The vulnerability of the Mac OS X operating system and the iOS operating system allows a perpetrator to trigger a service failure or execute arbitrary code.

The vulnerability of the OpenGL component in the Mac OS X and iOS operating systems arises from buffer overflows. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely or cause a service failure memory corruption by using a specially crafted web page...

Mapbox: XSS on www.mapbox.com/authorize/ because of open redirect at /core/oauth/auth

Description --- When you load the endpoint https://www.mapbox.com/authorize/ a GET request is made to the endpoint https://www.mapbox.com/core/oauth/auth with the parameters passed in the request to https://www.mapbox.com/authorize/. If you only send the parameter redirecturi in the request to...

Google Chrome Autofill Memory Misreference Vulnerability

Google Chrome is a popular web browser. A memory misreference vulnerability exists in Google Chrome Autofill, which allows remote attackers to exploit the vulnerability to construct a malicious web page and trick users into parsing it, which can crash the application or execute arbitrary code...

Apple iOS WebKit Information Disclosure Vulnerability (CNVD-2016-03339)

Apple iOS is the United States Apple Apple company for mobile devices developed by a set of operating systems. WebKit is KDE, Apple Apple, Google Google and other companies jointly developed a set of open source Web browser engine, currently used by Apple Safari and Google Chrome and other...

Windows Graphics Component Information Disclosure Vulnerability

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise a user’s system. There are multiple ways an attacker could exploit...

TH692 Outdoor P2P HD Waterproof IP Camera Hard-Coded Credentials

Exploit Title: TH692- Outdoor P2P HD Waterproof IP Camera hardcoded credentials Date: 4/16/2016 Exploit Author: DLY Vendor: TENVIS Technology Co., Ltd Product: TH692- Outdoor P2P HD Waterproof IP Camera Product webpage: http://www.tenvis.com/th-692-outdoor-p2p-hd-waterproof-ip-camera-p-230.html...

Quanta LTE Router Code Execution / Backdoor Accounts

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advisory Information Title: Multiple vulnerabilities found in Quanta LTE routers backdoor, backdoor accounts, RCE, weak WPS ... Advisory URL: https://pierrekim.github.io/advisories/2016-quanta-0x00.txt Blog URL:...

Trend Micro Deep Discovery Inspector 3.7 / 3.8 CSRF

Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/TRENDMICRO-DDI-CSRF.txt Vendor: ==================== www.trendmicro.com Product: ========================================= Trend Micro Deep Discovery Inspector V3.8, 3.7 Deep...

Trend Micro Deep Discovery Inspector 3.8/3.7 - Cross-Site Request Forgery

Exploit for php platform in category web applications + Credits: John Page aka hyp3rlinx Vendor: ==================== www.trendmicro.com Product: ========================================= Trend Micro Deep Discovery Inspector V3.8, 3.7 Deep Discovery Inspector is a network appliance that gives you...

Trend Micro Deep Discovery Inspector 3.8/3.7 - Cross-Site Request Forgery

Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/TRENDMICRO-DDI-CSRF.txt Vendor: ==================== www.trendmicro.com Product: ========================================= Trend Micro Deep Discovery Inspector V3.8, 3.7 Deep...

Microsoft Edge browser vulnerability, which allows a hacker to trigger a service failure or execute arbitrary code

The vulnerability of Microsoft Edge arises due to buffer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or trigger a denial-of-service attack memory corruption using a specially crafted web page...

Deluge of Apple Patches Fix Vulnerabilities in OS X, iOS, Safari, and More

In addition to fixing the serious crypto vulnerabilities in iMessage that surfaced yesterday, Apple also deployed patches for nearly all of its products, including Safari, OS X, iOS, Apple TV’s tvOS, and watchOS. The iOS update, 9.3, is arguably the most pressing given the cryptographic issue dug...

Mozilla Firefox WebRTC Conditional Competition Vulnerability

Firefox is an open source web browser. A competitive condition vulnerability in GetStaticInstance in Mozilla Firefox WebRTC allows remote attackers to exploit the vulnerability to construct a malicious WEB page, which can be tricked into parsing by the user and can crash the application...

Adobe Flash Player Memory Corruption Vulnerability (CNVD-2016-01619)

Adobe Flash Player is a multimedia player product; Adobe AIR SDK and Adobe AIR SDK & Compiler are both standard development kits for Adobe AIR. A memory corruption vulnerability exists in Adobe Flash Player, which could be exploited by remote attackers to construct a malicious web page that could...

Adobe Flash Player Memory Corruption Vulnerability (CNVD-2016-01611)

Adobe Flash Player is a multimedia player product; Adobe AIR SDK and Adobe AIR SDK & Compiler are both standard development kits for Adobe AIR. A memory corruption vulnerability exists in Adobe Flash Player, which could be exploited by remote attackers to construct a malicious web page that could...

Mozilla Firefox and Firefox ESR Memory Misreference Vulnerability

Firefox is an open source Web browser ; Firefox ESR is an extended support version of Firefox.Graphite is a set of Python language , written using the Django framework for enterprise-class open source system monitoring tools . A memory misreference vulnerability exists in Mozilla Firefox and...

Adobe Flash Player Integer Overflow Vulnerability (CNVD-2016-01625)

Adobe Flash Player is a multimedia player product; Adobe AIR SDK and Adobe AIR SDK & Compiler are both standard development kits for Adobe AIR. An integer overflow vulnerability exists in Adobe Flash Player, which could be exploited by remote attackers to construct a malicious web page that could...

Adobe Flash Player integer overflow vulnerability (CNVD-2016-01624)

Adobe Flash Player is a multimedia player product; Adobe AIR SDK and Adobe AIR SDK & Compiler are both standard development kits for Adobe AIR. An integer overflow vulnerability exists in Adobe Flash Player, which could be exploited by remote attackers to construct a malicious web page that could...

Adobe Flash Player Memory Misreference Vulnerability (CNVD-2016-01628)

Adobe Flash Player is a multimedia player product; Adobe AIR SDK and Adobe AIR SDK & Compiler are both standard development kits for Adobe AIR. A memory misreference vulnerability exists in Adobe Flash Player, which allows remote attackers to exploit the vulnerability to construct a malicious web...

Adobe Flash Player Memory Misreference Vulnerability (CNVD-2016-01613)

Adobe Flash Player is a multimedia player product; Adobe AIR SDK and Adobe AIR SDK & Compiler are both standard development kits for Adobe AIR. A memory misreference vulnerability exists in Adobe Flash Player, which allows remote attackers to exploit the vulnerability to construct a malicious web...