XcodeGhost Malware Supports iOS9

New samples of XcodeGhost, malware targeting iOS devices, have surfaced beyond the borders of China with new support for iOS9 and obfuscation techniques making it that much harder to detect. iOS9 is only a few weeks old and included new security measures that allowed for only secure HTTPS...

Apple OS X Kernel Elevation of Privilege Vulnerability

OS X formerly Mac OS X is the latest version of Apple's proprietary operating system for the Macintosh computer. A security vulnerability in the kernel of Apple OS X versions prior to 10.11.1 can be exploited by a local attacker to elevate privileges via type obfuscation in Mach task handling...

Adobe Flash Player Type Obfuscation Vulnerability (CNVD-2015-06714)

FlashPlayer is a high-performance, lightweight and very expressive client-side runtime player. A security vulnerability exists in the implementation of Adobe Flash Player versions prior to 18.0.0.255, 19.x-19.0.0.226 Windows and OS X, and 11.2.202.540 Linux. A remote attacker could exploit the...

Adobe Flash Player Type Obfuscation Vulnerability (CNVD-2015-06713)

FlashPlayer is a high-performance, lightweight and very expressive client-side runtime player. A security vulnerability exists in the implementation of Adobe Flash Player versions prior to 18.0.0.255, 19.x-19.0.0.226 Windows and OS X, and 11.2.202.540 Linux. A remote attacker could exploit the...

Apple to Remove Apps Using Private APIs

Apple said it will remove 256 misbehaving apps from its App Store that were using private APIs to pull personal and device information that would allow a user to be tracked. SourceDNA, an analytics company that specializes in studying the iOS and Android mobile app stores, privately disclosed to...

DARPA Protecting Software From Reverse Engineering Through Obfuscation

Researchers with a DARPA-led team are looking into new ways to combat reverse engineering by using obfuscation to tidy up shoddy commercial and government security. Researchers with the unit, dubbed the SafeWare program, are hoping to develop new methods, bolstered by encryption, to obscure...

CVE-2012-2150

xfsmetadump in xfsprogs before 3.2.4 does not properly obfuscate file data, which allows remote attackers to obtain sensitive information by reading a generated image...

Information disclosure

xfsmetadump in xfsprogs before 3.2.4 does not properly obfuscate file data, which allows remote attackers to obtain sensitive information by reading a generated image...

UBUNTU-CVE-2012-2150

xfsmetadump in xfsprogs before 3.2.4 does not properly obfuscate file data, which allows remote attackers to obtain sensitive information by reading a generated image...

CVE-2012-2150

CVE-2012-2150 affects xfs_metadump in xfsprogs before 3.2.4. The underlying flaw does not properly obfuscate file data, allowing remote attackers to obtain sensitive information by reading a generated image. Public references in connected advisories/plugins confirm patches to 3.2.4 or newer acros...

Fedora 23 : xfsprogs-3.2.4-1.fc23 (2015-12380)

Gabriel Vlasiu reported that xfsmetadump, part of the xfsprogs suite of tools for the XFS filesystem, did not properly obfuscate data. xfsmetadump properly obfuscates active metadata, but the rest of the space within that fs block comes through in the clear. This could lead to exposure of stale...

Fedora 21 : xfsprogs-3.2.2-2.fc21 (2015-12406)

Gabriel Vlasiu reported that xfsmetadump, part of the xfsprogs suite of tools for the XFS filesystem, did not properly obfuscate data. xfsmetadump properly obfuscates active metadata, but the rest of the space within that fs block comes through in the clear. This could lead to exposure of stale...

Fishing kit EK support CVE-2 0 1 5-2 4 1 9 vulnerability-a vulnerability warning-the black bar safety net

Fishing kitEKrecently added for Internet Explorer CVE-2 0 1 5-2 4 1 9 the vulnerability of the support,the vulnerability is just in July this year to get repaired. Quickly use just to fix the vulnerability,has been fishing kit EK the author's usual practice,but since the 2 0 1 4 in the second hal...

Fedora 22 : xfsprogs-3.2.2-2.fc22 (2015-12435)

Gabriel Vlasiu reported that xfsmetadump, part of the xfsprogs suite of tools for the XFS filesystem, did not properly obfuscate data. xfsmetadump properly obfuscates active metadata, but the rest of the space within that fs block comes through in the clear. This could lead to exposure of stale...

Apple MAC OS X systemstatsd Type Obfuscation Vulnerability

Apple Mac OS X is a commercial operating system. A type obfuscation vulnerability in Apple Mac OS X's handling of systemstatsd allows attackers to exploit the vulnerability to send malicious formatted messages to systemstatsd...

PHP 'exception::getTraceAsString' type obfuscation vulnerability

PHP is a general-purpose scripting language. A type-obfuscation vulnerability in PHP exception::getTraceAsString when handling input from deserialization constructs allows remote attackers to exploit the vulnerability to obtain information about an application's leaked memory or execute arbitrary...

PHP 'incomplete_class.c' memory corruption vulnerability

PHP is a general-purpose scripting language. A type obfuscation vulnerability in PHP 'incompleteclass.c' handling deserialization of incomplete classes allows remote attackers to exploit the vulnerability by submitting a special request to obtain memory information or crash a PHP application...

VBS-Obfuscator - VBScript obfuscation to allow PenTesters bypass countermeasures

VBScript obfuscation to allow PenTesters bypass countermeasures. Sample Script Output C:\toolspython obfuscator.py test.vbs out.vbs Char 109 - 5505-5396 Char 115 - 1113775/9685 Char 103 - 540853/5251 Char 98 - -2629+2727 Char 111 - 291-180 Char 120 - 826320/6886 Char 32 - 118016/3688 Char 34 -...

Exploit Kit Delivers Pharming Attacks Against SOHO Routers

Attacks targeting small office and home router DNS settings, long a target for network intruders seeking to redirect web traffic to malicious sites, have for the first time been included in an exploit kit—one that specializes in cross-site request forgery attacks. An exploit kit has been spotted ...

Microsoft Windows NtCreateTransactionManager Type Obfuscation Vulnerability

Microsoft Windows is a windowed operating system developed by Microsoft Corporation in the United States. An elevation of privilege vulnerability exists when Microsoft Windows fails to authenticate and execute the emulation layer. The vulnerability allows an authenticated attacker to bypass...