CVE-2026-84512

A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory...

EUVD-2026-77918

A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory...

CVE-2026-84512

CVE-2026-84512 is a buffer overflow in Apple macOS, addressed with improved bounds checking. Mounting a maliciously crafted disk image may cause unexpected system termination or kernel memory corruption . The issue is fixed in macOS Golden Gate 27 , macOS Sequoia 15.8 , and macOS Tahoe 26.7 . The...

CVE-2026-84565

CVE-2026-84565 is an out-of-bounds read in macOS disk image processing, addressed with improved bounds checking. A locally crafted malicious disk image may cause unexpected app termination , with NVD scoring it 7.1 HIGH (AV:L/AC:L/PR:N/UI:R) due to high confidentiality and availability impact. Th...

CVE-2026-84565

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Processing a maliciously crafted disk image may lead to unexpected app termination...

CVE-2026-84588

A memory corruption issue was addressed by removing the vulnerable code. This issue is fixed in macOS Golden Gate 27. Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory...

EUVD-2026-78041

A memory corruption issue was addressed by removing the vulnerable code. This issue is fixed in macOS Golden Gate 27. Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory...

CVE-2026-84588

CVE-2026-84588 is a memory corruption vulnerability in macOS Golden Gate 27 , fixed by removing the vulnerable code. The trigger is mounting a maliciously crafted disk image , which may cause unexpected system termination or kernel memory corruption . The fix removes the vulnerable code path enti...

CVE-2026-28934

CVE-2026-28934 is a buffer overflow in Apple macOS , fixed with improved bounds checking. Mounting a malicious disk image may cause unexpected system termination (denial of service). The issue is patched in macOS Golden Gate 27 , macOS Sequoia 15.8 , and macOS Tahoe 26.7 (see Apple advisory ). Th...

CVE-2026-28934

A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Mounting a malicious disk image may cause unexpected system termination...

EUVD-2026-78096

A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Mounting a malicious disk image may cause unexpected system termination...

CVE-2026-54177 backpack/crud: HasUploadFields keeps the attacker-supplied file extension — public-disk uploads of `shell.php` reach the webserver

backpack/crud provides Create, Read, Update & Delete CRUD functions for Backpack, a collection of Laravel packages that help users build custom administration panels. From 6.0.0 until 6.8.14 and 7.0.38, HasUploadFields methods uploadFileToDisk and uploadMultipleFilesToDisk, used through CrudTrait...

CVE-2026-54177

backpack/crud (a Laravel Backpack package for building admin panels) is vulnerable to arbitrary file upload in versions 6.0.0 through 6.8.14 and 7.0.38 . The HasUploadFields trait and FileNameGenerator preserve the client-supplied file extension without rejecting server-executable types. An authe...

CVE-2026-54178

backpack/crud (a Laravel admin-panel package) is vulnerable to arbitrary file deletion in HasUploadFields::uploadMultipleFilesToDisk. The method trusts disk-relative paths from the clear_[] request input and calls Storage::disk()->delete() without verifying that the paths belong to the current...

CVE-2026-65400-poc

CVE-2026-65400 — Lectura de ficheros root pre-autenticación en Compartir Pantalla de macOS PoC de solo lectura Prueba de concepto de solo lectura. Demuestra la omisión de autenticación leyendo un fichero solo-root de un host vulnerable. No escribe nada en el objetivo: ni LaunchDaemon, ni archivo ...

whatsapp-mitd-mitm

WhatsApp MitD & MitM 简介 此仓库包含作为我们研究01一部分开发的PoC代码和工具，旨在远程利用Android版WhatsApp的 磁盘中间人 （MitD）漏洞。正如在我们的博客文章中讨论的，这里提供的代码和附带脚本被用于利用CVE-2020-6516（Chrome）02和CVE-2021-24027（WhatsApp）03。 此仓库的结构如下： 当前目录包含使用Frida钩住WhatsApp、发送携带CORS绕过载荷的钓鱼消息并运行HTTP服务器的Python工具，来自受害者设备的被窃取会话文件将被发送到该服务器。 tls12pskextract/ 包含TLS v1...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: block: Fixed a possible memory leak for rqwb when deviceadddisk fails. kmemleak reported memory leaks in deviceadddisk: - 3 new suspected memory leaks. Unreferenced object: 0xffff88800f420800 size 512: Command “modprobe”, PID...

Astra Linux – Vulnerability in Linux 5.15

A issue was discovered in the Linux kernel before version 6.2. The ntfs3 subsystem does not properly check for correctness during disk reads, resulting in an out-of-bounds read in the ntfssetea function in fs/ntfs3/xattr.c...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: dm raid: fixed the KASAN warning in raid5adddisks. There is a KASAN warning in raid5adddisk when running the LVM testsuite. The warning occurs during the test lvconvert-raid-reshape-lineartoraid6-single-type.sh. We fixed this...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: md: raid1: fixed a potential out-of-bounds error in raid1removedisk. If rddev-raiddisk is greater than mddev-raiddisks, an out-of-bounds error will occur in raid1removedisk. We have already encountered similar reports, as...