7077 matches found
MS16-107: Description of the security update for SharePoint Server 2010 Office Web Apps: September 13, 2016
MS16-107: Description of the security update for SharePoint Server 2010 Office Web Apps: September 13, 2016 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these...
Multiple Icecream Apps - Insecure File Permissions Privilege Escalation
Multiple Icecream Apps - Insecure File Permissions Privilege Escalation Exploit Title: Multiple Icecream Apps Local Privilege Escalation Date: 13/09/2016 Exploit Author: Tulpa Contact: [email protected] Author website: www.tulpa-security.com Vendor Homepage: icecreamapps.com Software...
Microsoft Office CVE-2016-3360 Memory Corruption Vulnerability
Description Microsoft Office is prone to a remote memory-corruption vulnerability because it fails to properly handle objects in memory. An attacker can leverage this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in deni...
Multiple Icecream Apps - Insecure File Permissions Privilege Escalation
Exploit Title: Multiple Icecream Apps Local Privilege Escalation Date: 13/09/2016 Exploit Author: Tulpa Contact: [email protected] Author website: www.tulpa-security.com Vendor Homepage: icecreamapps.com Software Versions Affected: Icecream Ebook Reader 4.21 | Icecream Screen Recorder 4.21...
Icecream Apps - Insecure File Permissions Privilege Escalation
Exploit for windows platform in category local exploits Exploit Title: Multiple Icecream Apps Local Privilege Escalation Date: 13/09/2016 Exploit Author: Tulpa Contact: email protected Author website: www.tulpa-security.com Vendor Homepage: icecreamapps.com Software Versions Affected: Icecream...
Microsoft Office CVE-2016-3357 Memory Corruption Vulnerability
Description Microsoft Office is prone to a remote memory-corruption vulnerability because it fails to properly handle objects in memory. An attacker can leverage this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in deni...
Android Mediaserver Denial of Service Vulnerability (CNVD-2016-07432)
Android is a Linux-based open source operating system developed by Google Inc. and the Open Handheld Consortium. A security vulnerability exists in Android Mediaserver, which allows remote attackers to build malicious applications that can be exploited to trick users into parsing, which can crash...
Android Mediaserver Denial of Service Vulnerability (CNVD-2016-07429)
Android is a Linux-based open source operating system developed by Google Inc. and the Open Handheld Consortium. A security vulnerability exists in Android Mediaserver, which allows remote attackers to build malicious applications that can be exploited to trick users into parsing, which can crash...
Stable Channel Update for Chrome OS
The Stable channel has been updated to 53.0.2785.103 Platform version: 8530.81.0 for all Chrome OS devices except Google Chromebook Pixel 2015, Acer Chromebook R11, ASUS Chromebook Flip C100PA, HP Chromebox CB1, and Acer C7 Chromebook. This build contains a number of bug fixes, security updates,...
Android LibUtils Arbitrary Code Execution Vulnerability
Android is a Linux-based open source operating system developed by Google Inc. and the Open Handheld Consortium. A security vulnerability in Android LibUtils allows remote attackers to exploit the vulnerability to build malicious applications that can be elevated in privilege by tricking users in...
Windows Modern Apps are not launching with Profile Management enabled
Certain Windows 8.x Modern Apps such as PC Settings are not launching with Profile management UPM enabled. If UPM is disabled via Policy and a new user logs on to the PC, the Modern App for PC Settings launches as expected...
Google Chrome V8 vulnerabilities technical analysis and protection solution-vulnerability warning-the black bar safety net
Google Chrome V8 engine 3. 2 0 to 4. 2 version of in the presence of a remote code execution vulnerability, the vulnerability is due to source code“observeacceptinvalid”the exception type is mistakenly written as“observeinvalidaccept”in. An attacker can exploit the vulnerability to cause kMessage...
CVE-2016-4656
The kernel in Apple iOS before 9.3.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service memory corruption via a crafted app. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...
On the Chrome V8 engine“BadKernel”vulnerability briefings-vulnerability warning-the black bar safety net
! Recently, the national information security vulnerabilities library CNNVD received 3 6 0 mobile Guard Alpha team on the Chrome V8 engine“BadKernel”vulnerability is the case of the message send. The vulnerability exists in the Chrome V8 engine of the previous versions, a remote attacker can use...
Wechat discovered arbitrary code execution vulnerability 3 6 0 mobile Guard provides a self-test programme-vulnerability warning-the black bar safety net
Recently, the 3 6 0 mobile Guard Alpha team-Alpha Team exclusive found wechat remote arbitrary code execution vulnerability, which was named badkernel it. 3 6 0 mobile Guard Alpha team found, through this vulnerability an attacker may access the micro-channel full control, compromise the user's...
The vulnerabilities of the Microsoft Office suite of programs, the Microsoft Word text editor, the Microsoft Office Compatibility Pack, the Microsoft Word Viewer software for reading doc files, the Microsoft SharePoint Server corporate application suite, the Microsoft Office Web Apps, and the Microsoft Office Online Server web server allow a perpetrator to execute arbitrary code.
The vulnerabilities of the Microsoft Office package, the Microsoft Word text editor, the Microsoft Office Compatibility Pack, the Microsoft Word Viewer for reading doc files, the Microsoft SharePoint Server corporate application, and the Microsoft Office Web Apps and Microsoft Office Online Serve...
Storefront 3.5 - Error: There are no apps or desktops available for you at this time
Storefront 3.5 - Unable to get any desktop show up using the URL of storefront...
Multiple buffer overflow vulnerabilities in Android on Nexus devices
Android on Nexus is Google's line of high-end phones powered by stock Android. Android before 2016-08-05 on Nexus 5 and 7 devices suffers from multiple buffer overflow vulnerabilities that allow attackers to gain privileges via a crafted application...
CVE-2014-9872
The diag driver in the Qualcomm components in Android before 2016-08-05 on Nexus 5 devices does not ensure unique identifiers in a DCI client table, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28750155 and Qualcomm internal bug CR590721...
CVE-2014-9872
The diag driver in the Qualcomm components in Android before 2016-08-05 on Nexus 5 devices does not ensure unique identifiers in a DCI client table, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28750155 and Qualcomm internal bug CR590721...