Android Fingerprint Login Feature Vulnerable

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. There is a security vulnerability in the Android fingerprint login feature. An attacker in close physical proximity can exploit the vulnerability to authorize as an arbitrary user...

NVIDIA Denial of Service Vulnerability (CNVD-2016-09610)

NVIDIA full name NVIDIA Corporation, NASDAQ: NVDA, official Chinese name NVIDIA, founded in January 1993, is a fabless IC semiconductor company focusing on the design of smart-core chipsets. A denial of service vulnerability exists in NVIDIA due to a failure to adequately filter user input in the...

Docomo L-04D mobile WiFi router vulnerable to cross-site request forgery

Overview L-04D provided by NTT DOCOMO, INC. is a wireless WiFi router. L-04D contains a cross-site request forgery vulnerability in the the web management screen. Atsuo Sakurai of Cyber Defense Institute, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under...

RHEL 7 : org.ovirt.engine-root (RHSA-2016:1967)

An update for org.ovirt.engine-root is now available for RHEV Engine version 4.0. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Apple OS X CoreDisplay Information Disclosure Vulnerability

Apple OS X is a specialized operating system developed by Apple for Mac computers, of which CoreDisplay is a core display component. An information disclosure vulnerability exists in CoreDisplay in Apple OS X versions prior to 10.12, which can be exploited by an attacker to view any user's screen...

CVE-2016-4713

CoreDisplay in Apple OS X before 10.12 allows attackers to view arbitrary users' screens by leveraging screen-sharing access...

CVE-2016-4713

CoreDisplay in Apple OS X before 10.12 allows attackers to view arbitrary users' screens by leveraging screen-sharing access...

Design/Logic Flaw

CoreDisplay in Apple OS X before 10.12 allows attackers to view arbitrary users' screens by leveraging screen-sharing access...

CVE-2016-4713

CoreDisplay in Apple OS X before 10.12 allows attackers to view arbitrary users' screens by leveraging screen-sharing access...

CVE-2016-4713

CVE-2016-4713 affects CoreDisplay in Apple OS X prior to 10.12. The vulnerability is a session-management issue where a user with screen-sharing access could view another user’s screen. The macOS Sierra 10.12 security content indicates the issue was addressed via improved session tracking, implyi...

InVision: CRITICAL Any █████ of any screen can be removed by anyone!

Summary ------- This is an IDOR bug which allows to remove ██████ of other users. Steps to reproduce ------ 1. Make sure you have two accounts A and B 2. On account A create a ███ on a screen and remember its ID, let's say it was 12345678 3. With account B create a ██████████ on a screen, let's s...

Vulnerability of the Windows operating system, allowing a perpetrator to execute arbitrary code

The vulnerability of the Windows operating system is related to incorrect restrictions on the download of web content when the screen is blocked. Exploiting this vulnerability allows a local attacker to execute arbitrary code using a specially crafted Wi-Fi access point or broadband mobile device...

iSpy Keylogger Targets Passwords, Skype, Webcams

Researchers are monitoring sales and infection rates of a new keylogger being sold on the dark web for $25 to $35. Along with capturing keystrokes, iSpy grabs passwords stored in web browsers, records Skype chats, takes webcam screenshots and steals the license keys of software such as Adobe...

Microsoft Windows Local Elevation of Privilege Vulnerability (CNVD-2016-07926)

Microsoft Windows is a series of operating systems released by the American company Microsoft. A lock screen elevation of privilege vulnerability exists in Microsoft Windows that originates from a program error that allows loading of web content from the Windows lock screen. An attacker in close...

Boozt Fashion AB: ADB Backup is enabled within AndroidManifest

ADB Backup is enabled for this app. ADB Backup feature is a good tool for backing up all of your files. If it's enabled, malicious users who have your phone can copy all of the sensitive data for this app in your phone. Requirement: Unlock phone's screen; Enable the developer mode. Sensitive data...

CVE-2016-3302

Microsoft Windows 8.1, Windows Server 2012 R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607, when the lock screen is enabled, do not properly restrict the loading of web content, which allows physically proximate attackers to execute arbitrary code via a 1 crafted Wi-Fi access point or 2...

CVE-2016-3302

Microsoft Windows 8.1, Windows Server 2012 R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607, when the lock screen is enabled, do not properly restrict the loading of web content, which allows physically proximate attackers to execute arbitrary code via a 1 crafted Wi-Fi access point or 2...

Privilege escalation

Microsoft Windows 8.1, Windows Server 2012 R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607, when the lock screen is enabled, do not properly restrict the loading of web content, which allows physically proximate attackers to execute arbitrary code via a 1 crafted Wi-Fi access point or 2...

CVE-2016-3302

Microsoft Windows 8.1, Windows Server 2012 R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607, when the lock screen is enabled, do not properly restrict the loading of web content, which allows physically proximate attackers to execute arbitrary code via a 1 crafted Wi-Fi access point or 2...

Icecream Apps Insecure File Permissions / Privilege Escalation

Exploit Title: Multiple Icecream Apps Local Privilege Escalation Date: 13/09/2016 Exploit Author: Tulpa Contact: [email protected] Author website: www.tulpa-security.com Vendor Homepage: icecreamapps.com Software Versions Affected: Icecream Ebook Reader 4.21 | Icecream Screen Recorder 4.21...