CVE-2024-1417 Local Code Injection Vulnerability in AuthPoint Password Manager App for macOS Safari

Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability in WatchGuard AuthPoint Password Manager on MacOS allows an a adversary with local access to execute code under the context of the AuthPoint Password Manager application. This issue affects AuthPoint...

CVE-2024-1417

WatchGuard (WatchGuard) AuthPoint Password Manager for macOS is affected by CVE-2024-1417, a local Command Injection vulnerability caused by improper neutralization of special elements. The issue allows a user with local access to execute code within the AuthPoint Password Manager application, af...

PT-2024-18027 · Watchguard · Watchguard Authpoint Password Manager

Name of the Vulnerable Software and Affected Versions: WatchGuard AuthPoint Password Manager for MacOS versions before 1.0.6 Description: The issue is related to an Improper Neutralization of Special Elements used in a Command, also known as a 'Command Injection' vulnerability. This allows an...

WatchGuard AuthPoint Password Manager 安全漏洞

WatchGuard AuthPoint Password Manager is a password manager from WatchGuard USA. A security vulnerability exists in WatchGuard AuthPoint Password Manager versions prior to 1.0.6, which stems from an improper neutralization of a special element that allows an attacker with local access rights to...

Mateso PasswordSafe 安全漏洞

Mateso PasswordSafe is a password manager from Mateso. A security vulnerability exists in Mateso PasswordSafe 8.13.9.26689 and earlier versions, which stems from the presence of weak encryption in the application...

Apple warns people of mercenary attacks via threat notification system

Apple has reportedly sent alerts to individuals in 92 nations on Wednesday, April 10, to say its detected that they may have been a victim of a mercenary attack. The company says it has sent out these types of threat notifications to over 150 countries since the start in 2021. Mercenary spyware i...

CVE-2024-26362

HTML injection vulnerability in Enpass Password Manager Desktop Client 6.9.2 for Windows and Linux allows attackers to run arbitrary HTML code via creation of crafted note...

PT-2024-21369 · Enpass · Enpass Password Manager Desktop Client

Name of the Vulnerable Software and Affected Versions: Enpass Password Manager Desktop Client version 6.9.2 Description: The issue allows attackers to run arbitrary HTML code via the creation of a crafted note, potentially leading to HTML injection. This can occur in the Enpass Password Manager...

CVE-2024-26362

CVE-2024-26362 applies to Enpass Password Manager Desktop Client 6.9.2 for Windows and Linux. The connected sources confirm an HTML injection vulnerability triggered by creation of a crafted note, allowing an attacker to run arbitrary HTML code. The CVSS3.1 base metrics in the initial document in...

CVE-2024-26362

HTML injection vulnerability in Enpass Password Manager Desktop Client 6.9.2 for Windows and Linux allows attackers to run arbitrary HTML code via creation of crafted note...

Enpass Password Manager 安全漏洞

Enpass Password Manager is a cross-platform offline password manager from Enpass. A security vulnerability exists in Enpass Password Manager version 6.9.2, which stems from an HTML injection vulnerability that allows an attacker to run arbitrary HTML code by creating carefully crafted comments...

CVE-2024-26362

HTML injection vulnerability in Enpass Password Manager Desktop Client 6.9.2 for Windows and Linux allows attackers to run arbitrary HTML code via creation of crafted note...

The vulnerability of the Setting Handler component in the KeePassXC password manager allows attackers to circumvent existing security restrictions.

The vulnerability of the Setting Handler component in the KeePassXC password manager is related to the bypassing of security features. Exploiting this vulnerability could allow an attacker to circumvent existing security restrictions...

The vulnerability of Kaspersky Password Manager’s password manager feature, related to the automatic restoration of automatically filled-in user credentials, allows a malicious actor to gain unauthorized access to protected information.

The vulnerability of Kaspersky Password Manager is related to the recovery of automatically filled account information from the memory dump due to the use of the autofill function of the Google Chrome browser. Exploiting this vulnerability can allow an attacker to gain unauthorized access to...

CVE-2023-23349

Kaspersky has fixed a security issue in Kaspersky Password Manager KPM for Windows that allowed a local user to recover the auto-filled credentials from a memory dump when the KPM extension for Google Chrome is used. To exploit the issue, an attacker must trick a user into visiting a login form o...

CVE-2023-23349

CVE-2023-23349 concerns Kaspersky Password Manager (KPM) for Windows, specifically when using the Google Chrome extension. A local attacker can potentially recover auto-filled credentials from a memory dump after the extension autofills them on a login form. Exploitation requires the user to be t...

CVE-2023-23349

Kaspersky has fixed a security issue in Kaspersky Password Manager KPM for Windows that allowed a local user to recover the auto-filled credentials from a memory dump when the KPM extension for Google Chrome is used. To exploit the issue, an attacker must trick a user into visiting a login form o...

CVE-2023-23349

Kaspersky has fixed a security issue in Kaspersky Password Manager KPM for Windows that allowed a local user to recover the auto-filled credentials from a memory dump when the KPM extension for Google Chrome is used. To exploit the issue, an attacker must trick a user into visiting a login form o...

Kaspersky Password Manager 安全漏洞

Kaspersky Password Manager is an application from the Russian laboratory Kaspersky Kaspersky. It provides a function to manage passwords. A security vulnerability exists in versions prior to Kaspersky Password Manager 24.0.0.427, which stems from a vulnerability that allows for the auto-populatio...

CVE-2024-24272

An issue in iTop DualSafe Password Manager & Digital Vault before 1.4.24 allows a local attacker to obtain sensitive information via leaked credentials as plaintext in a log file that can be accessed by the local user without knowledge of the master secret...