Lucene search
+L

111 matches found

RedhatCVE
RedhatCVE
•added 2025/05/23 7:16 a.m.•14 views

CVE-2024-53407

In Phiewer 4.1.0, a dylib injection leads to Command Execution which allow attackers to inject dylib file potentially leading to remote control and unauthorized access to sensitive user data...

3.3CVSS7.4AI score0.00512EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 1:25 a.m.•12 views

CVE-2022-25366

Cryptomator through 1.6.5 allows DYLIB injection because, although it has the flag 0x1000 for Hardened Runtime, it has the com.apple.security.cs.disable-library-validation and com.apple.security.cs.allow-dyld-environment-variables entitlements. An attacker can exploit this by creating a malicious...

7.8CVSS7.2AI score0.00556EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 12:30 a.m.•21 views

CVE-2022-48481

In JetBrains Toolbox App before 1.28 a DYLIB injection on macOS was possible...

7.8CVSS7.1AI score0.00208EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 12:24 a.m.•19 views

CVE-2022-46828

In JetBrains IntelliJ IDEA before 2022.3 a DYLIB injection on macOS was possible...

7.8CVSS7.1AI score0.00276EPSS
SaveExploits0References1
OSV
OSV
•added 2025/01/15 11:15 p.m.•10 views

CVE-2024-53407

In Phiewer 4.1.0, a dylib injection leads to Command Execution which allow attackers to inject dylib file potentially leading to remote control and unauthorized access to sensitive user data...

3.3CVSS5.8AI score0.00512EPSS
SaveExploits0References1
NVD
NVD
•added 2025/01/15 11:15 p.m.•19 views

CVE-2024-53407

In Phiewer 4.1.0, a dylib injection leads to Command Execution which allow attackers to inject dylib file potentially leading to remote control and unauthorized access to sensitive user data...

3.3CVSS0.00512EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/01/15 12:00 a.m.•9 views

CVE-2024-53407

In Phiewer 4.1.0, a dylib injection leads to Command Execution which allow attackers to inject dylib file potentially leading to remote control and unauthorized access to sensitive user data...

4.5AI score0.00512EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/01/15 12:00 a.m.•12 views

PT-2025-2963 · Unknown · In Phiewer

Name of the Vulnerable Software and Affected Versions: In Phiewer version 4.1.0 Description: The issue is related to a dylib injection that leads to command execution, allowing attackers to inject a dylib file. This potentially leads to remote control and unauthorized access to sensitive user dat...

3.3CVSS7.3AI score0.00512EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/15 12:00 a.m.•2 views

CVE-2024-53407: Untrusted Search Path

In Phiewer 4.1.0, a dylib injection leads to Command Execution which allow attackers to inject dylib file potentially leading to remote control and unauthorized access to sensitive user data...

3.3CVSS5.8AI score0.00512EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/01/15 12:00 a.m.•11 views

Phiewer 安全漏洞

Phiewer is a macOS image viewer from Phiewer Inc. A security vulnerability exists in Phiewer version 4.1.0, which stems from a dylib injection that results in command execution, which can lead to remote control and unauthorized access to sensitive user data...

3.3CVSS7.1AI score0.00512EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/01/15 12:00 a.m.•24 views

CVE-2024-53407

In Phiewer 4.1.0, a dylib injection leads to Command Execution which allow attackers to inject dylib file potentially leading to remote control and unauthorized access to sensitive user data...

0.00512EPSS
SaveExploits0References1
CVE
CVE
•added 2025/01/15 12:00 a.m.•66 views

CVE-2024-53407

The provided connected documents confirm a concrete vulnerability in Phiewer 4.1.0 involving a dylib injection that leads to Command Execution. The underlying issue is a dylib injection in Phiewer 4.1.0 which can allow an attacker to inject an arbitrary dylib, potentially enabling remote control ...

3.3CVSS7.6AI score0.00512EPSS
SaveExploits0References1Affected Software1
NVD
NVD
•added 2024/09/25 1:15 a.m.•20 views

CVE-2024-45599

Cursor is an artificial intelligence code editor. Prior to version 0.41.0, if a user on macOS has granted Cursor access to the camera or microphone, any program that is run on the machine is able to access the camera or the microphone without explicitly being granted access, through a DyLib...

3.8CVSS0.00177EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/09/25 12:00 a.m.•4 views

CVE-2024-45599: Insecure Inherited Permissions

Cursor is an artificial intelligence code editor. Prior to version 0.41.0, if a user on macOS has granted Cursor access to the camera or microphone, any program that is run on the machine is able to access the camera or the microphone without explicitly being granted access, through a DyLib...

3.8CVSS5.9AI score0.00177EPSS
SaveExploits0References1
CVE
CVE
•added 2024/09/24 6:02 p.m.•62 views

CVE-2024-45599

CVE-2024-45599 affects Cursor prior to 0.41.0 on macOS. If a user has granted Cursor access to the camera or microphone, an attacker could leverage a DyLib Injection via the DYLD_INSERT_LIBRARIES environment variable to allow any running program on the machine to access those peripherals, bypassi...

3.8CVSS4.8AI score0.00177EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/09/24 6:02 p.m.•30 views

CVE-2024-45599 TCC Bypass in Cursor's macOS Application

Cursor is an artificial intelligence code editor. Prior to version 0.41.0, if a user on macOS has granted Cursor access to the camera or microphone, any program that is run on the machine is able to access the camera or the microphone without explicitly being granted access, through a DyLib...

3.8CVSS0.00177EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2023/11/28 3:15 p.m.•8 views

CVE-2023-49313

A dylib injection vulnerability in XMachOViewer 0.04 allows attackers to compromise integrity. By exploiting this, unauthorized code can be injected into the product's processes, potentially leading to remote control and unauthorized access to sensitive user data...

9.8CVSS5.9AI score0.0132EPSS
SaveExploits2References3
NVD
NVD
•added 2023/11/28 3:15 p.m.•32 views

CVE-2023-49313

A dylib injection vulnerability in XMachOViewer 0.04 allows attackers to compromise integrity. By exploiting this, unauthorized code can be injected into the product's processes, potentially leading to remote control and unauthorized access to sensitive user data...

9.8CVSS0.0132EPSS
SaveExploits2References2
Prion
Prion
•added 2023/11/28 3:15 p.m.•19 views

Design/Logic Flaw

A dylib injection vulnerability in XMachOViewer 0.04 allows attackers to compromise integrity. By exploiting this, unauthorized code can be injected into the product's processes, potentially leading to remote control and unauthorized access to sensitive user data...

7.5CVSS7.5AI score0.0132EPSS
SaveExploits2References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/11/28 12:00 a.m.•0 views

CVE-2023-49313: Improper Control of Generation of Code

A dylib injection vulnerability in XMachOViewer 0.04 allows attackers to compromise integrity. By exploiting this, unauthorized code can be injected into the product's processes, potentially leading to remote control and unauthorized access to sensitive user data...

9.8CVSS8.2AI score0.0132EPSS
SaveExploits2References2
Rows per page
Query Builder