Novell Groupwise Address Book Remote Code Execution

Exploit for windows platform in category dos / poc Application: Novell Groupwise Address Book Remote Code Execution Platforms: Windows Exploitation: Remote code execution CVE Number: 2011-4189 Novell TID: 733885 PRL: 2012-04 Author: Francis Provencher Protek Research Lab's Website:...

Yealink VOIP Phone Cross Site Scripting

============================================================== Secur-I Research Group Security Advisory SV-2012-005 ============================================================== Title: Yealink VOIP Phone Persistent Cross Site Scripting Vulnerability Product: Yealink Easy VOIP Phone Homepage:...

AdiOS Finds iOS Apps Capable of Dumping Users' Contacts

It’s gotten to the point now where it’s almost easier to talk about the mobile apps and services that don’t ship your personal data off to some remote server for purposes unknown rather than discussing the ones that do. The latest discussion of privacy invading apps flowed from the discovery that...

Path Reverses Course After Revelation That App Uploads User Contacts

After a researcher discovered that any person who decides to download the Path app onto their mobile device is unknowingly sending their address book to a server belonging to the social network and photo-sharing service without prior notification, the company has released a new version of the app...

Mac OS X Multiple Vulnerabilities (2012-001)

This host is missing an important security update according to Mac OS X Update/Mac OS X Security Update 2012-001. OpenVAS Vulnerability Test $Id: gbmacosxsu12-001.nasl 6521 2017-07-04 14:51:10Z cfischer $ Mac OS X Multiple Vulnerabilities 2012-001 Authors: Rachana Shetty Copyright: Copyright c 20...

Apple Mac OS X Apple Type Services ".dfont"字体文件内存破坏漏洞

BUGTRAQ ID: 51832 CVE ID: CVE-2011-3446 Mac OS是一套运行于苹果的Macintosh系列电脑上的操作系统。 Apple Mac OS X在打开Font Book中的恶意字体时存在内存破坏漏洞，攻击者可利用此漏洞在受影响应用程序中执行任意代码。 0 Apple Mac OS X 10.7.2 Apple Mac OS X 10.7.1 Apple MacOS X Server 10.7.2 Apple MacOS X Server 10.7.1 Apple MacOS X Server 10.7 Apple MacOS X Server 10.6...

APPLE-SA-2012-02-01-1 OS X Lion v10.7.3 and Security Update 2012-001

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2012-02-01-1 OS X Lion v10.7.3 and Security Update 2012-001 OS X Lion v10.7.3 and Security Update 2012-001 is now available and addresses the following: Address Book Available for: OS X Lion v10.7 to v10.7.2, OS X Lion Server v10.7 to v10.7.2...

CVE-2011-3444

Address Book in Apple Mac OS X before 10.7.3 automatically switches to unencrypted sessions upon failure of encrypted connections, which allows remote attackers to read CardDAV data by terminating an encrypted connection and then sniffing the network...

CVE-2011-3446

Apple Type Services ATS in Apple Mac OS X before 10.7.3 does not properly manage memory for data-font files, which allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted font that is accessed by Font Book...

Code injection

Address Book in Apple Mac OS X before 10.7.3 automatically switches to unencrypted sessions upon failure of encrypted connections, which allows remote attackers to read CardDAV data by terminating an encrypted connection and then sniffing the network...

Code injection

Apple Type Services ATS in Apple Mac OS X before 10.7.3 does not properly manage memory for data-font files, which allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted font that is accessed by Font Book...

CVE-2011-3446

Summary: CVE-2011-3446 affects Apple Type Services (ATS) in Mac OS X up to 10.7.3. The vulnerability stems from improper memory management for data-font files, enabling remote code execution or a denial of service when a crafted font is opened by Font Book. Affected product/component: Apple Mac O...

CVE-2011-3444

CVE-2011-3444 affects Apple OS X Address Book prior to 10.7.3. The issue: when an encrypted connection fails, Address Book downgrades to unencrypted sessions, enabling an attacker to read CardDAV data by terminating encryption and sniffing traffic. Public details indicate Apple addressed this in ...

CVE-2011-3444

Address Book in Apple Mac OS X before 10.7.3 automatically switches to unencrypted sessions upon failure of encrypted connections, which allows remote attackers to read CardDAV data by terminating an encrypted connection and then sniffing the network...

CVE-2011-3446

Apple Type Services ATS in Apple Mac OS X before 10.7.3 does not properly manage memory for data-font files, which allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted font that is accessed by Font Book...

Apple Mac OS X ATS data-font memory corruption vulnerability

Overview Apple Mac OS X ATS contains a memory corruption vulnerability that may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Apple Mac OS X ATS Apple Type Services fails to properly handle malformed data-font .dfont files, resulting in...

Mac OS X 10.7.x < 10.7.3 Multiple Vulnerabilities (BEAST)

The remote host is running a version of Mac OS X 10.7.x that is prior to 10.7.3. The newer version contains multiple security-related fixes for the following components : - Address Book - Apache - ATS - CFNetwork - CoreMedia - CoreText - CoreUI - curl - Data Security - dovecot - filecmds - ImageI...

Reading material

Stuxnet expert and industry gadfly Ralph Langner was in attendance at S4 this year, as he has been in past years. This year, however, Langner had a new book to promote: Robust Control System Networks – a kind of call to arms for the industrial control sector to respond to a ‘post Stuxnet’ world...

Social Book Facebook Clone Script Cross Site Scripting

Exploit Title: Social Book Facebook Clone Script Reflected XSS Vulnerability Date: 2011 Author: Eyup CELIK Version: All Version Tested on: All versions are Vulnerability Web Site: www.eyupcelik.com.tr ISSUE XSS can be done using the command input Vulnerable Page: signup.php lostpass.php login.php...

Calibre E-Book Reader - Local Privilege Escalation (3)

/ .80 Calibrer Assault Mount by zx2c4 Yesterday's assult mount used inotify to mount into /etc/pam.d. Today we expand the attack by adding a race toggler so we can mount from non-block devices. Enjoy. - zx2c4 2011-11-4 greets to djrbliss / include include include include include int mainint argc,...