CVE-2016-4656

The kernel in Apple iOS before 9.3.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service memory corruption via a crafted app. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...

On the Chrome V8 engine“BadKernel”vulnerability briefings-vulnerability warning-the black bar safety net

! Recently, the national information security vulnerabilities library CNNVD received 3 6 0 mobile Guard Alpha team on the Chrome V8 engine“BadKernel”vulnerability is the case of the message send. The vulnerability exists in the Chrome V8 engine of the previous versions, a remote attacker can use...

Wechat discovered arbitrary code execution vulnerability 3 6 0 mobile Guard provides a self-test programme-vulnerability warning-the black bar safety net

Recently, the 3 6 0 mobile Guard Alpha team-Alpha Team exclusive found wechat remote arbitrary code execution vulnerability, which was named badkernel it. 3 6 0 mobile Guard Alpha team found, through this vulnerability an attacker may access the micro-channel full control, compromise the user's...

The vulnerabilities of the Microsoft Office suite of programs, the Microsoft Word text editor, the Microsoft Office Compatibility Pack, the Microsoft Word Viewer software for reading doc files, the Microsoft SharePoint Server corporate application suite, the Microsoft Office Web Apps, and the Microsoft Office Online Server web server allow a perpetrator to execute arbitrary code.

The vulnerabilities of the Microsoft Office package, the Microsoft Word text editor, the Microsoft Office Compatibility Pack, the Microsoft Word Viewer for reading doc files, the Microsoft SharePoint Server corporate application, and the Microsoft Office Web Apps and Microsoft Office Online Serve...

Multiple buffer overflow vulnerabilities in Android on Nexus devices

Android on Nexus is Google's line of high-end phones powered by stock Android. Android before 2016-08-05 on Nexus 5 and 7 devices suffers from multiple buffer overflow vulnerabilities that allow attackers to gain privileges via a crafted application...

Storefront 3.5 - Error: There are no apps or desktops available for you at this time

Storefront 3.5 - Unable to get any desktop show up using the URL of storefront...

CVE-2014-9872

The diag driver in the Qualcomm components in Android before 2016-08-05 on Nexus 5 devices does not ensure unique identifiers in a DCI client table, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28750155 and Qualcomm internal bug CR590721...

CVE-2014-9872

The diag driver in the Qualcomm components in Android before 2016-08-05 on Nexus 5 devices does not ensure unique identifiers in a DCI client table, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28750155 and Qualcomm internal bug CR590721...

CVE-2016-3833

The Shell component in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01 does not properly manage the MANAGEUSERS and CREATEUSERS permissions, which allows attackers to bypass intended access restrictions via a crafted application, aka internal bug 29189712...

CVE-2016-2497

services/core/java/com/android/server/pm/PackageManagerService.java in the framework APIs in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01 allows attackers to increase intent-filter priority via a crafted application, aka internal bug 27450489...

Android Framework APIs Component Privilege Vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA.Framework APIs are one of the API components used to create the framework. A power lifting vulnerability exists in the Framework APIs component in Android. An attacker can exploit...

The vulnerability of the Android operating system, which allows a hacker to bypass the security mechanisms of a isolated execution environment

The vulnerability of the libs/binder/Parcel.cpp file in the Parcels software interface of the Android operating system is related to the lack of checking for the return value of system calls. Exploiting this vulnerability allows a malicious actor to bypass the security mechanisms of isolated...

Shopify: Staff member can delete Private Apps

Hi Team, Bug description : I noticed that Full access staff member doesn't have access to private Apps Even he has access to Apps. But a Staff member can actually Delete Private Apps through the normal App link by changing the ID. Steps to reproduce : 1. Create A shop and install any app. Also...

Internet Bug Bounty: Use After Free Vulnerability in array_walk()/array_walk_recursive()

https://bugs.php.net/bug.php?id=70713 I think this bugs is still security issue since this bug can be still triggered remotely in some real world&apps. Example: https://github.com/zendframework/zend-loader/blob/ceb32b5129525e1f19b01f37dbbcc6398b0a9635/src/ClassMapAutoloader.phpL210-L215...

Android OS Contacts app fails to restrict access permissions

Overview The Contacts app within the Android OS contains a vulnerability where it fails to restrict access permissions. The Contacts app within the Android OS receives requests for outgoing calls through Intents and calls the Dialer app. The Contacts app contains a vulnerability where it fails to...

How to Collect Xcode Logs

You can collect system logs on iOS devices either by using iPhone Configuration Utility tool or Xcode. You can then email the files to Citrix support for help troubleshoot issues with apps...

CVE-2016-3282

Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word 2016, Word for Mac 2011, Word 2016 for Mac, Office Compatibility Pack SP3, Word Viewer, Word Automation Services on SharePoint Server 2010 SP2, Word Automation Services on SharePoint Server 2013 SP1,...

CVE-2016-3281

Microsoft Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word 2016, Word for Mac 2011, Word 2016 for Mac, Word Automation Services on SharePoint Server 2010 SP2, and Office Web Apps 2010 SP2 allow remote attackers to execute arbitrary code via a crafted Office document, aka...

CVE-2016-3279

Microsoft Office 2010 SP2, Excel 2010 SP2, PowerPoint 2010 SP2, Word 2010 SP2, Excel 2013 SP1, PowerPoint 2013 SP1, Word 2013 SP1, Excel 2013 RT SP1, PowerPoint 2013 RT SP1, Word 2013 RT SP1, Excel 2016, Word 2016, Word Automation Services on SharePoint Server 2010 SP2, and Office Web Apps 2010 S...

Memory corruption

Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word 2016, Word for Mac 2011, Word 2016 for Mac, Office Compatibility Pack SP3, Word Viewer, Word Automation Services on SharePoint Server 2010 SP2, Word Automation Services on SharePoint Server 2013 SP1,...