Design/Logic Flaw

The DiskImages subsystem in Apple iOS before 8.4 and OS X before 10.10.4 allows attackers to obtain sensitive memory-layout information for the kernel via a crafted app...

Design/Logic Flaw

AppleGraphicsControl in Apple OS X before 10.10.4 allows attackers to obtain sensitive memory-layout information via a crafted app...

CVE-2015-3676

AppleGraphicsControl in OS X before 10.10.4 could disclose kernel memory layout via a crafted app. The CVE-2015-3676 issue affects OS X Yosemite prior to the 10.10.4 Security Update, which addresses memory-disclosure by improving bounds checking in AppleGraphicsControl. There is no exploitable de...

CVE-2015-3711

CVE-2015-3711 affects Apple OS X NTFS memory-layout disclosure. The vulnerability arises from the NTFS implementation and can expose kernel memory layout via a crafted app. Affected OS X versions before 10.10.4 are implicated; remediation is to upgrade to OS X 10.10.4 (Security Update 2015‑005), ...

CVE-2015-3677

CVE-2015-3677 affects Apple OS X prior to 10.10.4, specifically the LZVN compression feature in AppleFSCompression. The vulnerability allows a crafted app to disclose kernel memory layout, a memory-disclosure issue in LZVN processing. The underlying impact is partial leakage of kernel memory layo...

CVE-2015-3676

AppleGraphicsControl in Apple OS X before 10.10.4 allows attackers to obtain sensitive memory-layout information via a crafted app...

CVE-2015-3721

The kernel in Apple iOS before 8.4 and OS X before 10.10.4 does not properly handle HFS parameters, which allows attackers to obtain sensitive memory-layout information via a crafted app...

CVE-2015-3711

The NTFS implementation in Apple OS X before 10.10.4 allows attackers to obtain sensitive memory-layout information for the kernel via a crafted app...

CVE-2015-3690

The DiskImages subsystem in Apple iOS before 8.4 and OS X before 10.10.4 allows attackers to obtain sensitive memory-layout information for the kernel via a crafted app...

CVE-2015-3677

The LZVN compression feature in AppleFSCompression in Apple OS X before 10.10.4 allows attackers to obtain sensitive memory-layout information for the kernel via a crafted app...

CVE-2015-3690

CVE-2015-3690 affects Apple’s DiskImages in iOS < 8.4 and OS X

Apple iOS Memory Information Disclosure Vulnerability (CNVD-2015-04250)

Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. A memory management vulnerability exists in Apple iOS's handling of HFS parameters, allowing an attacker to run a malicious application to obtain memory layout information...

Apple MAC OS X NTFS Memory Layout Disclosure Vulnerability

Apple Mac OS X is a commercial operating system. A security vulnerability exists in Apple Mac OS X NTFS that allows local attackers to exploit the vulnerability to run malicious applications to obtain kernel memory layout...

Apple MAC OS X LZVN Compression Memory Leak Vulnerability

Apple Mac OS X is a commercial operating system. A security vulnerability in Apple Mac OS X LZVN compression handling allows an attacker to run a malicious application to obtain memory layout information...

APPLE-SA-2015-05-19-1 Watch OS 1.0.1

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2015-05-19-1 Watch OS 1.0.1 Watch OS 1.0.1 is now available and addresses the following: Certificate Trust Policy Available for: Apple Watch Sport, Apple Watch, and Apple Watch Edition Impact: Update to the certificate trust policy Descriptio...

Internet Bug Bounty: PHP yaml_parse/yaml_parse_file/yaml_parse_url Double Free

https://bugs.php.net/bug.php?id=69616 Description: ------------ The yaml parsing functions suffers from an exploitable double free caused by the error path for the phpvarunserialize call on line 797 of pecl/fileformats/yaml.git/parse.c: if ISNOTIMPLICITANDTAGISevent, YAMLPHPTAG const unsigned cha...

cve-2 0 1 4-0 5 6 9 exploit analysis-exploit warning-the black bar safety net

0×0 0 Description From the CVE vulnerability description: ! enter image description here Test environment: Win7 SP1 + Flash ActiveX 15.0.0.167 0×0 1 exploit analysis Description about the vulnerabilities of the key code, first look at the heap spray memory layout: ! enter image description here...

CVE-2014-4419

The network-statistics interface in the kernel in Apple iOS before 8 and Apple TV before 7 does not properly initialize memory, which allows attackers to obtain sensitive memory-content and memory-layout information via a crafted application, a different vulnerability than CVE-2014-4371,...

xfstt 1.2/1.4 Unspecified Memory Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/8255/info xfstt is reported to be prone to an unspecified memory disclosure vulnerability. This issue can be triggered by remote attackers to cause a denial of service. The server may also return details about the memory...

QwikMail 0.3 HELO Command Buffer Overflow Vulnerability

No description provided by source. source: www.securityfocus.com/bid/11989/info QwikMail qwik-smtpd is reported prone to a remotely exploitable buffer overflow vulnerability. The issue is due to insufficient bounds checking of client-supplied SMTP HELO request data. This issue could theoretically...