PT-2015-4078

Name of the Vulnerable Software and Affected Versions LG On-Screen Phone versions prior to 4.3.010 Description The issue allows remote attackers to bypass authorization via a crafted request. Recommendations For versions prior to 4.3.010, update to version 4.3.010 or later to resolve the issue...

LG On-Screen Phone Security Bypass Vulnerability

LG On-Screen Phone is a service program that allows you to remotely view and manipulate your cell phone through PC keyboard/mouse input. A security bypass vulnerability exists in LG On-Screen Phone, which can be exploited by attackers to bypass certain security restrictions and perform unauthoriz...

February 10, 2015 update for Office Web Apps Server 2013 (KB2956101)

None None...

Vulnerability alert: LG Mobile Phone authentication permission bypass vulnerability, can Remote Control Phone-vulnerability warning-the black bar safety net

Security researchers recently found a LG phone a very serious vulnerability, the attacker may be in the user unaware of the case control LG phone, all without physical contact. As long as the attacker with the target within the same LAN, you can implement the attack, for example, connected to the...

Exploit for Improper Access Control in Lg On-Screen_Phone

LG On Screen Phone authentication bypass PoC ===================...

libvncserver: integer overflow flaw, leading to a heap-based buffer overflow in screen size handling

An integer overflow flaw, leading to a heap-based buffer overflow, was found in the way screen sizes were handled by LibVNCServer. A malicious VNC server could use this flaw to cause a client to crash or, potentially, execute arbitrary code in the client...

CVE-2014-8827

LoginWindow in Apple OS X before 10.10.2 does not transition to the lock-screen state immediately upon being woken from sleep, which allows physically proximate attackers to obtain sensitive information by reading the screen...

Information disclosure

LoginWindow in Apple OS X before 10.10.2 does not transition to the lock-screen state immediately upon being woken from sleep, which allows physically proximate attackers to obtain sensitive information by reading the screen...

CVE-2014-8827

LoginWindow in Apple OS X before 10.10.2 does not transition to the lock-screen state immediately upon being woken from sleep, which allows physically proximate attackers to obtain sensitive information by reading the screen...

Apple MAC OS X Yosemite Lock Screen Bypass Vulnerability

Apple MAC OS X Yosemite is the latest operating system developed by Apple. Apple MAC OS X Yosemite suffers from a security vulnerability in the way it handles lock screen rendering, which allows attackers to exploit the vulnerability so that the MAC does not lock immediately upon wakeup...

PT-2015-4093

Name of the Vulnerable Software and Affected Versions Apple OS X versions prior to 10.10.2 Description The issue allows physically proximate attackers to obtain sensitive information by reading the screen when the system is woken from sleep, as the LoginWindow does not transition to the lock-scre...

CVE-2014-8827: Improper Access Control

LoginWindow in Apple OS X before 10.10.2 does not transition to the lock-screen state immediately upon being woken from sleep, which allows physically proximate attackers to obtain sensitive information by reading the screen...

CVE-2015-1308

kde-workspace 4.2.0 and plasma-workspace before 5.1.95 allows remote attackers to obtain input events, and consequently obtain passwords, by leveraging access to the X server when the screen is locked...

Input validation

kde-workspace 4.2.0 and plasma-workspace before 5.1.95 allows remote attackers to obtain input events, and consequently obtain passwords, by leveraging access to the X server when the screen is locked...

CVE-2015-1308

kde-workspace 4.2.0 and plasma-workspace before 5.1.95 allows remote attackers to obtain input events, and consequently obtain passwords, by leveraging access to the X server when the screen is locked...

CVE-2015-1308

kde-workspace 4.2.0 and plasma-workspace before 5.1.95 allows remote attackers to obtain input events, and consequently obtain passwords, by leveraging access to the X server when the screen is locked...

JVN#27142693: NP-BBRM vulnerable in UPnP functionality

NP-BBRM provided by I-O DATA DEVICE, INC. is a LAN router. NP-BBRM contains a vulnerability in the UPnP functionality. Impact The device may be used in a DDoS attack, as a SSDP reflector. Solution Disable UPnP Disable UPnP functionality from the management configuration in the settings screen...

Ubuntu: Security Advisory (USN-2475-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

gtk+ protection bypass

Screen lock bypass...

Ubuntu 14.04 LTS : GTK+ update (USN-2475-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-2475-1 advisory. Clemens Fries discovered that GTK+ allowed bypassing certain screen locks by using the menu key. An attacker with physical access could possibly use this flaw to...