CVE-2025-43343

The issue was addressed with improved memory handling. This issue is fixed in Safari 26, iOS 26 and iPadOS 26, macOS Tahoe 26, tvOS 26, visionOS 26, watchOS 26. Processing maliciously crafted web content may lead to an unexpected process crash...

CVE-2025-31271

This issue was addressed through improved state management. This issue is fixed in macOS Tahoe 26. Incoming FaceTime calls can appear or be accepted on a locked macOS device, even with notifications disabled on the lock screen...

CVE-2025-43231

A logic issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.8. An app may be able to access user-sensitive data...

CVE-2025-43303

A logging issue was addressed with improved data redaction. This issue is fixed in iOS 26 and iPadOS 26, macOS Tahoe 26, tvOS 26, visionOS 26, watchOS 26. An app may be able to access sensitive user data...

CVE-2025-43354

A logging issue in multiple Apple operating systems, including iOS 26 , iPadOS 26 , macOS Tahoe 26 , tvOS 26 , visionOS 26 , and watchOS 26 , could allow an application to access sensitive user data . This vulnerability stems from a lack of sufficient data redaction during logging processes. The ...

CVE-2025-43354

A logging issue was addressed with improved data redaction. This issue is fixed in iOS 26 and iPadOS 26, macOS Tahoe 26, tvOS 26, visionOS 26, watchOS 26. An app may be able to access sensitive user data...

CVE-2025-43354

A logging issue was addressed with improved data redaction. This issue is fixed in tvOS 26, watchOS 26, visionOS 26, macOS Tahoe 26, iOS 26 and iPadOS 26. An app may be able to access sensitive user data...

CVE-2025-43293

The issue was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26. An app may be able to access sensitive user data...

CVE-2025-43341

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sonoma 14.8, macOS Tahoe 26. An app may be able to gain root privileges...

CVE-2025-31269

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sonoma 14.8, macOS Tahoe 26. An app may be able to access protected user data...

CVE-2025-43287

The issue was addressed with improved memory handling. This issue is fixed in macOS Tahoe 26. Processing a maliciously crafted image may corrupt process memory...

CVE-2025-43356

The webkitgtk component in various Linux distributions and Apple products is vulnerable to a security issue where a website can access sensor information without user consent due to improper cache handling . This issue is fixed in Safari 26 , iOS 18.7 , iPadOS 18.7 , iOS 26 , iPadOS 26 , macOS Ta...

CVE-2025-43203

The issue was addressed with improved handling of caches. This issue is fixed in iOS 18.7 and iPadOS 18.7, iOS 26 and iPadOS 26. An attacker with physical access to an unlocked device may be able to view an image in the most recently viewed locked note...

CVE-2025-43366

Apple's macOS Tahoe (version 26) is affected by an out-of-bounds read vulnerability caused by insufficient boundary checking. This flaw could allow an application to disclose coprocessor memory . The issue has been addressed with improved bounds checking, and the fix is available in macOS Tahoe 2...

CVE-2025-6947 WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in SIP Proxy Configuration

A stored cross-site scripting XSS vulnerability exists in the management interface of WatchGuard Firebox appliances via the SIP Proxy configuration. An authenticated remote attacker with administrator privileges could exploit this vulnerability to execute arbitrary JavaScript code in the Firebox...

CVE-2025-6947

CVE-2025-6947 affects WatchGuard Fireware OS running on Firebox. The issue is a Stored Cross-Site Scripting (XSS) vulnerability in the SIP Proxy module caused by improper input neutralization during web page generation. Exploitation requires an authenticated administrator session to a locally man...

nettoolbox

NetToolbox - Network Security Toolkit A comprehensive, modern...

CVE-2025-10440 D-Link DI-8100/DI-8100G/DI-8200/DI-8200G/DI-8003/DI-8003G jhttpd usb_paswd.asp sub_4621DC os command injection

A vulnerability has been found in D-Link DI-8100, DI-8100G, DI-8200, DI-8200G, DI-8003 and DI-8003G 16.07.26A1/17.12.20A1/19.12.10A1. Affected by this vulnerability is the function sub4621DC of the file usbpaswd.asp of the component jhttpd. The manipulation of the argument hname leads to os comma...

MSc-Cybersecurity-Capstone-Android-Exploitation

MSc Cybersecurity Capstone Project Title: Android Exploit...

PT-2026-43421

Name of the Vulnerable Software and Affected Versions macOS versions prior to Tahoe 26 Description A permissions issue exists where an app may be able to access sensitive user data. This was resolved by removing the vulnerable code. Recommendations Update to macOS Tahoe 26...