CVE-2016-9892

The esetsdaemon service in ESET Endpoint Antivirus for macOS before 6.4.168.0 and Endpoint Security for macOS before 6.4.168.0 does not properly verify X.509 certificates from the edf.eset.com SSL server, which allows man-in-the-middle attackers to spoof this server and provide crafted responses ...

PT-2017-10383

Name of the Vulnerable Software and Affected Versions ESET Endpoint Antivirus for macOS versions prior to 6.4.168.0 ESET Endpoint Security for macOS versions prior to 6.4.168.0 Description The issue concerns the esets daemon service, which fails to properly verify X.509 certificates from the...

CVE-2017-2351

An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. The issue involves the "WiFi" component, which allows physically proximate attackers to bypass the activation-lock protection mechanism and view the home screen via unspecified vectors...

CVE-2017-2351

An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. The issue involves the "WiFi" component, which allows physically proximate attackers to bypass the activation-lock protection mechanism and view the home screen via unspecified vectors...

Authentication flaw

An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. The issue involves the "WiFi" component, which allows physically proximate attackers to bypass the activation-lock protection mechanism and view the home screen via unspecified vectors...

CVE-2017-2351

CVE-2017-2351 affects iOS prior to 10.2.1 in the Wi‑Fi component. A physically proximate attacker could bypass activation lock and briefly view the home screen due to improper handling of input; update to iOS 10.2.1 (per Apple advisory HT207482) to remediate.

CVE-2017-2351

An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. The issue involves the "WiFi" component, which allows physically proximate attackers to bypass the activation-lock protection mechanism and view the home screen via unspecified vectors...

CVE-2017-2351: Improper Input Validation

An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. The issue involves the "WiFi" component, which allows physically proximate attackers to bypass the activation-lock protection mechanism and view the home screen via unspecified vectors...

PT-2017-15378

Name of the Vulnerable Software and Affected Versions iOS versions prior to 10.2.1 Description An issue in certain Apple products allows physically proximate attackers to bypass the activation-lock protection mechanism and view the home screen. The issue involves the WiFi component. Recommendatio...

Rockwell Automation FactoryTalk Activation

CVSS v3 8.8 REPOSTED INFORMATION This advisory was originally posted to the NCCIC Portal on February 16, 2017, and is being released to the ICS-CERT web site. AFFECTED PRODUCTS The following versions of FactoryTalk Activation, a component of FactoryTalk Services Platform, are affected: FactoryTal...

Security Advisory - Privilege Escalation Vulnerability in Huawei Smart Phones

There is a privilege escalation vulnerability in Huawei smart phones. An unauthenticated attacker can bypass phone activation to user management page of the phone and create a new user. Successful exploit could allow the attacker operate part function of the phone. Vulnerability ID:...

SUSE-SU-2017:0292-1 Security update for dbus-1

This update for dbus-1 to version 1.8.22 fixes one security issue and bugs. The following security issue was fixed: - bsc1003898: Do not treat ActivationFailure message received from root-owned systemd name as a format string. The following upstream changes are included: - Change the default...

CVE-2017-5574

SQL injection vulnerability in register.php in GeniXCMS before 1.0.0 allows unauthenticated users to execute arbitrary SQL commands via the activation parameter...

CVE-2017-5574

SQL injection vulnerability in register.php in GeniXCMS before 1.0.0 allows unauthenticated users to execute arbitrary SQL commands via the activation parameter...

PT-2017-16585

Name of the Vulnerable Software and Affected Versions GeniXCMS versions prior to 1.0.0 Description The issue allows unauthenticated users to execute arbitrary SQL commands. This is achieved via the activation parameter in the register.php file. Recommendations For versions prior to 1.0.0, update ...

CVE-2017-5574: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in register.php in GeniXCMS before 1.0.0 allows unauthenticated users to execute arbitrary SQL commands via the activation parameter...

Microsoft Power Point 2016 - Java Code Execution Exploit

Exploit for windows platform in category local exploits Exploit Title: Microsoft Power Point Java Payload Code Execution Exploit Author: Fady Mohamed Osman @fadyosman Demo Video : https://www.youtube.com/watch?v=DOJSUJK7hRo Video Tutorial : https://www.youtube.com/watch?v=Lih-iuXgEM Youtube...

Microsoft Power Point Java Payload Code Execution

Exploit Title: Microsoft Power Point Java Payload Code Execution Exploit Author: Fady Mohamed Osman @fadyosman Exploit-db : http://www.exploit-db.com/author/?a=2986 Demo Video : https://www.youtube.com/watch?v=DOJSUJK7hRo Video Tutorial : https://www.youtube.com/watch?v=Lih-iuXgEM Youtube Channel...

Huawei P9 Mobile Activation Bypass Vulnerability

The Huawei P9 is a smartphone product from the Chinese company Huawei Huawei. The Huawei P9 suffers from a phone activation bypass vulnerability. An unauthenticated attacker can bypass the phone activation step and go directly to the system settings page...

Security Advisory - Phone Activation Bypass Vulnerability in Huawei Smartphones

There is a phone activation bypass vulnerability in Huawei smartphones. Successful exploit could allow an unauthenticated attacker to bypass phone activation to settings page of the phone. Vulnerability ID: HWPSIRT-2016-12004 This vulnerability has been assigned CVE ID: CVE-2017-2705. Huawei has...