Microsoft Outlook App for Mac CVE-2015-1639 Cross Site Scripting Vulnerability

Description Microsoft Outlook App for Mac is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. Th...

OS X rootpipe privilege elevation

Added: 04/14/2015 CVE: CVE-2015-1130 BID: 73982 OSVDB: 120418 Background OS X is an operating system for Mac computers. Problem The Admin framework in OS X contains a hidden backdoor API which allows local users to gain root privileges. Resolution Upgrade to OS X 10.10.3 or apply security update...

Mac-OSX-Privilege-Escalation

Apple Mac OS X contains a flaw in the Admin Framework that is triggered when checking XPC entitlements. This may allow a process to gain administrative privileges without properly authenticating...

Apple Mac OS X multiple security vulnerabilities

80 different vulnerabilities...

Mac OS X Rootpipe Privilege Escalation Exploit

This Metasploit module exploits a hidden backdoor API in Apple's Admin framework on Mac OS X to escalate privileges to root, dubbed Rootpipe. Tested on Yosemite 10.10.2 and should work on previous versions. The patch for this issue was not backported to older releases. Note: you must run this...

Exploit for Link Following in Apple Mac_Os_X

RootPipe-Demo This is a Proof-of-Concept Mac Application that...

Apple Mac OS X CoreAnimation Memory Misreference Vulnerability

Apple Mac OS X is an operating system developed by Apple Inc. A memory misreference vulnerability in Apple Mac OS X CoreAnimation allows an attacker to construct a malicious WEB site and trick users into parsing it, which could execute arbitrary code...

Apple Mac OS X Cross-Domain HTTP Request Header Authentication Credentials Disclosure Vulnerability

Apple Mac OS X is an operating system developed by Apple Inc. A cross-domain HTTP request header validation credential disclosure vulnerability exists in Apple Mac OS X CFNetwork Session Handling Redirection, which allows attackers to exploit the vulnerability to obtain sensitive information...

Mac OS X Rootpipe Privilege Escalation

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit4 'Mac OS X "Rootpipe" Privilege Escalation', 'Description' = %q This module exploits a hidden backdoor API in Apple's Admin framework ...

Mac OS X : Apple Safari < 6.2.5 / 7.1.5 / 8.0.5 Multiple Vulnerabilities

The version of Apple Safari installed on the remote Mac OS X host is prior to 6.2.5 / 7.1.5 / 8.0.5. It is, therefore, affected by the following vulnerabilities : - A flaw exists in the state management which can result in the user's browser history not being fully purged from 'history.plist'...

Apple Xcode < 6.3 (Mac OS X)

The version of Apple Xcode installed on the remote Mac OS X host is prior to 6.3. It is, therefore, affected by the multiple vulnerabilities : - A stack allocation issue in Clang allows an attacker to bypass stack guards. BID 73987 - An integer overflow issue in the Swift simulator leads to...

Mac OS X Multiple Vulnerabilities (Security Update 2015-004) (FREAK)

The remote host is running a version of Mac OS X 10.8.5 or 10.9.5 that is missing Security Update 2015-004. It is, therefore, affected multiple vulnerabilities in the following components : - Apache - ATS - Certificate Trust Policy - CoreAnimation - FontParser - Graphics Driver - ImageIO -...

Mac OS X 10.10.x < 10.10.3 Multiple Vulnerabilities (FREAK)

The remote host is running a version of Mac OS X 10.10.x that is prior to 10.10.3. It is, therefore, affected multiple vulnerabilities in the following components : - Admin Framework - Apache - ATS - Certificate Trust Policy - CFNetwork HTTPProtocol - CFNetwork Session - CFURL - CoreAnimation -...

Apple Mac OS X fontd arbitrary code execution vulnerability (CNVD-2015-02345)

Apple Mac OS X is an operating system developed by Apple Inc. Apple Mac OS X fontd has an unspecified input validation vulnerability that allows local users to exploit the vulnerability to elevate privileges...

Apple Mac OS X Code Signature Bypass Vulnerability (CNVD-2015-02357)

Apple Mac OS X is an operating system developed by Apple Inc. A vulnerability exists in Apple Mac OS X's handling of applications containing specially crafted bundles, which allows attackers to exploit the vulnerability to launch tampered applications without the need for a full legal signature...

Apple Mac OS X Virtual Memory Operations Denial of Service Vulnerability

Apple Mac OS X is an operating system developed by Apple Inc. Apple Mac OS X suffers from a virtual memory operations denial of service vulnerability that allows local attackers to exploit the vulnerability to crash the system due to a failure of the Mac OS X kernel to properly handle machvmread...

Apple Mac OS X LaunchServices Denial of Service Vulnerability

Apple Mac OS X is an operating system developed by Apple Inc. An input validation vulnerability in Apple Mac OS X LaunchServices handling application localization data allows local attackers to exploit the vulnerability to crash the detector...

Apple Mac OS X fontd arbitrary code execution vulnerability (CNVD-2015-02342)

Apple Mac OS X is an operating system developed by Apple Inc. Apple Mac OS X fontd suffers from an unspecified input validation vulnerability that allows local attackers to exploit the vulnerability to elevate privileges...

Apple Mac OS X multiple security vulnerabilities

Unsafe cookie handling, code execution via different formats and protocols, privilege escalation, information leakage...

Apple Mac OS X fontd arbitrary code execution vulnerability (CNVD-2015-02341)

Apple Mac OS X is an operating system developed by Apple Inc. Apple Mac OS X fontd suffers from an unspecified input validation vulnerability that allows attackers to exploit the vulnerability to elevate privileges...