CVE-2025-32353

creationtimestamp| type| source ---|---|--- 2025-07-16 21:28:23+00:00| seen| Telegram/ZpI4O1Dz6jDjTqGQZA3Qz4KfenH1h0cHr9YBd0a8TcDsGA...

CVE-2025-32353

CVE-2025-32353 affects Kaseya Rapid Fire Tools Network Detective 2.0.16.0. The root cause is unencrypted privileged credentials stored in the collector.txt configuration file, exposing sensitive data to unauthorized access at the local level. The published metrics indicate a high impact, with loc...

CVE-2023-32353

A logic issue was addressed with improved checks. This issue is fixed in iTunes 12.12.9 for Windows. An app may be able to elevate privileges...

CVE-2022-32353

Product Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/admin/categories/managefieldorder.php?id=...

CVE-2024-32353

TOTOLINK X5000R V9.1.0cu.2350B20230313 was discovered to contain a command injection vulnerability via the 'port' parameter in the setSSServer function at /cgi-bin/cstecgi.cgi...

Apple iTunes < 12.12.9 Multiple Vulnerabilities (uncredentialed check)

The version of Apple iTunes installed on the remote Windows host is prior to 12.12.9. It is, therefore, affected by multiple vulnerabilities as referenced in the HT213763 advisory. - A logic issue was addressed with improved checks. This issue is fixed in iTunes 12.12.9 for Windows. An app may be...

Apple iTunes < 12.12.9 Multiple Vulnerabilities (credentialed check)

The version of Apple iTunes installed on the remote Windows host is prior to 12.12.9. It is, therefore, affected by multiple vulnerabilities as referenced in the HT213763 advisory. - A logic issue was addressed with improved checks. This issue is fixed in iTunes 12.12.9 for Windows. An app may be...

CVE-2024-32353

TOTOLINK X5000R V9.1.0cu.2350B20230313 was discovered to contain a command injection vulnerability via the 'port' parameter in the setSSServer function at /cgi-bin/cstecgi.cgi...

CVE-2023-32353

A logic issue was addressed with improved checks. This issue is fixed in iTunes 12.12.9 for Windows. An app may be able to elevate privileges...

CVE-2023-32353

CVE-2023-32353 affects Apple iTunes for Windows prior to version 12.12.9. The issue is described as a logic fault addressed by improved checks, with the fix implemented in iTunes 12.12.9 for Windows. The resulting impact is the potential for elevation of privileges. Affected software: Apple iTune...

CVE-2023-32353

A logic issue was addressed with improved checks. This issue is fixed in iTunes 12.12.9 for Windows. An app may be able to elevate privileges...

CVE-2023-32353

creationtimestamp| type| source ---|---|--- 2023-06-01 18:26:48+00:00| seen| https://t.me/ctinow/115444 2023-06-08 21:01:19+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/4519 2023-06-09 06:57:28+00:00| published-proof-of-concept| https://t.me/crackcodes/3640 2023-06-09...

About the security content of iTunes 12.12.9 for Windows

About the security content of iTunes 12.12.9 for Windows This document describes the security content of iTunes 12.12.9 for Windows. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and...

KLA49284 Multiple vulnerabilities in Apple iTunes

An elevation of privilege vulnerabilities were found in Apple iTunes. Malicious users can exploit these vulnerabilities to gain privileges. Original advisories About the security content of iTunes 12.12.9 for Windows Exploitation Malware exists for this vulnerability. Usually such malware is...

CVE-2022-32353

creationtimestamp| type| source ---|---|--- 2022-06-15 00:19:19+00:00| seen| https://t.me/cibsecurity/44459...

CVE-2022-32353

Product Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/admin/categories/managefieldorder.php?id=...

CVE-2022-32353

Product Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/admin/categories/managefieldorder.php?id=...

CVE-2022-32353

CVE-2022-32353 affects Product Show Room Site v1.0. The vulnerability is SQL Injection in /psrs/admin/categories/manage_field_order.php?id= due to unsanitized input. Reported impacts include partial confidentiality, integrity, and availability per CVSS data; no remediation details or patch versio...

CVE-2024-32353

TOTOLINK X5000R V9.1.0cu.2350B20230313 was discovered to contain a command injection vulnerability via the 'port' parameter in the setSSServer function at /cgi-bin/cstecgi.cgi...