EUVD-2016-5700

Malware in sbrugna...

SAMSUNG Galaxy SmartTag2 Security Vulnerability

SAMSUNG Galaxy SmartTag2 is a smart loss prevention device from Samsung South Korea. It can be located by Bluetooth. A security vulnerability exists in SAMSUNG Galaxy SmartTag2 versions prior to 0.20.04, which stems from the exposure of sensitive information to an unauthorized actor, which could...

Google Home and Chromecast Design Vulnerabilities

Google Home and Chromecast are both products of Google Inc. Google Home is a smart speaker device and Chromecast is an Internet TV set-top box device. There is a security vulnerability in the API services in Google Home and Chromecast. A remote attacker could use this vulnerability to determine t...

Apple OS X Date & Time Pref Pane Information Disclosure Vulnerability

Apple OS X is a specialized operating system developed by Apple for Mac computers.Date & Time Pref Pane is one of the components of the time and date display panel. An information disclosure vulnerability exists in the Date & Time Pref Pane component of Apple OS X versions prior to 10.12, which c...

CVE-2016-4715

The Date & Time Pref Pane component in Apple OS X before 10.12 mishandles the .GlobalPreferences file, which allows attackers to discover a user's location via a crafted app...

Code injection

The Date & Time Pref Pane component in Apple OS X before 10.12 mishandles the .GlobalPreferences file, which allows attackers to discover a user's location via a crafted app...

CVE-2016-4719

The GeoServices component in Apple iOS before 10 and watchOS before 3 does not properly restrict access to PlaceData information, which allows attackers to discover physical locations via a crafted application...

Oracle Solaris Third-Party Patch Update : wireshark (multiple_vulnerabilities_in_wireshark5)

The remote Solaris system is missing necessary patches to address security updates : - The dissectdiagnosticrequest function in epan/dissectors/packet-reload.c in the REsource LOcation And Discovery aka RELOAD dissector in Wireshark 1.8.x before 1.8.6 uses an incorrect integer data type, which...

DoS в IBM NetCommerce (macro.d2w buffer overflow)

Переполнение буфера при длинном запросе к макросу macro.d2w. Кроме того, возможно узнать физическое расположение файлов...