Lucene search
+L

2861 matches found

Prion
Prion
•added 2015/11/22 3:59 a.m.•25 views

Input validation

The kernel in Apple iOS before 8.4.1 does not properly restrict debugging features, which allows attackers to bypass background-execution limitations via a crafted app...

4.3CVSS5.8AI score0.0144EPSS
SaveExploits0References1Affected Software1
NVD
NVD
•added 2015/11/22 3:59 a.m.•28 views

CVE-2015-5787

The kernel in Apple iOS before 8.4.1 does not properly restrict debugging features, which allows attackers to bypass background-execution limitations via a crafted app...

4.3CVSS5.4AI score0.0144EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2015/11/22 2:00 a.m.•44 views

CVE-2015-5787

The kernel in Apple iOS before 8.4.1 does not properly restrict debugging features, which allows attackers to bypass background-execution limitations via a crafted app...

5.4AI score0.0144EPSS
SaveExploits0References1
CVE
CVE
•added 2015/11/22 2:00 a.m.•56 views

CVE-2015-5787

The CVE concerns Apple iOS before 8.4.1, where the kernel fails to properly restrict debugging features, enabling bypass of background-execution restrictions via a crafted app. Affected component: iOS kernel (pre-8.4.1). Root cause: improper restriction of debugging functionality. Impact: attacke...

4.3CVSS5.5AI score0.0144EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2015/11/22 12:00 a.m.•7 views

CVE-2015-5787: Undefined Security Weakness

The kernel in Apple iOS before 8.4.1 does not properly restrict debugging features, which allows attackers to bypass background-execution limitations via a crafted app...

4.3CVSS5.8AI score0.0144EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2015/11/22 12:00 a.m.•5 views

PT-2015-7064

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 8.4.1 Description The issue is related to the kernel in Apple iOS, which does not properly restrict debugging features. This allows attackers to bypass background-execution limitations via a crafted app...

4.3CVSS0.0144EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2015/11/20 12:00 a.m.•17 views

The vulnerability of the microprogramming software in Janitza UMG 508, 509, 511, 604, 605 power supply monitoring systems allows a perpetrator to read and write files or execute JASIC code.

The vulnerability of the debugging interface of Microprogramming Software for Control System Chains of Janitza UMG models 508, 509, 511, 604, and 605 is related to the absence of an authentication procedure. Exploiting this vulnerability allows a malicious actor to read and write files, or execut...

7.5CVSS5.7AI score0.01623EPSS
SaveExploits0References2
CNVD
CNVD
•added 2015/11/15 12:00 a.m.•6 views

Xen Debugging Exception Handling Denial of Service Vulnerability

Xen is a virtualization technology for the Linux kernel that allows multiple operating systems to run simultaneously. A security vulnerability exists in Xen's handling of debugging exceptions, which allows the guest user to trigger a denial-of-service attack...

10CVSS6.4AI score0.02481EPSS
SaveExploits0References1
Kitploit
Kitploit
•added 2015/11/14 8:23 p.m.•45 views

Beurk - Experimental Unix Rootkit

BEURK is an userland preload rootkit for GNU/Linux, heavily focused around anti-debugging and anti-detection. NOTE: BEURK is a recursive acronym for B EURK E xperimental U nix R oot K it Features Hide attacker files and directories Realtime log cleanup on utmp/wtmp Anti process and login detectio...

7.2AI score
SaveExploits0References1
Packet Storm
Packet Storm
•added 2015/11/13 12:00 a.m.•25 views

Tails 1.6 Information Disclosure

Tails On Tails /dev/null | grep ^amnesia amnesia:$6$r0jt1v9E$UOrWbJ70qAH/sjaKfjmCMvkXZ19bqC2ieQ2UvYk0HKwVvgxuZFtyIwjoLfgH AwrZVM3a0NTEkcsQY1hn/Uq2S0:16710:0:99999:7:::...

