kernel security bypass vulnerabilities

Apple iOS, tvOS, and watchOS are all products of Apple Inc. Apple iOS is an operating system developed for mobile devices; tvOS is a smart TV operating system; and watchOS is a smart watch operating system. kernel is one of the kernel components. A security bypass vulnerability exists in the kern...

Multiple Apple Products libxml2 Memory Corruption Vulnerability

Apple iOS, OS X, Safari, tvOS, and watchOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices; Apple OS X is a specialized operating system developed for Mac computers; Apple Safari is a web browser from Apple Inc. that is the default browser that comes with...

Apple iOS Messages Message Disclosure Vulnerability

Apple iOS, OS X, and watchOS are all products of Apple Inc. Apple iOS is an operating system developed for mobile devices; watchOS is a smartwatch operating system; and Apple OS X is an Apple operating system. An information disclosure vulnerability exists in the implementation of Messages in iOS...

CVE-2016-0121

The Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows remote attackers to execute arbitrary code via a crafted OpenType font, aka "OpenType...

Microsoft .NET XML Validation Security Feature Bypass Vulnerability (3141780)

This host is missing an important security update according to Microsoft Bulletin MS16-035 SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

VMware ESX / ESXi VMCI Privilege Escalation (VMSA-2013-0002) (remote check)

The remote VMware ESX / ESXi host is missing a security-related patch. It is, therefore, affected by a privilege escalation vulnerability in the Virtual Machine Communication Interface VMCI due to improper handling of control code in vmci.sys. A local attacker can exploit this to change memory...

The vulnerabilities in operating systems such as Mac OS X and iOS allow attackers to trigger service failures or increase their privileges.

The vulnerability of the syslog component in operating systems such as Mac OS X and iOS arises due to buffer overflow. Exploiting this vulnerability can allow an attacker to increase their privileges or cause a service failure memory corruption...

Cross Platform DNS Recon Tool: Sonar

Sonar is a reconnaissance tool for enumerating sub domains. It was modeled after Knock and DNSRecon though explicitly not written in Python to avoid the limitations of threading and dependencies. Sonar is statically compiled meaning it has no dependencies and even dynamically builds the default...

OS Detection Consolidation and Reporting

This script consolidates the OS information detected by several VTs and tries to find the best matching OS. Furthermore it reports all previously collected information leading to this best matching OS. It also reports possible additional information which might help to improve the OS detection. I...