EUVD-2014-4333

Malware in sbrugna...

EUVD-2015-5856

Malware in sbrugna...

EUVD-2015-5855

Malware in sbrugna...

Apple Patches iTunes, iCloud for Windows, Xcode Server

Apple’s iTunes and iCloud software for Windows PCs received updates on Thursday for vulnerabilities that could allow for the disclosure of personal information and arbitrary code execution. In addition to the Windows fixes, Apple also alerted Mac and iOS app developers to nearly a dozen security...

Apple Xcode Server Information Disclosure Vulnerability

Apple Xcode Server is a development server. An access checksum vulnerability in the Apple Xcode Server Processing Repository email list could lead to sending build notification messages to other users...

CVE-2015-5910

IDE Xcode Server in Apple Xcode before 7.0 does not ensure that server traffic is encrypted, which allows remote attackers to obtain sensitive information by sniffing the network...

CVE-2015-5909

IDE Xcode Server in Apple Xcode before 7.0 does not properly restrict access to repository e-mail lists, which allows remote attackers to obtain potentially sensitive build information in opportunistic circumstances by leveraging incorrect notification delivery...

Code injection

IDE Xcode Server in Apple Xcode before 7.0 does not ensure that server traffic is encrypted, which allows remote attackers to obtain sensitive information by sniffing the network...

Design/Logic Flaw

IDE Xcode Server in Apple Xcode before 7.0 does not properly restrict access to repository e-mail lists, which allows remote attackers to obtain potentially sensitive build information in opportunistic circumstances by leveraging incorrect notification delivery...

CVE-2015-5910

IDE Xcode Server in Apple Xcode before 7.0 does not ensure that server traffic is encrypted, which allows remote attackers to obtain sensitive information by sniffing the network...

CVE-2015-5909: Exposure of Sensitive Information to an Unauthorized Actor

IDE Xcode Server in Apple Xcode before 7.0 does not properly restrict access to repository e-mail lists, which allows remote attackers to obtain potentially sensitive build information in opportunistic circumstances by leveraging incorrect notification delivery...

PT-2015-7068

Name of the Vulnerable Software and Affected Versions Xcode versions prior to 7.0 Description The issue concerns improper access restriction to repository e-mail lists in Xcode Server, allowing remote attackers to obtain potentially sensitive build information by leveraging incorrect notification...

CVE-2015-5910: Exposure of Sensitive Information to an Unauthorized Actor

IDE Xcode Server in Apple Xcode before 7.0 does not ensure that server traffic is encrypted, which allows remote attackers to obtain sensitive information by sniffing the network...

PT-2015-7069

Name of the Vulnerable Software and Affected Versions Xcode versions prior to 7.0 Description The issue concerns the IDE Xcode Server in Apple Xcode, where server traffic is not properly encrypted. This allows remote attackers to obtain sensitive information by sniffing the network. Recommendatio...

Apple OS X Yosemite IDE Xcode Server Encryption Issue Vulnerability

OS X Yosemite is the new generation of Mac operating system and IDE Xcode Server is an integrated development tool. The IDE Xcode Server in OS X Yosemite has a cryptographic issue vulnerability that can be exploited by an attacker to access the traffic Xcode Server...

CVE-2014-4406

Cross-site scripting XSS vulnerability in Xcode Server in CoreCollaboration in Apple OS X Server before 3.2.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in Xcode Server in CoreCollaboration in Apple OS X Server before 3.2.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-4406

Cross-site scripting XSS vulnerability in Xcode Server in CoreCollaboration in Apple OS X Server before 3.2.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-4406

Apple OS X Server’s CoreCollaboration component (Xcode Server) is affected by CVE-2014-4406, a Cross-site Scripting (XSS) vulnerability in Xcode Server prior to 3.2.1. The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. The connected open-source/enter...

CVE-2014-4406: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Xcode Server in CoreCollaboration in Apple OS X Server before 3.2.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...