ThinkPad USB-C Dock Vulnerability - Lenovo Support US

No description provided...

ThinkPad USB-C Dock Vulnerability - US

Lenovo Security Advisory: LEN-27886 Potential Impact: Denial of Service Severity: High Scope of Impact: Lenovo-specific CVE Identifier: CVE-2019-6176 Summary Description: A potential vulnerability reported in ThinkPad USB-C Dock 40A9 Firmware version 3.7.2 may allow a denial of service. ​...

Fedora Update for switchboard-plug-pantheon-shell FEDORA-2019-27e7b92407

The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 29 Update: switchboard-plug-pantheon-shell-2.8.1-2.fc29

The desktop plug is a section in Switchboard, the elementary System Settings app, where users can configure the wallpaper, dock, and hotcorners. In the future the desktop plug might also handle other desktop settings such as the panel, app launcher, and window manager...

[SECURITY] Fedora 30 Update: switchboard-plug-pantheon-shell-2.8.1-2.fc30

The desktop plug is a section in Switchboard, the elementary System Settings app, where users can configure the wallpaper, dock, and hotcorners. In the future the desktop plug might also handle other desktop settings such as the panel, app launcher, and window manager...

[Workspace App for Windows] - Display Issues when user re-docks their Notebook on the docking station and reconnecting to Citrix Session with Multiple Monitors

Scenario : Users using notebooks and working with full screen sessions without desktop viewer to access their Citrix session, aka mobile thin client. The users usually have a docking station and two identical monitors at their workplace. When these users come back from a meeting and re-dock into...

(Pwn2Own) Apple macOS Dock Service DSSetDesktopForDisplayAndSpace Uninitialized Pointer Privilege Escalation Vulnerability

This vulnerability allows local attackers to execute arbitrary code on vulnerable installations of Apple macOS. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of Mac...

(Pwn2Own) Apple macOS launchd Improper Access Check Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on vulnerable installations of Apple macOS. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of Mach...

Apple macOS Improper Authorization Vulnerability

macOS is Apple's proprietary operating system for the Mac line of products. An improper authorization vulnerability exists in the Dock component of Apple macOS Mojave 10.14. An attacker can exploit the vulnerability to access restricted files via a malicious application...

macOS 10.14.x < 10.14.1 Multiple Vulnerabilities

The remote host is running a version of macOS / Mac OS X that is 10.14.x prior to 10.14.1. It is, therefore, affected by multiple vulnerabilities related to the following components : -AppleGraphicsControl -CoreAnimation -CoreCrypto -Dock -dyld -EFI -ICU -IOGraphics -IOKit -IPSec -Kernel -Mail...

Apple macOS Dock Service DSSetProcessRecents Uninitialized Pointer Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on vulnerable installations of Apple macOS. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of Mach...

Apple macOS Dock Service DSCopyPreferences Uninitialized Pointer Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on vulnerable installations of Apple macOS. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of Mach...

Apple macOS Dock Service DSSetPreferences Uninitialized Pointer Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on vulnerable installations of Apple macOS. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of Mach...

Apple macOS Dock Service DSMinimizeWindowWithTitle Uninitialized Pointer Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on vulnerable installations of Apple macOS. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of Mach...

Apple macOS Dock Service DSSetProcessLabel Uninitialized Pointer Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on vulnerable installations of Apple macOS. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of Mach...

Apple macOS Dock Service DSMinimizeManyWindowsWithTitle Uninitialized Pointer Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on vulnerable installations of Apple macOS. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of Mach...

Apple macOS Dock Service DSSetItemTitle Uninitialized Pointer Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on vulnerable installations of Apple macOS. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of Mach...

New Mac cryptominer has 23 older variants

On February 1, a new Mac cryptominer was discovered being distributed via a hack of the MacUpdate website. Since then, we've been doing some digging and found that this isolated incident was just the tip of the iceberg. The malware delivered by the MacUpdate hack appears to be the culmination of...

Newly Discovered Mac Malware with Ancient Code Spying on Biotech Firms

Security researchers have discovered a rare piece of Mac-based espionage malware that relies on outdated coding practices but has been used in some previous real-world attacks to spy on biomedical research center computers. Dubbed Fruitfly, the malware has remained undetected for years on macOS...

Taser Axon Dock 3.1 Authentication Bypass

TITLE Taser Axon Dock Body-Worn Camera Docking Station v3.1 - Authentication Bypass CREDITS & AUTHORS Reginald Dodd https://www.linkedin.com/in/reginalddodd VENDOR & PRODUCT Taser International Inc. Axon Dock - Body-Worn Camera Docking Station https://www.axon.io/products/dock SUMMARY The Axon Do...