Microsoft Windows RPC Authentication Downgrade (MS16-047: CVE-2016-0128; CVE-2016-2118)

A security bypass vulnerability, also referred to as BadLock, exists in Microsoft Windows clients connecting to Samba Servers. The vulnerability is due to an authentication design weakness...

The vulnerability of the Android operating system allows a hacker to bypass security measures and obtain confidential information.

The vulnerability of the BnCrypto::onTransact function media/libmedia/ICrypto.cpp in the Android operating system is caused by a numerical overflow. Exploiting this vulnerability could allow a malicious actor to bypass security measures and obtain confidential information, leading to incorrect...

Cisco Firepower System Software Security Bypass Vulnerability

Cisco Firepower System Software is a next-generation firewall product NGFW from Cisco. A security bypass vulnerability exists in the malicious file detection and blocking feature of Cisco Firepower System Software. As the program fails to properly validate fields in the HTTP header. A remote...

Apple iOS LaunchServices XPC Services API Security Restriction Bypass Vulnerability

iOS is an operating system developed by Apple for mobile devices, and supported devices include iPhone, iPod touch, iPad, and Apple TV. In Apple iOS versions prior to 9.3, a security restriction bypass vulnerability exists in the XPC Services API in LaunchServices, which allows a remote attacker ...

jdk8-openjdk: sandbox escape

It was discovered that the security fix for CVE-2013-5838 was incomplete and still allowed remote attackers to escape the Java security sandbox mechanism. The root problem is that the Reflection API does not properly guarantee type safety when Method Handle objects were invoked across two differe...

Google Chrome Security Updates (stable-channel-update_24-2016-03) - Linux

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...

Zomato: Reflected XSS on Zomato API

First of all here https://hackerone.com/reports/115402 is another report looks like this report. Zomato using APIs for developers to create their restaurant search etc. You are using ressearchwidget which is can be seen right here https://www.zomato.com/widgets/ressearchwidget.php. In the report...

Design/Logic Flaw

dyld in Apple OS X before 10.11.4 allows attackers to bypass a code-signing protection mechanism via a modified app...

CVE-2016-1782

CVE-2016-1782 affects WebKit in Apple iOS before 9.3 and Safari before 9.1. The issue arises because redirects that specify a TCP port number are not properly restricted, enabling a remote attacker to bypass intended port restrictions via a crafted website. Impact per provided sources is that thi...

KLA10776 Multiple vulnerabilities in Google Chrome

Multiple serious vulnerabilities have been found in Google Chrome. Malicious users can exploit these vulnerabilities to cause denial of service or execute arbitrary code. Below is a complete list of vulnerabilities 1. Multiple unknown vulnerabilities at V8 can be exploited to cause denial of...

Samba 3.2.x < 4.1.23 / 4.2.x < 4.2.9 / 4.3.x < 4.3.6 / 4.4.0 < 4.4.0rc4 Multiple Vulnerabilities

According to its banner, the version of Samba running on the remote host is 3.2.x prior to 4.1.23, 4.2.x prior to 4.2.9, 4.3.x prior to 4.3.6, or 4.4.0 prior to 4.4.0rc4. It is, therefore, affected by the following vulnerabilities : - A security bypass vulnerability exists in the SMB1...

Tomcat/JbossWeb: security manager bypass via EL expressions

It was found that the expression language resolver evaluated expressions within a privileged code section. A malicious web application could use this flaw to bypass security manager protections...

Security feature bypass

IBM Tivoli NetView Access Services NVAS allows remote authenticated users to gain privileges by entering the ADM command and modifying a "page ID" field to the EMSPG2 transaction code. NOTE: the vendor's perspective is that configuration and use of available security controls in the NVAS product...

OpenSSH < 7.2 Untrusted X11 Forwarding Fallback Security Bypass

According to its banner, the version of OpenSSH running on the remote host is prior to 7.2. It is, therefore, affected by a security bypass vulnerability due to a flaw in ssh1 that is triggered when it falls back from untrusted X11 forwarding to trusted forwarding when the SECURITY extension is...

Symantec Endpoint Protection Multiple Security Issues

SUMMARY Symantec Endpoint Protection SEP was susceptible to a number of security findings that could potentially result in an authorized but less privileged user gaining elevated access to the Management Console. SEP Client security mitigations can potentially be bypassed allowing arbitrary code...

Medium: openssh

Issue Overview: It was discovered that the OpenSSH server did not sanitize data received in requests to enable X11 forwarding. An authenticated client with restricted SSH access could possibly use this flaw to bypass intended restrictions. Affected Packages: openssh Issue Correction: Run yum upda...

Zend Framework < 2.2.9 / 2.3.x < 2.3.4 Session Validators Security Bypass

Binary data 9141.prm...

CVE-2016-0828

The BnGraphicBufferConsumer::onTransact function in libs/gui/IGraphicBufferConsumer.cpp in mediaserver in Android 5.x before 5.1.1 LMY49H and 6.x before 2016-03-01 does not initialize a certain slot variable, which allows attackers to obtain sensitive information, and consequently bypass an...

The vulnerability of the Android operating system, which allows a perpetrator to obtain confidential information or bypass security mechanisms

The vulnerability of the Media Framework component in the Android operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor to obtain confidential information or bypass security mechanisms...

The vulnerability of the Android operating system, which allows a perpetrator to obtain confidential information or bypass security mechanisms

The vulnerability of the libstagefright library in the Android operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor, acting remotely, to obtain confidential information or bypass security mechanisms...