EUVD-2013-4995

Malware in sbrugna...

EUVD-2015-5891

Malware in sbrugna...

CVE-2015-5945

The Sandbox subsystem in Apple OS X before 10.11.1 allows local users to gain privileges via vectors involving NVRAM parameters...

Code injection

The Sandbox subsystem in Apple OS X before 10.11.1 allows local users to gain privileges via vectors involving NVRAM parameters...

CVE-2015-5945

The Sandbox subsystem in Apple OS X before 10.11.1 allows local users to gain privileges via vectors involving NVRAM parameters...

CVE-2015-5945: Improper Input Validation

The Sandbox subsystem in Apple OS X before 10.11.1 allows local users to gain privileges via vectors involving NVRAM parameters...

PT-2015-7094

Name of the Vulnerable Software and Affected Versions Apple OS X versions prior to 10.11.1 Description The issue allows local users to gain privileges via vectors involving NVRAM parameters in the Sandbox subsystem. Recommendations For Apple OS X versions prior to 10.11.1, update to version 10.11...

CVE-2013-5154

The Sandbox subsystem in Apple iOS before 7 determines the sandboxing requirement for a ! application on the basis of the script interpreter instead of the script, which allows attackers to bypass intended access restrictions via a crafted application...

CVE-2013-5155

The Sandbox subsystem in Apple iOS before 7 allows attackers to cause a denial of service infinite loop via an application that writes crafted values to /dev/random...

Code injection

The Sandbox subsystem in Apple iOS before 7 allows attackers to cause a denial of service infinite loop via an application that writes crafted values to /dev/random...

Design/Logic Flaw

The Sandbox subsystem in Apple iOS before 7 determines the sandboxing requirement for a ! application on the basis of the script interpreter instead of the script, which allows attackers to bypass intended access restrictions via a crafted application...

CVE-2013-5155

The Sandbox subsystem in Apple iOS before 7 allows attackers to cause a denial of service infinite loop via an application that writes crafted values to /dev/random...

CVE-2013-5154

The CVE-2013-5154 entry describes a sandbox bypass in Apple iOS prior to 7, where the Sandbox subsystem bases the sandboxing requirement for a #! script on the script interpreter rather than the script itself. This allowed crafted applications that used #! to run scripts to bypass intended access...

CVE-2013-5155

CVE-2013-5155 affects Apple iOS prior to 7, specifically the Sandbox subsystem. A malicious or misbehaving app that writes crafted values to /dev/random can trigger an infinite loop, causing a denial of service on the device. Technical detail: the vulnerability arises from how the Sandbox handles...

CVE-2013-5154: Undefined Security Weakness

The Sandbox subsystem in Apple iOS before 7 determines the sandboxing requirement for a ! application on the basis of the script interpreter instead of the script, which allows attackers to bypass intended access restrictions via a crafted application...

CVE-2013-5155: Improper Input Validation

The Sandbox subsystem in Apple iOS before 7 allows attackers to cause a denial of service infinite loop via an application that writes crafted values to /dev/random...

PT-2013-5399

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 7 Description The issue allows attackers to bypass intended access restrictions by crafting an application that takes advantage of the Sandbox subsystem's behavior of determining sandboxing requirements based on the...