Apple OS X Kernel Elevation of Privilege Vulnerability

OS X formerly Mac OS X is the latest version of Apple's proprietary operating system for the Macintosh computer. A security vulnerability in the kernel of Apple OS X versions prior to 10.11.1 can be exploited by a local attacker to elevate privileges via type obfuscation in Mach task handling...

CVE-2015-5932

The kernel in Apple OS X before 10.11.1 allows local users to gain privileges by leveraging an unspecified "type confusion" during Mach task processing...

Type confusion

The kernel in Apple OS X before 10.11.1 allows local users to gain privileges by leveraging an unspecified "type confusion" during Mach task processing...

CVE-2015-5932

The kernel in Apple OS X before 10.11.1 allows local users to gain privileges by leveraging an unspecified "type confusion" during Mach task processing...

CVE-2015-5932: Undefined Security Weakness

The kernel in Apple OS X before 10.11.1 allows local users to gain privileges by leveraging an unspecified "type confusion" during Mach task processing...

PT-2015-7082

Name of the Vulnerable Software and Affected Versions Apple OS X versions prior to 10.11.1 Description The issue allows local users to gain privileges by leveraging an unspecified type confusion during Mach task processing. Recommendations For Apple OS X versions prior to 10.11.1, update to versi...

Lenovo Caught (3rd Time) Pre-Installing Spyware on its Laptops

Lenovo has once again been caught installing spyware on its laptops and workstations without the user's permission or knowledge. One of the most popular computer manufacturers is being criticized for selling some refurbished laptop models pre-installed with invasive marketing software that sends...

The vulnerability of the Windows operating system allows a perpetrator to circumvent access restrictions to the file system and delete arbitrary files.

The vulnerability of the Windows operating system’s task scheduler is related to deficiencies in access control for certain functions. Exploiting this vulnerability allows a malicious individual to circumvent restrictions on access to the file system and delete arbitrary files...

My Government Doesn't Understand How Encryption and Cyber Security Work

Almost every day or every second day, When I come across various announcements in Newspaper, TV News Channels, and Press releases that... ...Indian Government and related Policy-making organizations are going to set up their so-called "CyberSecurity Task Forces" or drafted a "National Cyber...

Design/Logic Flaw

The processorsettasks API implementation in Apple iOS before 9 allows local users to bypass an entitlement protection mechanism and obtain access to the task ports of arbitrary processes by leveraging root privileges...

PT-2015-2120

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 9 Description The issue is related to insufficient access control in the processor set tasks component of the iOS operating system. It allows a local attacker to bypass existing protection mechanisms and scan ports ...

Microsoft Windows multiple security vulnerabilities

Multiple vulnerabilities in Edge and Internet Explorer, code execution in graphics and journaling, mediascenter, .Net framework, task management, Active Directory, Hyper-V...

Microsoft Windows Task Scheduler - 'DeleteExpiredTaskAfter' File Deletion Privilege Escalation

Source: https://code.google.com/p/google-security-research/issues/detail?id=442 Windows: Task Scheduler DeleteExpiredTaskAfter File Deletion Elevation of Privilege Platform: Windows 8.1 Update, looks like it should work on 7 and 10 as well Class: Elevation of Privilege Summary: The Task Scheduler...

Microsoft Windows Task Scheduler - DeleteExpiredTaskAfter File Deletion Privilege Escalation

Microsoft Windows Task Scheduler - DeleteExpiredTaskAfter File Deletion Privilege Escalation Source: https://code.google.com/p/google-security-research/issues/detail?id=442 Windows: Task Scheduler DeleteExpiredTaskAfter File Deletion Elevation of Privilege Platform: Windows 8.1 Update, looks like...

Synology Download Station Cross-Site Scripting Vulnerability (CNVD-2015-06011)

Synology Download Station is a set of web-based download applications from Synology. A cross-site scripting vulnerability exists in the 'Create download task via URL' feature in Synology Download Station prior to version 3.5-2967, which can be exploited by remote attackers to inject arbitrary web...

Discuz! X3.1 逻辑错误漏洞

Discuz! X3.1 在完成任务时（home.php?mod=draw&do=view&id=xx），任务先前的状态缺少判断完成任务的链接形如：home.php?mod=draw&do=view&id=xx这个地址最终在 source\class\classtask.php 中被处理约第370行：function draw$id global $G; if!$this-task = C::t'commontask'-fetchbyuid$G'uid', $id showmessage'tasknonexistence'; elseif$this-task'status' != 0...

PT-2015-7400

Name of the Vulnerable Software and Affected Versions Synology Download Station versions prior to 3.5-2967 Description A cross-site scripting XSS issue exists in the "Create download task via URL" feature, allowing remote attackers to inject arbitrary web script or HTML via the urls parameter in ...

Microsoft Windows Task Scheduler Elevation of Privilege Vulnerability

Microsoft Windows is a series of operating systems released by the American company Microsoft. An elevation of privilege vulnerability exists in the Task Scheduler program in Microsoft Windows, which can be exploited by a local attacker to bypass established file system restrictions and delete...

Microsoft Windows Task Management Elevation of Privilege Vulnerability (CNVD-2015-05976)

Microsoft Windows is a series of operating systems released by the American company Microsoft. An elevation of privilege vulnerability exists in Microsoft Windows, which can be exploited by a local attacker to bypass analog level security checks and elevate privileges...

Microsoft Windows Task Manager Elevation of Privilege Vulnerability (CNVD-2015-05975)

Microsoft Windows is a series of operating systems released by the American company Microsoft. An elevation of privilege vulnerability exists in Microsoft Windows, which can be exploited by a local attacker to bypass analog level security checks and elevate privileges...