Apple macOS 安全漏洞

Apple macOS is a specialized operating system developed by Apple Inc. for Mac computers. A security vulnerability exists in Apple macOS that stems from a sandboxed process that may be able to bypass sandbox restrictions. The following products and versions are affected: mac Studio version 2022, M...

Apple macOS 安全漏洞

Apple macOS is a specialized operating system developed by Apple Inc. for Mac computers. Apple macOS suffers from a security vulnerability that stems from the fact that users with physical access to the device may be able to use Siri to obtain some call log information. The following products and...

Apple macOS 安全漏洞

Apple macOS is a specialized operating system developed by Apple Inc. for Mac computers. A security vulnerability exists in Apple macOS that stems from a sandboxed process that may be able to bypass sandbox restrictions. The following products and versions are affected: mac Studio version 2022, M...

Apple macOS 安全漏洞

Apple macOS is a specialized operating system developed by Apple Inc. for Mac computers. A security vulnerability exists in Apple macOS that stems from an application that may be able to read sensitive location information. The following products and versions are affected: mac Studio version 2022...

Apple macOS 安全漏洞

Apple macOS is a proprietary operating system developed by Apple Inc. for Mac computers. A security vulnerability exists in Apple macOS that stems from an application that may be able to modify protected portions of the file system. The following products and versions are affected: mac Studio...

Apple macOS 缓冲区错误漏洞

Apple macOS is a specialized operating system developed by Apple Inc. for Mac computers. Apple macOS suffers from a security vulnerability that stems from an application that could lead to a denial of service. The following products are affected: mac Studio 2022, Mac Pro 2019 and later models,...

Apple macOS 安全漏洞

Apple macOS is a specialized operating system developed by Apple Inc. for Mac computers. Apple macOS suffers from a security vulnerability that stems from the fact that sandboxed applications may be able to determine which application is currently using the camera. The following products and...

NetIQ Access Manager Directory Traversal (CVE-2017-14803)

A directory traversal vulnerability exists in NetIQ Access Manager. Successful exploitation of this vulnerability could allow a remote attacker to disclose or access arbitrary files on the vulnerable server...

Apple macOS 安全漏洞

Apple macOS is a specialized operating system developed by Apple Inc. for Mac computers. Apple macOS has a security vulnerability that stems from an application that may disclose sensitive kernel state. The following products are affected: mac Studio 2022, Mac Pro 2019 and later models, MacBook A...

Metasploit Weekly Wrap-Up

Zimbra with Postfix LPE CVE-2022-3569 This week rbowes added an LPE exploit for Zimbra with Postfix. The exploit leverages a vulnerability whereby the Zimbra user can run postfix as root which in turn is capable of executing arbitrary shellscripts. This can be abused for reliable privilege...

CVE-2016-20016

MVPower CCTV DVR models, including TV-7104HE 1.8.4 115215B9 and TV7108HE, contain a web shell that is accessible via a /shell URI. A remote unauthenticated attacker can execute arbitrary operating system commands as root. This vulnerability has also been referred to as the "JAWS webserver RCE"...

CVE-2016-20016

MVPower CCTV DVR models, including TV-7104HE 1.8.4 115215B9 and TV7108HE, contain a web shell that is accessible via a /shell URI. A remote unauthenticated attacker can execute arbitrary operating system commands as root. This vulnerability has also been referred to as the "JAWS webserver RCE"...

Ubuntu 16.04 ESM : libXdmcp vulnerability (USN-5690-1)

The remote Ubuntu 16.04 ESM host has packages installed that are affected by a vulnerability as referenced in the USN-5690-1 advisory. It was discovered that libXdmcp was generating weak session keys. A local attacker could possibly use this issue to perform a brute force attack and obtain anothe...

CVE-2016-20016

MVPower CCTV DVR models, including TV-7104HE 1.8.4 115215B9 and TV7108HE, contain a web shell that is accessible via a /shell URI. A remote unauthenticated attacker can execute arbitrary operating system commands as root. This vulnerability has also been referred to as the “JAWS webserver RCE”...

CLSA-2022-1666011324 Fix CVE(s): CVE-2019-1010204, CVE-2017-17122

SECURITY UPDATE: integer overflow - debian/patches/CVE-2017-17122-pre1.patch: change bfdgetsize/bfdgetfilesize to ufileptr. - debian/patches/CVE-2017-17122.patch: stop objdump from attempting to allocate a huge chunk of memory when parsing relocs in a corrupt file. - CVE-2017-17122 SECURITY UPDAT...

CVE-2017-7517

An input validation vulnerability exists in Openshift Enterprise due to a 1:1 mapping of tenants in Hawkular Metrics and projects/namespaces in OpenShift. If a user creates a project called "MyProject", and then later deletes it another user can then create a project called "MyProject" and access...

CVE-2017-7517

CVE-2017-7517 describes an input validation issue in Red Hat OpenShift Enterprise where a 1:1 mapping between Hawkular Metrics tenants and OpenShift projects/namespaces allows a user who creates and later deletes a project named X to be able to access the metrics from the original project X when ...

CVE-2017-20149

creationtimestamp| type| source ---|---|--- 2022-10-15 07:29:23+00:00| exploited| https://t.me/cibsecurity/51523 2026-01-20 08:59:41+00:00| seen| https://mastodon.social/users/hrbrmstr/statuses/115926602786770030 2026-06-19 12:47:02+00:00| exploited|...

CVE-2017-20149

The Mikrotik RouterOS web server allows memory corruption in releases before Stable 6.38.5 and Long-term 6.37.5, aka Chimay-Red. A remote and unauthenticated user can trigger the vulnerability by sending a crafted HTTP request. An attacker can use this vulnerability to execute arbitrary code on t...

CVE-2017-20149

The MikroTik RouterOS web server is susceptible to an out-of-bounds write leading to memory corruption , known as Chimay-Red . A remote, unauthenticated user can trigger this vulnerability by sending a crafted HTTP request , potentially allowing for arbitrary code execution on the affected system...