2861 matches found
Input validation
The kernel in Apple iOS before 8.4.1 does not properly restrict debugging features, which allows attackers to bypass background-execution limitations via a crafted app...
CVE-2015-5787
The kernel in Apple iOS before 8.4.1 does not properly restrict debugging features, which allows attackers to bypass background-execution limitations via a crafted app...
CVE-2015-5787
The kernel in Apple iOS before 8.4.1 does not properly restrict debugging features, which allows attackers to bypass background-execution limitations via a crafted app...
CVE-2015-5787
The CVE concerns Apple iOS before 8.4.1, where the kernel fails to properly restrict debugging features, enabling bypass of background-execution restrictions via a crafted app. Affected component: iOS kernel (pre-8.4.1). Root cause: improper restriction of debugging functionality. Impact: attacke...
CVE-2015-5787: Undefined Security Weakness
The kernel in Apple iOS before 8.4.1 does not properly restrict debugging features, which allows attackers to bypass background-execution limitations via a crafted app...
PT-2015-7064
Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 8.4.1 Description The issue is related to the kernel in Apple iOS, which does not properly restrict debugging features. This allows attackers to bypass background-execution limitations via a crafted app...
The vulnerability of the microprogramming software in Janitza UMG 508, 509, 511, 604, 605 power supply monitoring systems allows a perpetrator to read and write files or execute JASIC code.
The vulnerability of the debugging interface of Microprogramming Software for Control System Chains of Janitza UMG models 508, 509, 511, 604, and 605 is related to the absence of an authentication procedure. Exploiting this vulnerability allows a malicious actor to read and write files, or execut...
Xen Debugging Exception Handling Denial of Service Vulnerability
Xen is a virtualization technology for the Linux kernel that allows multiple operating systems to run simultaneously. A security vulnerability exists in Xen's handling of debugging exceptions, which allows the guest user to trigger a denial-of-service attack...
Beurk - Experimental Unix Rootkit
BEURK is an userland preload rootkit for GNU/Linux, heavily focused around anti-debugging and anti-detection. NOTE: BEURK is a recursive acronym for B EURK E xperimental U nix R oot K it Features Hide attacker files and directories Realtime log cleanup on utmp/wtmp Anti process and login detectio...
Tails 1.6 Information Disclosure
Tails On Tails /dev/null | grep ^amnesia amnesia:$6$r0jt1v9E$UOrWbJ70qAH/sjaKfjmCMvkXZ19bqC2ieQ2UvYk0HKwVvgxuZFtyIwjoLfgH AwrZVM3a0NTEkcsQY1hn/Uq2S0:16710:0:99999:7:::...
Command injection
Bluetooth in Android before 5.1.1 LMY48X and 6.0 before 2015-11-01 allows attackers to send commands to a debugging port, and consequently gain privileges, via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 24371736...
CVE-2015-6613
Bluetooth in Android before 5.1.1 LMY48X and 6.0 before 2015-11-01 allows attackers to send commands to a debugging port, and consequently gain privileges, via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 24371736...
CVE-2015-6613
CVE-2015-6613 affects Android devices running versions prior to 5.1.1 LMY48X and before 2015-11-01 on 6.0. The issue allows a local attacker via Bluetooth to send commands to a debugging port and gain privileges (Signature or SignatureOrSystem) through a crafted app. The vulnerability is tied to ...
CVE-2015-6613
Bluetooth in Android before 5.1.1 LMY48X and 6.0 before 2015-11-01 allows attackers to send commands to a debugging port, and consequently gain privileges, via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 24371736...
CVE-2015-6613: Improper Neutralization of Special Elements used in a Command
Bluetooth in Android before 5.1.1 LMY48X and 6.0 before 2015-11-01 allows attackers to send commands to a debugging port, and consequently gain privileges, via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 24371736...
CVE-2003-0885
Xscreensaver 4.14 contains certain debugging code that should have been omitted, which causes Xscreensaver to create temporary files insecurely in the 1 apple2, 2 xanalogtv, and 3 pong screensavers, and allows local users to overwrite arbitrary files via a symlink attack...
CVE-2015-7900
Infinite Automation Mango Automation 2.5.x and 2.6.x before 2.6.0 build 430 allows remote attackers to obtain sensitive debugging information by entering a crafted URL to trigger an exception, and then visiting a certain status page...
CVE-2015-7900
Infinite Automation Mango Automation 2.5.x and 2.6.x before 2.6.0 build 430 allows remote attackers to obtain sensitive debugging information by entering a crafted URL to trigger an exception, and then visiting a certain status page...
CVE-2015-7900
CVE-2015-7900 affects Mango Automation 2.5.x and 2.6.x prior to 2.6.0 build 430. A debugging feature causes an information-disclosure to remote attackers by triggering an exception via a crafted URL and then visiting a status page, exposing debugging/session data. Connections confirm vulnerabilit...
PT-2015-7658
Name of the Vulnerable Software and Affected Versions Infinite Automation Mango Automation versions 2.5.x through 2.6.x before 2.6.0 build 430 Description The issue allows remote attackers to obtain sensitive debugging information. This can be achieved by entering a crafted URL to trigger an...