CVE-2019-8858

CVE-2019-8858 affects macOS Catalina, specifically the Screen Sharing Server. The vulnerability stems from a logic issue in state management that may cause a user who shares their screen to be unable to end the screen sharing session. The issue is fixed in macOS Catalina 10.15.1 and Security Upda...

CVE-2019-8777

CVE-2019-8777 is an Apple macOS lock-screen information disclosure vulnerability. The affected components concern the lock screen handling that could allow a local attacker to view contacts from a locked device. The Apple advisories indicate the issue was addressed by improved state management an...

CVE-2019-8777

A lock screen issue allowed access to contacts on a locked device. This issue was addressed with improved state management. This issue is fixed in macOS Mojave 10.14.4, Security Update 2019-002 High Sierra, Security Update 2019-002 Sierra. A local attacker may be able to view contacts from the lo...

CVE-2018-4428

A lock screen issue allowed access to the share function on a locked device. This issue was addressed by restricting options offered on a locked device. This issue is fixed in iOS 12.1.1. A local attacker may be able to share items from the lock screen...

CVE-2018-4428

CVE-2018-4428 describes a lock-screen vulnerability on iOS where a local attacker could access the device’s share function from the lock screen. The issue was addressed by Apple by restricting options offered on a locked device, with a fix included in iOS 12.1.1. The Red Hat and CNVD entries reit...

PT-2020-11334

Name of the Vulnerable Software and Affected Versions macOS Catalina versions prior to 10.15.1 Security Update versions prior to 2019-001 Security Update versions prior to 2019-006 Description A logic issue was addressed with improved state management. This issue affects users who share their...

CVE-2019-8777: Incorrect Default Permissions

A lock screen issue allowed access to contacts on a locked device. This issue was addressed with improved state management. This issue is fixed in macOS Mojave 10.14.4, Security Update 2019-002 High Sierra, Security Update 2019-002 Sierra. A local attacker may be able to view contacts from the lo...

CVE-2019-8858: Undefined Security Weakness

A logic issue was addressed with improved state management. This issue is fixed in macOS Catalina 10.15.1, Security Update 2019-001, and Security Update 2019-006. A user who shares their screen may not be able to end screen sharing...

PT-2020-11327

Name of the Vulnerable Software and Affected Versions macOS versions prior to 10.15.2 Security Update 2019-002 Mojave affected versions not specified Security Update 2019-007 High Sierra affected versions not specified Description A logic issue was addressed with improved state management, which...

PT-2020-11303

Name of the Vulnerable Software and Affected Versions macOS versions prior to 10.14.4 Security Update versions prior to 2019-002 High Sierra Security Update versions prior to 2019-002 Sierra Description A lock screen issue allowed unauthorized access to contacts on a locked device. The problem wa...

PT-2020-8921

Name of the Vulnerable Software and Affected Versions iOS versions prior to 12.1.1 Description A lock screen issue allowed access to the share function on a locked device, potentially enabling a local attacker to share items from the lock screen. This issue was addressed by restricting options...

CVE-2018-4428: Undefined Security Weakness

A lock screen issue allowed access to the share function on a locked device. This issue was addressed by restricting options offered on a locked device. This issue is fixed in iOS 12.1.1. A local attacker may be able to share items from the lock screen...

Denial of Service Vulnerability in AnyView (Network Police) Network Monitoring Software

AnyView Network Police network monitoring software is one of the most professional LAN network monitoring software products in China. AnyView Network Monitor has a denial of service vulnerability that can be exploited by attackers to cause a blue screen...

Command Execution Vulnerability in Hi Format Screen Recorder (Windows Client)

Hi Format Screen Recording Master is a screen recording software. A command execution vulnerability exists in Hi Format Recording Master Windows client, which can be exploited by an attacker to gain control of the server...

Taken - Takeover AWS Ips And Have A Working POC For Subdomain Takeover

Takeover AWS ips and have a working POC for Subdomain Takeover. Idea is simple Get subdomains. Do reverse lookups to only save AWS ips. Restart EC2 instance every min. and public ip gets rotated on each restart. Match it with your existing list of subdomain ips and you have a working subdomain...

CVE-2020-9959

A lock screen issue allowed access to messages on a locked device. This issue was addressed with improved state management. This issue is fixed in iOS 14.0 and iPadOS 14.0. A person with physical access to an iOS device may be able to view notification contents from the lockscreen...

CVE-2020-9946

This issue was addressed with improved checks. This issue is fixed in iOS 14.0 and iPadOS 14.0, watchOS 7.0. The screen lock may not engage after the specified time period...

CVE-2020-9946

This issue was addressed with improved checks. This issue is fixed in iOS 14.0 and iPadOS 14.0, watchOS 7.0. The screen lock may not engage after the specified time period...

Code injection

A lock screen issue allowed access to messages on a locked device. This issue was addressed with improved state management. This issue is fixed in iOS 14.0 and iPadOS 14.0. A person with physical access to an iOS device may be able to view notification contents from the lockscreen...

CVE-2020-9946

This issue was addressed with improved checks. This issue is fixed in iOS 14.0 and iPadOS 14.0, watchOS 7.0. The screen lock may not engage after the specified time period...