84 matches found
Google Santa and molcodesignchecker Code Signing Vulnerabilities
Google Santa is a binary black/white listing system for macOS. molcodesignchecker is a program that performs code signature verification in Objective-C. A security vulnerability exists in Google Santa and molcodesignchecker. The vulnerability can be exploited by an attacker with a maliciously...
CVE-2018-10405
An issue was discovered in Google Santa and molcodesignchecker. A maliciously crafted Universal/fat binary can evade third-party code signing checks. By not completing full inspection of the Universal/fat binary, the user of the third-party tool will believe that the code is signed by Apple, but...
Code injection
An issue was discovered in Google Santa and molcodesignchecker. A maliciously crafted Universal/fat binary can evade third-party code signing checks. By not completing full inspection of the Universal/fat binary, the user of the third-party tool will believe that the code is signed by Apple, but...
CVE-2018-10405
An issue was discovered in Google Santa and molcodesignchecker. A maliciously crafted Universal/fat binary can evade third-party code signing checks. By not completing full inspection of the Universal/fat binary, the user of the third-party tool will believe that the code is signed by Apple, but...
CVE-2018-10405
CVE-2018-10405 concerns Google Santa and molcodesignchecker, where a maliciously crafted Universal/Fat binary can bypass third‑party code signing checks. The vulnerability arises from incomplete inspection of Fat binaries, allowing an unsigned malicious payload to be executed while a legitimate A...
Google Santa Code Signing Bypass (macOS)
The installed version of Google Santa is less than 0.9.25 and is therefore vulnerable to allowing execution of malicious binaries due to accepting forged Apple signatures. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid110519; scriptversion"1.6";...
PT-2018-9869
Name of the Vulnerable Software and Affected Versions: Google Santa and molcodesignchecker affected versions not specified Description: An issue allows a maliciously crafted Universal/fat binary to evade third-party code signing checks. This occurs because the tool does not complete a full...
CVE-2018-10405: Improper Certificate Validation
An issue was discovered in Google Santa and molcodesignchecker. A maliciously crafted Universal/fat binary can evade third-party code signing checks. By not completing full inspection of the Universal/fat binary, the user of the third-party tool will believe that the code is signed by Apple, but...
Google Santa Installed (macOS)
Binary data macosxgooglesantainstalled.nbin...
Signature Validation Bug Let Malware Bypass Several Mac Security Products
A years-old vulnerability has been discovered in the way several security products for Mac implement Apple's code-signing API that could make it easier for malicious programs to bypass the security check, potentially leaving millions of Apple users vulnerable to hackers. Josh Pitts, a researcher...
Binary Whitelisting Blacklisting System for macOS: Santa
Santa is a binary whitelisting/blacklisting system for macOS. It consists of a kernel extension that monitors for executions, a userland daemon that makes execution decisions based on the contents of a SQLite database, a GUI agent that notifies the user in case of a block decision and a...
atccl.org.ar XSS vulnerability
Open Bug Bounty ID: OBB-600250 Description| Value ---|--- Affected Website:| atccl.org.ar Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Intel Halts Spectre Fixes On Older Chips, Citing Limited Ecosystem Support
Intel has halted patches for an array of older chips that would protect them against the Spectre vulnerability, according to a recent microcode update. The microcode update shows that its older products – including Wolfdale, Bloomfield, Clarksfield, Gulftown, Harpertown, Jasper Forest, SoFIA 3GR,...
volkswagensantamonica.com XSS vulnerability
Open Bug Bounty ID: OBB-576350 Description| Value ---|--- Affected Website:| volkswagensantamonica.com Open Bug Bounty Program:| Not created yet Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Fake Santa Surveillance Camera
Reka makes a "decorative Santa cam," meaning that it's not a real camera. Instead, it just gets children used to being under constant surveillance. Our Santa Cam has a cute Father Christmas and mistletoe design, and a red, flashing LED light which will make the most logical kids suspend their...
"Santa Claus is Coming to Town" Parody
Funny...
volkswagensantamonica.com XSS vulnerability
Open Bug Bounty ID: OBB-385452 Description| Value ---|--- Affected Website:| volkswagensantamonica.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Preventi...
The four mainstream Android phone manufacturers the BootLoader in the presence of multiple flaws vulnerability-vulnerability warning-the black bar safety net
University of California, Santa Barbara 9 the researchers found that the four mainstream chip manufacturers of the Android bootloader component the presence of multiple vulnerabilities. These vulnerabilities can lead to the phone chain of trust during the boot process is compromised, so that the...
santaanadistrictsbdc.ecenterdirect.com XSS vulnerability
Vulnerable URL: http://santaanadistrictsbdc.ecenterdirect.com/events?cal=1 Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check...
Google Santa Tracker - Exported components, External URLs, Native code usage vulnerabilities
HackApp vulnerability scanner discovered that application Google Santa Tracker published at the 'play' market has multiple vulnerabilities...