Apple Safari和Apple macOS Sequoia 安全漏洞

Apple Safari and Apple macOS Sequoia are both products of Apple Inc. Apple Safari is a Web browser that is the default browser that comes with the Mac OS X and iOS operating systems. apple macOS Sequoia is an operating system. A security vulnerability exists in Apple macOS Sequoia versions prior ...

Apple macOS 安全漏洞

Apple macOS is a specialized operating system developed by Apple for Mac computers. Apple macOS suffers from a path traversal vulnerability that can be exploited by an attacker to cause a denial of service...

Tenda AC8V4 Buffer Overflow Vulnerability (CNVD-2025-17342)

The Tenda AC8V4 is a wireless router from Tenda China. The Tenda AC8V4 suffers from a buffer overflow vulnerability that originates from a heap buffer overflow in the mac parameter in /goform/GetParentControlInfo, which can be exploited by an attacker to crash the system by corrupting the memory...

Apple多款产品 安全漏洞

Apple Safari and others are products of Apple Inc. Apple Safari is a web browser that is the default browser that comes with the Mac OS X and iOS operating systems. apple iOS is a set of operating systems developed for mobile devices. apple macOS is a set of specialized operating systems develope...

Apple macOS 安全漏洞

Apple macOS is a specialized operating system developed by Apple for Mac computers. Apple macOS has a security vulnerability that can be exploited by an attacker to gain root access...

The vulnerability of the software for providing secure remote access to data through the Palo Alto Networks GlobalProtect App for operating systems on macOS, due to deficiencies in access control, allows a malicious actor to trigger a service failure.

The vulnerability of the software for providing secure remote access to data through the Palo Alto Networks GlobalProtect App for operating systems on macOS is related to deficiencies in access control. Exploiting this vulnerability could allow a attacker to cause service interruptions...

Python DoS Vulnerability (Jul 2025) - Mac OS X

Python is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:python:python";...

Google Chrome Security Update (stable-channel-update-for-desktop_29-2025-07) - Mac OS X

Google Chrome is prone to an use after free vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome";...

📄 FullControl: Remote for Mac 4.0.5 Unauthenticated Screen Capture

FullControl: Remote for Mac version 4.0.5 is vulnerable to an unauthenticated remote screenshot capture and live screen streaming due to a lack of authentication on TCP port 2846. This exploit allows attackers to silently capture screenshots or continuously stream the victim's screen in real-time...

The vulnerability of the formSetMacFilterCfg function (/goform/setMacFilterCfg) in the Tenda AX1803 router software allows a attacker to trigger a service failure or execute arbitrary code.

The vulnerability of the formSetMacFilterCfg function /goform/setMacFilterCfg in the Tenda AX1803 router software lies in the issue of the operation exceeding the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause service failures or execute arbitrary code...

TOTOLINK A702R Buffer Overflow Vulnerability

TOTOLINK A702R is a wireless router device manufactured by China's Gion Electronics TOTOLINK, mainly used for home network connection and signal coverage. The TOTOLINK A702R suffers from a buffer overflow vulnerability that originates from improper handling of the mac parameter in the...

The vulnerability of the built-in web server boa (/boafrm/formIpQoS) of TOTOLINK A702R router’s microprogramming software allows a intruder to cause a service failure.

The vulnerability of the built-in web server boa /boafrm/formIpQoS of TOTOLINK A702R router software is related to the issue of the operation exceeding the buffer in memory when processing the mac parameter. Exploiting this vulnerability allows a malicious actor to cause service failure by sendin...

CVE-2025-22165

This Medium severity ACE Arbitrary Code Execution vulnerability was introduced in version 4.2.8 of Sourcetree for Mac. This ACE Arbitrary Code Execution vulnerability, with a CVSS Score of 5.9, allows a locally authenticated attacker to execute arbitrary code which has high impact to...

DEBIAN-CVE-2025-38392

In the Linux kernel, the following vulnerability has been resolved: idpf: convert control queue mutex to a spinlock With VIRTCHNL2CAPMACFILTER enabled, the following warning is generated on module load: 324.701677 BUG: sleeping function called from invalid context at kernel/locking/mutex.c:578...

UBUNTU-CVE-2025-38392

In the Linux kernel, the following vulnerability has been resolved: idpf: convert control queue mutex to a spinlock With VIRTCHNL2CAPMACFILTER enabled, the following warning is generated on module load: 324.701677 BUG: sleeping function called from invalid context at kernel/locking/mutex.c:578...

CVE-2025-38392

In the Linux kernel, the following vulnerability has been resolved: idpf: convert control queue mutex to a spinlock With VIRTCHNL2CAPMACFILTER enabled, the following warning is generated on module load: 324.701677 BUG: sleeping function called from invalid context at kernel/locking/mutex.c:578...

CVE-2025-8137

A vulnerability has been found in TOTOLINK A702R 4.0.0-B20230721.1521 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /boafrm/formIpQoS of the component HTTP POST Request Handler. The manipulation of the argument mac leads to buffer overflow. The...

TOTOLINK A3300R Command Injection Vulnerability

TOTOLINK A3300R is a wireless router from China's Gion Electronics TOTOLINK. A command injection vulnerability exists in the TOTOLINK A3300R version V17.0.0cu.596B20250515, which stems from the mac and desc parameters failing to correctly filter constructed command special characters, commands, a...

CVE-2025-8137: Buffer Copy without Checking Size of Input

A vulnerability has been found in TOTOLINK A702R 4.0.0-B20230721.1521 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /boafrm/formIpQoS of the component HTTP POST Request Handler. The manipulation of the argument mac leads to buffer overflow. The...

📄 FullControl: Remote for Mac 4.0.5 Remote Code Execution

FullControl: Remote for Mac version 4.0.5 for macOS is vulnerable to unauthenticated remote code execution via TCP port 2846. An attacker on the same network can inject simulated keyboard input, allowing arbitrary command execution without user interaction or authentication. Exploit Title:...