29512 matches found
Dissecting Sapphire Sleet’s macOS intrusion from lure to compromise
In this article 1. Sapphire Sleet’s campaign lifecycle 2. Defending against Sapphire Sleet intrusion activity 3. Microsoft Defender detection and hunting guidance 4. Indicators of compromise Executive summary Microsoft Threat Intelligence uncovered a macOS‑focused cyber campaign by the North Kore...
PT-2026-37124
Name of the Vulnerable Software and Affected Versions electerm versions prior to 3.3.8 Description A command injection issue exists in the runMac function within the file github.com/elcterm/electerm/npm/install.js:150. The function appends the remote releaseInfo.name variable, which can be...
TOTOLINK A7100RU operating system command injection vulnerability
The TOTOLINK A7100RU is a wireless router produced by TOTOLINK, a Chinese company. The TOTOLINK A7100RU has a vulnerability related to operating system command injection. This vulnerability stems from a parameter in the function setAccessDeviceCfg of the CGI Handler component, located in the file...
PT-2026-51908
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the tcf blockcast redir function where the mac header xmit flag is queried from the incorrect device when iterating through block ports to redirect packets. The system...
PT-2026-35328
Impact What kind of vulnerability is it? Who is impacted? Command Injection vulnerabilities in electerm: A command injection vulnerability exists in github.com/elcterm/electerm/npm/install.js:150. The runMac function appends attacker-controlled remote releaseInfo.name directly into an exec"open...
MAL-2026-2669 Malicious code in ant-mcp-proxy-for-test (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 51df3beb4457da4a841727c91a2517ba5727c841c08f9d43cf2b25be9e476564 During use of the package, it silently downloads and executes remote executables or scripts. During analysis, the remote resources were no longer available. Th...
Microsoft .NET 安全漏洞
Microsoft .NET is a software framework developed by Microsoft Corporation in the United States. It focuses on agile software development, rapid application development, platform independence, and network transparency. There are security vulnerabilities in Microsoft .NET. Attackers can exploit the...
Microsoft .NET 代码问题漏洞
Microsoft .NET is a software framework developed by Microsoft Corporation in the United States. It focuses on agile software development, rapid application development, platform independence, and network transparency. There are code-related vulnerabilities in Microsoft .NET. Attackers can exploit...
The vulnerability of the command-line interface (CLI) of the FortiClient for MAC security tool allows a perpetrator to increase their privileges.
The vulnerability of the command-line interface CLI of the Fortinet FortiClient security device is related to incorrect verification of the cryptographic signature. Exploiting this vulnerability can allow an attacker to enhance their privileges by sending specially created executable files...
The vulnerability of the CUPS component in macOS operating systems allows a hacker to gain access to potentially confidential information.
The vulnerability of the CUPS component in macOS operating systems is related to the disclosure of information. Exploiting this vulnerability may allow an attacker to access potentially confidential information...
APSB26-44 : Security update available for Adobe Acrobat Reader
Adobe has released a security update for Adobe Acrobat and Reader for Windows and macOS. This update addresses critical and important vulnerabilities. Successful exploitation could lead to arbitrary code execution and arbitrary file system read. Adobe is not aware of any exploits in the wild for...
OpenAI Rotates macOS Certificates Following Axios Supply Chain Breach
OpenAI rotates macOS certificates after downloading a compromised Axios version, urging users to update apps before revoked certificates are blocked in May 2026...
CVE-2026-40194
A flaw was found in phpseclib, a PHP secure communications library. This vulnerability involves a timing attack where the comparison of Secure Shell SSH packet integrity checks HMACs takes a variable amount of time. A remote attacker could exploit this timing difference to deduce information abou...
A week in security (April 6 – April 12)
Last week on Malwarebytes Labs: Fake Claude site installs malware that gives attackers access to your computer ClickFix finds a new way to infect Macs Scammers pose as Amazon support to steal your account NSFW app leak exposes 70,000 prompts linked to individual users 30,000 private Facebook imag...
CVE-2026-6138 Totolink A7100RU CGI cstecgi.cgi setAccessDeviceCfg os command injection
A flaw has been found in Totolink A7100RU 7.4cu.2313b20191024. The impacted element is the function setAccessDeviceCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. This manipulation of the argument mac causes os command injection. The attack can be initiated remotely. The exploi...
The vulnerability of the WebAudio component in the Google Chrome browser on Mac operating systems allows a hacker to disclose protected information.
The vulnerability of the WebAudio component in the Google Chrome browser for Mac operating systems involves reading data beyond the buffer limit in memory. Exploiting this vulnerability could allow a malicious actor to disclose sensitive information by sending a specially crafted HTML page...
TOTOLINK A7100RU 操作系统命令注入漏洞
The TOTOLINK A7100RU is a wireless router produced by TOTOLINK Corporation. The Totolink A7100RU 7.4cu.2313b20191024 version contains a vulnerability related to operating system command injection. This vulnerability stems from improper handling of the mac parameter in the function...
EUVD-2026-21726
A vulnerability was determined in Tenda F451 1.0.0.7. This vulnerability affects the function fromSafeMacFilter of the file /goform/SafeMacFilter of the component httpd. Executing a manipulation of the argument page/menufacturer can lead to stack-based buffer overflow. The attack can be executed...
CVE-2026-6124
CVE-2026-6124 affects Tenda F451 1.0.0.7, specifically the httpd component’s function fromSafeMacFilter in /goform/SafeMacFilter. The issue involves a stack-based buffer overflow triggered by manipulating the argument page/menufacturer, with the attack described as remote and the exploit publicly...
CVE-2026-6124
A vulnerability was determined in Tenda F451 1.0.0.7. This vulnerability affects the function fromSafeMacFilter of the file /goform/SafeMacFilter of the component httpd. Executing a manipulation of the argument page/menufacturer can lead to stack-based buffer overflow. The attack can be executed...