The vulnerability of the rollback protection system in the Android operating system from the CAF repository allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Android operating system from the CAF repository is caused by unauthorized access to the indexed resource. Exploiting this vulnerability allows a malicious actor, operating remotely, to use the offset value beyond its permitted range within the system’s rollback protectio...

Hacker Publishes iOS Secure Enclave Firmware Decryption Key

A hacker Thursday afternoon published what he says is the decryption key for Apple iOS’ Secure Enclave Processor SEP firmware. The hacker, identified only as xerub, told Threatpost that the key unlocks only the SEP firmware, and that this would not impact user data. “Everybody can look and poke a...

Design/Logic Flaw

Vulnerability in the BI Publisher component of Oracle Fusion Middleware subcomponent: BI Publisher Security. The supported version that is affected is 11.1.1.7.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise BI Publisher. Successful...

CVE-2017-10210

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. The supported version that is affected is Prior to 5.1.24. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to...

Code injection

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Kernel. The supported version that is affected is 11. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Solaris executes to compromise Solaris. Successfu...

Unspecified Vulnerability in Oracle VM VirtualBox (CNVD-2017-17515)

VirtualBox is cross-platform virtualization software for x86-based systems. A security vulnerability exists in the Core component implementation of Oracle VM VirtualBox versions prior to 5.1.24, which can be exploited by attackers to compromise system integrity and availability...

Oracle Java SE/JRockit Remote Vulnerability (CNVD-2017-18126)

Java SE is short for Java Platform Standard Edition, based on the JDK and JRE, for developing and deploying Java applications for desktops, servers, and embedded devices and real-time environments. Oracle Java SE/JRockit has a security vulnerability that could be exploited by an attacker to...

Tilde CMS 1.01 - Multiple Vulnerabilities

Tilde CMS 1.01 - Multiple Vulnerabilities Exploit Title: Tilde CMS 1.01 Multiple Vulnerabilities Date: July 7th, 2017 Exploit Authors: Paolo Forte, Raffaele Forte Vendor Homepage: http://www.tildenetwork.com/ Version: Tilde CMS 1.0.1 Tested on: Ubuntu 12.04, PHP 5.3.10 I. INTRODUCTION...

Oracle Solaris Local Security Vulnerability (CNVD-2017-06248)

Oracle Sun Solaris is a computer operating system developed by Sun Microsystems. It is a derivative of the UNIX operating system. Oracle Sun Solaris 11.3 has a security vulnerability in its implementation, which can be exploited by a local attacker to compromise system confidentiality, integrity...

Apple macOS Sierra System Integrity Protection Input Validation Vulnerability

Apple macOS Sierra is an operating system developed by Apple for Mac computers.System Integrity Protection is one of the components of System Integrity Protection. An input validation vulnerability exists in the System Integrity Protection component in Apple macOS Sierra versions prior to 10.12.4...

CVE-2017-2318

A vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow an authenticated malicious user to read log files which will compromise the integrity of the system, or provide elevation of privileges...

Oracle MySQL Enterprise Monitor Remote Vulnerability

Oracle MySQL Server is a lightweight relational database system. A remote security vulnerability exists in Oracle MySQL Enterprise Monitor, which can be exploited by remote attackers to compromise system integrity, confidentiality...

Oracle MySQL Connectors Local Vulnerability

OracleMySQL is an open source relational database management system from Oracle. The database system is characterized by high performance, low cost, good reliability , etc. MySQLConnectors is one of the connection to the use of MySQL application driver . Oracle MySQL Connectors has a local securi...

Oracle MySQL Server Local Vulnerability

Oracle MySQL Server is a lightweight relational database system. A local security vulnerability exists in Oracle MySQL Connectors that could be exploited by an attacker to compromise system integrity...

Oracle WebCenter Sites Remote Vulnerability

Oracle Fusion Middleware is a comprehensive middleware portfolio of SOA and middleware products. An unspecified security vulnerability exists in Oracle Fusion Middleware WebCenter Sites, which can be exploited by remote attackers to compromise system confidentiality, integrity...

CVE-2017-6974

An issue was discovered in certain Apple products. macOS before 10.12.4 is affected. The issue involves the system-installation subsystem of the "System Integrity Protection" component. It allows attackers to modify the contents of a protected disk location via a crafted app...

CVE-2017-6974

An issue was discovered in certain Apple products. macOS before 10.12.4 is affected. The issue involves the system-installation subsystem of the "System Integrity Protection" component. It allows attackers to modify the contents of a protected disk location via a crafted app...

Code injection

An issue was discovered in certain Apple products. macOS before 10.12.4 is affected. The issue involves the system-installation subsystem of the "System Integrity Protection" component. It allows attackers to modify the contents of a protected disk location via a crafted app...

CVE-2017-6974

CVE-2017-6974 affects macOS Sierra prior to 10.12.4 in the System Integrity Protection’s system-installation validation. A crafted application could bypass protections and modify contents at a protected disk location due to a validation issue during installation. The Apple advisory HT207615 lists...

CVE-2017-6974

An issue was discovered in certain Apple products. macOS before 10.12.4 is affected. The issue involves the system-installation subsystem of the "System Integrity Protection" component. It allows attackers to modify the contents of a protected disk location via a crafted app...