VMware Fusion Privilege Escalation Vulnerability (May 2016) - Mac OS X

VMware Fusion is prone to host privilege escalation vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:vmware:fusion"...

VMware Fusion HGFS Denial of Service Vulnerability (May 2016) - Mac OS X

VMware Fusion is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:vmware:fusion";...

PT-2016-2046

Name of the Vulnerable Software and Affected Versions Apple iOS and Mac OS X affected versions not specified Description The issue is caused by a buffer overflow, which can be exploited by a remote attacker to execute arbitrary code in a privileged context or cause a denial of service memory...

PT-2016-2038

Name of the Vulnerable Software and Affected Versions iOS and Mac OS X affected versions not specified Description The issue is caused by a buffer overflow in the kernel of the operating systems. It may allow a remote attacker to execute arbitrary code in a privileged context or cause a denial of...

PT-2016-2056

Name of the Vulnerable Software and Affected Versions Disk Utility in Apple OS X versions prior to 10.11.5 Description The issue is related to the use of incorrect encryption keys for disk images in the Disk Utility component of Mac OS X. This could potentially allow a remote attacker to impact t...

PT-2016-2065

Name of the Vulnerable Software and Affected Versions Captive Network Assistant in Apple OS X versions prior to 10.11.5 Description The issue exists due to insufficient input validation in the Captive Network Assistant component of Mac OS X. This allows a remote attacker to execute arbitrary code...

PT-2016-2047

Name of the Vulnerable Software and Affected Versions Apple iOS and Mac OS X affected versions not specified Description The issue is caused by a buffer overflow in the IOAcceleratorFamily component of iOS and Mac OS X operating systems. This can be exploited by a remote attacker to execute...

PT-2016-2066

Name of the Vulnerable Software and Affected Versions Audio in Apple OS X versions prior to 10.11.5 Description The issue allows attackers to execute arbitrary code in a privileged context or cause a denial of service memory corruption via a crafted app. It is caused by a buffer overflow in the...

Apple Xcode < 7.3.1 Multiple RCE (Mac OS X)

The version of Apple Xcode installed on the remote Mac OS X host is prior to 7.3.1. It is, therefore, affected by multiple remote code execution vulnerabilities in the bundled version of Git due to overflow conditions in the pathname function in revision.c that are triggered when pushing or cloni...

Mac OS X 10.9.5 / 10.10.5 Multiple Vulnerabilities (Security Update 2016-003)

The remote host is running a version of Mac OS X that is 10.9.5 or 10.10.5 and is missing Security Update 2016-003. It is, therefore, affected by multiple vulnerabilities in the following components : - AMD - Captive Network Assistant - libxml2 - libxslt - OpenGL Note that successful exploitation...

Mac OS X 10.11.x < 10.11.5 Multiple Vulnerabilities

The remote host is running a version of Mac OS X that is 10.11.x prior to 10.11.5. It is, therefore, affected by multiple vulnerabilities in the following components : - AMD - apachemodphp - AppleGraphicsControl - AppleGraphicsPowerManagement - Assistant - ATS - Audio - Captive - CFNetwork -...

Malicious Process Detection: User Defined Malware Running (Mac OS X)

Binary data macosxusermd5s.nbin...

Mac OS X : Apple Safari < 9.1.1 Multiple Vulnerabilities

The version of Apple Safari installed on the remote Mac OS X host is prior to 9.1.1. It is, therefore, affected by the following vulnerabilities : - An information disclosure vulnerability exists due to a failure to completely delete a user's browser history when using the 'Clear History and...

Google Chrome Security Updates (stable-channel-update-2016-05) - Mac OS X

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...

Web2py 2.14.5 - Multiple Vulnerabilities

Web2py 2.14.5 - Multiple Vulnerabilities Title - Web2py 2.14.5 Multiple Vulnerabilities LFI,XSS,CSRF Exploit Title : Web2py 2.14.5 Multiple Vulnerabilities LFI, XSS,CSRF Reported Date : 2-April-2016 Fixed Date : 4-April-2016 Exploit Author : Narendra Bhati -...

Adobe Flash Player for Mac <= 21.0.0.226 Multiple Vulnerabilities (APSB16-15)

The version of Adobe Flash Player installed on the remote Mac OS X host is equal or prior to 21.0.0.226. It is, therefore, affected by multiple vulnerabilities : - Multiple type confusion errors exist that allow an attacker to execute arbitrary code. CVE-2016-1105, CVE-2016-4117 - Multiple...

Adobe AIR for Mac <= 21.0.0.198 Multiple Vulnerabilities (APSB16-15)

The version of Adobe AIR installed on the remote Mac OS X host is prior or equal to version 21.0.0.198. It is, therefore, affected by multiple vulnerabilities : - Multiple type confusion errors exist that allow an attacker to execute arbitrary code. CVE-2016-1105, CVE-2016-4117 - Multiple...

VulnCheck KEV: CVE-2010-1240

Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, do not restrict the contents of one text field in the Launch File warning dialog, which makes it easier for remote attackers to trick users into executing an arbitrary local program that was specified in a PD...

Web2py 2.14.5 CSRF / XSS / Local File Inclusion

Title - Web2py 2.14.5 Multiple Vulnerabilities LFI,XSS,CSRF Exploit Title : Web2py 2.14.5 Multiple Vulnerabilities LFI, XSS,CSRF Reported Date : 2-April-2016 Fixed Date : 4-April-2016 Exploit Author : Narendra Bhati - https://www.exploit-db.com/author/?a=7638 CVE ID : LFI - CVE-2016-4806 ,...

Chrome 5 a vulnerability to be fixed, Google rewards finding vulnerabilities personnel 2W $ -bug-warning-the black bar safety net

Recently, the Google company published the announcement, urged the majority use Windows, Mac OS and Linux operating system user as soon as possible to update their terminals on the Chrome version, in order to eliminate the 5 vulnerability to bring security risks. On has aeration out of 5...