CVE-2025-43293

The issue was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26. An app may be able to access sensitive user data...

CVE-2025-43341

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sonoma 14.8, macOS Tahoe 26. An app may be able to gain root privileges...

CVE-2025-31269

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sonoma 14.8, macOS Tahoe 26. An app may be able to access protected user data...

CVE-2025-43287

The issue was addressed with improved memory handling. This issue is fixed in macOS Tahoe 26. Processing a maliciously crafted image may corrupt process memory...

CVE-2025-43356

CVE-2025-43356 affects WebKitGTK/WebKitGTK4 (webkit2gtk) across multiple Linux distributions. The issue stems from improper cache handling, allowing a website to access sensor information without user consent. Documented in Debian/AlmaLinux advisories and Amazon Linux advisories, with fixed versi...

CVE-2025-43203

The issue was addressed with improved handling of caches. This issue is fixed in iOS 18.7 and iPadOS 18.7, iOS 26 and iPadOS 26. An attacker with physical access to an unlocked device may be able to view an image in the most recently viewed locked note...

CVE-2025-43366

CVE-2025-43366 affects macOS Tahoe 26. The issue is an out-of-bounds read due to insufficient bounds checking, which could allow an app to disclose coprocessor memory. Apple has fixed this in macOS Tahoe 26 by improving bounds checking. Documents consistently describe the vulnerability as a memor...

CVE-2025-6947

CVE-2025-6947 affects WatchGuard Fireware OS running on Firebox. The issue is a Stored Cross-Site Scripting (XSS) vulnerability in the SIP Proxy module caused by improper input neutralization during web page generation. Exploitation requires an authenticated administrator session to a locally man...

CVE-2025-6947 WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in SIP Proxy Configuration

A stored cross-site scripting XSS vulnerability exists in the management interface of WatchGuard Firebox appliances via the SIP Proxy configuration. An authenticated remote attacker with administrator privileges could exploit this vulnerability to execute arbitrary JavaScript code in the Firebox...

nettoolbox

NetToolbox - Network Security Toolkit A comprehensive, modern...

CVE-2025-10440 D-Link DI-8100/DI-8100G/DI-8200/DI-8200G/DI-8003/DI-8003G jhttpd usb_paswd.asp sub_4621DC os command injection

A vulnerability has been found in D-Link DI-8100, DI-8100G, DI-8200, DI-8200G, DI-8003 and DI-8003G 16.07.26A1/17.12.20A1/19.12.10A1. Affected by this vulnerability is the function sub4621DC of the file usbpaswd.asp of the component jhttpd. The manipulation of the argument hname leads to os comma...

MSc-Cybersecurity-Capstone-Android-Exploitation

MSc Cybersecurity Capstone Project Title: Android Exploit...

PT-2025-37823

Name of the Vulnerable Software and Affected Versions: macOS versions prior to Tahoe 26 Description: An application with root privileges may be able to access private information due to missing entitlement checks. Recommendations: Update to macOS Tahoe 26...

PT-2025-37796

Name of the Vulnerable Software and Affected Versions: macOS versions prior to Tahoe 26 Description: A privacy issue was addressed with improved private data redaction for log entries. An application may be able to access user-sensitive data. Recommendations: Update to macOS Tahoe 26 or later...

Apple macOS Sonoma和Apple macOS Tahoe 安全漏洞

Apple macOS Sequoia and Apple macOS Tahoe are both operating systems from Apple USA Inc. A security vulnerability exists in Apple macOS Sonoma and Apple macOS Tahoe, which stems from insufficient privilege limitations and could result in an application gaining root privileges...

PT-2025-37793

Name of the Vulnerable Software and Affected Versions: macOS versions prior to Tahoe 26 Description: A permissions issue existed due to insufficient restrictions. This allowed USB Restricted Mode to not be applied to accessories connected during boot. Recommendations: Update to macOS Tahoe 26...

PT-2025-37830

Name of the Vulnerable Software and Affected Versions macOS versions prior to Tahoe 26 watchOS versions prior to 26 tvOS versions prior to 26 iOS versions prior to 26 iPadOS versions prior to 26 Description An application may be able to break out of its sandbox due to a permissions issue. This...

PT-2025-37849

Name of the Vulnerable Software and Affected Versions macOS versions prior to Sequoia 15.7 macOS versions prior to Sonoma 14.8 iOS versions prior to 18.7 iPadOS versions prior to 18.7 macOS versions prior to Tahoe 26 iOS versions prior to 26 iPadOS versions prior to 26 Description A permissions...

Apple macOS 安全漏洞

Apple macOS is a suite of specialized operating systems from the U.S.-based Apple Inc. developed specifically for Mac computers. A security vulnerability exists in Apple macOS, which stems from insufficient boundary checking and could lead to applications accessing sensitive user data. The...

Chaos Mesh 操作系统命令注入漏洞

Chaos Mesh is an open source cloud-native engineering platform from Chaos Mesh Open Source. Chaos Mesh suffers from an OS command injection vulnerability that stems from the killProcesses mutation being susceptible to an os command injection attack that could lead to remote code execution...