The vulnerability of the Security component in operating systems such as tvOS, iOS, iPadOS, watchOS, and macOS allows attackers to bypass signature checks.

The vulnerability of the Security component in operating systems such as tvOS, iOS, iPadOS, watchOS, and macOS is related to errors in the certificate validation process. Exploiting this vulnerability can allow attackers to bypass the signature verification...

The vulnerability of the Maps component in operating systems such as iPadOS, tvOS, iOS, watchOS, and macOS allows a hacker to gain unauthorized access to protected information.

The vulnerability of the Maps component in operating systems such as iPadOS, tvOS, iOS, watchOS, and macOS is related to insufficient protection for service data. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information...

The vulnerability of the Neural Engine component in operating systems such as iPadOS, tvOS, iOS, watchOS, and macOS allows attackers to execute arbitrary code.

The vulnerability of the Neural Engine component in iPadOS, tvOS, iOS, watchOS, and macOS relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of the LaunchServices service in operating systems such as tvOS, iOS, iPadOS, watchOS, and macOS allows a hacker to circumvent the limitations of a isolated software environment.

The vulnerability of the LaunchServices service in operating systems such as tvOS, iOS, iPadOS, watchOS, and macOS is related to deficiencies in access control within isolated environments. Exploiting this vulnerability could allow attackers to circumvent sandbox restrictions...

The vulnerability of the operating system kernels in iPadOS, tvOS, iOS, watchOS, and macOS allows a hacker to execute arbitrary code.

The vulnerability of the kernel of operating systems such as iPadOS, tvOS, iOS, watchOS, and macOS is caused by a numerical overflow. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

The vulnerability of the Neural Engine component in operating systems such as iPadOS, tvOS, iOS, watchOS, and macOS allows attackers to execute arbitrary code.

The vulnerability of the Neural Engine component in iPadOS, tvOS, iOS, watchOS, and macOS arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of the Web page rendering module in Safari web browsers, as well as in operating systems such as watchOS, tvOS, iPadOS, iOS, macOS, allows attackers to execute XSS attacks.

The vulnerability of the Web page rendering module in Safari browsers running WebKit, as well as in operating systems such as watchOS, tvOS, iPadOS, iOS, and macOS, is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious act...

The vulnerability of the libxslt library in iPadOS, tvOS, iOS, watchOS, and macOS allows attackers to gain unauthorized access to protected information.

The vulnerability of the libxslt library in iPadOS, tvOS, iOS, watchOS, and macOS relates to insufficient protection of sensitive data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information remotely...

PT-2023-8512 · Qnap · Quts Hero +2

Name of the Vulnerable Software and Affected Versions: QTS versions prior to 5.1.5.2645 build 20240116 QuTS hero versions prior to h5.1.5.2647 build 20240118 QuTScloud versions prior to c5.1.5.2651 Description: A path traversal vulnerability has been reported to affect several QNAP operating syst...

Electron_Shell - Developing A More Covert Remote Access Trojan (RAT) Tool By Leveraging Electron's Features For Command Injection And Combining It With Remote Control Methods

Electronshell Developing a more covert Remote Access Trojan RAT tool by leveraging Electron's features for command injection and combining it with remote control methods. Read More: AOH 024探索将Shell寄生于Electron程序的自动化实现 Features Supports almost all operating systems mac linux windows Supports almost...

CVE-2023-41980

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 17 and iPadOS 17, macOS Sonoma 14. An app may be able to bypass Privacy preferences...

CVE-2023-41068

An access issue was addressed with improved access restrictions. This issue is fixed in tvOS 17, iOS 17 and iPadOS 17, watchOS 10, iOS 16.7 and iPadOS 16.7. A user may be able to elevate privileges...

CVE-2023-41071

A use-after-free issue was addressed with improved memory management. This issue is fixed in tvOS 17, iOS 17 and iPadOS 17, watchOS 10, macOS Ventura 13.6. An app may be able to execute arbitrary code with kernel privileges...

CVE-2023-40454

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Ventura 13.6, tvOS 17, iOS 16.7 and iPadOS 16.7, macOS Monterey 12.7, watchOS 10, iOS 17 and iPadOS 17, macOS Sonoma 14. An app may be able to delete files for which it does not have permission...

CVE-2023-40432

The issue was addressed with improved memory handling. This issue is fixed in tvOS 17, iOS 17 and iPadOS 17, watchOS 10, macOS Sonoma 14. An app may be able to execute arbitrary code with kernel privileges...

CVE-2023-40420

The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.6, tvOS 17, iOS 16.7 and iPadOS 16.7, macOS Monterey 12.7, watchOS 10, iOS 17 and iPadOS 17, macOS Sonoma 14. Processing web content may lead to a denial-of-service...

CVE-2023-40403

The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.6, tvOS 17, iOS 16.7 and iPadOS 16.7, macOS Monterey 12.7, watchOS 10, iOS 17 and iPadOS 17, macOS Sonoma 14. Processing web content may disclose sensitive information...

CVE-2023-40400

This issue was addressed with improved checks. This issue is fixed in tvOS 17, iOS 17 and iPadOS 17, watchOS 10, macOS Sonoma 14. A remote user may cause an unexpected app termination or arbitrary code execution...

CVE-2023-40384

A permissions issue was addressed with improved redaction of sensitive information. This issue is fixed in tvOS 17, iOS 17 and iPadOS 17, macOS Sonoma 14. An app may be able to read sensitive location information...

Design/Logic Flaw

A use-after-free issue was addressed with improved memory management. This issue is fixed in tvOS 17, iOS 17 and iPadOS 17, watchOS 10, macOS Ventura 13.6. An app may be able to execute arbitrary code with kernel privileges...