apple-positional-audio-codec-invalid-header

Prueba de concepto para el parche de CoreAudio CVE-2025-31200 en iOS 18.4.1. Artículo aquí https://blog.noahhw.dev/posts/cve-2025-31200/. Actualización 27/05/2025 He logrado llevar esto a una escritura controlada , aunque no arbitraria. El artículo está por venir. Sin embargo, para comprobarlo po...

BASM (Broken Authentication & Session Management) org.springframework.security:spring-security-web Dependency in Crowd Data Center

This High severity BASM Broken Authentication & Session Management vulnerability was introduced in versions 6.0.0, 6.1.0, 6.2.0, 6.3.0, 7.0.0, 7.1.0, and 7.2.0 of Crowd Data Center. This BASM Broken Authentication & Session Management vulnerability, with a CVSS Score of 8.1 and a CVSS Vector of...

CVE-2025-31200

A memory corruption issue was addressed with improved bounds checking. This issue is fixed in tvOS 18.4.1, visionOS 2.4.1, iOS iOS 18.4.1 and iPadOS 18.4.1, macOS Sequoia 15.4.1. Processing an audio stream in a maliciously crafted media file may result in code execution. Apple is aware of a repor...

CVE-2025-31200

creationtimestamp| type| source ---|---|--- 2025-04-16 17:33:02+00:00| seen| https://infosec.exchange/users/applsec/statuses/114348836934305541 2025-04-16 17:33:04+00:00| seen| https://bsky.app/profile/applsec.bsky.social/post/3lmx4qr3utx2e 2025-04-16 18:18:24+00:00| seen|...

macOS 15.x < 15.4.1 Multiple Vulnerabilities (122400)

The remote host is running a version of macOS / Mac OS X that is 15.x prior to 15.4.1. It is, therefore, affected by multiple vulnerabilities: - A memory corruption issue was addressed with improved bounds checking. This issue is fixed in tvOS 18.4.1, visionOS 2.4.1, iOS iOS 18.4.1 and iPadOS...