7.4AI score
SaveExploits0
Prion
Prion
•added 2015/11/03 11:59 a.m.•27 views

Command injection

Bluetooth in Android before 5.1.1 LMY48X and 6.0 before 2015-11-01 allows attackers to send commands to a debugging port, and consequently gain privileges, via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 24371736...

5.1CVSS7.3AI score0.00634EPSS
SaveExploits0References2Affected Software1
UbuntuCve
UbuntuCve
•added 2015/11/03 11:59 a.m.•41 views

CVE-2015-6613

Bluetooth in Android before 5.1.1 LMY48X and 6.0 before 2015-11-01 allows attackers to send commands to a debugging port, and consequently gain privileges, via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 24371736...

5.1CVSS5.9AI score0.00634EPSS
SaveExploits0References2
CVE
CVE
•added 2015/11/03 11:00 a.m.•76 views

CVE-2015-6613

CVE-2015-6613 affects Android devices running versions prior to 5.1.1 LMY48X and before 2015-11-01 on 6.0. The issue allows a local attacker via Bluetooth to send commands to a debugging port and gain privileges (Signature or SignatureOrSystem) through a crafted app. The vulnerability is tied to ...

5.1CVSS6.9AI score0.00634EPSS
SaveExploits0References2Affected Software1
Mend
Mend
•added 2015/11/03 11:00 a.m.•2 views

CVE-2015-6613

Bluetooth in Android before 5.1.1 LMY48X and 6.0 before 2015-11-01 allows attackers to send commands to a debugging port, and consequently gain privileges, via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 24371736...

6.3CVSS0.00634EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2015/11/03 12:00 a.m.•5 views

CVE-2015-6613: Improper Neutralization of Special Elements used in a Command

Bluetooth in Android before 5.1.1 LMY48X and 6.0 before 2015-11-01 allows attackers to send commands to a debugging port, and consequently gain privileges, via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 24371736...

5.1CVSS5.8AI score0.00634EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2015/10/30 9:47 a.m.•27 views

CVE-2003-0885

Xscreensaver 4.14 contains certain debugging code that should have been omitted, which causes Xscreensaver to create temporary files insecurely in the 1 apple2, 2 xanalogtv, and 3 pong screensavers, and allows local users to overwrite arbitrary files via a symlink attack...

6.4CVSS7.3AI score0.01331EPSS
SaveExploits1References2
NVD
NVD
•added 2015/10/28 10:59 a.m.•24 views

CVE-2015-7900

Infinite Automation Mango Automation 2.5.x and 2.6.x before 2.6.0 build 430 allows remote attackers to obtain sensitive debugging information by entering a crafted URL to trigger an exception, and then visiting a certain status page...

4.3CVSS6.2AI score0.02946EPSS
SaveExploits2References1
attackerkb
attackerkb
•added 2015/10/28 10:59 a.m.•13 views

CVE-2015-7900

Infinite Automation Mango Automation 2.5.x and 2.6.x before 2.6.0 build 430 allows remote attackers to obtain sensitive debugging information by entering a crafted URL to trigger an exception, and then visiting a certain status page...

4.3CVSS5.5AI score0.02946EPSS
SaveExploits2References2
CVE
CVE
•added 2015/10/28 10:00 a.m.•66 views

CVE-2015-7900

CVE-2015-7900 affects Mango Automation 2.5.x and 2.6.x prior to 2.6.0 build 430. A debugging feature causes an information-disclosure to remote attackers by triggering an exception via a crafted URL and then visiting a status page, exposing debugging/session data. Connections confirm vulnerabilit...

4.3CVSS6.3AI score0.02946EPSS
SaveExploits2References1Affected Software1
Positive Technologies
Positive Technologies
•added 2015/10/28 12:00 a.m.•5 views

PT-2015-7658

Name of the Vulnerable Software and Affected Versions Infinite Automation Mango Automation versions 2.5.x through 2.6.x before 2.6.0 build 430 Description The issue allows remote attackers to obtain sensitive debugging information. This can be achieved by entering a crafted URL to trigger an...

4.3CVSS0.02946EPSS
SaveExploits2References3
Rows per page
Query Builder