UBUNTU-CVE-2017-2445

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to conduct Universal XSS UXSS attacks via crafted frame objects...

CVE-2017-2475

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to conduct Universal XSS UXSS attacks via crafted use of frames on a web site...

UBUNTU-CVE-2017-2475

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to conduct Universal XSS UXSS attacks via crafted use of frames on a web site...

CVE-2017-2445

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to conduct Universal XSS UXSS attacks via crafted frame objects...

Verizon Rebuts Critics of Data-Collecting App

Verizon broke its silence today on what many believed would be a controversial rollout of an app made by Evie Labs called AppFlash, that had been identified by privacy advocates as spyware. The wireless carrier and broadband ISP defended itself Friday saying its critics were flat-out wrong. Veriz...

Sync Breeze Enterprise 9.5.16 - Import Command Buffer Overflow

This module exploits a buffer overflow in Sync Breeze Enterprise 9.5.16 by using the import command option to import a specially crafted xml file. Module Options msf use exploit/windows/fileformat/syncbreeze/xml msf undefinedxml show actions ...actions... msf undefinedxml set ACTION msf...

Dup Scout Enterprise v10.4.16 - Import Command Buffer Overflow

This module exploits a buffer overflow in Dup Scout Enterprise v10.4.16 by using the import command option to import a specially crafted xml file. Module Options msf use exploit/windows/fileformat/dupscout/xml msf undefinedxml show actions ...actions... msf undefinedxml set ACTION msf undefinedxm...

Memory Corruption Vulnerability in PSD Image Processing by Universal Viewer

Universal Picture Viewer is an image viewing tool. Universal Picture Viewer has a memory corruption vulnerability when dealing with PSD format images, which allows an attacker to construct a malformed PSD format that can cause the program to crash, and if successfully exploited, can lead to...

CADA 3S CoDeSys Gateway Server - Directory Traversal Exploit

Exploit for windows platform in category local exploits This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework http://metasploit.com require 'msf/core' class MetasploitModule 'SCADA 3S CoDeSys Gateway Server Directory...

Memory Corruption Vulnerability in PCX Image Processing by Universal Viewer

Universal Picture Viewer is an image viewing tool. Universal Picture Viewer has a memory corruption vulnerability when dealing with PCX-format pictures, which allows an attacker to construct a malformed PCX format that can cause the program to crash, and if successfully exploited, can lead to...

SysGauge SMTP Validation Buffer Overflow Exploit

This Metasploit module will setup an SMTP server expecting a connection from SysGauge 1.5.18 via its SMTP server validation. The module sends a malicious response along in the 220 service ready response and exploits the client, resulting in an unprivileged shell. This module requires Metasploit:...

Memory Corruption Vulnerability in ICO Image Processing by Universal Viewer

Universal Picture Viewer is an image viewing tool. Universal Picture Viewer has a memory corruption vulnerability when dealing with ICO format images, which allows an attacker to construct a malformed ICO format that can cause the program to crash, and if successfully exploited, can lead to...

Memory Corruption Vulnerability in BMP Image Processing by Universal Viewer

Universal Picture Viewer is an image viewing tool. Universal Picture Viewer has a memory corruption vulnerability when dealing with BMP format images, which allows an attacker to construct a malformed BMP format that can cause the program to crash, and if successfully exploited, can lead to...

kernel: double-free in usb-audio triggered by invalid USB descriptor

A flaw was found in the USB-MIDI Linux kernel driver: a double-free error could be triggered for the 'umidi' object. An attacker with physical access to the system could use this flaw to escalate their privileges...

Memory Corruption Vulnerability in GIF Image Processing by Universal Picture Viewer

Universal Picture Viewer is a picture viewing software. Universal Picture Viewer has a memory corruption vulnerability when dealing with GIF format images, which allows an attacker to construct a malformed GIF format that can cause the program to crash, and if successfully exploited, can lead to...

The vulnerability of the Android operating system, which allows a malicious actor to compromise data privacy

The vulnerability of the USB driver of Android devices is related to the lack of protection for sensitive data. Exploiting this vulnerability allows a malicious actor to compromise data confidentiality through a local malware application...

UBUNTU-CVE-2017-5898

Integer overflow in the emulatedapdufromguest function in usb/dev-smartcard-reader.c in Quick Emulator Qemu, when built with the CCID Card device emulator support, allows local users to cause a denial of service application crash via a large Application Protocol Data Units APDU unit...

The vulnerability of the iOS operating system, which allows a hacker to execute arbitrary code

The vulnerability of the Image Capture component in the iOS operating system exists due to insufficient validation of input data. Exploiting this vulnerability allows a local attacker to execute arbitrary code using a specially created USB HID device...

YouTube encrypted video there are multiple universal password can bypass the limit(wonderful vulnerability)-vulnerability warning-the black bar safety net

YouTube encrypted Video, a plurality of universal password Detailed description: As long as the Password box, enter the two English double quotation marks. For example: "" press the OK button to play all the encrypted videos. Management added: "" \ %% or a=a And other characters can bypass video...

SysGauge 1.5.18 SMTP Validation Buffer Overflow

This module will setup an SMTP server expecting a connection from SysGauge 1.5.18 via its SMTP server validation. The module sends a malicious response along in the 220 service ready response and exploits the client, resulting in an unprivileged shell. Module Options msf use...