10 - 2015 - :: Deepquest ::

>> Safari User-Assisted Applescript Exec Attack

USER: deepcore // 2015-10-24 // 0 CMT

In versions of Mac OS X before 10.11.1, the applescript:// URL scheme is provided, which opens the provided script in the Applescript Editor. Pressing cmd-R in the Editor executes the…

[SECURITY]

>> [webapps] – Liferay 6.1.0 CE – Privilege Escalation

USER: deepcore // 2015-10-24 // 0 CMT

Liferay 6.1.0 CE – Privilege Escalation

[SECURITY]

>> [webapps] – Joomla Real Estate Manager Component 3.7 – SQL injection

USER: deepcore // 2015-10-24 // 0 CMT

Joomla Real Estate Manager Component 3.7 – SQL injection

[APPLE]

>> Apple Security Advisory 2015-10-21-1

USER: deepcore // 2015-10-23 // 0 CMT

Apple Security Advisory 2015-10-21-1 – iOS 9.1 is now available and addresses arbitrary code execution, cookies being overwritten, heap based buffer overflow, and various other vulnerabilities.

[APPLE]

>> Apple Security Advisory 2015-10-21-2

USER: deepcore // 2015-10-23 // 0 CMT

Apple Security Advisory 2015-10-21-2 – watchOS 2.0.1 is now available and addresses arbitrary code execution, heap buffer overflow, and various other vulnerabilities.