CVE-2026-96419

A flaw was found in Wireshark. Due to improper pathname validation during configuration profile imports, an attacker could convince a user to import a maliciously crafted profile. Successful exploitation could allow arbitrary code execution or cause an application crash, resulting in a Denial of...

PT-2026-99805

Name of the Vulnerable Software and Affected Versions Wireshark versions prior to 4.6.9 Description Multiple issues exist across protocol dissectors, capture-file parsers, the Sharkd utility, and configuration-profile handling, affecting protocols such as ZigBee, SCTP, IEEE 802.11, USB HID, and...

wireshark: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Wireshark

A flaw was found in Wireshark. A path traversal can occur when a malformed configuration profile is imported, resulting in a denial of service or potentially in code execution...

CVE-2025-8108

An ACAP configuration file has improper permissions and lacks input validation, which could potentially lead to privilege escalation. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if an attacker convinces the...

EUVD-2014-1345

Malware in sbrugna...

EUVD-2014-1360

Malware in sbrugna...

EUVD-2015-6994

Malware in sbrugna...

EUVD-2022-43115

Malicious code in bioql PyPI...

CVE-2025-43720

Headwind MDM before 5.33.1 makes configuration details accessible to unauthorized users. The Configuration profile is exposed to the Observer user role, revealing the password requires to escape out of the MDM controlled device's profile...

CVE-2025-43720: Missing Authorization

Headwind MDM before 5.33.1 makes configuration details accessible to unauthorized users. The Configuration profile is exposed to the Observer user role, revealing the password requires to escape out of the MDM controlled device's profile...

CVE-2025-43720

Headwind MDM before 5.33.1 makes configuration details accessible to unauthorized users. The Configuration profile is exposed to the Observer user role, revealing the password requires to escape out of the MDM controlled device's profile...

CVE-2025-4095 Registry Access Management (RAM) policies not applied when sign-in enforcement is configured via a configuration profile

Registry Access Management RAM is a security feature allowing administrators to restrict access for their developers to only allowed registries. When a MacOS configuration profile is used to enforce organization sign-in, the RAM policies are not being applied, which would allow Docker Desktop use...

PT-2025-3699 · Undefined · Undefined

🔗 DarkWebInformer.com - Cyber Threat Intelligence 📌 CVE ID: GHSA-qcg2-98h8-485j 🔗 Aliases: CVE-2024-8474 🔹 Details: OpenVPN Connect before version 3.5.0 can contain the configuration profile's clear-text private key which is logged in the application log, which an unauthorized actor can use to...

CVE-2024-8474

OpenVPN Connect before version 3.5.0 can contain the configuration profile's clear-text private key which is logged in the application log, which an unauthorized actor can use to decrypt the VPN traffic...

About the security content of tvOS 12.1.1 - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. For more information about security, se...

PT-2018-8762

Name of the Vulnerable Software and Affected Versions Cisco AnyConnect Network Access Manager and Cisco AnyConnect Secure Mobility Client for iOS, Mac OS X, Android, Windows, and Linux affected versions not specified Description A vulnerability in the certificate management subsystem could allow ...

New Crossrider variant installs configuration profiles on Macs

A new variant of the Crossrider adware has been spotted that is infecting Macs in a unique way. For the most part, this variant is still quite ordinary, doing some of the same old things that we've been seeing for years in Mac adware. However, the use of a configuration profile introduces a uniqu...

Design/Logic Flaw

An issue was discovered in certain Apple products. iOS before 11.3 is affected. macOS before 10.13.4 is affected. tvOS before 11.3 is affected. watchOS before 4.3 is affected. The issue involves CFPreferences in the "System Preferences" component. It allows attackers to bypass intended access...

CVE-2018-4115

An issue was discovered in certain Apple products. iOS before 11.3 is affected. macOS before 10.13.4 is affected. tvOS before 11.3 is affected. watchOS before 4.3 is affected. The issue involves CFPreferences in the "System Preferences" component. It allows attackers to bypass intended access...

PT-2018-5593

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 11 Description: An issue was discovered in certain Apple products, specifically involving the "Profiles" component. The issue is that the component does not enforce the configuration profile's settings for whether pairin...