CVE-2014-4375

Double free vulnerability in Apple iOS before 8 and Apple TV before 7 allows local users to gain privileges or cause a denial of service device crash via vectors related to Mach ports...

Double free

Double free vulnerability in Apple iOS before 8 and Apple TV before 7 allows local users to gain privileges or cause a denial of service device crash via vectors related to Mach ports...

CVE-2014-4375

Double free vulnerability in Apple iOS before 8 and Apple TV before 7 allows local users to gain privileges or cause a denial of service device crash via vectors related to Mach ports...

CVE-2014-4375

CVE-2014-4375 is a local privilege-escalation and denial-of-service risk tied to a double-free in Mach ports within Apple iOS pre-8 and Apple TV pre-7. Public docs tie the issue to kernel/Mach ports handling, with confirmed remediation in iOS 8 and Apple TV 7 security updates. Affected components...

Microsoft Windows SMB Registry : McAfee EPO GUID

By reading the registry key HKLM\SOFTWARE\Network Associates\ePolicy Orchestrator\Agent, it was possible to determine that the remote Windows system is managed by McAfee EPO. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid77477; scriptversion"1.7";...

GCHQ's HACIENDA Port Scanning Program Targeting Devices in 27 Countries

Have you ever used Shodan search engine? A publicly available service crawls the Internet looking for connected devices and list their open ports, services running, system information etc. Shodan search engine is majorly used by Hackers, developers, students and anyone else with a sense of...

EMC RecoverPoint Appliance restrictions bypass

Access to arbitrary ports is not restricted...

Default configuration

The default configuration of EMC RecoverPoint Appliance RPA 4.1 before 4.1.0.1 does not enable a firewall, which allows remote attackers to obtain potentially sensitive information about open ports, or cause a denial of service, by sending packets to many ports...

Response work is not in place the Heartbleed vulnerability still exist-vulnerability warning-the black bar safety net

In the high-profile Heartbleed vulnerability is exposure of more than a month after the investigation found that this serious OpenSSL vulnerability still exists in the hundreds of thousands of servers and some SSL port, this is mainly because the entire industry response to the work is not in...

ZoneAlarm 3.7 .202/PRO 4.0/PRO 4.5 Random UDP Flood Denial of Service Vulnerability (1)

No description provided by source. source: http://www.securityfocus.com/bid/8525/info A denial of service vulnerability has been alleged in ZoneAlarm. It is reportedly possible to reproduce this condition by sending a flood of UDP packets of random sizes to random ports on a system hosting the...

KDE Konqueror 3.x/IOSlave - FTP PASV Port-Scanning Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/23091/info KDE Konqueror is prone to a vulnerability that may allow attackers to obtain potentially sensitive information. A successful exploit of this issue would cause the affected application to connect to arbitrary TC...

WapServ 1.0 - Denial of Service Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/8472/info WapServ has been reported prone to multiple remote denial of service vulnerabilities. The issues present themselves when malicious data is received and processed over ports 9200 and 9201. A remote attacker may...

Mozilla FireFox 1.5.x/2.0 - FTP PASV Port-Scanning Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/23082/info Mozilla Firefox is prone to vulnerability that may allow attackers to obtain potentially sensitive information. A successful exploit of this issue would cause the affected application to connect to arbitrary TC...

Xpient Cash Drawer Operation Vulnerability

No description provided by source. Core Security - Corelabs Advisory http://corelabs.coresecurity.com/ Xpient Cash Drawer Operation Vulnerability 1. Advisory Information Title: Xpient Cash Drawer Operation Vulnerability Advisory ID: CORE-2013-0517 Advisory URL:...

Mac OS X <= 10.4.7 - Mach Exception Handling Local Exploit (10.3.x 0day)

No description provided by source. / excploit.c - 28 Nov 2005 - [email protected] Exploitable Mach Exception Handling Affected: Mac OS X 10.4.6 darwin 8.6.0 and older When a process executes a setuid executable, all existing rights to the task port are invalidated, to make sure unauthorize...

Microsoft Windows DCOM RPC Interface Buffer Overrun Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/8205/info A buffer overrun vulnerability has been reported in Microsoft Windows that can be exploited remotely via a DCOM RPC interface that listens on TCP/UDP port 135. The issue is due to insufficient bounds checking of...

APC PowerChute Plus 4.2.2 - Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/83/info APC PowerChute PLUS is a software package that will safely shutdown computer systems locally or accross a network when UPS power starts to fail. When operating PowerChute PLUS normally listens to TCP ports 6547 an...

Linux kernel 2.0 TCP Port DoS Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/343/info It is possible to leak kernel memory and render TCP ports above 1024 unusable, locked forever in the CLOSEWAIT state in linux kernels prior to the late 2.1.x and 2.2.0pre releases. In addition to being...

FreeBSD 3.5.1/4.2 ports package xklock local root exploit

No description provided by source. / xklock - FreeBSD 3.5.1 & 4.2 ports package local root exploit The X key lock program contain several exploitable buffer overflows in command line arguments aswell as the 'JNAME' environment variable. xklock is installed setuid root by default. This POC exploit...

Microsoft Windows 2000 Remote CPU-overload Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/1415/info Sending a stream of binary zeros to any one of a number of Windows 2000 ports can cause 100% CPU utilization. The ports that were found vulnerable include TCP ports 7, 9, 21, 23, 7778 and UDP ports 53, 67, 68,...