Subscribe via feed.
Posts under Apple

PostgreSQL COPY FROM PROGRAM Command Execution

Posted by deepcore under Apple (No Respond)

Installations running Postgres 9.3 and above have functionality which allows for the superuser and users with ‘pg_execute_server_program’ to pipe to and from an external program using COPY. This allows arbitrary command execution as though you have console access. This module attempts to create a new table, then execute system commands in the context of copying […]

Tags: , ,

Apple Security Advisory 2019-3-27-1

Posted by deepcore under Apple (No Respond)

Apple Security Advisory 2019-3-27-1 – watchOS 5.2 is now available and addresses buffer overflow and code execution vulnerabilities.

Tags: , ,

Apple Security Advisory 2019-3-25-2

Posted by deepcore under Apple (No Respond)

Apple Security Advisory 2019-3-25-2 – macOS Mojave 10.14.4, Security Update 2019-002 High Sierra, Security Update 2019-002 Sierra are now available and addresses buffer overflow, bypass, and code execution vulnerabilities.

Tags: , ,

Apple Security Advisory 2019-3-25-7

Posted by deepcore under Apple (No Respond)

Apple Security Advisory 2019-3-25-7 – Xcode 10.2 is now available and addresses a code execution vulnerability.

Tags: , ,

Apple Security Advisory 2019-3-25-4

Posted by deepcore under Apple (No Respond)

Apple Security Advisory 2019-3-25-4 – Safari 12.1 is now available and addresses code execution and cross site scripting vulnerabilities.

Tags: , ,

Apple Security Advisory 2019-3-25-5

Posted by deepcore under Apple (No Respond)

Apple Security Advisory 2019-3-25-5 – iTunes 12.9.4 for Windows is now available and addresses buffer overflow, code execution, and cross site scripting vulnerabilities.

Tags: , ,

Apple Security Advisory 2019-3-25-3

Posted by deepcore under Apple (No Respond)

Apple Security Advisory 2019-3-25-3 – tvOS 12.2 is now available and addresses buffer overflow, code execution, and cross site scripting vulnerabilities.

Tags: , ,

Apple Security Advisory 2019-3-25-1

Posted by deepcore under Apple (No Respond)

Apple Security Advisory 2019-3-25-1 – iOS 12.2 is now available and addresses buffer overflow, code execution, and cross site scripting vulnerabilities.

Tags: , ,

Apple Security Advisory 2019-3-25-6

Posted by deepcore under Apple (No Respond)

Apple Security Advisory 2019-3-25-6 – iCloud for Windows 7.11 is now available and addresses buffer overflow, code execution, and cross site scripting vulnerabilities.

Tags: , ,

Apple macOS 10.13.5 Local Privilege Escalation

Posted by deepcore under Apple (No Respond)

Apple macOS version 10.13.5 local privilege escalation exploit.

Tags: , ,