Android NVIDIA Camera Driver Elevation of Privilege Vulnerability

Android on Nexus 9 is an open source operating system that runs on the Nexus 6 and is based on Linux. A security vulnerability in the NVIDIA camera driver for Android on Nexus 9 allows an attacker to exploit the vulnerability to build special applications with elevated privileges...

Microsoft Office Web Apps Multiple Vulnerabilities (3163610)

This host is missing an important security update according to Microsoft Bulletin MS16-070. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE...

MS16-070: Description of the security update for SharePoint Server 2010 Office Web Apps: June 14, 2016

MS16-070: Description of the security update for SharePoint Server 2010 Office Web Apps: June 14, 2016 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these...

MS16-070: Description of the security update for Office Web Apps Server 2013: June 14, 2016

None None...

Microsoft Office CVE-2016-0025 Memory Corruption Vulnerability

Description Microsoft Office is prone to a remote memory-corruption vulnerability because it fails to properly handle objects in memory. An attacker can leverage this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in deni...

Microsoft Office CVE-2016-3234 Information Disclosure Vulnerability

Description Microsoft Office is prone to an information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may aid in further attacks. Technologies Affected Microsoft Office 2010 Service Pack 2 32-bit editions Microsoft Office 2010 Service Pack 2 64-bi...

CVE-2016-2498

The Qualcomm Wi-Fi driver in Android before 2016-06-01 on Nexus 7 2013 devices allows attackers to bypass intended data-access restrictions via a crafted application, aka internal bug 27777162...

WSTMall apps\home\action\ArticlesModel.class.php articleId参数 SQL注入

No description provided by source...

Android Security Bulletin—June 2016Stay organized with collectionsSave and categorize content based on your preferences.

The Android Security Bulletin contains details of security vulnerabilities affecting Android devices. Alongside the bulletin, we have released a security update to Nexus devices through an over-the-air OTA update. The Nexus firmware images have also been released to the Google Developer site...

SandJacking Attack Puts iOS Devices At Risk to Rogue Apps

Apple has yet to patch a vulnerability disclosed during last week’s Hack in the Box hacker conference in Amsterdam that allows an attacker with physical access—even on the latest versions of iOS—to swap out legitimate apps with malicious versions undetected on the device. Researcher Chilik Tamir ...

The vulnerabilities of Microsoft Office packages, Microsoft Office Web Apps, the Microsoft SharePoint Server corporate application package, and the Microsoft Office software allow a perpetrator to execute arbitrary code.

The vulnerabilities of Microsoft Office packages, Microsoft Office Web Apps, and the Microsoft SharePoint Server corporate application packages are due to buffer overflows. Exploiting these vulnerabilities allows a malicious actor to execute arbitrary code using a specially crafted Office documen...

The vulnerabilities of Microsoft Office packages, Microsoft Office Web Apps, and the Microsoft SharePoint Server corporate application allow a perpetrator to execute arbitrary code.

The vulnerability of Microsoft Office packages, Microsoft Office Web Apps, and the Microsoft SharePoint Server corporate application is due to buffer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted Office document from a remote...

The vulnerability of the Microsoft SharePoint Server corporate application package, the Microsoft Office Web Apps package, Microsoft Office, and the Microsoft Word text editor allows a perpetrator to execute arbitrary code.

The vulnerability of the Windows font library in Microsoft SharePoint Server, Microsoft Office Web Apps, Microsoft Office, and Microsoft Word is related to access control deficiencies. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted...

Iran orders all Messaging Apps to store its citizens' data within Country

Last year, Iran blocked Telegram and many other social networks after their founders refused to help Iranian authorities to spy on their citizens. Now it looks like Iranian government wants tighter controls on all foreign messaging and social media apps operating in the country that will give the...

CVE-2016-1829

The kernel in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of service memory corruption via a crafted app, a different vulnerability than CVE-2016-1827, CVE-2016-1828,...

Android Instant Apps — Run Apps Quickly Without Installation

Downloading an app is a real pain sometimes when you don't want to install the complete app on your smartphone just for booking a movie ticket, or buying something online. Isn't that? Now, Imagine the world where you can use any Android app without actually the need to download or even install it...

Google Set to Kill SSLv3, RC4 in SMTP, Gmail in June

Google clarified this week exactly when it plans to disable support for the RC4 stream cipher and the SSLv3 protocol on the company’s SMTP servers and Gmail’s web servers. It turns out the end will come sooner than later; the company announced it will begin to disable both a month from now, on Ju...

Malware-Laced Porn Apps Behind Wave of Android Lockscreen Attacks

Incidents of Android lockscreen malware masquerading as porn apps are a growing concern to security analysts who are forecasting an uptick in attacks. Once infected, Android users bitten by this malware appear to be locked out of their device and are forced to undergo a complex extraction of the...

Apache Cordova fails to restrict access permissions

Overview Apache Cordova contains a vulnerability where whitelist restrictions are not properly applied. Apache Cordova provided by the Apache Software Foundation is a framework for creating mobile applications for various platforms. iOS applications built using Apache Cordova contain a...

CVE-2016-0183

The Windows font library in Microsoft Office 2010 SP2, Word 2010 SP2, Word Automation Services on SharePoint Server 2010 SP2, and Office Web Apps 2010 SP2 allows remote attackers to execute arbitrary code via a crafted embedded font, aka "Microsoft Office Graphics RCE Vulnerability."...