Design/Logic Flaw

Virtual servers in F5 BIG-IP 11.5.4, when SSL profiles are enabled, allow remote attackers to cause a denial of service resource consumption and Traffic Management Microkernel restart via an SSL alert during the handshake...

CVE-2016-4545

CVE-2016-4545 affects F5 BIG-IP SSL/TLS handling. The vulnerability arises when SSL alerts are sent during the handshake, potentially causing unnecessary logging and resource consumption that may trigger a Traffic Management Microkernel (TMM) restart and a core file. According to F5 advisory K480...

CVE-2016-4545

Virtual servers in F5 BIG-IP 11.5.4, when SSL profiles are enabled, allow remote attackers to cause a denial of service resource consumption and Traffic Management Microkernel restart via an SSL alert during the handshake...

CVE-2016-4545: Improper Input Validation

Virtual servers in F5 BIG-IP 11.5.4, when SSL profiles are enabled, allow remote attackers to cause a denial of service resource consumption and Traffic Management Microkernel restart via an SSL alert during the handshake...

CVE-2016-1851

The Screen Lock feature in Apple OS X before 10.11.5 mishandles password profiles, which allows physically proximate attackers to reset expired passwords in the lock-screen state via unspecified vectors...

Design/Logic Flaw

The Screen Lock feature in Apple OS X before 10.11.5 mishandles password profiles, which allows physically proximate attackers to reset expired passwords in the lock-screen state via unspecified vectors...

CVE-2016-1851

CVE-2016-1851 affects macOS OS X El Capitan v10.11.0–10.11.4 and later; the Screen Lock feature mishandles password profiles, enabling a physically proximate local attacker to reset expired passwords from the lock screen via unspecified vectors. Impacted component: Screen Lock handling of passwor...

CVE-2016-1851

The Screen Lock feature in Apple OS X before 10.11.5 mishandles password profiles, which allows physically proximate attackers to reset expired passwords in the lock-screen state via unspecified vectors...

NetScaler Cheat Sheets for XenMobile Integration

The purpose of these NetScaler cheat sheets is to provide a reference article with key information about each Session Policy or Session Profile configured via NetScaler / XenMobile wizard. These cheat sheets are applicable for XenMobile 9 and 10.x solutions. STWBRWIPAddress Clientless Access...

SOL93600123 - OpenSSL vulnerability CVE-2016-2107

2 IPsec is vulnerable only in phase 1 IKE racoon, if configured to use AES-CBC. Vulnerability Recommended Actions If you are running a version listed in the Versions known to be vulnerable column, you can eliminate this vulnerability by upgrading to a version listed in the Versions known to be no...

U.S. developing Technology to Identify and Track Hackers Worldwide

Without adequate analysis and algorithms, mass surveillance is not the answer to fighting terrorism and tracking suspects. That's what President Obama had learned last year when he signed the USA Freedom Act, which ends the bulk collection of domestic phone data by US Intelligence Agencies. There...

Weeman v1.7 - HTTP Server for Phishing

HTTP server for phishing in python. and framework Usually you will want to run Weeman with DNS spoof attack. see dsniff, ettercap. Press 1.7 - is out 25-03-2016 Added profiles Weeman framework 0.1 is out !!! Added command line options. Beautifulsoup dependency removed. Weeman will do the followin...

openSUSE Security Update : apparmor (openSUSE-2016-491)

This update for apparmor updates some profiles. It is specifically required for the Samba security update. profile updates : - sbin.syslog-ng - usr.sbin.identd - usr.sbin.nscd allows nscd paranoia mode - usr.sbin.smbd - usr.sbin.smbldap-useradd - apache2.d/phpsysinfo updated abstractions : - aspe...

The vulnerability of the iOS operating system, which allows a perpetrator to replace the trusted profile of the MDM device

The vulnerability of the iOS operating system’s Profiles component exists due to insufficient verification of certificate authenticity. Exploiting this vulnerability allows a malicious actor to replace the trusted profile of the MDM remotely...

Llama - Location Profiles - External URLs, Possible privilege escalation, Runtime command execution vulnerabilities

HackApp vulnerability scanner discovered that application Llama - Location Profiles published at the 'play' market has multiple vulnerabilities...

CVE-2016-1766

The Profiles component in Apple iOS before 9.3 does not properly validate certificates, which allows attackers to spoof an MDM profile trust relationship via unspecified vectors...

CVE-2016-1766

The CVE-2016-1766 entry concerns Apple iOS profiles: a certificate validation flaw in the Profiles component prior to iOS 9.3 allows spoofing of an MDM profile trust relationship. The ZDI advisory (ZDI-16-314) states the flaw is in how signed MDM profiles’ certificates are checked, enabling remot...

CVE-2016-1766

The Profiles component in Apple iOS before 9.3 does not properly validate certificates, which allows attackers to spoof an MDM profile trust relationship via unspecified vectors...

CVE-2016-1766: Undefined Security Weakness

The Profiles component in Apple iOS before 9.3 does not properly validate certificates, which allows attackers to spoof an MDM profile trust relationship via unspecified vectors...

Apple iOS Profiles Spoofing Vulnerability

iOS is an operating system developed by Apple for mobile devices, and supported devices include iPhone, iPod touch, iPad, and Apple TV. A security vulnerability exists in the implementation of Profiles before iOS 9.3 where certificates are not properly validated, and attackers can spoof this with...