CVE-2016-0137: Undefined Security Weakness

The Click-to-Run C2R implementation in Microsoft Office 2013 SP1 and 2016 allows local users to bypass the ASLR protection mechanism via a crafted application, aka "Microsoft APP-V ASLR Bypass."...

Microsoft Internet Explorer CVE-2016-3292 Remote Privilege Escalation Vulnerability

Description Microsoft Internet Explorer is prone to a remote privilege-escalation vulnerability. An attacker can exploit this issue to gain elevated privileges. Successful exploits may aid in further attacks. Internet Explorer 10 and 11 are vulnerable. Technologies Affected Microsoft Internet...

September 6, 2016, update for Office 2016 (KB3115276)

None None...

August 23, 2016 — KB3176934 (OS Build 14393.82)

None None...

[SECURITY] Fedora 24 Update: perl-Module-Load-Conditional-0.68-1.fc24

This module provides simple ways to query and possibly load any of the modu les you have installed on your system during run-time...

Talking Tom Gold Run - Base64 encoded String, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Talking Tom Gold Run published at the 'play' market has multiple vulnerabilities...

Linux 64bit Ncat Shellcode SSL, MultiChannel, Persistant, Fork, IPv4/6, Password - 176 bytes

Linux 64bit Ncat Shellcode SSL, MultiChannel, Persistant, Fork, IPv4/6, Password - 176 bytes. Shellcode exploit for linx86-64 platform include include // Exploit Title: Linux 64bit Ncat + SSL + MultiChannel + Persistant + Fork + IPv4/6 + Password 176byte // Date: 7/5/2016 // Exploit Author:...

Siemens S7300/400 PLC has a Privilege Bypass Downtime Vulnerability

The Siemens S7300/400 PLC is a modular general-purpose controller from Siemens for the manufacturing industry. A privilege bypass downtime vulnerability exists in the Siemens S7300/400 PLC. An attacker can exploit the vulnerability by sending a specific message to change the PLC from the RUN stat...

Lenovo Accelerator Application Man-in-the-Middle Attack Vulnerability

Lenovo Accelerator Application is a set of accelerator programs from the Chinese company Lenovo Lenovo designed specifically for Intel chipsets. A man-in-the-middle attack vulnerability exists in the UpdateAgent in the Lenovo Accelerator Application. The vulnerability can be exploited to conduct ...

UBUNTU-CVE-2016-4453

The vmsvgafiforun function in hw/display/vmwarevga.c in QEMU allows local guest OS administrators to cause a denial of service infinite loop and QEMU process crash via a VGA command...

Android Instant Apps — Run Apps Quickly Without Installation

Downloading an app is a real pain sometimes when you don't want to install the complete app on your smartphone just for booking a movie ticket, or buying something online. Isn't that? Now, Imagine the world where you can use any Android app without actually the need to download or even install it...

Telegram (API) Cross-Site Request Forgery Vulnerability

Telegram is a cloud-based instant messaging service that supports both mobile and desktop versions, enabling users to exchange messages, pictures, and videos instantly. Telegram suffers from a cross-site request forgery vulnerability that allows an attacker to execute application functions by...

DEBIAN-CVE-2014-9770

tmpfiles.d/systemd.conf in systemd before 214 uses weak permissions for journal files under 1 /run/log/journal/%m and 2 /var/log/journal/%m, which allows local users to obtain sensitive information by reading these files...

American Fuzzy Lop Utilities: afl-utils

Utilities for automated crash sample processing/analysis, easy afl-fuzz job management and corpus optimization afl-utils is a collection of utilities to assist fuzzing with american-fuzzy-lop afl . afl-utils includes tools for: automated crash sample collection, verification, reduction and analys...

Microsoft Windows Client-Server Run-time Subsystem Security Bypass Vulnerability

Microsoft Windows is a series of operating systems released by the American company Microsoft. A security bypass vulnerability exists in the Client Server Runtime Subsystem CSRSS of Microsoft Windows, which arises from a program's failure to properly manage process tokens in memory. A local...

DEBIAN-CVE-2016-3982

Off-by-one error in the bmprle4fread function in pngxrbmp.c in OptiPNG before 0.7.6 allows remote attackers to cause a denial of service out-of-bounds read or write access and crash or possibly execute arbitrary code via a crafted image file, which triggers a heap-based buffer overflow...

MS16-048: Security Update for CSRSS (3148528)

The remote Windows host is missing a security update. It is, therefore, affected by a security feature bypass vulnerability in the Client-Server Run-time Subsystem CSRSS due to improper management of process tokens in memory. A local attacker can exploit this vulnerability, via a specially crafte...

Android Mediaserver elevation of privilege vulnerability (CNVD-2016-02042)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handset Alliance OHA in the U.S. Mediaserver is one of the multimedia service components. An elevation of privilege vulnerability exists in Android's Mediaserver. A local attacker could exploit this...

Super Knock And Run - Dangerous filesystem permissions, Exported ContentProvider, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Super Knock And Run published at the 'play' market has multiple vulnerabilities...

LINE Cookie Run - Certificates or keys found, Corrupted files, Customized SSL vulnerabilities

HackApp vulnerability scanner discovered that application LINE Cookie Run published at the 'play' market has multiple vulnerabilities...