CVE-2017-2716

The camerafs driver in Mate 9 Versions earlier than MHA-AL00BC00B173 has buffer overflow vulnerability. An attacker tricks a user into installing a malicious application which has the system privilege of the Android system and sends a specific parameter to the driver of the smart phone, causing a...

Apple macOS High Sierra CFNetwork Component Arbitrary Code Execution Vulnerability

Apple macOS High Sierra is a specialized operating system developed by Apple for Mac computers.CFNetwork is one of the network protocol libraries. An arbitrary code execution vulnerability exists in the CFNetwork component of Apple macOS High Sierra versions prior to 10.13.1. An attacker can...

Apple Mac OS X Code Execution And Information Disclosure Vulnerabilities (HT208221)

Apple Mac OS X is prone to code execution and information disclosure vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Apple Mac OS X Multiple Vulnerabilities - 01 - (HT208221)

Apple Mac OS X is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Apple Mac OS X Multiple Vulnerabilities (HT208221)

Apple Mac OS X is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Apple macOS High Sierra fsck_msdos Memory Corruption Vulnerability

Apple macOS High Sierra is a specialized operating system developed by Apple for Mac computers. fsckmsdos is one of the file system checking tools. A security vulnerability exists in the fsckmsdos component in Apple macOS High Sierra versions prior to 10.13.1. An attacker can exploit the...

Apple macOS High Sierra Sandbox Component Arbitrary Code Execution Vulnerability

Apple macOS High Sierra is a specialized operating system developed by Apple for Mac computers.Sandbox is a sandboxing system that provides the operating system with the ability to limit the way applications use system resources. An arbitrary code execution vulnerability exists in the Sandbox...

Apple macOS High Sierra HFS Component Arbitrary Code Execution Vulnerability

Apple macOS High Sierra is a specialized operating system developed by Apple for Mac computers.HFS is one of the file server components. An arbitrary code execution vulnerability exists in the HFS component in Apple macOS High Sierra versions prior to 10.13.1. A remote attacker can exploit this...

Apple macOS High Sierra Arbitrary Code Execution Vulnerability

Apple macOS High Sierra is a specialized operating system developed by Apple for Mac computers.APFS is one of the file system components for Apple devices. A security vulnerability exists in the APFS component of Apple macOS High Sierra versions prior to 10.13.1. An attacker can exploit the...

Apple macOS High Sierra Remote Management Code Execution Vulnerability

Apple macOS High Sierra is a specialized operating system developed by Apple for Mac computers.Remote Management is one of the remote management components. A security vulnerability exists in the Remote Management component of Apple macOS High Sierra versions prior to 10.13.1. The vulnerability c...

Exploit for CVE-2016-3309

Kernel Exploitation Case Study - "Wild" Pool Overflow on Win1...

Microsoft Windows 10 x64 RS2 - win32kfull!bFill Pool Overflow Exploit

Exploit for windows platform in category local exploits Sources: https://siberas.de/blog/2017/10/05/exploitationcasestudywildpooloverflowCVE-2016-3309reloaded.html https://github.com/siberas/CVE-2016-3309Reloaded Exploits for the recently-patched win32kfull!bFill vulnerability. Executing the...

Microsoft Windows 10 RS2 (x64) - win32kfull!bFill Pool Overflow

Microsoft Windows 10 RS2 x64 - win32kfull!bFill Pool Overflow Sources: https://siberas.de/blog/2017/10/05/exploitationcasestudywildpooloverflowCVE-2016-3309reloaded.html https://github.com/siberas/CVE-2016-3309Reloaded Exploits for the recently-patched win32kfull!bFill vulnerability. Executing th...

Microsoft Windows 10 RS2 (x64) - 'win32kfull!bFill' Pool Overflow

Sources: https://siberas.de/blog/2017/10/05/exploitationcasestudywildpooloverflowCVE-2016-3309reloaded.html https://github.com/siberas/CVE-2016-3309Reloaded Exploits for the recently-patched win32kfull!bFill vulnerability. Executing the Palette or Bitmap exploit will give you SYSTEM privileges on...

Play TV 1.25.1 Build r123776 DLL Hijacking

Document Title: =============== Play TV v1.25.1Build r123776 - DLL Hijack Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2085 Release Date: ============= 2017-09-04 Vulnerability Laboratory ID VL-ID: ====================================...

TeraCopyService 3.1 Unquoted Service Path Privilege Escalation

Exploit Title: TeraCopyService 3.1 - Unquoted Service Path Privilege Escalation Date of Discovery: August 31 2017 Exploit Author: Rithwik Jayasimha Author Homepage/Contact: https://thel3l.me Vendor Name: Codesector Vendor Homepage: http://www.codesector.com/ Software Link: TOVA 8.2-202 -...

BSA-2017-355

Security Advisory ID : BSA-2017-355 Component : Stack Revision : 2.0: Interim A flaw was found in the way memory was being allocated on the stack for user space binaries. If heap or different memory region and stack memory regions were adjacent to each other, an attacker could use this flaw to ju...

The vulnerability of the FileUploadController servlet in the web application, which is designed for managing and monitoring printing devices and image processing. SyncThru 6 allows a perpetrator to execute arbitrary code with system privileges.

The vulnerability of the FileUploadController servlet in the web application, which is designed for managing and monitoring printing devices and image processing, exists due to an incorrect path limitation for the restricted directory. Exploiting this vulnerability allows a malicious actor to...

The vulnerability of the FileUploadController servlet in the web application, which is designed for managing and monitoring printing devices and image processing. SyncThru 6 allows a perpetrator to execute arbitrary code with system privileges.

The vulnerability of the FileUploadController servlet in the web application, which is designed for managing and monitoring printing devices and image processing, exists due to an incorrect path limitation for the restricted directory. Exploiting this vulnerability allows a malicious actor to...

Privilege Control Vulnerability in Multiple Huawei Phones

The Honor 8, Honor V8, Honor 9, Honor V9, Enjoy 7 Plus, P9, P10 Plus, Nova 2, and Nova 2 Plus are a smartphone from the Chinese company Huawei Huawei. Several Huawei phones have a privilege control vulnerability. An attacker who gains system privileges in the phone can use the vulnerability to...