UBUNTU-CVE-2014-0573

Use-after-free vulnerability in Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allows attackers to execute...

UBUNTU-CVE-2014-8440

Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allow attackers to execute arbitrary code or cause a denial o...

UBUNTU-CVE-2014-0576

Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allow attackers to execute arbitrary code or cause a denial o...

UBUNTU-CVE-2014-0582

Heap-based buffer overflow in Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allows attackers to execute...

Windows Version of WireLurker Out of Commission Too

Given that most iPhone users update their Apple devices on Windows machines, it wasn’t really a shock to learn about the discovery of a Windows version of the WireLurker Trojan. Last night, researcher Jaime Blasco of AlienVault tweeted he had discovered the malware, which as it turns out, pre-dat...

Rootpipe: you can get Apple Mac OS X Yosemite system the highest authority the serious vulnerability-vulnerability warning-the black bar safety net

The Swedish security researchers recently discovered Apple OS X Yosemite system fatal vulnerability. The vulnerability can enable hackers on the target computer, elevated privileges, so that it is possible to obtain a system of the highest access permissions, that is, we usually say that the Root...

WireLurker Mac OS X Malware Shut Down

WireLurker is no more. After causing an overnight sensation, the newly disclosed family of Apple Mac OS X malware capable of also infecting iOS devices has been put to rest. Researchers at Palo Alto Networks confirmed this morning that the command and control infrastructure supporting WireLurker...

Mac OS X : Java for OS X 2014-001

The remote Mac OS X 10.7, 10.8, 10.9, or 10.10 host has a Java runtime that is missing the Java for OS X 2014-001 update, which updates the Java version to 1.6.065. It is, therefore, affected by multiple security vulnerabilities, the most serious of which may allow an untrusted Java applet to...

CNIL CookieViz Cross Site Scripting / SQL Injection Vulnerabilities

CNIL CookieViz suffers from cross site scripting and remote SQL injection vulnerabilities. CNIL CookieViz XSS + SQL injection leading to user pwnage Product link: https://github.com/LaboCNIL/CookieViz CVE references CVE-2014-8351, CVE-2014-8352 TL;DR ----- Since October 2014, the French National...

Mac OS X Mavericks IOBluetoothHCIUserClient Privilege Escalation Exploit

Exploit for iOS platform in category dos / poc / pwn.c, by @rpaleari and @joystick This PoC exploits a missing sign check in IOBluetoothHCIUserClient::SimpleDispatchWL. Tested on Mac OS X Mavericks 10.9.4/10.9.5. Compile with: gcc -Wall -o pwn,.c -framework IOKit / include include include include...

Rootpipe — Critical Mac OS X Yosemite Vulnerability Allows Root Access Without Password

A Swedish Security researcher has discovered a critical vulnerability in Apple’s OS X Yosemite that gives hackers the ability to escalate administrative privileges on a compromised machine, and allows them to gain the highest level of access on a machine, known as root access. The vulnerability,...

Oracle VirtualBox WDDM Unspecified Vulnerability (Nov 2014) - Mac OS X

Oracle VirtualBox is prone to an unspecified vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:oracle:vmvirtualbox";...

Facebook Releases osquery to Open Source

Facebook is in a giving mood today. The social networking giant announced today that it will release to open source a framework that detects and logs state changes in an operating system likely caused by an attack or performance meltdown. It also announced that it will hand out up to $300,000 nex...

X (Formerly Twitter): DOM Cross-Site Scripting ( XSS )

Hi, for me works on Firefox 32, tested on Mac OS X Mavericks and Windows 7 https://content.twitter.com/small-business-guide/ onmouseover=alert'XSS' Regards...

Shellshock Exploits Used Against SMTP Servers at Webhosts

The persistence of the Shellshock vulnerability remains high more than a month after it first surfaced. The latest attacks involved SMTP servers belonging to web hosts, said a report published by the SANS Internet Storm Center. Attackers are using Shellshock exploits targeting the now infamous...

WinZip Unsupported (Mac OS X)

According to its self-reported version number, the installation of WinZip on the remote Mac OS X host is no longer supported. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it is likely to contain security vulnerabilities. C Tenab...

Adobe Digital Editions < 4.0.1 Information Disclosure (APSB14-25) (Mac OS X)

The version of Adobe Digital Editions installed on the remote Mac OS X host is prior to 4.0.1. It is, therefore, affected by an information disclosure vulnerability due to the transmission of sensitive data in cleartext. C Tenable Network Security, Inc. include"compat.inc"; if description...

Mac OS X : Cisco AnyConnect Secure Mobility Client < 3.1(5187) (POODLE)

The remote host has a version of Cisco AnyConnect prior to 3.15187. It is, therefore, affected by an information disclosure vulnerability known as POODLE. The vulnerability is due to the way SSL 3.0 handles padding bytes when decrypting messages encrypted using block ciphers in cipher block...

WinZip Installed (Mac OS X)

Binary data macosxwinzipinstalled.nbin...

Adobe Digital Edition Information Disclosure Vulnerability - Mac OS X

Adobe Digital Edition is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...