CVE-2022-42838

An issue with app access to camera data was addressed with improved logic. This issue is fixed in macOS Ventura 13. A camera extension may be able to continue receiving video after the app which activated was closed...

CVE-2022-42833

CVE-2022-42833 affects macOS Ventura 13. The issue is an out-of-bounds read that was addressed with improved input validation, potentially allowing an app to execute arbitrary code with kernel privileges. Remediation: update to macOS Ventura 13 (or later) where the fix is applied. Note: Public do...

CVE-2022-42826

A use after free issue was addressed with improved memory management. This issue is fixed in macOS Ventura 13, iOS 16.1 and iPadOS 16, Safari 16.1. Processing maliciously crafted web content may lead to arbitrary code execution...

AZL-13651 CVE-2023-23916 affecting package cmake for versions less than 3.21.4-13

An allocation of resources without limits or throttling vulnerability exists in curl v7.88.0 based on the "chained" HTTP compression algorithms, meaning that a server response can be compressed multiple times and potentially with differentalgorithms. The number of acceptable "links" in this...

Brave Software: UXss on brave browser via scan QR Code

A UXss vulnerability was found in Brave browser on Android 13, allowing an attacker to execute Xss on all open domains by scanning a QR code containing a malicious URL. The vulnerability could potentially allow attackers to steal victim's cookies and affect various websites...

K14190: TLS/DTLS 'Lucky 13' vulnerability CVE-2013-0169

Security Advisory Description A vulnerability exists in the TLS and DTLS protocols that may allow an attacker to recover plaintext from TLS/DTLS connections that use CBC-mode encryption. CVE-2013-0169 Note : Stream ciphers, such as RC4, are not vulnerable to this issue. Impact The vulnerability m...

CVE-2022-24785

creationtimestamp| type| source ---|---|--- 2023-02-16 11:40:08+00:00| seen| https://t.me/truesecator/4074 2024-07-07 14:05:55+00:00| published-proof-of-concept| https://t.me/cKure/13230 2024-07-08 16:59:47+00:00| seen| https://t.me/ctinow/219845 2024-07-09 16:34:26+00:00|...

Apple Mac OS X Security Update (HT213633)

Apple Mac OS X is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Google Rolling Out Privacy Sandbox Beta on Android 13 Devices

Google announced on Tuesday that it's officially rolling out Privacy Sandbox on Android in beta to eligible mobile devices running Android 13. "The Privacy Sandbox Beta provides new APIs that are designed with privacy at the core, and don't use identifiers that can track your activity across apps...

SUSE CVE-2017-7868

International Components for Unicode ICU for C/C++ before 2017-02-13 has an out-of-bounds write caused by a heap-based buffer overflow related to the utf8TextAccess function in common/utext.cpp and the utextmoveIndex32 function...

SUSE CVE-2019-2978

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: Networking. Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multip...

SUSE CVE-2022-42826

A use after free issue was addressed with improved memory management. This issue is fixed in macOS Ventura 13, iOS 16.1 and iPadOS 16, Safari 16.1. Processing maliciously crafted web content may lead to arbitrary code execution...

Design/Logic Flaw

In permissions of AndroidManifest.xml, there is a possible way to grant signature permissions due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

CVE-2023-20927

In permissions of AndroidManifest.xml, there is a possible way to grant signature permissions due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

CVE-2023-24188

creationtimestamp| type| source ---|---|--- 2023-02-13 22:30:03+00:00| seen| https://t.me/cibsecurity/58026 2025-03-21 18:19:48+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8389...

CVE-2023-25159

creationtimestamp| type| source ---|---|--- 2023-02-13 20:30:01+00:00| seen| https://t.me/cibsecurity/58014...

CVE-2023-23553

creationtimestamp| type| source ---|---|--- 2023-02-13 20:29:55+00:00| seen| https://t.me/cibsecurity/58011...

CVE-2023-0379

creationtimestamp| type| source ---|---|--- 2023-02-13 18:35:55+00:00| seen| https://t.me/cibsecurity/58003...

CVE-2023-0270

creationtimestamp| type| source ---|---|--- 2023-02-13 18:35:54+00:00| seen| https://t.me/cibsecurity/58002...

fazenda.aracaju.se.gov.br Cross Site Scripting vulnerability OBB-3193466

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...