4498 matches found
Design/Logic Flaw
The XML parser in Magic xpi Integration Platform 4.13.4 allows XXE attacks, e.g., via onItemImport...
CVE-2023-52239
The XML parser in Magic xpi Integration Platform 4.13.4 allows XXE attacks, e.g., via onItemImport...
CVE-2023-52239: Improper Restriction of XML External Entity Reference
The XML parser in Magic xpi Integration Platform 4.13.4 allows XXE attacks, e.g., via onItemImport...
PT-2024-14500 · Magic · Magic Xpi Integration Platform
Name of the Vulnerable Software and Affected Versions: Magic xpi Integration Platform version 4.13.4 Description: The XML parser in Magic xpi Integration Platform allows XXE attacks, for example, via onItemImport. Recommendations: For Magic xpi Integration Platform version 4.13.4, consider...
CVE-2023-52239
The XML parser in Magic xpi Integration Platform 4.13.4 allows XXE attacks, e.g., via onItemImport...
CVE-2023-52239
CVE-2023-52239 affects Magic xpi Integration Platform 4.13.4. The XML parser is vulnerable to XML External Entity (XXE) attacks, e.g., via onItemImport. Impacts include potential disclosure or manipulation of downstream data where XML is processed; exploitation details are not fully provided in t...
Magic xpi Integration Platform Security Vulnerability
Magic xpi Integration Platform is an integration platform from Magic designed to simplify integration between enterprise applications and systems. A security vulnerability exists in Magic xpi Integration Platform version 4.13.4. An attacker exploited the vulnerability to perform an xml external...
Apple Magic Keyboard Bluetooth Unauthorized Access
The vulnerability of the Bluetooth microprogramming software in Apple’s Magic Keyboard wireless keyboard relates to the management of user sessions. Exploiting this vulnerability could allow a hacker to gain unauthorized access to Bluetooth traffic...
OSINT in 60 seconds. Mind reading on TV
TL;DR We were asked to help with a Channel 5 consumer education series about online banking scams The presenter, Alexis Conran, was to ‘read’ the minds of members of the public walking past a coffee shop A release form was signed by the targets, with their name, email, and phone number, then pass...
Exploit for CVE-2023-47400
CVE-2023-47400 Proof of Concept for the CVE-2023-47400 Aut...
18X a Leader in Gartner Magic Quadrant for EPP
Explore why Trend Micro is recognized—for the 18th time—as a Leader in the Gartner Magic Quadrant for Endpoint Protection Platforms...
CVE-2024-0230
A session management issue was addressed with improved checks. This issue is fixed in Magic Keyboard Firmware Update 2.0.6. An attacker with physical access to the accessory may be able to extract its Bluetooth pairing key and monitor Bluetooth traffic...
CVE-2024-0230
A session management issue was addressed with improved checks. This issue is fixed in Magic Keyboard Firmware Update 2.0.6. An attacker with physical access to the accessory may be able to extract its Bluetooth pairing key and monitor Bluetooth traffic...
CVE-2024-0230
Summary (CVE-2024-0230): A session management issue in Apple Magic Keyboard is addressed by firmware update 2.0.6. With physical access to the accessory, an attacker may extract the Bluetooth pairing key and monitor Bluetooth traffic. Provided sources consistently cite the fix in Magic Keyboard F...
Microsoft is named a Leader in the 2023 Gartner® Magic Quadrant™ for Endpoint Protection Platforms
It’s no secret that ransomware is top of mind for many chief information security officers CISOs as the number of attacks has increased exponentially. As seen in the latest Microsoft Digital Defense Report, our “telemetry indicates that organizations faced an increased rate of ransomware attacks...
CVE-2024-0230: Undefined Security Weakness
A session management issue was addressed with improved checks. This issue is fixed in Magic Keyboard Firmware Update 2.0.6. An attacker with physical access to the accessory may be able to extract its Bluetooth pairing key and monitor Bluetooth traffic...
PT-2024-1415
Name of the Vulnerable Software and Affected Versions Magic Keyboard versions prior to 2.0.6 Description A session management issue was addressed with improved checks. An attacker with physical access to the accessory may be able to extract its Bluetooth pairing key and monitor Bluetooth traffic...
About the security content of Magic Keyboard Firmware Update 2.0.6
About the security content of Magic Keyboard Firmware Update 2.0.6 This document describes the security content of Magic Keyboard Firmware Update 2.0.6. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation h...
Apple Magic Keyboard Security Flaw
The Apple Magic Keyboard is a wireless keyboard from Apple, Inc. A security vulnerability exists in Apple Magic Keyboard, which stems from a session management issue that allows an attacker with access to the physical accessory to extract its Bluetooth pairing key and monitor Bluetooth...