Apple OS X Terminal Information Disclosure Vulnerability

Apple OS X is a specialized operating system developed by Apple for Mac computers, of which Terminal is a terminal component. An information disclosure vulnerability exists in Terminal in versions of Apple OS X prior to 10.12, which can be exploited by a local attacker to obtain sensitive...

Apple OS X WindowServer Type Obfuscation Vulnerability (CNVD-2016-08248)

Apple OS X is a specialized operating system developed by Apple for Mac computers, of which WindowServer is a Window Service component. A type obfuscation vulnerability exists in WindowServer in Apple OS X versions prior to 10.12, which can be exploited by a local attacker to gain root privileges...

Apple OS X Bluetooth Memory Corruption Vulnerability

Apple OS X is a specialized operating system developed by Apple for Mac computers.Bluetooth is one of the Bluetooth components. A memory corruption vulnerability exists in Bluetooth in Apple OS X versions prior to 10.12, which can be exploited by an attacker to execute arbitrary code with kernel...

Apple Mac OS X Multiple Vulnerabilities-01 (Sep 2016)

Apple Mac OS X is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Apple Safari Multiple Vulnerabilities (Sep 2016) - Mac OS X

Apple Safari is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apple:safari"; ifdescription...

HackerOne: HackerOne Integrations Design Issue

Summary HackerOne Integrations Design Issue Description Include Impact This bug is similar to 170552. The HackerOne Integrations feature is very sensitive and can not be used with just a click, IMHO, or we can say "HackerOne users are a click away from​ giving to an attacker very sensitive...

Apple OS X ATS Memory Corruption Vulnerability

Apple OS X is a specialized operating system developed by Apple for Mac computers.Apple Type Service ATS is one of the font type services. A memory corruption vulnerability exists in ATS in Apple OS X versions prior to 10.12. A remote attacker can exploit this vulnerability to execute arbitrary...

One Click Symbolic Execution: Ponce

Ponce pronounced ‘poN θe pon-they is an IDA Pro plugin that provides users the ability to perform taint analysis and symbolic execution over binaries in an easy and intuitive fashion. With Ponce you are one click away from getting all the power from cutting edge symbolic execution. Entirely writt...

CVE-2016-4709

WindowServer in Apple OS X before 10.12 allows local users to obtain root access via vectors that leverage "type confusion," a different vulnerability than CVE-2016-4710...

CVE-2016-4699

AppleUUC in Apple OS X before 10.12 allows attackers to execute arbitrary code in a privileged context or cause a denial of service memory corruption via a crafted app, a different vulnerability than CVE-2016-4700...

Mozilla Firefox ESR Security Advisories (MFSA2016-85, MFSA2016-86) - Mac OS X

Mozilla Firefox ESR is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefoxesr";...

Mozilla Firefox Security Advisories (MFSA2016-85, MFSA2016-86) - Mac OS X

Mozilla Firefox is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefox";...

SSH-Weak-DH - SSH Weak Diffie-Hellman Group Identification Tool

This tool establishes SSH connections to a server, thereby enumerating through various client configurations, in order to determine whether the server allows a Diffie-Hellman DH key exchange based on a weak group. We hope that our tool will be useful to check SSH servers for weak DH key exchange...

Mozilla Firefox ESR 45.x < 45.4 Multiple Vulnerabilities (Mac OS X)

The version of Mozilla Firefox ESR installed on the remote Mac OS X host is 45.x prior to 45.4. It is, therefore, affected by multiple vulnerabilities : - A flaw exists in the HttpBaseChannel::GetPerformance function in netwerk/protocol/http/HttpBaseChannel.cpp due to the program leaking...

Mozilla Firefox < 49.0 Multiple Vulnerabilities (Mac OS X)

The version of Mozilla Firefox installed on the remote Mac OS X host is prior to 49.0. It is, therefore, affected by multiple vulnerabilities : - An out-of-bounds read error exists within file dom/security/nsCSPParser.cpp when handling content security policies CSP containing empty referrer...

Microsoft Silverlight Remote Code Execution Vulnerability (3182373) - Mac OS X

This host is missing an important security update according to Microsoft Bulletin MS16-109. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE...

The vulnerability of the Mac OS X operating system, which allows a perpetrator to obtain confidential information

The vulnerability of the CFNetwork component in the Mac OS X operating system is related to the use of weak permissions for cookie files in web browsers. Exploiting this vulnerability could allow an intruder, operating locally, to obtain confidential information using indefinite vectors...

The vulnerabilities in operating systems such as Mac OS X and iOS allow attackers to trigger service failures or increase their privileges.

The vulnerability of the kernel in Mac OS X and iOS arises due to buffer overflows. Exploiting this vulnerability can allow an attacker to increase their privileges or cause a service failure memory corruption using undefined vectors...

The vulnerability of the Mac OS X operating system allows a perpetrator to trigger a service failure or obtain confidential information.

The vulnerability of the Audio component in the Mac OS X operating system is related to errors in calculating the size of audio data. Exploiting this vulnerability can allow a malicious actor to obtain confidential information or cause a service failure memory overflow by using a specially create...

The vulnerability of the Mac OS X operating system allows a hacker to trigger a service failure or increase their privileges.

The vulnerability of the Audio component in the Mac OS X operating system arises due to buffer overflow. Exploiting this vulnerability can allow an attacker to increase their privileges or cause a service failure memory corruption using a specially crafted file...