138 matches found
rootsh
rootsh rootsh 是一个针对 OS X Yosemite 10.10.5 build 14F27 的本地权限提升工具。它利用了 CVE-2016-1758 和 CVE-2016-1828，这两个 XNU 中的漏洞已在 OS X El Capitan 10.11.4 和 10.11.5 中修补。rootsh 无法在启用了 SMAP 的平台上运行。 CVE-2016-1758 CVE-2016-1758 是一个信息泄露漏洞，由于将内核栈中未初始化的字节复制到用户空间导致。通过比较泄露的内核指针与固定参考地址，可以恢复内核偏移（kernel slide）。 CVE-2016-1828...
Security Bulletin: Vulnerabilities exists in IBM Cloud Pak for Data System (Yosemite 1.0)
Summary Vulnerabilities identified in IBM Cloud Pak for Data System Yosemite 1.0 - NRS have been addressed in version 3.0.5.4 Vulnerability Details CVEID:CVE-2026-62574 DESCRIPTION: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Ja...
CVE-2026-17467
IBM Cloud Pak for Data System Yosemite 1.0 3.0.5.2 could allow a remote attacker to obtain sensitive information due to the use of weak or deprecated cryptographic protocols...
EUVD-2026-77782
IBM Cloud Pak for Data System Yosemite 1.0 3.0.5.2 could allow a remote attacker to obtain sensitive information due to the use of weak or deprecated cryptographic protocols...
CVE-2026-17467 Vulnerabilities exists in IBM Cloud Pak for Data System
IBM Cloud Pak for Data System Yosemite 1.0 3.0.5.2 could allow a remote attacker to obtain sensitive information due to the use of weak or deprecated cryptographic protocols...
PT-2026-57345
New one on the board: CVE-2026-59979. Cross-tenant IDOR in Yosemite-Crew OSS vet practice mgmt. Their security-fix PR added RBAC to the create routes but forgot the update/delete ones so any low-priv user even a patient account could edit or delete another clinic's data. https://t.co/4NobkLLi91...
Malicious code in ocean_0wyzl_ngvm7_yosemite (npm)
The package ocean0wyzlngvm7yosemite was found to contain malicious code...
MAL-2025-32460 Malicious code in rose_d6zyd_r6s3n_yosemite (npm)
The package rosed6zydr6s3nyosemite was found to contain malicious code...
yosemitegoldcountrylodge.us Cross Site Scripting vulnerability OBB-2324162
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
yosemitewestgate.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1170804 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
ems.yosemite.edu XSS vulnerability
Open Bug Bounty ID: OBB-628405 Description| Value ---|--- Affected Website:| ems.yosemite.edu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Apple OS X Yosemite - flow_divert-heap-overflow Kernel Panic Exploit
Exploit for macOS platform in category dos / poc / flowdivert-heap-overflow.c Brandon Azad CVE-2016-1827: Kernel heap overflow in the function flowdiverthandleappmapcreate on OS X and iOS. Exploitation requires root privileges. The vulnerability was patched in OS X El Capitan 10.11.5 and iOS 9.3....
Apple OS X 10.10.5 - rootsh Local Privilege Escalation Exploit
Exploit for macOS platform in category local exploits rootsh rootsh is a local privilege escalation targeting OS X Yosemite 10.10.5 build 14F27. It exploits CVE-2016-1758 and CVE-2016-1828, two vulnerabilities in XNU that were patched in OS X El Capitan 10.11.4 and 10.11.5. rootsh will not work o...
About the security content of macOS Sierra 10.12.6, Security Update 2017-003 El Capitan, and Security Update 2017-003 Yosemite - Apple Support
About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. For more information about security, se...
yosemite.epa.gov XSS vulnerability
Vulnerable URL: https://yosemite.epa.gov/oarm/igmsegf.nsf/allgrantsnarrow?SearchView= Details: Description| Value ---|--- Patched:| No Latest check for patch:| 08.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| N...
About the security content of macOS Sierra 10.12.6, Security Update 2017-003 El Capitan, and Security Update 2017-003 Yosemite
About the security content of macOS Sierra 10.12.6, Security Update 2017-003 El Capitan, and Security Update 2017-003 Yosemite This document describes the security content of macOS Sierra 10.12.6, Security Update 2017-003 El Capitan, and Security Update 2017-003 Yosemite. About Apple security...
About the security content of Apple Remote Desktop 3.9 - Apple Support
About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. For more information about security, se...
About the security content of macOS Sierra 10.12.1, Security Update 2016-002 El Capitan, and Security Update 2016-006 Yosemite - Apple Support
About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. For more information about security, se...
About the security content of macOS Sierra 10.12.4, Security Update 2017-001 El Capitan, and Security Update 2017-001 Yosemite
About the security content of macOS Sierra 10.12.4, Security Update 2017-001 El Capitan, and Security Update 2017-001 Yosemite This document describes the security content of macOS Sierra 10.12.4, Security Update 2017-001 El Capitan, and Security Update 2017-001 Yosemite. About Apple security...
About the security content of GarageBand 10.1.6
About the security content of GarageBand 10.1.6 This document describes the security content of GarageBand 10.1.6. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases ar...