Flash Clock - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Flash Clock published at the 'play' market has multiple vulnerabilities...

Sleep Cycle alarm clock - Customized SSL, MIT license vulnerabilities

HackApp vulnerability scanner discovered that application Sleep Cycle alarm clock published at the 'play' market has multiple vulnerabilities...

Apple iOS v9.2.1 - Multiple PassCode Bypass Vulnerabilities

Document Title: =============== Apple iOS v9.2.1 - Multiple PassCode Bypass Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1778 Video: http://www.vulnerability-lab.com/getcontent.php?id=1779 Release Date: ============= 2016-03-06...

Apple iOS v9.2.1 - Multiple PassCode Bypass Vulnerabilities

Document Title: =============== Apple iOS v9.2.1 - Multiple PassCode Bypass Vulnerabilities References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1779 View Video: https://www.youtube.com/watch?v=-XLlpnjZXFM Advisory: http://www.vulnerability-lab.com/getcontent.php?id=1778...

SUSE SLED11 / SLES11 Security Update : kdebase4-workspace (SUSE-SU-2016:0303-1)

This update for kdebase4-workspace fixes the following issues : - CVE-2014-8651: Privilege escalation via KDE Clock KCM helper when non-default polkit settings are used bsc904625 The update package also includes non-security fixes. See advisory for details. Note that Tenable Network Security has...

[SECURITY] Fedora 22 Update: chrony-2.1.1-2.fc22

A client/server for the Network Time Protocol, this program keeps your computer's clock accurate. It was specially designed to support systems with intermittent internet connections, but it also works well in permanently connected environments. It can use also hardware reference clocks, system...

Network Time Protocol Origin Timestamp Check Impersonation Vulnerability

CERT VU357792 Summary To distinguish legitimate peer responses from forgeries, a client attempts to verify a response packet by ensuring that the origin timestamp in an incoming packet matches the transmit timestamp it transmitted in its last request. A logic error exists that allows packets with...

Apple watchOS 2 - Crash (PoC)

Exploit for hardware platform in category dos / poc + Title: Apple watchOS - Remote Crash Exploit + Product: Apple + Vendor: www.apple.com + SoftWare Link : www.apple.com/watchos-2/ + Vulnerable Versions: watchOS on IOS 9.0.1 Author : Mohammad Reza Espargham Linkedin :...

SUSE SLED11 / SLES11 Security Update : kvm (SUSE-SU-2016:0020-1)

This update for kvm fixes the following issues : Security issues fixed : - CVE-2015-7512: The receive packet size is now checked in the emulated pcnet driver, eliminating buffer overflow and potential security issue by malicious guest systems. bsc957162 - CVE-2015-8345: A infinite loop in...

SUSE SLED12 / SLES12 Security Update : qemu (SUSE-SU-2016:0021-1)

This update fixes the following security issues : - Enforce receive packet size, thus eliminating buffer overflow and potential security issue. bsc957162 CVE-2015-7512 - Infinite loop in processing command block list. CVE-2015-8345 bsc956829 : Also a non-security bug fixed : - Fix cases of wrong...

SUSE-SU-2016:0010-1 Security update for kvm

This update for kvm fixes the following issues: Security issues fixed: - CVE-2015-7512: The receive packet size is now checked in the emulated pcnet driver, eliminating buffer overflow and potential security issue by malicious guest systems. bsc957162 - CVE-2015-8345: A infinite loop in processin...

Scientific Linux Security Update : ntp on 7.x x86_64 (2015:2231)

The remote Scientific Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the SLSA-2015:2231-4 advisory. - The symmetric-key feature in the receive function in ntpproto.c in ntpd in NTP 4.x before 4.2.8p2 requires a correct MAC only if the MAC field...

ntp, ntpdate, sntp security update

CentOS Errata and Security Advisory CESA-2015:2231 Updated ntp packages that fix multiple security issues, several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Moderate security impact. Common...

RHEL 7 : chrony (RHSA-2015:2241)

Updated chrony packages that fix three security issues, several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give...

Moderate: Red Hat Security Advisory: ntp security, bug fix, and enhancement update

Updated ntp packages that fix multiple security issues, several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give...

NTP Authentication Bypass Vulnerability

NTP is a network protocol that synchronizes the clocks of two computers by exchanging packets. NTP has a security vulnerability that allows a remote attacker to send NTP packets authenticated with a data password, insert malicious time data, and cause the system clock to be set incorrectly...

DLA-335-1 ntp - security update

Bulletin has no description...

CVE-2015-5300

The panicgate check in NTP before 4.2.8p5 is only re-enabled after the first change to the system clock that was greater than 128 milliseconds by default, which allows remote attackers to set NTP to an arbitrary time when started with the -g option, or to alter the time by up to 900 seconds...

UBUNTU-CVE-2015-5300

The panicgate check in NTP before 4.2.8p5 is only re-enabled after the first change to the system clock that was greater than 128 milliseconds by default, which allows remote attackers to set NTP to an arbitrary time when started with the -g option, or to alter the time by up to 900 seconds...

RHEL 6 : ntp (RHSA-2015:1459)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2015:1459 advisory. The Network Time Protocol NTP is used to synchronize a computer's time with another referenced time source. It was found that because NTP's...